last executing test programs: 3m9.834657587s ago: executing program 3 (id=15060): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x18, &(0x7f0000000500)=[{&(0x7f0000000040)='\b', 0x1}], 0x1}}], 0x1, 0x14018891) 3m9.696334057s ago: executing program 3 (id=15063): r0 = syz_usbip_server_init(0x5) write$usbip_server(r0, &(0x7f0000000040)=@ret_unlink={{0x4, 0x1ff, 0x0, 0x1, 0x8}, {0x7fffffff}}, 0x30) 3m9.097295339s ago: executing program 3 (id=15082): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) 3m9.037338127s ago: executing program 3 (id=15084): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) 3m8.937494305s ago: executing program 3 (id=15087): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000700)={'macsec0\x00', 0xca12}) 3m8.916308687s ago: executing program 3 (id=15089): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20000051}, 0x4008090) 2m52.547597904s ago: executing program 32 (id=15089): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20000051}, 0x4008090) 2m38.590723274s ago: executing program 4 (id=15758): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000080)=0xff, 0x4) 2m38.508554734s ago: executing program 4 (id=15759): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000b80)={[&(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00']}) 2m38.433440496s ago: executing program 4 (id=15761): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000}) setpriority(0x1, 0x0, 0x5) 2m38.320273697s ago: executing program 4 (id=15762): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) flistxattr(r0, &(0x7f0000000040)=""/8, 0x8) 2m38.265587262s ago: executing program 4 (id=15763): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000004, 0x3b071, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 2m37.825840477s ago: executing program 4 (id=15772): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1400000026000900f4cb08007d0000e705"], 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) 2m21.721613782s ago: executing program 33 (id=15772): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1400000026000900f4cb08007d0000e705"], 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) 42.707617858s ago: executing program 1 (id=18790): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x0) 42.623370756s ago: executing program 1 (id=18792): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f0000000040)=0x645, 0x4) setsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000100), 0x4) 42.525993429s ago: executing program 1 (id=18795): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 42.447545443s ago: executing program 1 (id=18797): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000100)=[{&(0x7f00000024c0)="e0", 0x1}], 0x1, &(0x7f0000000240)=[@authinfo={0x12, 0x84, 0x6, {0x8}}, @init={0x18, 0x84, 0x0, {0x80, 0x0, 0xb, 0x140}}], 0x30, 0x4}, 0x40) 42.370172222s ago: executing program 1 (id=18798): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001000)={0xf, {"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", 0x1000}}, 0x1006) 42.26020205s ago: executing program 1 (id=18800): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xfec2, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0x70bd2b, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) 26.184113924s ago: executing program 34 (id=18800): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xfec2, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0x70bd2b, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) 2.284445177s ago: executing program 0 (id=19393): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000500)={0x50, r1, 0x1, 0x70bdad, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c095}, 0x0) 2.245092326s ago: executing program 0 (id=19394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 2.124624848s ago: executing program 0 (id=19397): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) write$nci(r0, &(0x7f0000000340)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x6, @a_listen={0x7, 0x3, 0x3, 0x80, 0x2, 0xf9, 0x4, "", 0x53, 0x5, 0x8, 0x1a}}, 0xf) 2.014991789s ago: executing program 0 (id=19399): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) sendto$netrom(r0, 0x0, 0x0, 0x40, &(0x7f0000000000)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast]}, 0x48) 1.93396879s ago: executing program 2 (id=19400): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001140), r0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x20000000) 1.887375735s ago: executing program 2 (id=19401): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x4f27, 0x2, 0x8, 0x486, 0xb, 0xcc6, 0xc9, 0x5c952399, 0x5, 0x0, 0x802, 0x1608, 0x3, 0x46, 0x6, 0xa, 0x6fd8, 0x6, 0x3, 0x2, 0x0, 0xfffffffd, 0xffff0001, 0xfffffff5, 0x0, 0xfffffffd, 0x2, 0x8, 0x0, 0x8000000, 0x3]}) 1.829431873s ago: executing program 2 (id=19403): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) 1.766160493s ago: executing program 2 (id=19404): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r0 = syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffd, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="b63513000000", 0x0, 0x3, 0x14, 0x2, 0x0}) 1.729044673s ago: executing program 0 (id=19406): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x4a}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.654550017s ago: executing program 2 (id=19408): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x400}) ioctl$UFFDIO_CONTINUE(r0, 0xc028aa05, &(0x7f0000000380)={{&(0x7f0000032000/0x4000)=nil, 0x4000}}) 1.599535712s ago: executing program 0 (id=19409): r0 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f00000006c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d00)={0x84, &(0x7f00000008c0)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000014c0)={0x84, &(0x7f0000001000)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.487993647s ago: executing program 2 (id=19412): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000600)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x0, 0x15, 0x4e, "7da0ba000c0554bd33a363309f876bf0617600f7e7bea1078e98fef3b38f8b17e36900101202beea7113c5306f07fbd8d62867674d1e1be2f29596806fb288c10eefa8148e918f9d35d1224c0de4"}, 0x0, 0x0, 0x0, 0x0}) 1.030055102s ago: executing program 5 (id=19420): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x4048010) 879.58763ms ago: executing program 5 (id=19422): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x34, r1, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}}, 0x0) 740.27841ms ago: executing program 5 (id=19423): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) close(r0) 646.326393ms ago: executing program 5 (id=19425): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x91) 543.991431ms ago: executing program 5 (id=19426): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x7000000) pipe2$9p(&(0x7f00000001c0), 0x0) 498.021359ms ago: executing program 6 (id=19427): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x1f}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) 409.753871ms ago: executing program 5 (id=19428): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1044, 0x7a4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x4}]}}, 0x0}, 0x0) 345.14038ms ago: executing program 6 (id=19429): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a80), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r1, 0x54ce48f1ce1f0e1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0x20040000) 253.199218ms ago: executing program 6 (id=19430): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 141.262971ms ago: executing program 6 (id=19431): r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r0) keyctl$search(0xa, r0, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) 68.113275ms ago: executing program 6 (id=19432): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000240), 0x18) connect$bt_sco(r0, &(0x7f0000000580)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 0s ago: executing program 6 (id=19433): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000002c00)={0x0, 0x100000, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x38, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): [ T5940] usb 2-1: Product: syz [ 1033.614170][ T5940] usb 2-1: Manufacturer: syz [ 1033.626205][ T5940] usb 2-1: SerialNumber: syz [ 1033.650372][ T5940] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 1033.668238][ T5940] cdc_ncm 2-1:1.0: bind() failure [ 1033.770602][T10062] netlink: 'syz.0.15705': attribute type 16 has an invalid length. [ 1033.850226][T10068] netlink: 'syz.2.15706': attribute type 21 has an invalid length. [ 1033.901576][ T5934] usb 2-1: USB disconnect, device number 121 [ 1034.002272][T10082] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1034.253175][T10098] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1034.282763][T10101] netlink: 'syz.4.15718': attribute type 27 has an invalid length. [ 1034.357552][T10101] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.366608][T10101] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.601802][T10101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1034.631043][T10117] netlink: 'syz.2.15725': attribute type 10 has an invalid length. [ 1034.649725][T10101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1034.984114][ T1155] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.002617][ T1155] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.033033][ T1155] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.064662][ T1155] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.141423][T10142] netlink: 'syz.0.15738': attribute type 39 has an invalid length. [ 1035.334969][T10164] comedi comedi4: bad chanlist[0]=0x00000009 chan=9 range length=2 [ 1035.415182][T10167] __nla_validate_parse: 2 callbacks suppressed [ 1035.415206][T10167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15744'. [ 1035.452337][T10167] netlink: 480 bytes leftover after parsing attributes in process `syz.2.15744'. [ 1035.463117][T10167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15744'. [ 1035.476396][ T5889] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1035.651600][ T5889] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1035.660989][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.677683][ T5889] usb 2-1: Product: syz [ 1035.690242][ T5889] usb 2-1: Manufacturer: syz [ 1035.696703][ T5889] usb 2-1: SerialNumber: syz [ 1035.723485][ T5889] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1035.739320][T13850] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1035.841043][T10197] comedi comedi3: 8255: I/O port conflict (0x4f2a,4) [ 1036.221030][ T5940] usb 2-1: USB disconnect, device number 122 [ 1036.898099][T13850] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1036.914566][T13850] ath9k_htc: Failed to initialize the device [ 1036.930958][ T5940] usb 2-1: ath9k_htc: USB layer deinitialized [ 1036.959788][T10260] binder: 10259:10260 ioctl 40046210 0 returned -14 [ 1037.332498][T10282] binder: 10281:10282 ioctl c0306201 2000000003c0 returned -14 [ 1037.340395][T10284] netlink: 'syz.2.15788': attribute type 33 has an invalid length. [ 1037.340425][T10284] netlink: 36 bytes leftover after parsing attributes in process `syz.2.15788'. [ 1037.944594][T10323] netlink: 'syz.1.15808': attribute type 1 has an invalid length. [ 1037.958943][T10324] netlink: 220 bytes leftover after parsing attributes in process `syz.2.15807'. [ 1038.602171][T10358] overlay: Bad value for 'workdir' [ 1038.794843][T10373] openvswitch: netlink: IP tunnel dst address not specified [ 1038.853830][T10378] IPVS: Error connecting to the multicast addr [ 1039.248311][T10405] kAFS: No cell specified [ 1039.313994][T10408] netlink: 666 bytes leftover after parsing attributes in process `syz.0.15849'. [ 1039.403033][T10413] CIFS mount error: No usable UNC path provided in device string! [ 1039.403033][T10413] [ 1039.415609][T10413] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1039.970209][T10444] netlink: 168 bytes leftover after parsing attributes in process `syz.1.15865'. [ 1040.087298][T10450] netlink: 'syz.0.15867': attribute type 1 has an invalid length. [ 1040.115787][T10450] netlink: 'syz.0.15867': attribute type 3 has an invalid length. [ 1040.123713][T10450] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15867'. [ 1041.181338][T10516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15900'. [ 1041.294978][T10522] netlink: 224 bytes leftover after parsing attributes in process `syz.0.15903'. [ 1041.483624][T10536] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 1041.507662][T10536] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1041.639379][T10547] gfs2: error -5 reading superblock [ 1042.039479][T10571] Invalid source name [ 1042.045689][T10571] UBIFS error (pid: 10571): cannot open "./file0", error -22 [ 1042.431989][T10598] IPv6: NLM_F_CREATE should be specified when creating new route [ 1042.581665][T10607] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15944'. [ 1043.005047][T10638] dlm: no locking on control device [ 1043.112632][T10647] netlink: 'syz.0.15964': attribute type 10 has an invalid length. [ 1043.210525][T10653] netlink: 'syz.2.15966': attribute type 10 has an invalid length. [ 1043.220805][T10652] nfs: Bad value for 'source' [ 1043.236177][T10653] `: Port device geneve0 removed [ 1043.246296][T10655] Device name cannot be null; rc = [-22] [ 1043.920744][T10700] netlink: 'syz.1.15986': attribute type 4 has an invalid length. [ 1044.220992][T13850] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1044.384756][T13850] usb 2-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=30.20 [ 1044.394170][T13850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.402281][T13850] usb 2-1: Product: syz [ 1044.406573][T13850] usb 2-1: Manufacturer: syz [ 1044.411299][T13850] usb 2-1: SerialNumber: syz [ 1044.419063][T13850] usb 2-1: config 0 descriptor?? [ 1044.860332][T13850] f81534a_ctrl 2-1:0.0: failed to enable ports: -71 [ 1044.868929][T13850] f81534a_ctrl 2-1:0.0: probe with driver f81534a_ctrl failed with error -71 [ 1044.883061][T13850] usb 2-1: USB disconnect, device number 123 [ 1047.104574][T10854] veth1_macvtap: entered allmulticast mode [ 1047.174731][T10860] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16037'. [ 1047.314953][T10870] netlink: 'syz.2.16042': attribute type 1 has an invalid length. [ 1047.323617][T10870] netlink: 228 bytes leftover after parsing attributes in process `syz.2.16042'. [ 1047.391206][T10874] netlink: 'syz.0.16044': attribute type 21 has an invalid length. [ 1047.405255][T10874] netlink: 128 bytes leftover after parsing attributes in process `syz.0.16044'. [ 1048.240936][T10925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1048.434311][T10939] netlink: 196 bytes leftover after parsing attributes in process `syz.1.16076'. [ 1048.967611][T13850] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1049.132559][T13850] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1049.146845][T13850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.156280][T13850] usb 2-1: Product: syz [ 1049.168318][T13850] usb 2-1: Manufacturer: syz [ 1049.173712][T13850] usb 2-1: SerialNumber: syz [ 1049.193990][T13850] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1049.217831][ T5934] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1049.333901][T11002] ceph: No source [ 1049.694982][T11023] netlink: 'syz.2.16113': attribute type 10 has an invalid length. [ 1049.699575][ T29] usb 2-1: USB disconnect, device number 124 [ 1049.704276][T11023] hsr0: entered promiscuous mode [ 1049.735653][T11023] .`: (slave hsr0): The slave device specified does not support setting the MAC address [ 1049.750041][T11023] .`: (slave hsr0): Error -95 calling set_mac_address [ 1049.891411][T11036] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1050.325632][ T5934] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1050.343586][ T5934] ath9k_htc: Failed to initialize the device [ 1050.358092][ T29] usb 2-1: ath9k_htc: USB layer deinitialized [ 1050.712867][T11098] ieee802154 phy1 wpan1: encryption failed: -22 [ 1050.788330][T11102] overlayfs: failed to resolve './file0': -2 [ 1050.956556][T11114] tmpfs: Bad value for 'mpol' [ 1051.044621][T11121] netlink: 'syz.2.16155': attribute type 3 has an invalid length. [ 1051.055997][T11121] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16155'. [ 1051.289694][T11138] netlink: 'syz.0.16164': attribute type 6 has an invalid length. [ 1051.297900][T11138] netlink: 168 bytes leftover after parsing attributes in process `syz.0.16164'. [ 1051.593543][T11156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16174'. [ 1052.473406][T11220] openvswitch: netlink: Flow key attribute not present in set flow. [ 1052.994455][T11253] netlink: 'syz.1.16220': attribute type 10 has an invalid length. [ 1053.005983][T11253] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16220'. [ 1053.024622][T31623] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1053.037047][T31623] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1053.048125][T31623] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1053.056224][T31623] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1053.073080][T31623] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1053.499507][T11254] virt_wifi0 speed is unknown, defaulting to 1000 [ 1053.511762][T11254] wg0 speed is unknown, defaulting to 1000 [ 1053.869999][T11254] chnl_net:caif_netlink_parms(): no params data found [ 1054.112212][T11402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16242'. [ 1054.204154][T11254] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.213855][T11424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16244'. [ 1054.225356][T11254] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.236074][T11254] bridge_slave_0: entered allmulticast mode [ 1054.247706][T11254] bridge_slave_0: entered promiscuous mode [ 1054.256878][T11424] dummy0: left promiscuous mode [ 1054.262415][T11424] bridge0: port 3(dummy0) entered disabled state [ 1054.283852][T11424] bridge_slave_1: left allmulticast mode [ 1054.294608][T11424] bridge_slave_1: left promiscuous mode [ 1054.300746][T11424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.319674][T11424] bridge_slave_0: left allmulticast mode [ 1054.335152][T11424] bridge_slave_0: left promiscuous mode [ 1054.341118][T11424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.426922][T11254] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.438646][T11254] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.469744][T11254] bridge_slave_1: entered allmulticast mode [ 1054.486499][T11254] bridge_slave_1: entered promiscuous mode [ 1054.568608][T11254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1054.587439][T11254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1054.696666][T11254] team0: Port device team_slave_0 added [ 1054.710776][T11254] team0: Port device team_slave_1 added [ 1054.805864][T11254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1054.812890][T11254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.860325][T11254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1054.892437][T11254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1054.899597][T11254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.902957][T11503] netlink: 'syz.1.16257': attribute type 16 has an invalid length. [ 1054.959078][T11254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1055.111967][T11254] hsr_slave_0: entered promiscuous mode [ 1055.124809][T11254] hsr_slave_1: entered promiscuous mode [ 1055.150120][T11254] debugfs: 'hsr0' already exists in 'hsr' [ 1055.155933][T11254] Cannot create hsr debugfs directory [ 1055.285880][ T5828] Bluetooth: hci5: command tx timeout [ 1055.557993][T11613] netlink: 'syz.2.16272': attribute type 1 has an invalid length. [ 1055.838861][T11254] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1055.869642][T11254] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1055.902949][T11254] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1055.922898][T11254] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1056.225163][T11254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1056.268179][T11254] 8021q: adding VLAN 0 to HW filter on device team0 [ 1056.289368][ T1322] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.296653][ T1322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1056.335749][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.343534][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1056.831305][T11254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1056.903527][T11713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16301'. [ 1057.315738][T11254] veth0_vlan: entered promiscuous mode [ 1057.354245][T11254] veth1_vlan: entered promiscuous mode [ 1057.432864][T11254] veth0_macvtap: entered promiscuous mode [ 1057.450185][T11254] veth1_macvtap: entered promiscuous mode [ 1057.500968][T11254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1057.509874][ T5828] Bluetooth: hci5: command tx timeout [ 1057.534552][T11254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1057.555298][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.583555][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.593480][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.615260][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.717495][ T1322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1057.738924][ T5934] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1057.745604][ T1322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1057.793056][ T1322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1057.802134][ T1322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1057.915694][ T5934] usb 2-1: Using ep0 maxpacket: 8 [ 1057.928630][ T5934] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1057.942455][ T5934] usb 2-1: config 0 has no interface number 0 [ 1057.959172][ T5934] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1057.987052][ T5934] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1058.006917][ T5934] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1058.018410][ T5934] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1058.032710][ T5934] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1058.050448][ T5934] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1058.061375][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.081073][ T5934] usb 2-1: config 0 descriptor?? [ 1058.110601][ T5934] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1058.343690][T11740] ldusb 2-1:0.55: Couldn't submit interrupt_in_urb -90 [ 1058.353803][ T5934] usb 2-1: USB disconnect, device number 125 [ 1058.368519][ T5934] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1058.417908][T11801] netlink: 'syz.5.16327': attribute type 1 has an invalid length. [ 1058.428013][T11801] netlink: 224 bytes leftover after parsing attributes in process `syz.5.16327'. [ 1058.481186][T11806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16329'. [ 1058.597133][T11811] libceph: resolve '400' (ret=-3): failed [ 1058.682854][T11817] : left promiscuous mode [ 1059.081043][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1059.258765][T11858] usb usb7: usbfs: process 11858 (syz.1.16350) did not claim interface 0 before use [ 1059.273607][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1059.282053][ T24] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1059.327556][ T24] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1059.360648][ T24] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1059.371008][ T24] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1059.379408][ T24] usb 6-1: Product: syz [ 1059.405624][ T24] usb 6-1: Manufacturer: syz [ 1059.431201][ T24] hub 6-1:4.0: USB hub found [ 1059.654446][ T24] hub 6-1:4.0: config failed, hub has too many ports! (err -19) [ 1059.733393][ T5828] Bluetooth: hci5: command tx timeout [ 1059.818691][T11891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16362'. [ 1060.001484][ T24] usb 6-1: USB disconnect, device number 2 [ 1060.323366][T11928] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 1060.473568][T11935] netlink: 'syz.0.16377': attribute type 21 has an invalid length. [ 1061.042583][T11974] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 1061.164811][T11978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16400'. [ 1061.192089][T11984] netlink: 'syz.5.16398': attribute type 21 has an invalid length. [ 1061.257575][T11988] netlink: 'syz.0.16402': attribute type 27 has an invalid length. [ 1061.374758][T11996] netlink: 'syz.0.16407': attribute type 1 has an invalid length. [ 1061.384462][T11996] netlink: 224 bytes leftover after parsing attributes in process `syz.0.16407'. [ 1061.393871][T11996] NCSI netlink: No device for ifindex 0 [ 1061.705819][T12014] usb usb8: usbfs: process 12014 (syz.2.16416) did not claim interface 0 before use [ 1061.958844][ T5828] Bluetooth: hci5: command tx timeout [ 1062.032243][T12030] netlink: 'syz.5.16423': attribute type 6 has an invalid length. [ 1062.329213][T12045] netlink: 'syz.0.16431': attribute type 30 has an invalid length. [ 1062.532038][T12055] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16436'. [ 1063.068023][T12092] netlink: 'syz.0.16455': attribute type 27 has an invalid length. [ 1063.400220][T12111] delete_channel: no stack [ 1063.488543][T12116] netlink: 256 bytes leftover after parsing attributes in process `syz.5.16465'. [ 1063.531033][T12118] netlink: 'syz.0.16466': attribute type 4 has an invalid length. [ 1063.737236][T12134] netlink: 'syz.0.16474': attribute type 21 has an invalid length. [ 1063.745503][T12134] netlink: 100 bytes leftover after parsing attributes in process `syz.0.16474'. [ 1063.758047][T12132] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16473'. [ 1063.971954][T12148] netlink: 10916 bytes leftover after parsing attributes in process `syz.1.16480'. [ 1063.981614][T12148] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1064.147491][T12158] tmpfs: Bad value for 'nr_blocks' [ 1064.409324][T12178] netlink: 256 bytes leftover after parsing attributes in process `syz.2.16496'. [ 1064.521280][T12184] comedi comedi3: pcmda12: I/O port conflict (0x4004f27,16) [ 1064.672297][T12200] netlink: 'syz.5.16504': attribute type 1 has an invalid length. [ 1064.701997][T12200] netlink: 228 bytes leftover after parsing attributes in process `syz.5.16504'. [ 1064.936962][T12217] (syz.1.16512,12217,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 1064.966666][T12217] (syz.1.16512,12217,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 1064.985769][T12217] (syz.1.16512,12217,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1064.996564][T12217] (syz.1.16512,12217,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 1065.367150][ T24] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 1065.376422][T12248] netlink: 'syz.2.16527': attribute type 16 has an invalid length. [ 1065.546951][ T24] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1065.559636][ T24] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1065.579362][ T24] usb 2-1: Product: syz [ 1065.589633][ T24] usb 2-1: Manufacturer: syz [ 1065.600419][ T24] usb 2-1: SerialNumber: syz [ 1065.631312][ T24] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1065.904702][T12283] program syz.2.16543 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1066.063984][ T24] vp7045: USB control message 'in' went wrong. [ 1066.088464][ T24] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1066.113493][ T24] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1066.133782][ T24] usb 2-1: USB disconnect, device number 126 [ 1066.345260][T12317] netlink: 'syz.2.16555': attribute type 32 has an invalid length. [ 1066.409769][T12321] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1066.527987][T12330] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1066.680346][T12338] netlink: 'syz.1.16566': attribute type 1 has an invalid length. [ 1067.159014][T12371] overlay: Bad value for 'workdir' [ 1067.285749][T12379] dlm: no locking on control device [ 1067.396673][T12389] netlink: 'syz.5.16591': attribute type 13 has an invalid length. [ 1067.422626][T12389] bridge0: port 2(bridge_slave_1) entered disabled state [ 1068.491838][T12453] netlink: 'syz.0.16615': attribute type 1 has an invalid length. [ 1068.632914][T12462] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1069.225634][T12504] netlink: 'syz.2.16637': attribute type 21 has an invalid length. [ 1069.248145][T12504] netlink: 128 bytes leftover after parsing attributes in process `syz.2.16637'. [ 1069.257979][T12504] netlink: 3 bytes leftover after parsing attributes in process `syz.2.16637'. [ 1069.775667][T12539] netlink: 'syz.2.16658': attribute type 27 has an invalid length. [ 1069.887474][T12539] 8021q: adding VLAN 0 to HW filter on device .` [ 1069.896418][T12539] dummy0: left allmulticast mode [ 1069.909156][T12539] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1070.078184][T12555] netlink: 'syz.2.16665': attribute type 11 has an invalid length. [ 1070.107629][T12555] netlink: 168 bytes leftover after parsing attributes in process `syz.2.16665'. [ 1070.678166][T12597] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 1070.688057][T12597] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1070.923790][T12611] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16692'. [ 1071.631782][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1071.794657][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1071.805070][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1071.816970][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1071.830013][ T24] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1071.839379][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.847610][ T24] usb 6-1: Product: syz [ 1071.851833][ T24] usb 6-1: Manufacturer: syz [ 1071.856580][ T24] usb 6-1: SerialNumber: syz [ 1071.864747][ T24] usb 6-1: config 0 descriptor?? [ 1071.870835][T12648] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1071.878730][T12648] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1071.887595][ T24] usb 6-1: ucan: probing device on interface #0 [ 1072.322104][ T24] usb 6-1: ucan: failed to retrieve device info [ 1072.332181][ T24] usb 6-1: ucan: probe failed; try to update the device firmware [ 1072.345856][ T24] usb 6-1: USB disconnect, device number 3 [ 1072.511906][T12672] binder: 12671:12672 ioctl c0046209 0 returned -22 [ 1073.067040][T12700] netlink: 'syz.5.16729': attribute type 2 has an invalid length. [ 1073.242862][T12714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16736'. [ 1073.291961][T12716] netlink: 'syz.1.16737': attribute type 2 has an invalid length. [ 1073.391911][T12722] overlayfs: missing 'lowerdir' [ 1073.579424][T12735] program syz.2.16746 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1073.634219][T12738] netlink: 48 bytes leftover after parsing attributes in process `syz.5.16748'. [ 1073.809666][T12750] QAT: failed to copy from user cfg_data. [ 1073.861311][T12754] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 1073.994981][T12764] netlink: 'syz.1.16761': attribute type 7 has an invalid length. [ 1074.148649][T12773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16764'. [ 1075.446593][T12862] random: crng reseeded on system resumption [ 1075.677588][T12877] netlink: 'syz.5.16814': attribute type 16 has an invalid length. [ 1076.176444][T12912] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1076.528326][ T5876] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1076.691509][T12953] misc userio: Invalid payload size [ 1076.701931][ T5876] usb 2-1: Using ep0 maxpacket: 8 [ 1076.712551][ T5876] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1076.723036][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.741967][ T5876] usb 2-1: Product: syz [ 1076.756978][ T5876] usb 2-1: Manufacturer: syz [ 1076.766997][ T5876] usb 2-1: SerialNumber: syz [ 1076.789356][ T5876] usb 2-1: config 0 descriptor?? [ 1076.820006][ T5876] gspca_main: se401-2.14.0 probing 047d:5003 [ 1076.953346][T12968] netlink: zone id is out of range [ 1076.976959][T12968] netlink: zone id is out of range [ 1076.982147][T12968] netlink: zone id is out of range [ 1076.998546][T12968] netlink: zone id is out of range [ 1077.003957][T12968] netlink: zone id is out of range [ 1077.010509][T12968] netlink: zone id is out of range [ 1077.016025][T12968] netlink: zone id is out of range [ 1077.021912][T12968] netlink: zone id is out of range [ 1077.027222][T12968] netlink: zone id is out of range [ 1077.039379][T12968] netlink: zone id is out of range [ 1077.171111][T12977] netlink: 'syz.5.16860': attribute type 23 has an invalid length. [ 1077.258486][ T5876] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 1077.276448][ T5876] se401 2-1:0.0: probe with driver se401 failed with error -71 [ 1077.313492][ T5876] usb 2-1: USB disconnect, device number 127 [ 1077.459322][T13002] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1077.476330][T13002] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1077.486935][T13002] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1077.917946][T13036] netlink: 'syz.1.16883': attribute type 11 has an invalid length. [ 1078.761800][T13090] autofs4:pid:13090:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.3), cmd(0xc0189377) [ 1078.784186][T13090] autofs4:pid:13090:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189377) [ 1079.150346][T13113] netlink: 'syz.0.16920': attribute type 10 has an invalid length. [ 1079.168964][T13113] netlink: 168 bytes leftover after parsing attributes in process `syz.0.16920'. [ 1079.221708][T13120] netlink: 'syz.5.16923': attribute type 1 has an invalid length. [ 1079.229837][T13120] netlink: 128 bytes leftover after parsing attributes in process `syz.5.16923'. [ 1079.265413][T13121] netlink: 'syz.1.16924': attribute type 1 has an invalid length. [ 1079.273320][T13121] netlink: 96 bytes leftover after parsing attributes in process `syz.1.16924'. [ 1079.301596][T13121] netlink: 658 bytes leftover after parsing attributes in process `syz.1.16924'. [ 1079.311348][T13121] netlink: 1 bytes leftover after parsing attributes in process `syz.1.16924'. [ 1079.572235][T13143] netlink: 'syz.2.16932': attribute type 2 has an invalid length. [ 1079.703099][T12439] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1079.861479][T13161] dlm: no local IP address has been set [ 1079.863762][T12439] usb 2-1: Using ep0 maxpacket: 8 [ 1079.872997][T13161] dlm: cannot start dlm midcomms -107 [ 1079.882016][T12439] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1079.902123][T12439] usb 2-1: config 4 interface 0 has no altsetting 0 [ 1079.915511][T12439] usb 2-1: string descriptor 0 read error: -22 [ 1079.927782][T12439] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1079.942992][T12439] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.965871][T12439] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1079.993784][T12439] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1080.012698][T12439] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1080.020225][T12439] usb 2-1: media controller created [ 1080.076325][T12439] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1080.271982][T13192] netlink: 48 bytes leftover after parsing attributes in process `syz.2.16950'. [ 1080.325204][T13194] deleting an unspecified loop device is not supported. [ 1080.444469][T12439] usb 2-1: USB disconnect, device number 2 [ 1081.312919][T13269] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 1081.428823][T13276] netlink: 'syz.1.16987': attribute type 4 has an invalid length. [ 1081.777835][ T29] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1081.826555][T13311] netlink: 'syz.1.17002': attribute type 1 has an invalid length. [ 1081.914027][T13315] netlink: 'syz.1.17004': attribute type 15 has an invalid length. [ 1081.963925][ T29] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1081.975886][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.984739][ T29] usb 6-1: Product: syz [ 1081.989481][ T29] usb 6-1: Manufacturer: syz [ 1081.994515][ T29] usb 6-1: SerialNumber: syz [ 1082.014019][ T29] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1082.035873][T13850] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1082.065733][T12439] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1082.247479][T12439] usb 3-1: Using ep0 maxpacket: 16 [ 1082.255331][T12439] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1082.263779][T12439] usb 3-1: config 0 has no interface number 0 [ 1082.271289][T12439] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1082.290193][T12439] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1082.302639][T12439] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 1082.312169][T12439] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.321003][T12439] usb 3-1: Product: syz [ 1082.325857][T12439] usb 3-1: Manufacturer: syz [ 1082.331128][T12439] usb 3-1: SerialNumber: syz [ 1082.340928][T12439] usb 3-1: config 0 descriptor?? [ 1082.353734][T12439] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1082.483231][ T5876] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1082.530409][ T29] usb 6-1: USB disconnect, device number 4 [ 1082.579501][T12439] usb 3-1: USB disconnect, device number 126 [ 1082.654453][ T5876] usb 2-1: Using ep0 maxpacket: 32 [ 1082.662590][ T5876] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1082.671062][ T5876] usb 2-1: config 0 has no interface number 0 [ 1082.680294][ T5876] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1082.689531][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.697975][ T5876] usb 2-1: Product: syz [ 1082.702187][ T5876] usb 2-1: Manufacturer: syz [ 1082.706800][ T5876] usb 2-1: SerialNumber: syz [ 1082.714849][ T5876] usb 2-1: config 0 descriptor?? [ 1082.724224][ T5876] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1082.733623][ T5876] usb 2-1: selecting invalid altsetting 1 [ 1082.740537][ T5876] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1082.751705][ T5876] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1082.763407][ T5876] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1082.772721][ T5876] usb 2-1: media controller created [ 1082.787887][ T5876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1082.941595][ T5876] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1082.953911][ T5876] zl10353_read_register: readreg error (reg=127, ret==-32) [ 1082.961583][ T5876] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1083.007060][ T5876] usb 2-1: USB disconnect, device number 3 [ 1083.167766][T13850] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1083.174980][T13850] ath9k_htc: Failed to initialize the device [ 1083.182305][ T29] usb 6-1: ath9k_htc: USB layer deinitialized [ 1083.427861][T13405] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17017'. [ 1083.509023][ T29] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1083.627722][T13416] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1083.682223][ T29] usb 6-1: config 0 has an invalid descriptor of length 141, skipping remainder of the config [ 1083.703682][ T29] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x77, changing to 0x7 [ 1083.717944][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 1083.717972][T13421] kernel read not supported for file /eth0 (pid: 13421 comm: syz.2.17024) [ 1083.730424][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 61941, setting to 64 [ 1083.749740][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1083.773181][ T29] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1083.788055][ T29] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1083.790759][ T30] audit: type=1800 audit(1051.476:303): pid=13421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.17024" name="eth0" dev="mqueue" ino=71188 res=0 errno=0 [ 1083.796124][ T29] usb 6-1: Manufacturer: syz [ 1083.809660][ T29] usb 6-1: config 0 descriptor?? [ 1084.071321][T13850] usb 6-1: USB disconnect, device number 5 [ 1084.189786][T13454] binder: 13453:13454 ioctl c0306201 2000000001c0 returned -14 [ 1084.263263][ T30] audit: type=1326 audit(1051.915:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13458 comm="syz.2.17038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f0f9c629 code=0x50000 [ 1084.309556][ T30] audit: type=1326 audit(1051.915:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13458 comm="syz.2.17038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f0f9c629 code=0x50000 [ 1084.333076][ T30] audit: type=1326 audit(1051.915:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13458 comm="syz.2.17038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f0f9c629 code=0x50000 [ 1084.355920][ T30] audit: type=1326 audit(1051.915:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13458 comm="syz.2.17038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f0f9c629 code=0x50000 [ 1084.381318][ T30] audit: type=1326 audit(1051.915:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13458 comm="syz.2.17038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f0f9c629 code=0x50000 [ 1084.410484][ T30] audit: type=1326 audit(1051.915:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13458 comm="syz.2.17038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f0f9c629 code=0x50000 [ 1084.439680][ T30] audit: type=1326 audit(1051.915:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13458 comm="syz.2.17038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f0f9c629 code=0x50000 [ 1084.462972][ T30] audit: type=1326 audit(1051.915:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13458 comm="syz.2.17038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f0f9c629 code=0x50000 [ 1084.485573][ T30] audit: type=1326 audit(1051.915:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13458 comm="syz.2.17038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f0f9c629 code=0x50000 [ 1084.712086][T13478] netlink: 187320 bytes leftover after parsing attributes in process `syz.2.17047'. [ 1085.159340][T13507] netlink: 'syz.1.17063': attribute type 21 has an invalid length. [ 1085.171872][T13510] netlink: 'syz.2.17061': attribute type 2 has an invalid length. [ 1085.180801][T13507] netlink: 128 bytes leftover after parsing attributes in process `syz.1.17063'. [ 1085.190480][T13507] netlink: 'syz.1.17063': attribute type 4 has an invalid length. [ 1085.199500][T13510] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17061'. [ 1085.209137][T13507] netlink: 'syz.1.17063': attribute type 3 has an invalid length. [ 1085.465422][T13527] usb usb1: check_ctrlrecip: process 13527 (syz.0.17071) requesting ep 01 but needs 81 [ 1085.491471][T13527] usb usb1: usbfs: process 13527 (syz.0.17071) did not claim interface 0 before use [ 1085.606062][T13536] Unsupported ieee802154 address type: 0 [ 1085.733848][T13542] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 4π!FVluc'f`ކ;1 [ 1085.967799][T13850] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1086.155046][T13850] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 1086.175216][T13850] usb 2-1: config 0 has no interface number 0 [ 1086.193944][T13850] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1086.215421][T13850] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1086.242906][T13850] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1086.258029][T13850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.266637][T13850] usb 2-1: Product: syz [ 1086.274308][T13850] usb 2-1: Manufacturer: syz [ 1086.307269][T13850] usb 2-1: SerialNumber: syz [ 1086.321317][T13850] usb 2-1: config 0 descriptor?? [ 1086.328079][T13545] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1086.351851][T13850] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1086.405014][T13850] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1086.586327][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 1086.630658][T13850] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1086.801649][T13850] usb 6-1: Using ep0 maxpacket: 16 [ 1086.805667][ T5876] usb 2-1: USB disconnect, device number 4 [ 1086.819140][T13850] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1086.840377][T13850] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1086.859568][ T5876] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1086.880688][T13850] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1086.892668][ T5876] cyberjack 2-1:0.69: device disconnected [ 1086.916914][T13850] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1086.950194][T13850] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1086.969721][T13850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.989072][T13850] usb 6-1: Product: syz [ 1086.993415][T13850] usb 6-1: Manufacturer: syz [ 1086.999289][T13850] usb 6-1: SerialNumber: syz [ 1087.016004][T13850] usb 6-1: config 0 descriptor?? [ 1087.262227][T13850] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input199 [ 1087.299918][ T5177] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1087.332322][ T5177] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1087.403857][T13345] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1087.452936][ T5177] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1087.482885][T13850] usb 6-1: USB disconnect, device number 6 [ 1087.490123][ T5177] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 1087.728236][T13686] net_ratelimit: 3 callbacks suppressed [ 1087.728257][T13686] openvswitch: netlink: IP tunnel dst address not specified [ 1087.874966][T13696] tmpfs: Unknown parameter 'func' [ 1088.310151][T13723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17127'. [ 1088.717700][T13748] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1088.981592][T13769] netlink: 44 bytes leftover after parsing attributes in process `syz.5.17150'. [ 1089.003302][T13769] netlink: 43 bytes leftover after parsing attributes in process `syz.5.17150'. [ 1089.018703][T13769] netlink: 'syz.5.17150': attribute type 6 has an invalid length. [ 1089.027067][T13769] netlink: 'syz.5.17150': attribute type 5 has an invalid length. [ 1089.047033][T13769] netlink: 43 bytes leftover after parsing attributes in process `syz.5.17150'. [ 1089.903165][T13833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17181'. [ 1090.190903][T13852] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1090.775640][T13885] cgroup: Invalid name [ 1090.865232][T13889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17209'. [ 1091.484598][ T29] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1091.646214][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1091.665878][ T29] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1091.675699][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1091.702296][ T29] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1091.716216][ T29] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1091.725905][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.740305][ T29] usb 6-1: config 0 descriptor?? [ 1091.914908][T13964] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1091.940643][T13967] netlink: 'syz.2.17242': attribute type 1 has an invalid length. [ 1091.971803][ T29] hdpvr 6-1:0.0: firmware version 0xd dated 8mP{, [ 1091.971803][ T29] #p⊻lEȥ] +aV@g_C.r9 [ 1092.119346][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 1092.119366][ T30] audit: type=1400 audit(1059.267:399): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=5D9625292F2F2E212D pid=13976 comm="syz.2.17247" [ 1092.184853][T13979] tmpfs: Bad value for 'mpol' [ 1092.190637][ T29] hdpvr 6-1:0.0: device init failed [ 1092.200140][ T29] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12 [ 1092.230833][ T29] usb 6-1: USB disconnect, device number 7 [ 1092.357124][T13994] netlink: 48 bytes leftover after parsing attributes in process `syz.1.17252'. [ 1092.390548][T13996] netlink: 'syz.2.17253': attribute type 3 has an invalid length. [ 1092.458505][T14000] netlink: 'syz.2.17255': attribute type 10 has an invalid length. [ 1092.480529][T14000] 8021q: adding VLAN 0 to HW filter on device .` [ 1092.493257][T14000] `: Port device .` added [ 1092.858786][T14024] netlink: 48 bytes leftover after parsing attributes in process `syz.2.17267'. [ 1092.888672][T14026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1093.442579][T14066] netlink: 56 bytes leftover after parsing attributes in process `syz.0.17285'. [ 1093.766179][T14088] netlink: 'syz.1.17296': attribute type 16 has an invalid length. [ 1093.776529][T14088] netlink: 156 bytes leftover after parsing attributes in process `syz.1.17296'. [ 1093.893462][T14097] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 1094.509832][T14140] kAFS: Can only specify source 'none' with -o dyn [ 1094.873159][ T5876] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1095.035054][ T5876] usb 6-1: Using ep0 maxpacket: 8 [ 1095.047777][ T5876] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1095.070453][ T5876] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1095.083407][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1095.095003][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 1095.106718][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1095.118171][ T5876] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1095.141953][ T5876] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1095.151756][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.159836][ T5876] usb 6-1: Product: syz [ 1095.166213][ T5876] usb 6-1: Manufacturer: syz [ 1095.183112][ T5876] usb 6-1: SerialNumber: syz [ 1095.190832][ T5876] usb 6-1: config 0 descriptor?? [ 1095.197601][T14150] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1095.881506][T14233] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1096.191807][T14251] netlink: 763 bytes leftover after parsing attributes in process `syz.1.17371'. [ 1096.616008][T14282] netlink: 830 bytes leftover after parsing attributes in process `syz.2.17387'. [ 1096.713619][ T5876] rc_core: IR keymap rc-snapstream-firefly not found [ 1096.720451][ T5876] Registered IR keymap rc-empty [ 1096.745213][ T5876] rc rc0: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1096.779761][ T5876] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input201 [ 1096.832450][ T5876] input: syz syz mouse as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input202 [ 1096.906885][T14299] netlink: 'syz.5.17392': attribute type 41 has an invalid length. [ 1096.920490][ T5876] usb 6-1: USB disconnect, device number 8 [ 1096.926587][ C0] ati_remote 6-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 1097.289120][T12439] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1097.328945][T14336] netlink: 'syz.2.17402': attribute type 10 has an invalid length. [ 1097.342746][T14336] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17402'. [ 1097.352039][T14336] 0: left allmulticast mode [ 1097.359712][T14336] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 1097.484492][T12439] usb 2-1: Using ep0 maxpacket: 16 [ 1097.491887][T12439] usb 2-1: config 0 has an invalid interface number: 148 but max is 0 [ 1097.508418][T12439] usb 2-1: config 0 has no interface number 0 [ 1097.517747][T12439] usb 2-1: config 0 interface 148 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1097.545684][T12439] usb 2-1: config 0 interface 148 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 1097.559055][T12439] usb 2-1: config 0 interface 148 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 1097.574683][T12439] usb 2-1: config 0 interface 148 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 1097.586770][T12439] usb 2-1: config 0 interface 148 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1097.602779][T12439] usb 2-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=ab.d1 [ 1097.617494][T12439] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.641913][T12439] usb 2-1: Product: syz [ 1097.654597][T12439] usb 2-1: Manufacturer: syz [ 1097.670018][T12439] usb 2-1: SerialNumber: syz [ 1097.683707][T12439] usb 2-1: config 0 descriptor?? [ 1097.924385][T12439] usb 2-1: probing VID:PID(2201:012C) [ 1097.943030][T12439] usb 2-1: vub300 testing UNKNOWN EndPoint(0) 87 [ 1097.958311][T12439] usb 2-1: vub300 ignoring EndPoint(0) 87 [ 1097.973362][T12439] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 1097.994817][T12439] vub300 2-1:0.148: probe with driver vub300 failed with error -22 [ 1098.021517][T12439] usb 2-1: USB disconnect, device number 5 [ 1098.109237][T14385] netlink: 400 bytes leftover after parsing attributes in process `syz.2.17422'. [ 1098.567777][T14414] netlink: 56 bytes leftover after parsing attributes in process `syz.2.17433'. [ 1098.711600][T14421] openvswitch: netlink: Actions may not be safe on all matching packets [ 1098.993757][T14438] netlink: 42496 bytes leftover after parsing attributes in process `syz.2.17444'. [ 1099.146260][ T30] audit: type=1326 audit(1065.843:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14443 comm="syz.2.17449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f0f9c629 code=0x7ffc0000 [ 1099.229836][ T30] audit: type=1326 audit(1065.881:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14443 comm="syz.2.17449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f0f9c629 code=0x7ffc0000 [ 1099.261041][ T30] audit: type=1326 audit(1065.881:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14443 comm="syz.2.17449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f0f9c629 code=0x7ffc0000 [ 1099.283118][ T30] audit: type=1326 audit(1065.881:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14443 comm="syz.2.17449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f43f0f9c629 code=0x7ffc0000 [ 1099.334970][ T30] audit: type=1326 audit(1065.881:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14443 comm="syz.2.17449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f0f9c629 code=0x7ffc0000 [ 1099.395562][ T30] audit: type=1326 audit(1065.881:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14443 comm="syz.2.17449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f0f9c629 code=0x7ffc0000 [ 1099.450623][ T30] audit: type=1326 audit(1065.881:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14443 comm="syz.2.17449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f0f9c629 code=0x7ffc0000 [ 1099.473168][ T30] audit: type=1326 audit(1065.881:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14443 comm="syz.2.17449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f43f0f9c629 code=0x7ffc0000 [ 1099.516348][ T30] audit: type=1326 audit(1065.881:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14443 comm="syz.2.17449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f43f0f9c629 code=0x7ffc0000 [ 1099.632055][ T5940] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1099.732968][T14475] netlink: 'syz.0.17460': attribute type 10 has an invalid length. [ 1099.782166][T14475] team0 (unregistering): Port device team_slave_0 removed [ 1099.801626][ T5940] usb 3-1: Using ep0 maxpacket: 16 [ 1099.814467][ T5940] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1099.828725][T14475] team0 (unregistering): Port device team_slave_1 removed [ 1099.845842][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.864568][ T5940] usb 3-1: Product: syz [ 1099.869201][ T5940] usb 3-1: Manufacturer: syz [ 1099.873981][ T5940] usb 3-1: SerialNumber: syz [ 1099.894945][ T5940] usb 3-1: config 0 descriptor?? [ 1100.133058][ T5940] speedtch 3-1:0.0: speedtch_bind: wrong device class 68 [ 1100.144291][ T5940] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1100.275114][T14502] openvswitch: netlink: IP tunnel dst address not specified [ 1100.341703][T14509] netlink: 'syz.1.17470': attribute type 21 has an invalid length. [ 1100.391542][T13850] usb 3-1: USB disconnect, device number 127 [ 1100.401939][T14509] netlink: 128 bytes leftover after parsing attributes in process `syz.1.17470'. [ 1100.434064][T14509] netlink: 'syz.1.17470': attribute type 5 has an invalid length. [ 1100.464505][T14509] netlink: 'syz.1.17470': attribute type 6 has an invalid length. [ 1100.496478][T14509] netlink: 3 bytes leftover after parsing attributes in process `syz.1.17470'. [ 1100.984797][T14542] usb usb1: usbfs: process 14542 (syz.0.17481) did not claim interface 0 before use [ 1101.555871][T14576] netlink: 'syz.2.17497': attribute type 1 has an invalid length. [ 1101.563773][T14576] netlink: 228 bytes leftover after parsing attributes in process `syz.2.17497'. [ 1101.806191][T14591] netlink: 'syz.5.17505': attribute type 1 has an invalid length. [ 1101.997400][T14601] netlink: 52 bytes leftover after parsing attributes in process `syz.2.17510'. [ 1102.746924][T14647] netlink: 'syz.2.17531': attribute type 25 has an invalid length. [ 1102.987655][ T29] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1103.159042][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 1103.171955][ T29] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1103.201052][ T29] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1103.216635][ T29] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1103.227190][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.243534][ T29] usb 6-1: Product: syz [ 1103.247938][ T29] usb 6-1: Manufacturer: syz [ 1103.252749][ T29] usb 6-1: SerialNumber: syz [ 1103.536665][T14694] netlink: 'syz.2.17553': attribute type 2 has an invalid length. [ 1103.544895][T14694] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17553'. [ 1103.721149][ T29] usb 6-1: cannot find UAC_HEADER [ 1103.827672][ T29] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1103.865164][ T29] usb 6-1: USB disconnect, device number 9 [ 1103.892126][T12201] udevd[12201]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1104.212098][T14735] netlink: 'syz.1.17566': attribute type 2 has an invalid length. [ 1104.225948][T14735] netlink: 224 bytes leftover after parsing attributes in process `syz.1.17566'. [ 1104.368317][T14746] netlink: 'syz.5.17570': attribute type 3 has an invalid length. [ 1104.492362][T14755] misc userio: The device must be registered before sending interrupts [ 1104.580195][ T5940] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1104.742242][ T5940] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1104.762038][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.779547][ T5940] usb 3-1: config 0 descriptor?? [ 1104.819920][T14769] 8021q: VLANs not supported on lo [ 1105.236367][ T5940] usb 3-1: Cannot set MAC address [ 1105.241786][ T5940] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1105.267428][ T5940] usb 3-1: USB disconnect, device number 2 [ 1105.546195][T14816] JFS: charset not found [ 1106.091203][T14858] comedi: No check for data length of config insn id 63311 is implemented [ 1106.109036][T14858] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1106.120021][T14858] comedi: Assuming n=15 is correct [ 1106.171968][T14860] netlink: 32 bytes leftover after parsing attributes in process `syz.0.17619'. [ 1106.311834][T14869] comedi comedi3: s526: I/O port conflict (0x7,64) [ 1106.646069][T14894] usb usb8: usbfs: process 14894 (syz.2.17636) did not claim interface 1 before use [ 1107.560420][T14960] usb usb9: usbfs: process 14960 (syz.5.17668) did not claim interface 0 before use [ 1107.914493][T14987] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1107.923160][T14987] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1107.944588][T14987] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1107.967916][T14987] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1107.980207][T14989] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1108.094035][T14997] i2c i2c-0: DVB: adapter 0 frontend 0 symbol rate 4 out of range (1000000..45000000) [ 1108.408032][T15018] netlink: 20 bytes leftover after parsing attributes in process `syz.5.17696'. [ 1108.428466][T15020] netlink: 'syz.1.17697': attribute type 1 has an invalid length. [ 1108.554143][T15032] netlink: 'syz.2.17701': attribute type 21 has an invalid length. [ 1108.635838][T15038] mac80211_hwsim hwsim9 4: renamed from wlan1 (while UP) [ 1108.749518][ T5940] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1108.770484][T15046] openvswitch: netlink: IP tunnel dst address not specified [ 1108.830922][T15050] nbd: must specify at least one socket [ 1108.857070][T15052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17711'. [ 1108.940433][ T5940] usb 6-1: Using ep0 maxpacket: 16 [ 1108.965526][ T5940] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1108.975131][ T5940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.983301][ T5940] usb 6-1: Product: syz [ 1108.987814][ T5940] usb 6-1: Manufacturer: syz [ 1108.992538][ T5940] usb 6-1: SerialNumber: syz [ 1108.998556][T15060] tmpfs: Bad value for 'mpol' [ 1109.013866][ T5940] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1109.027665][ T5940] r8152-cfgselector 6-1: config 0 descriptor?? [ 1109.073707][T15064] netlink: 'syz.2.17715': attribute type 27 has an invalid length. [ 1109.227931][T15072] netlink: 'syz.1.17719': attribute type 64 has an invalid length. [ 1109.236929][T15072] netlink: 5 bytes leftover after parsing attributes in process `syz.1.17719'. [ 1109.276701][ T5940] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1109.291764][ T5940] r8152-cfgselector 6-1: bad CDC descriptors [ 1109.502055][ T29] r8152-cfgselector 6-1: USB disconnect, device number 10 [ 1109.922660][T15121] syz_tun: tun_net_xmit 42 [ 1110.127064][T15136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17745'. [ 1111.047991][ C0] syz_tun: tun_net_xmit 42 [ 1111.525341][T15236] netlink: 'syz.1.17791': attribute type 1 has an invalid length. [ 1111.533646][T15236] netlink: 1 bytes leftover after parsing attributes in process `syz.1.17791'. [ 1111.896373][T15261] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1111.946548][T15265] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 1112.159836][ C0] syz_tun: tun_net_xmit 42 [ 1112.626719][T15314] netlink: 260 bytes leftover after parsing attributes in process `syz.1.17829'. [ 1113.164815][ T29] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 1113.220239][T15357] netlink: 294 bytes leftover after parsing attributes in process `syz.5.17848'. [ 1113.229883][T15357] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1113.273100][ C0] syz_tun: tun_net_xmit 42 [ 1113.342670][ T29] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1113.353213][T15363] overlayfs: overlapping lowerdir path [ 1113.359601][ T29] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1113.369620][ T29] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.389555][ T29] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1113.409295][ T29] usb 2-1: config 1 has no interface number 0 [ 1113.421573][ T29] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1113.442660][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.472359][ T29] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1113.591828][T15378] block nbd2: NBD_DISCONNECT [ 1113.684496][ T29] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 1113.704986][ T29] snd_usb_pod 2-1:1.1: invalid control EP [ 1113.718758][ T29] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 1113.726300][ T29] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1113.734549][ T29] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 1113.912759][ T29] usb 2-1: USB disconnect, device number 6 [ 1113.920821][T15402] nfs: Unknown parameter 'defcontext' [ 1114.383517][ C0] syz_tun: tun_net_xmit 42 [ 1114.586294][T15448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17885'. [ 1114.698917][T15457] netlink: 'syz.5.17890': attribute type 3 has an invalid length. [ 1114.707188][T15457] netlink: 3 bytes leftover after parsing attributes in process `syz.5.17890'. [ 1114.908100][T15475] netlink: 'syz.2.17893': attribute type 10 has an invalid length. [ 1114.916121][T15475] netlink: 228 bytes leftover after parsing attributes in process `syz.2.17893'. [ 1115.056958][ T5940] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1115.273368][ T5940] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1115.295063][ T5940] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1115.316136][ T5940] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1115.328867][T15506] netlink: 'syz.2.17899': attribute type 1 has an invalid length. [ 1115.341890][T15506] netlink: 224 bytes leftover after parsing attributes in process `syz.2.17899'. [ 1115.347636][ T5940] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1115.391384][ T5940] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1115.424376][ T5940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.441736][ T5940] usb 6-1: Product: syz [ 1115.446082][ T5940] usb 6-1: Manufacturer: syz [ 1115.464105][ T5940] usb 6-1: SerialNumber: syz [ 1115.493275][ T5940] usb 6-1: config 0 descriptor?? [ 1115.498660][ C0] syz_tun: tun_net_xmit 42 [ 1115.702556][T15526] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17905'. [ 1115.768471][ T5940] adutux 6-1:0.0: Could not retrieve serial number [ 1115.779457][ T5940] adutux 6-1:0.0: probe with driver adutux failed with error -5 [ 1116.004652][T12439] usb 6-1: USB disconnect, device number 11 [ 1116.543377][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1116.714686][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1116.729399][ T24] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1116.746081][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1116.769201][ T24] usb 2-1: config 0 has no interface number 0 [ 1116.777860][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1116.803652][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.822522][ T24] usb 2-1: Product: syz [ 1116.830469][ T24] usb 2-1: Manufacturer: syz [ 1116.850404][ T24] usb 2-1: SerialNumber: syz [ 1116.883869][ T24] usb 2-1: config 0 descriptor?? [ 1116.918457][ T24] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1116.939946][ T24] uvcvideo 2-1:0.105: No valid video chain found. [ 1116.953033][T15613] PKCS8: Unsupported PKCS#8 version [ 1117.090515][T15621] netlink: 'syz.0.17927': attribute type 11 has an invalid length. [ 1117.098516][T15621] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.17927'. [ 1117.141341][ T24] usb 2-1: USB disconnect, device number 7 [ 1117.377168][ T5940] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 1117.562850][ T5940] usb 3-1: config index 0 descriptor too short (expected 539, got 27) [ 1117.578550][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 4 [ 1117.633052][ T5940] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1117.654382][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.673796][ T5940] usb 3-1: Product: syz [ 1117.679345][ T5940] usb 3-1: Manufacturer: syz [ 1117.685006][ T5940] usb 3-1: SerialNumber: syz [ 1117.700611][ T5940] usb 3-1: config 0 descriptor?? [ 1117.719969][ T5940] hub 3-1:0.0: bad descriptor, ignoring hub [ 1117.725972][ T5940] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1117.774538][ T5940] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input204 [ 1117.813604][ T5940] usbtouchscreen 3-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 1117.961374][ T5940] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -22 [ 1118.021255][ T5940] usb 3-1: USB disconnect, device number 3 [ 1119.113577][T15731] netlink: 14 bytes leftover after parsing attributes in process `syz.2.17958'. [ 1119.168420][T15731] `: Port device .` removed [ 1119.176844][T15731] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1119.202370][T15733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1119.220796][T15731] .` (unregistering): Released all slaves [ 1120.349651][T15773] netlink: 'syz.1.17968': attribute type 1 has an invalid length. [ 1120.357556][T15773] netlink: 'syz.1.17968': attribute type 2 has an invalid length. [ 1121.084887][T15808] netlink: 'syz.2.17980': attribute type 1 has an invalid length. [ 1121.115178][T15808] netlink: 224 bytes leftover after parsing attributes in process `syz.2.17980'. [ 1121.237702][ T5940] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1121.459858][ T5940] usb 6-1: config 0 has an invalid interface number: 158 but max is 0 [ 1121.481970][ T5940] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1121.511706][ T5940] usb 6-1: config 0 has no interface number 0 [ 1121.546176][ T5940] usb 6-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=be.65 [ 1121.555505][ T5940] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.621830][ T5940] usb 6-1: config 0 descriptor?? [ 1121.635377][ T5940] usb 6-1: unknown interface protocol 0xea, assuming v1 [ 1121.676716][ T5940] usb 6-1: 158:1 : does not exist [ 1121.683196][ T5940] usb 6-1: 158:0 : does not exist [ 1121.832469][T15845] netlink: 'syz.1.17992': attribute type 2 has an invalid length. [ 1121.842050][T15845] netlink: 'syz.1.17992': attribute type 1 has an invalid length. [ 1121.889962][ T29] usb 6-1: USB disconnect, device number 12 [ 1121.997623][T15866] tc_dump_action: action bad kind [ 1122.186954][T15878] netlink: 1192 bytes leftover after parsing attributes in process `syz.0.17999'. [ 1122.393201][T15890] CIFS mount error: No usable UNC path provided in device string! [ 1122.393201][T15890] [ 1122.404068][T15890] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1122.957966][T15928] overlayfs: missing 'lowerdir' [ 1123.137494][T15939] comedi comedi3: rti800: I/O port conflict (0xffffffff80008001,16) [ 1123.258194][T15948] netlink: 28 bytes leftover after parsing attributes in process `syz.5.18035'. [ 1123.273062][T15949] netlink: 'syz.0.18036': attribute type 11 has an invalid length. [ 1123.283000][T15948] netlink: 28 bytes leftover after parsing attributes in process `syz.5.18035'. [ 1123.292963][T15949] netlink: 224 bytes leftover after parsing attributes in process `syz.0.18036'. [ 1123.302760][T15948] netlink: 28 bytes leftover after parsing attributes in process `syz.5.18035'. [ 1123.997886][T15996] random: crng reseeded on system resumption [ 1124.363328][T16024] cgroup: name respecified [ 1124.444965][T16030] netlink: 140 bytes leftover after parsing attributes in process `syz.5.18073'. [ 1124.550241][ T5934] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1124.727403][T16044] netlink: 'syz.5.18081': attribute type 1 has an invalid length. [ 1124.736349][T16044] netlink: 224 bytes leftover after parsing attributes in process `syz.5.18081'. [ 1124.746845][ T5934] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1124.775112][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.794590][ T5934] usb 3-1: Product: syz [ 1124.800111][ T5934] usb 3-1: Manufacturer: syz [ 1124.809528][ T5934] usb 3-1: SerialNumber: syz [ 1124.824596][T16046] afs: Unknown parameter 'audit' [ 1124.840028][ T5934] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1124.865527][ T24] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1125.041186][T16063] tmpfs: Bad value for 'size' [ 1125.371118][T16082] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18096'. [ 1125.431680][ T5934] usb 3-1: USB disconnect, device number 4 [ 1126.016480][ T24] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1126.034667][ T24] ath9k_htc: Failed to initialize the device [ 1126.067946][ T5934] usb 3-1: ath9k_htc: USB layer deinitialized [ 1126.365445][T16151] netlink: 156 bytes leftover after parsing attributes in process `syz.2.18127'. [ 1126.648115][T16169] netlink: 128 bytes leftover after parsing attributes in process `syz.1.18136'. [ 1126.669896][T16169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18136'. [ 1127.233528][ T5940] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1127.409122][ T5940] usb 6-1: Using ep0 maxpacket: 16 [ 1127.429347][ T5940] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1127.447389][ T5940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.455603][ T5940] usb 6-1: Product: syz [ 1127.468172][ T5940] usb 6-1: Manufacturer: syz [ 1127.485122][ T5940] usb 6-1: SerialNumber: syz [ 1127.503608][ T5940] usb 6-1: config 0 descriptor?? [ 1127.520253][T16229] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18164'. [ 1127.732678][ T5940] speedtch 6-1:0.0: speedtch_bind: wrong device class 68 [ 1127.751579][ T5940] speedtch 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1127.963330][ T24] usb 6-1: USB disconnect, device number 13 [ 1128.494458][T16298] lo speed is unknown, defaulting to 1000 [ 1128.521136][T16298] lo speed is unknown, defaulting to 1000 [ 1128.529725][T16298] lo speed is unknown, defaulting to 1000 [ 1128.677224][T16300] "syz.1.18194" (16300) uses obsolete ecb(arc4) skcipher [ 1128.909986][T16298] infiniband syz0: set active [ 1128.915025][T16298] infiniband syz0: added lo [ 1128.921988][ T24] lo speed is unknown, defaulting to 1000 [ 1128.966809][T16298] RDS/IB: syz0: added [ 1128.971017][T16298] smc: adding ib device syz0 with port count 1 [ 1128.977713][T16298] smc: ib device syz0 port 1 has no pnetid [ 1128.985813][T16298] lo speed is unknown, defaulting to 1000 [ 1129.000702][ T24] lo speed is unknown, defaulting to 1000 [ 1129.131949][T16331] netlink: 32 bytes leftover after parsing attributes in process `syz.5.18205'. [ 1129.185564][T16333] netlink: 'syz.1.18206': attribute type 1 has an invalid length. [ 1129.194033][T16333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18206'. [ 1129.362238][T16342] : renamed from dummy0 (while UP) [ 1129.547633][T16298] lo speed is unknown, defaulting to 1000 [ 1129.664655][T16356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18217'. [ 1129.824083][T16364] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 1130.005297][T16298] lo speed is unknown, defaulting to 1000 [ 1130.298665][T16388] netlink: 'syz.0.18233': attribute type 40 has an invalid length. [ 1130.444272][T16298] lo speed is unknown, defaulting to 1000 [ 1130.662713][T16404] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1130.803671][T16415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18245'. [ 1130.835429][T16298] lo speed is unknown, defaulting to 1000 [ 1130.911047][T16418] binder: 16416:16418 ioctl c00c620f 0 returned -14 [ 1130.998177][ T5934] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1131.164284][T16298] lo speed is unknown, defaulting to 1000 [ 1131.192405][ T5934] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1131.225577][ T5934] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.254423][ T5934] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1131.268604][ T5934] usb 6-1: config 1 has no interface number 0 [ 1131.275357][ T5934] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1131.286411][ T5934] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1131.308095][ T5934] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1131.328037][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.347209][ T5934] usb 6-1: Product: syz [ 1131.351640][ T5934] usb 6-1: Manufacturer: syz [ 1131.356372][ T5934] usb 6-1: SerialNumber: syz [ 1131.410325][T16437] netlink: 164 bytes leftover after parsing attributes in process `syz.1.18255'. [ 1131.848280][ T5934] usb 6-1: USB disconnect, device number 14 [ 1132.019950][T16479] Mount JFS Failure: -5 [ 1132.025019][T16479] jfs_mount failed w/return code = -5 [ 1132.129192][ T5934] IPVS: starting estimator thread 0... [ 1132.165329][T16488] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1132.227491][T16486] IPVS: using max 31 ests per chain, 74400 per kthread [ 1132.317007][T16499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18281'. [ 1132.643463][T16526] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1133.197192][T16565] netlink: 'syz.5.18311': attribute type 4 has an invalid length. [ 1133.294713][T16569] netlink: 'syz.2.18314': attribute type 2 has an invalid length. [ 1133.327682][T16569] netlink: 244 bytes leftover after parsing attributes in process `syz.2.18314'. [ 1133.399474][T16577] comedi comedi1: comedi_config --init_data is deprecated [ 1134.488888][T16652] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1134.725176][T16667] netlink: 'syz.1.18357': attribute type 4 has an invalid length. [ 1134.762604][T16667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18357'. [ 1134.795567][T16670] netlink: 'syz.5.18359': attribute type 4 has an invalid length. [ 1134.834671][T16670] netlink: 17 bytes leftover after parsing attributes in process `syz.5.18359'. [ 1135.069836][T16690] netlink: 'syz.2.18366': attribute type 1 has an invalid length. [ 1135.077823][T16690] netlink: 'syz.2.18366': attribute type 11 has an invalid length. [ 1135.088309][T16690] netlink: 224 bytes leftover after parsing attributes in process `syz.2.18366'. [ 1135.163006][T16694] dlm: no locking on control device [ 1135.257135][T12439] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 1135.279378][T16701] netlink: 'syz.2.18372': attribute type 1 has an invalid length. [ 1135.290246][T16701] netlink: 'syz.2.18372': attribute type 1 has an invalid length. [ 1135.298799][T16701] netlink: 9172 bytes leftover after parsing attributes in process `syz.2.18372'. [ 1135.435189][T12439] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 1135.443395][T12439] usb 2-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 1135.454094][T12439] usb 2-1: config 0 has no interface number 0 [ 1135.460740][T12439] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 14385, setting to 64 [ 1135.477922][T12439] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1135.491966][T12439] usb 2-1: config 0 interface 52 has no altsetting 0 [ 1135.503752][T12439] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1135.514129][T12439] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1135.522713][T12439] usb 2-1: Manufacturer: syz [ 1135.540148][T12439] usb 2-1: config 0 descriptor?? [ 1135.555423][T12439] hub 2-1:0.52: bad descriptor, ignoring hub [ 1135.562894][T12439] hub 2-1:0.52: probe with driver hub failed with error -5 [ 1135.625713][ T5940] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 1135.634822][T16721] binder: 16720:16721 ioctl 4018620d 0 returned -22 [ 1135.787530][T12439] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input207 [ 1135.814225][ T5940] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1135.827782][ T5940] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1135.868580][ T5940] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1135.893766][ T5940] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1135.925485][ T5940] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1135.949265][ T5940] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1135.956805][ T5940] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1135.989092][ T5940] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1136.010972][ T5940] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1136.026075][ T5940] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1136.050010][ T5940] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1136.061835][ T5940] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1136.082801][ T5940] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1136.101290][ T5940] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1136.124441][ T5940] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1136.139740][ T5940] usb 3-1: string descriptor 0 read error: -22 [ 1136.146094][ T5940] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1136.169664][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.178296][T12439] usb 2-1: USB disconnect, device number 8 [ 1136.233525][ T5940] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1136.441926][T13850] usb 3-1: USB disconnect, device number 5 [ 1136.609201][ T5940] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1136.770725][ T5940] usb 6-1: Using ep0 maxpacket: 16 [ 1136.786661][ T5940] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 1136.806104][ T5940] usb 6-1: config 0 has no interface number 0 [ 1136.817956][ T5940] usb 6-1: config 0 interface 251 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 16 [ 1136.829199][ T5940] usb 6-1: config 0 interface 251 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 64 [ 1136.841874][ T5940] usb 6-1: config 0 interface 251 has no altsetting 0 [ 1136.854203][ T5940] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1136.866898][ T5940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.875314][ T5940] usb 6-1: Product: syz [ 1136.880743][ T5940] usb 6-1: Manufacturer: syz [ 1136.885401][ T5940] usb 6-1: SerialNumber: syz [ 1136.898960][ T5940] usb 6-1: config 0 descriptor?? [ 1136.904993][T16766] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1136.914899][T16766] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1137.159214][T16766] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1137.180137][T16766] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1137.243590][T16819] netlink: 'syz.2.18409': attribute type 10 has an invalid length. [ 1137.376600][T16828] netlink: 'syz.0.18414': attribute type 1 has an invalid length. [ 1137.385594][T16828] netlink: 228 bytes leftover after parsing attributes in process `syz.0.18414'. [ 1137.415749][ T5940] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1137.444415][ T5940] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 1137.458237][T16834] random: crng reseeded on system resumption [ 1137.463784][ T5940] asix 6-1:0.251: probe with driver asix failed with error -5 [ 1137.500819][ T5940] usb 6-1: USB disconnect, device number 15 [ 1137.976799][T16875] kAFS: unable to lookup cell '/yz1' [ 1138.149194][ T5940] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1138.320367][ T5940] usb 3-1: Using ep0 maxpacket: 16 [ 1138.333388][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1138.357762][ T5940] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1138.369597][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.391195][ T5940] usb 3-1: Product: syz [ 1138.404970][ T5940] usb 3-1: Manufacturer: syz [ 1138.410899][ T5940] usb 3-1: SerialNumber: syz [ 1138.428252][ T5940] usb 3-1: config 0 descriptor?? [ 1138.497678][ T5940] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1138.670994][ T1322] usb 3-1: Failed to submit usb control message: -71 [ 1138.671057][ T1322] usb 3-1: unable to send the bmi data to the device: -71 [ 1138.671079][ T1322] usb 3-1: unable to get target info from device [ 1138.671099][ T1322] usb 3-1: could not get target info (-71) [ 1138.671128][ T1322] usb 3-1: could not probe fw (-71) [ 1138.671706][ T5940] usb 3-1: USB disconnect, device number 6 [ 1139.175067][T16955] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1139.619517][T16981] 9p: Could not find request transport: xen [ 1139.640273][T16988] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18477'. [ 1141.056747][T17091] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1141.259654][ T5934] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1141.430355][ T5934] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1141.457193][ T5934] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1141.471080][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1141.490453][ T5934] usb 3-1: SerialNumber: syz [ 1141.814041][T17138] siw: device registration error -23 [ 1141.884058][T17145] netlink: 220 bytes leftover after parsing attributes in process `syz.1.18547'. [ 1141.950615][ T5934] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 1141.990488][ T5934] usb 3-1: USB disconnect, device number 7 [ 1142.403792][ T5934] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1142.574625][ T5934] usb 2-1: Using ep0 maxpacket: 32 [ 1142.597494][ T5934] usb 2-1: config 0 has an invalid interface number: 136 but max is 0 [ 1142.605748][ T5934] usb 2-1: config 0 has no interface number 0 [ 1142.613386][ T5934] usb 2-1: config 0 interface 136 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 1142.627144][ T5934] usb 2-1: config 0 interface 136 altsetting 0 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 1142.638763][ T5934] usb 2-1: config 0 interface 136 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1142.649658][ T24] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1142.674581][ T5934] usb 2-1: New USB device found, idVendor=10cf, idProduct=8063, bcdDevice=d1.d2 [ 1142.692295][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.713527][ T5934] usb 2-1: Product: syz [ 1142.717956][ T5934] usb 2-1: Manufacturer: syz [ 1142.722876][ T5934] usb 2-1: SerialNumber: syz [ 1142.746896][ T5934] usb 2-1: config 0 descriptor?? [ 1142.752912][T17163] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1142.761945][T17163] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1142.788834][ T5934] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 1142.831116][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1142.845515][ T24] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1142.857061][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.866532][ T24] usb 6-1: Product: syz [ 1142.871240][ T24] usb 6-1: Manufacturer: syz [ 1142.876318][ T24] usb 6-1: SerialNumber: syz [ 1142.900896][ T24] usb 6-1: config 0 descriptor?? [ 1143.016132][ T5934] usb 2-1: USB disconnect, device number 9 [ 1143.137022][ T24] peak_usb 6-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1143.153074][ T24] peak_usb 6-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1143.229847][ T24] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -71 [ 1143.254168][ T24] usb 6-1: USB disconnect, device number 16 [ 1143.643602][ T5876] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1143.804716][ T5876] usb 3-1: Using ep0 maxpacket: 16 [ 1143.822693][ T5876] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 1143.837227][ T5876] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1143.847101][ T5876] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1143.857008][ T5876] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1143.868260][ T5876] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1143.878363][ T5876] usb 3-1: config 0 has no interface number 0 [ 1143.885135][ T5876] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1143.897137][ T5876] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1143.912025][ T5876] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1143.942969][ T5876] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1143.987524][ T5876] usb 3-1: config 0 interface 125 has no altsetting 0 [ 1143.996225][ T5876] usb 3-1: config 0 interface 125 has no altsetting 2 [ 1144.015873][ T5876] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1144.037637][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.054169][ T5876] usb 3-1: Product: syz [ 1144.063013][ T5876] usb 3-1: Manufacturer: syz [ 1144.067813][ T5876] usb 3-1: SerialNumber: syz [ 1144.096444][ T5876] usb 3-1: config 0 descriptor?? [ 1144.121599][ T5876] usb 3-1: selecting invalid altsetting 2 [ 1144.542120][ C0] usb 3-1: async_complete: urb error -71 [ 1144.548006][ C0] usb 3-1: async_complete: urb error -71 [ 1144.553814][ C0] usb 3-1: async_complete: urb error -71 [ 1144.568757][ T5876] get_1284_register: usb error -71 [ 1144.574193][ T5876] uss720 3-1:0.125: probe with driver uss720 failed with error -71 [ 1144.589499][T17331] netlink: 'syz.1.18609': attribute type 30 has an invalid length. [ 1144.598382][ T5876] usb 3-1: USB disconnect, device number 8 [ 1144.607084][T17332] netlink: 'syz.5.18610': attribute type 1 has an invalid length. [ 1145.012283][ T5876] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1145.177238][ T5876] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 1145.189915][ T5876] usb 2-1: config 0 has no interface number 0 [ 1145.203544][ T5876] usb 2-1: New USB device found, idVendor=10b8, idProduct=1fa0, bcdDevice=23.f6 [ 1145.236717][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.245236][ T5876] usb 2-1: Product: syz [ 1145.255754][ T5876] usb 2-1: Manufacturer: syz [ 1145.276813][ T5876] usb 2-1: SerialNumber: syz [ 1145.295653][ T5876] usb 2-1: config 0 descriptor?? [ 1145.406128][T17390] tmpfs: Bad value for 'size' [ 1145.507891][T17398] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18637'. [ 1145.547161][ T5876] dvb-usb: found a 'DiBcom STK8096GP reference design' in warm state. [ 1145.564524][ T5876] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1145.576765][ T5876] dvbdev: DVB: registering new adapter (DiBcom STK8096GP reference design) [ 1145.586379][ T5876] usb 2-1: media controller created [ 1145.618279][ T5876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1145.698215][ T30] audit: type=1400 audit(1109.386:409): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=17406 comm="syz.0.18640" [ 1145.773739][ T5876] DVB: Unable to find symbol dib8000_attach() [ 1145.780082][ T5876] dvb-usb: no frontend was attached by 'DiBcom STK8096GP reference design' [ 1145.874698][ T5876] rc_core: IR keymap rc-dib0700-rc5 not found [ 1145.881476][ T5876] Registered IR keymap rc-empty [ 1145.886733][ T5876] dvb-usb: could not initialize remote control. [ 1145.904520][ T5876] dvb-usb: DiBcom STK8096GP reference design successfully initialized and connected. [ 1145.922304][ T5876] usb 2-1: USB disconnect, device number 10 [ 1145.973417][T17432] erofs (device nbd0): cannot find valid erofs superblock [ 1145.982083][ T5876] dvb-usb: DiBcom STK8096GP reference design successfully deinitialized and disconnected. [ 1146.134512][ T5940] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 1146.295901][ T5940] usb 6-1: too many configurations: 129, using maximum allowed: 8 [ 1146.317834][ T5940] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1146.330715][ T5940] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 1146.343133][ T5940] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1146.369273][ T5940] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 1146.391933][ T5940] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1146.412721][ T5940] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 1146.435344][ T5940] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1146.447348][ T5940] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 1146.461829][ T5940] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1146.474312][ T5940] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 1146.492629][ T5940] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1146.506692][ T5940] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 1146.519706][ T5940] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1146.531023][ T5940] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 1146.544433][ T5940] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1146.571931][ T5940] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 1146.597994][ T5940] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1146.611864][ T5940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1146.620449][ T5940] usb 6-1: Product: syz [ 1146.624737][ T5940] usb 6-1: Manufacturer: syz [ 1146.630014][ T5940] usb 6-1: SerialNumber: syz [ 1146.647015][ T5940] usb 6-1: config 0 descriptor?? [ 1146.657215][ T5940] hub 6-1:0.0: Invalid hub with more than one config or interface [ 1146.670017][ T5940] hub 6-1:0.0: probe with driver hub failed with error -22 [ 1146.691538][ T5940] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input210 [ 1146.888850][T17484] binder: 17483:17484 unknown command 576 [ 1146.903640][T17484] binder: 17483:17484 ioctl c0306201 200000000480 returned -22 [ 1147.022991][ T5940] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1147.033102][ C0] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 1147.090643][ T5934] usb 6-1: USB disconnect, device number 17 [ 1147.124262][T17498] netlink: 'syz.2.18669': attribute type 5 has an invalid length. [ 1147.134078][T17498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18669'. [ 1147.144302][T17498] netlink: 'syz.2.18669': attribute type 1 has an invalid length. [ 1147.216717][ T5940] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1147.233183][ T5940] usb 2-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 1147.257000][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.287918][ T5940] usb 2-1: config 0 descriptor?? [ 1147.307139][ T5940] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 1147.580667][T17528] binder: 17527:17528 ioctl c018620c 200000000140 returned -22 [ 1147.726932][T17537] netlink: 'syz.5.18684': attribute type 6 has an invalid length. [ 1147.740637][ T5940] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1147.758801][ T5940] pwc: recv_control_msg error -71 req 02 val 2700 [ 1147.770384][ T5940] pwc: recv_control_msg error -71 req 04 val 1700 [ 1147.780570][ T5940] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1147.792493][ T5940] pwc: recv_control_msg error -71 req 04 val 1000 [ 1147.812260][ T5940] pwc: recv_control_msg error -71 req 04 val 1300 [ 1147.824090][ T5940] pwc: recv_control_msg error -71 req 04 val 1400 [ 1147.844071][ T5940] pwc: recv_control_msg error -71 req 02 val 2000 [ 1147.851602][ T5940] pwc: recv_control_msg error -71 req 02 val 2100 [ 1147.862307][ T5940] pwc: recv_control_msg error -71 req 02 val 2200 [ 1147.875129][ T5940] pwc: recv_control_msg error -71 req 06 val 0600 [ 1147.897164][ T5940] pwc: recv_control_msg error -71 req 04 val 1500 [ 1147.930644][ T5940] pwc: recv_control_msg error -71 req 02 val 2500 [ 1147.941642][ T5940] pwc: recv_control_msg error -71 req 02 val 2400 [ 1147.962761][ T5940] pwc: recv_control_msg error -71 req 02 val 2600 [ 1147.970040][ T5940] pwc: recv_control_msg error -71 req 02 val 2900 [ 1147.984398][ T5940] pwc: recv_control_msg error -71 req 02 val 2800 [ 1147.992940][ T5940] pwc: recv_control_msg error -71 req 04 val 1100 [ 1148.005439][ T5940] pwc: recv_control_msg error -71 req 04 val 1200 [ 1148.033832][ T5940] pwc: Registered as video103. [ 1148.044233][ T5940] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input211 [ 1148.098840][ T5940] usb 2-1: USB disconnect, device number 11 [ 1148.494266][T17591] Invalid source name [ 1148.508070][T17591] UBIFS error (pid: 17591): cannot open "./file0", error -22 [ 1148.556963][T17595] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1148.908330][T17619] binder: 17618:17619 ioctl c018620c 0 returned -14 [ 1149.265002][T17643] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1149.503103][T17658] netlink: 24 bytes leftover after parsing attributes in process `syz.5.18737'. [ 1149.528295][ T30] audit: type=1326 audit(1112.969:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17660 comm="syz.2.18738" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43f0f9c629 code=0x0 [ 1149.586832][ T30] audit: type=1326 audit(1113.016:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17660 comm="syz.2.18738" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7f43f0f9c629 code=0x0 [ 1149.771785][T17672] comedi comedi3: pcl726: I/O port conflict (0x8,16) [ 1150.538308][T17707] cgroup: release_agent respecified [ 1150.868455][T17721] netlink: 'syz.0.18767': attribute type 1 has an invalid length. [ 1150.884148][T17721] netlink: 'syz.0.18767': attribute type 2 has an invalid length. [ 1151.480607][T17753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1152.156657][T17782] netlink: 666 bytes leftover after parsing attributes in process `syz.5.18796'. [ 1152.609788][ T30] audit: type=1800 audit(1115.850:412): pid=17803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.18806" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 1152.955207][ T5934] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1153.118511][ T5934] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1153.131112][ T5934] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1153.142726][ T5934] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1153.153862][ T5934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1153.163194][ T5934] usb 6-1: SerialNumber: syz [ 1153.400377][ T5934] usb 6-1: 0:2 : does not exist [ 1153.410369][ T5934] usb 6-1: unit 5 not found! [ 1153.446264][ T5934] usb 6-1: USB disconnect, device number 18 [ 1153.478830][T12201] udevd[12201]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1154.308222][T17888] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 1154.768947][T17921] tipc: MTU too low for tipc bearer [ 1154.829495][T17925] netlink: 'syz.0.18849': attribute type 29 has an invalid length. [ 1154.871388][T17925] netlink: 'syz.0.18849': attribute type 29 has an invalid length. [ 1155.097152][T31623] Bluetooth: hci4: command 0x0406 tx timeout [ 1155.350915][ T5940] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1155.524010][ T5940] usb 3-1: config 0 has an invalid interface number: 237 but max is 0 [ 1155.542450][ T5940] usb 3-1: config 0 has no interface number 0 [ 1155.554814][ T5940] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1155.568241][ T5940] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1155.580646][ T5940] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1155.613169][ T5940] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid maxpacket 49152, setting to 1024 [ 1155.643392][ T5940] usb 3-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 1155.669164][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 1155.683398][ T5940] usb 3-1: Product: syz [ 1155.687879][ T5940] usb 3-1: Manufacturer: syz [ 1155.694503][ T5940] usb 3-1: SerialNumber: syz [ 1155.707709][ T5940] usb 3-1: config 0 descriptor?? [ 1155.733480][ T5940] xpad 3-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1155.744917][ T5940] xpad 3-1:0.237: probe with driver xpad failed with error -90 [ 1155.925830][T17984] comedi comedi3: 8255: I/O port conflict (0x4f27,4) [ 1155.992717][ T5940] usb 3-1: USB disconnect, device number 9 [ 1156.192971][T17943] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1156.210398][T17943] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1156.348567][T17943] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1156.354577][T17943] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1157.189027][T18080] netlink: 108 bytes leftover after parsing attributes in process `syz.2.18876'. [ 1157.822924][T18116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18884'. [ 1159.045890][T18191] netlink: 60 bytes leftover after parsing attributes in process `syz.2.18902'. [ 1159.055762][T18185] netlink: 60 bytes leftover after parsing attributes in process `syz.2.18902'. [ 1159.323776][T18209] netlink: 40 bytes leftover after parsing attributes in process `syz.2.18907'. [ 1159.539817][T18220] netlink: 20 bytes leftover after parsing attributes in process `syz.5.18911'. [ 1159.562977][T18220] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1159.894019][T18243] netlink: 20 bytes leftover after parsing attributes in process `syz.5.18917'. [ 1160.096772][T13850] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1160.139551][ T5934] syz_tun: tun_net_xmit 90 [ 1160.267524][T13850] usb 3-1: Using ep0 maxpacket: 16 [ 1160.275002][T13850] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1160.285705][T13850] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1160.299445][T13850] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 1160.314745][T13850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.326681][T13850] usb 3-1: config 0 descriptor?? [ 1160.674933][ T5934] syz_tun: tun_net_xmit 90 [ 1160.784561][T13850] hid-rmi 0003:06CB:81A7.0002: unknown main item tag 0x0 [ 1160.794375][T13850] hid-rmi 0003:06CB:81A7.0002: unknown main item tag 0x0 [ 1160.801630][T13850] hid-rmi 0003:06CB:81A7.0002: unknown main item tag 0x0 [ 1160.824290][T13850] hid-rmi 0003:06CB:81A7.0002: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.2-1/input0 [ 1161.018097][T17998] usb 3-1: USB disconnect, device number 10 [ 1161.297815][T18315] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1161.306615][T18315] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1161.825681][T18351] xt_l2tp: v2 sid > 0xffff: 1114112 [ 1162.003680][T18366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18938'. [ 1162.508237][T18401] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.18948'. [ 1162.530047][T18397] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.18948'. [ 1162.811145][T18420] 9p: Unknown Cache mode or invalid value n [ 1162.844757][T18423] fuse: Bad value for 'group_id' [ 1162.849778][T18423] fuse: Bad value for 'group_id' [ 1164.352178][T18513] mkiss: ax0: crc mode is auto. [ 1164.899836][T12439] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 1164.971433][T17998] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1165.080314][T12439] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 511, setting to 64 [ 1165.091431][T12439] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1165.105111][T12439] usb 6-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 1165.117783][T12439] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.129684][T12439] usb 6-1: config 0 descriptor?? [ 1165.142803][T17998] usb 3-1: Using ep0 maxpacket: 16 [ 1165.148593][T18533] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1165.171183][T17998] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1165.180017][T17998] usb 3-1: config 0 has no interface number 0 [ 1165.194749][T17998] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1165.205440][T17998] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.214079][T17998] usb 3-1: Product: syz [ 1165.219309][T17998] usb 3-1: Manufacturer: syz [ 1165.224548][T17998] usb 3-1: SerialNumber: syz [ 1165.235660][T17998] usb 3-1: config 0 descriptor?? [ 1165.253195][T17998] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1165.606625][T12439] a4tech 0003:09DA:0006.0003: unknown main item tag 0x0 [ 1165.613858][T12439] a4tech 0003:09DA:0006.0003: unknown main item tag 0x0 [ 1165.620999][T12439] a4tech 0003:09DA:0006.0003: unknown main item tag 0x0 [ 1165.629631][T12439] a4tech 0003:09DA:0006.0003: unknown main item tag 0x0 [ 1165.636808][T12439] a4tech 0003:09DA:0006.0003: unknown main item tag 0x0 [ 1165.643835][T12439] a4tech 0003:09DA:0006.0003: unknown main item tag 0x0 [ 1165.651448][T12439] a4tech 0003:09DA:0006.0003: unknown main item tag 0x0 [ 1165.662194][T12439] a4tech 0003:09DA:0006.0003: hidraw0: USB HID vff.ff Device [HID 09da:0006] on usb-dummy_hcd.5-1/input0 [ 1165.828705][T13850] usb 6-1: USB disconnect, device number 19 [ 1165.899645][T17998] gspca_spca1528: reg_w err -71 [ 1165.923107][T17998] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 1165.934570][T17998] usb 3-1: USB disconnect, device number 11 [ 1166.704281][T18612] netlink: 256 bytes leftover after parsing attributes in process `syz.5.18992'. [ 1166.886266][T18624] netlink: 'syz.5.18995': attribute type 10 has an invalid length. [ 1166.909481][T18624] netlink: 2 bytes leftover after parsing attributes in process `syz.5.18995'. [ 1166.930750][T18624] bond0: entered promiscuous mode [ 1166.936194][T18624] bond_slave_0: entered promiscuous mode [ 1166.944056][T18624] bond_slave_1: entered promiscuous mode [ 1166.951952][T18624] bridge0: port 3(bond0) entered blocking state [ 1166.961752][T18624] bridge0: port 3(bond0) entered disabled state [ 1166.969671][T18624] bond0: entered allmulticast mode [ 1166.976868][T18624] bond_slave_0: entered allmulticast mode [ 1166.983204][T18624] bond_slave_1: entered allmulticast mode [ 1166.995455][T18624] bridge0: port 3(bond0) entered blocking state [ 1167.002433][T18624] bridge0: port 3(bond0) entered forwarding state [ 1167.230578][T18647] CUSE: unknown device info "" [ 1167.235518][T18647] CUSE: unknown device info "" [ 1167.242784][T18647] CUSE: unknown device info "-" [ 1167.248249][T18647] CUSE: unknown device info "" [ 1167.277800][T18647] CUSE: DEVNAME unspecified [ 1168.522302][T31623] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1168.532679][T31623] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1168.544079][T31623] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1168.554611][T31623] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1168.562394][T31623] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1168.655860][ T5828] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1168.663849][ T5828] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1168.672422][ T5828] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1168.694258][ T5828] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1168.709622][ T5828] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1168.999119][T12439] kernel read not supported for file /video37 (pid: 12439 comm: kworker/0:2) [ 1169.037603][T18772] IPVS: Scheduler module ip_vs_noe not found [ 1169.090125][T18779] netlink: 44 bytes leftover after parsing attributes in process `syz.0.19031'. [ 1169.130242][T18779] netlink: 44 bytes leftover after parsing attributes in process `syz.0.19031'. [ 1169.415917][T18701] virt_wifi0 speed is unknown, defaulting to 1000 [ 1169.433140][T18701] wg0 speed is unknown, defaulting to 1000 [ 1169.456036][T18701] lo speed is unknown, defaulting to 1000 [ 1169.599104][T18799] tipc: Started in network mode [ 1169.618068][T18799] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 1169.651479][T18799] tipc: Enabled bearer , priority 10 [ 1170.295994][T18701] chnl_net:caif_netlink_parms(): no params data found [ 1170.552741][T18701] bridge0: port 1(bridge_slave_0) entered blocking state [ 1170.560198][T18701] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.584378][T18701] bridge_slave_0: entered allmulticast mode [ 1170.598037][T18701] bridge_slave_0: entered promiscuous mode [ 1170.620233][T18701] bridge0: port 2(bridge_slave_1) entered blocking state [ 1170.628444][T18701] bridge0: port 2(bridge_slave_1) entered disabled state [ 1170.635992][T18701] bridge_slave_1: entered allmulticast mode [ 1170.646049][T18701] bridge_slave_1: entered promiscuous mode [ 1170.772295][T18701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1170.803481][T18701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1170.912862][T17998] tipc: Node number set to 10136234 [ 1170.917473][T31623] Bluetooth: hci6: command tx timeout [ 1170.944248][T18701] team0: Port device team_slave_0 added [ 1170.972898][T18701] team0: Port device team_slave_1 added [ 1171.050247][T18701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1171.057655][T18701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1171.084451][T18701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1171.099242][T18701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1171.106259][T18701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1171.134459][T18701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1171.217947][ T30] audit: type=1326 audit(1133.248:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18944 comm="syz.2.19055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f0f9c629 code=0x7fc00000 [ 1171.352046][T18701] hsr_slave_0: entered promiscuous mode [ 1171.366844][T18701] hsr_slave_1: entered promiscuous mode [ 1171.375474][T18701] debugfs: 'hsr0' already exists in 'hsr' [ 1171.381465][T18701] Cannot create hsr debugfs directory [ 1171.964149][T19134] netlink: 48 bytes leftover after parsing attributes in process `syz.2.19073'. [ 1172.066966][T18701] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1172.092356][T18701] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1172.125227][T18701] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1172.192552][T18701] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1172.456437][T18701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1172.500734][T18701] 8021q: adding VLAN 0 to HW filter on device team0 [ 1172.533685][T18754] bridge0: port 1(bridge_slave_0) entered blocking state [ 1172.540939][T18754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1172.578793][T10483] bridge0: port 2(bridge_slave_1) entered blocking state [ 1172.586097][T10483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1173.028631][T18701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1173.088807][T19200] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19095'. [ 1173.107097][ T30] audit: type=1326 audit(1135.016:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19150 comm="syz.2.19078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f0f9c629 code=0x7fc00000 [ 1173.140438][T31623] Bluetooth: hci6: command tx timeout [ 1173.568394][T18701] veth0_vlan: entered promiscuous mode [ 1173.599162][T18701] veth1_vlan: entered promiscuous mode [ 1173.738707][T18701] veth0_macvtap: entered promiscuous mode [ 1173.770447][T18701] veth1_macvtap: entered promiscuous mode [ 1173.829978][T18701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1173.862995][T18701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1173.903075][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.941913][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.963152][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.972044][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.159079][T10483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1174.171922][T10483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1174.279450][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1174.308925][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1174.814515][T19269] netlink: 'syz.6.19112': attribute type 2 has an invalid length. [ 1174.946419][T19274] use of bytesused == 0 is deprecated and will be removed in the future, [ 1174.971716][T19274] use the actual size instead. [ 1175.364305][T31623] Bluetooth: hci6: command tx timeout [ 1175.426810][ T5934] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1175.600204][ T5934] usb 6-1: Using ep0 maxpacket: 8 [ 1175.622609][ T5934] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1175.629526][ T5934] usb 6-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 1175.640439][ T5934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.673149][ T5934] usb 6-1: config 0 descriptor?? [ 1176.139379][ T5934] hid_parser_main: 4 callbacks suppressed [ 1176.139407][ T5934] asus 0003:0B05:1822.0004: unknown main item tag 0x0 [ 1176.156008][ T5934] asus 0003:0B05:1822.0004: unknown main item tag 0x0 [ 1176.162967][ T5934] asus 0003:0B05:1822.0004: unknown main item tag 0x0 [ 1176.172274][ T5934] asus 0003:0B05:1822.0004: unknown main item tag 0x0 [ 1176.179696][ T5934] asus 0003:0B05:1822.0004: unknown main item tag 0x0 [ 1176.187486][T19352] binder: 19350:19352 ioctl c018620c 200000000140 returned -22 [ 1176.203612][ T5934] asus 0003:0B05:1822.0004: hidraw0: USB HID vff.ff Device [HID 0b05:1822] on usb-dummy_hcd.5-1/input0 [ 1176.239577][ T5934] asus 0003:0B05:1822.0004: Asus input not registered [ 1176.278521][ T5934] asus 0003:0B05:1822.0004: probe with driver asus failed with error -12 [ 1176.356300][T19361] netlink: 'syz.2.19141': attribute type 3 has an invalid length. [ 1176.370097][T19361] netlink: 'syz.2.19141': attribute type 1 has an invalid length. [ 1176.378115][T19361] netlink: 224 bytes leftover after parsing attributes in process `syz.2.19141'. [ 1176.381172][T17998] usb 6-1: USB disconnect, device number 20 [ 1176.784219][T19391] netlink: 'syz.6.19148': attribute type 21 has an invalid length. [ 1176.796389][T19391] netlink: 14532 bytes leftover after parsing attributes in process `syz.6.19148'. [ 1176.875604][T19396] netlink: 60 bytes leftover after parsing attributes in process `syz.0.19150'. [ 1176.893743][T19396] netlink: 60 bytes leftover after parsing attributes in process `syz.0.19150'. [ 1177.178113][T19413] can0: slcan on ttyprintk. [ 1177.276840][T19412] can0 (unregistered): slcan off ttyprintk. [ 1177.581344][T19444] netlink: 'syz.2.19164': attribute type 10 has an invalid length. [ 1177.587282][T31623] Bluetooth: hci6: command tx timeout [ 1177.612623][T19444] netlink: 152 bytes leftover after parsing attributes in process `syz.2.19164'. [ 1177.696736][T19453] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19167'. [ 1177.888489][T19467] netlink: 165 bytes leftover after parsing attributes in process `syz.5.19170'. [ 1179.199405][T19540] pimreg3: entered allmulticast mode [ 1179.275496][T17998] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1179.459311][T17998] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1179.469852][T17998] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.482347][T17998] usb 3-1: config 0 descriptor?? [ 1179.492563][T17998] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1179.501983][ T5934] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1179.676762][ T5934] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1179.686274][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.694854][ T5934] usb 6-1: Product: syz [ 1179.699102][ T5934] usb 6-1: Manufacturer: syz [ 1179.704011][ T5934] usb 6-1: SerialNumber: syz [ 1179.726118][ T5934] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1179.770660][ T24] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1180.145254][T17998] gspca_sunplus: reg_w_riv err -71 [ 1180.157288][T17998] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1180.168509][T17998] usb 3-1: USB disconnect, device number 12 [ 1180.432672][T17998] usb 6-1: USB disconnect, device number 21 [ 1180.792808][T19569] netlink: 84 bytes leftover after parsing attributes in process `syz.2.19190'. [ 1180.962510][ T30] audit: type=1326 audit(1142.368:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19579 comm="syz.6.19193" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efde7f9c629 code=0xffff0000 [ 1181.096223][ T24] usb 6-1: Service connection timeout for: 256 [ 1181.115068][ T24] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1181.132693][ T24] ath9k_htc: Failed to initialize the device [ 1181.152535][T17998] usb 6-1: ath9k_htc: USB layer deinitialized [ 1181.676826][T19620] syz.5.19201 (19620) used obsolete PPPIOCDETACH ioctl [ 1182.044654][T19644] syz_tun: tun_net_xmit 62 [ 1182.140904][T19650] random: crng reseeded on system resumption [ 1182.934912][T13850] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1183.124916][T13850] usb 6-1: Using ep0 maxpacket: 16 [ 1183.149979][T13850] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1183.168554][T13850] usb 6-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 1183.185134][T13850] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.200123][T19693] Zero length message leads to an empty skb [ 1183.220281][T13850] usb 6-1: config 0 descriptor?? [ 1183.345544][T19700] netlink: 60 bytes leftover after parsing attributes in process `syz.2.19217'. [ 1183.357317][T19700] netlink: 60 bytes leftover after parsing attributes in process `syz.2.19217'. [ 1183.557665][T19706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19220'. [ 1183.638846][T19709] netlink: 40 bytes leftover after parsing attributes in process `syz.2.19221'. [ 1183.651229][T19709] netlink: 40 bytes leftover after parsing attributes in process `syz.2.19221'. [ 1183.675133][T13850] logitech-djreceiver 0003:046D:C52B.0005: reserved main item tag 0xe [ 1183.908970][T13850] usb 6-1: USB disconnect, device number 22 [ 1184.329236][T19751] GUP no longer grows the stack in syz.2.19230 (19751): 200000007000-200000008000 (200000004000) [ 1184.340473][T19751] CPU: 1 UID: 0 PID: 19751 Comm: syz.2.19230 Tainted: G L syzkaller #0 PREEMPT(full) [ 1184.340508][T19751] Tainted: [L]=SOFTLOCKUP [ 1184.340517][T19751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1184.340532][T19751] Call Trace: [ 1184.340542][T19751] [ 1184.340553][T19751] dump_stack_lvl+0xe8/0x150 [ 1184.340601][T19751] fixup_user_fault+0x637/0x6f0 [ 1184.340641][T19751] fault_in_user_writeable+0x71/0xd0 [ 1184.340670][T19751] futex_lock_pi+0x800/0xb00 [ 1184.340716][T19751] ? __pfx_futex_lock_pi+0x10/0x10 [ 1184.340780][T19751] ? __pfx_futex_wake_mark+0x10/0x10 [ 1184.340830][T19751] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 1184.340874][T19751] do_futex+0x292/0x420 [ 1184.340908][T19751] ? __pfx_do_futex+0x10/0x10 [ 1184.340937][T19751] ? __vm_munmap+0x2e6/0x3d0 [ 1184.340975][T19751] __se_sys_futex+0x3a8/0x450 [ 1184.341011][T19751] ? __pfx___se_sys_futex+0x10/0x10 [ 1184.341040][T19751] ? rcu_is_watching+0x15/0xb0 [ 1184.341078][T19751] ? __x64_sys_futex+0x21/0xf0 [ 1184.341110][T19751] do_syscall_64+0x14d/0xf80 [ 1184.341133][T19751] ? trace_irq_disable+0x3b/0x150 [ 1184.341166][T19751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.341190][T19751] ? clear_bhb_loop+0x40/0x90 [ 1184.341219][T19751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.341243][T19751] RIP: 0033:0x7f43f0f9c629 [ 1184.341266][T19751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1184.341286][T19751] RSP: 002b:00007f43f1e14028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1184.341310][T19751] RAX: ffffffffffffffda RBX: 00007f43f1215fa0 RCX: 00007f43f0f9c629 [ 1184.341328][T19751] RDX: 0000000000000000 RSI: 000000000000008d RDI: 0000200000004000 [ 1184.341342][T19751] RBP: 00007f43f1032b39 R08: 0000000000000000 R09: 0000000000000000 [ 1184.341356][T19751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1184.341369][T19751] R13: 00007f43f1216038 R14: 00007f43f1215fa0 R15: 00007ffc36db6128 [ 1184.341403][T19751] [ 1185.329244][T19799] option changes via remount are deprecated (pid=19798 comm=syz.2.19246) [ 1185.672251][T19826] comedi comedi3: no devices specified [ 1186.208616][T19868] program syz.5.19270 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1186.393121][T19879] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.19274'. [ 1186.573897][T19890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19279'. [ 1186.630667][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 1186.640770][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 1186.663601][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 1186.679978][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 1186.688940][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 1186.699843][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 1186.708742][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 1186.716977][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 1186.725133][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 1186.736600][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 1186.762067][ T24] hid-generic 0000:007F:FFFFFFFE.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1186.905925][T19900] fido_id[19900]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1186.986085][T19915] netlink: 'syz.2.19286': attribute type 11 has an invalid length. [ 1187.782536][T19951] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19297'. [ 1188.343976][T19992] sp0: Synchronizing with TNC [ 1188.672459][T17998] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1188.799194][T20031] netlink: 188 bytes leftover after parsing attributes in process `syz.0.19327'. [ 1188.845732][T17998] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1188.869814][T17998] usb 3-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 1188.881087][T17998] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.892953][T17998] usb 3-1: config 0 descriptor?? [ 1188.901798][T20034] netlink: 32 bytes leftover after parsing attributes in process `syz.0.19329'. [ 1188.903985][T20035] netlink: 12 bytes leftover after parsing attributes in process `syz.5.19328'. [ 1189.167332][T20050] netlink: 'syz.0.19335': attribute type 4 has an invalid length. [ 1189.175745][T20050] netlink: 240 bytes leftover after parsing attributes in process `syz.0.19335'. [ 1189.388841][T17998] cherry 0003:046A:0027.0007: hidraw0: USB HID vff.fc Device [HID 046a:0027] on usb-dummy_hcd.2-1/input0 [ 1189.588593][T17998] usb 3-1: USB disconnect, device number 13 [ 1189.731032][T12439] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1189.902194][T12439] usb 6-1: Using ep0 maxpacket: 32 [ 1189.909352][T12439] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1189.921801][T12439] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1189.933553][T12439] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1189.947325][T12439] usb 6-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 1189.956822][T12439] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.972076][T12439] usb 6-1: config 0 descriptor?? [ 1190.465709][T12439] input: HID 0458:500f as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:500F.0008/input/input214 [ 1190.600964][T12439] input: HID 0458:500f as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:500F.0008/input/input215 [ 1190.705303][T12439] kye 0003:0458:500F.0008: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:500f] on usb-dummy_hcd.5-1/input0 [ 1190.753299][T12439] usb 6-1: USB disconnect, device number 23 [ 1190.842176][T20147] fido_id[20147]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1192.070732][T20247] tmpfs: Bad value for 'nr_inodes' [ 1192.684930][T20285] comedi comedi3: aio_iiro_16: I/O port conflict (0x4f27,8) [ 1192.876169][T20297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19406'. [ 1193.376405][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1193.560527][ T10] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1193.579824][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1193.594934][ T10] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1193.604369][ T10] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1193.615412][ T10] usb 3-1: Manufacturer: syz [ 1193.627012][ T10] usb 3-1: config 0 descriptor?? [ 1193.761361][ T10] rc_core: IR keymap rc-hauppauge not found [ 1193.767715][ T10] Registered IR keymap rc-empty [ 1193.780339][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1193.818091][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input216 [ 1194.084699][ C0] igorplugusb 3-1:0.0: receive overflow invalid: 186 [ 1194.318861][ T10] usb 3-1: USB disconnect, device number 14 [ 1194.436335][ T24] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1194.605892][ T31] INFO: task syz.4.15772:10248 blocked for more than 143 seconds. [ 1194.613997][ T31] Tainted: G L syzkaller #0 [ 1194.623230][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1194.633099][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1194.646845][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1194.655959][ T31] task:syz.4.15772 state:D stack:26528 pid:10248 tgid:10247 ppid:9138 task_flags:0x400040 flags:0x00080002 [ 1194.668456][ T24] usb 6-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 1194.678799][ T31] Call Trace: [ 1194.682658][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.690881][ T31] [ 1194.694522][ T31] __schedule+0x15dd/0x5300 [ 1194.701171][ T31] ? __pfx___schedule+0x10/0x10 [ 1194.714216][ T24] usb 6-1: config 0 descriptor?? [ 1194.719612][ T31] ? schedule+0x90/0x360 [ 1194.728500][ T31] schedule+0x164/0x360 [ 1194.732884][ T31] schedule_preempt_disabled+0x13/0x30 [ 1194.739081][ T31] __mutex_lock+0x7fe/0x1300 [ 1194.743857][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1194.750275][ T31] ? nfsd_nl_version_get_doit+0x17c/0xc40 [ 1194.756550][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1194.761752][ T31] ? __nlmsg_put+0xef/0x1b0 [ 1194.767767][ T31] ? genlmsg_put+0x137/0x2e0 [ 1194.772534][ T31] nfsd_nl_version_get_doit+0x17c/0xc40 [ 1194.781319][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 1194.791447][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 1194.797184][ T31] ? __asan_memcpy+0x40/0x70 [ 1194.807791][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1194.818128][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1194.823626][ T31] genl_rcv_msg+0x61c/0x7a0 [ 1194.828565][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1194.834470][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 1194.840757][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1194.846464][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1194.851411][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1194.857826][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1194.864097][ T31] ? down_read+0x272/0x2e0 [ 1194.868684][ T31] ? genl_rcv+0xd/0x40 [ 1194.873450][ T31] genl_rcv+0x28/0x40 [ 1194.877684][ T31] netlink_unicast+0x80f/0x9b0 [ 1194.882628][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1194.888936][ T31] ? netlink_sendmsg+0x650/0xb40 [ 1194.894046][ T31] ? skb_put+0x11b/0x210 [ 1194.900528][ T31] netlink_sendmsg+0x813/0xb40 [ 1194.910475][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1194.916888][ T31] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1194.923543][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1194.929651][ T31] sock_sendmsg_nosec+0x18f/0x1d0 [ 1194.934878][ T31] ____sys_sendmsg+0x589/0x8c0 [ 1194.940648][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1194.946506][ T31] ? import_iovec+0x73/0xa0 [ 1194.953030][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1194.957971][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1194.964856][ T31] ? futex_wake+0x4ac/0x580 [ 1194.970995][ T31] ? __fget_files+0x2a/0x420 [ 1194.975753][ T31] ? __fget_files+0x3a0/0x420 [ 1194.981224][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1194.986356][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1194.992630][ T31] ? rcu_is_watching+0x15/0xb0 [ 1194.997663][ T31] do_syscall_64+0x14d/0xf80 [ 1195.005060][ T31] ? trace_irq_disable+0x3b/0x150 [ 1195.010406][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1195.018620][ T31] ? clear_bhb_loop+0x40/0x90 [ 1195.028254][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1195.037265][ T31] RIP: 0033:0x7f6e5199c629 [ 1195.041983][ T31] RSP: 002b:00007f6e5280c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1195.051244][ T31] RAX: ffffffffffffffda RBX: 00007f6e51c15fa0 RCX: 00007f6e5199c629 [ 1195.060575][ T31] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1195.069399][ T31] RBP: 00007f6e51a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1195.079161][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1195.087739][ T31] R13: 00007f6e51c16038 R14: 00007f6e51c15fa0 R15: 00007ffea2125958 [ 1195.095915][ T31] [ 1195.099862][ T31] [ 1195.099862][ T31] Showing all locks held in the system: [ 1195.107749][ T31] 5 locks held by kworker/1:0/24: [ 1195.114736][ T31] #0: ffff8880226ded48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x855/0x1650 [ 1195.132859][ T31] #1: ffffc900001e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x87c/0x1650 [ 1195.149492][ T31] #2: ffff88802b4bf198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 1195.159178][ T31] #3: ffff88806b733198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1195.169764][ T31] #4: ffff888022b85160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1195.199317][ T31] 1 lock held by khungtaskd/31: [ 1195.208604][ T24] waterforce 0003:1044:7A4D.0009: hidraw0: USB HID v0.00 Device [HID 1044:7a4d] on usb-dummy_hcd.5-1/input0 [ 1195.225867][ T31] #0: ffffffff8e960320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1195.242198][ T31] 2 locks held by getty/5578: [ 1195.248439][ T31] #0: ffff8880378c70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1195.261002][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1195.272342][ T31] 2 locks held by kworker/0:2/12439: [ 1195.277806][ T31] #0: ffff88813ff23548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x855/0x1650 [ 1195.288389][ T31] #1: ffffc90003167c40 (key_gc_work){+.+.}-{0:0}, at: process_one_work+0x87c/0x1650 [ 1195.302859][ T31] 3 locks held by kworker/u9:0/31623: [ 1195.308307][ T31] #0: ffff888022f2c148 ((wq_completion)hci6){+.+.}-{0:0}, at: process_one_work+0x855/0x1650 [ 1195.319751][ T24] waterforce 0003:1044:7A4D.0009: fw version request failed with -38 [ 1195.327947][ T31] #1: ffffc90019ef7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x87c/0x1650 [ 1195.351015][ T31] #2: ffff888025c34ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 1195.364243][ T31] 2 locks held by syz.3.15089/8216: [ 1195.370738][ T31] #0: ffffffff8fe5f770 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1195.382241][ T31] #1: ffffffff8ec87de8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 1195.394184][ T31] 2 locks held by syz.4.15772/10248: [ 1195.407485][ T31] #0: ffffffff8fe5f770 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1195.415938][ T31] #1: ffffffff8ec87de8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xc40 [ 1195.432368][ T5934] usb 6-1: USB disconnect, device number 24 [ 1195.444496][T20404] fido_id[20404]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1195.465051][ T31] 2 locks held by syz.1.18800/17789: [ 1195.485992][ T31] #0: ffffffff8fe5f770 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1195.504382][ T31] #1: ffffffff8ec87de8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 1195.517103][ T31] 1 lock held by syz.6.19410/20313: [ 1195.522522][ T31] 2 locks held by fido_id/20404: [ 1195.528060][ T31] [ 1195.531888][ T31] ============================================= [ 1195.531888][ T31] [ 1195.541162][ T31] NMI backtrace for cpu 1 [ 1195.541184][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1195.541219][ T31] Tainted: [L]=SOFTLOCKUP [ 1195.541227][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1195.541240][ T31] Call Trace: [ 1195.541248][ T31] [ 1195.541258][ T31] dump_stack_lvl+0xe8/0x150 [ 1195.541294][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1195.541324][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1195.541356][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1195.541389][ T31] sys_info+0x135/0x170 [ 1195.541413][ T31] watchdog+0xfd9/0x1030 [ 1195.541452][ T31] ? watchdog+0x21a/0x1030 [ 1195.541493][ T31] kthread+0x388/0x470 [ 1195.541514][ T31] ? __pfx_watchdog+0x10/0x10 [ 1195.541544][ T31] ? __pfx_kthread+0x10/0x10 [ 1195.541572][ T31] ret_from_fork+0x51e/0xb90 [ 1195.541604][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1195.541630][ T31] ? __switch_to+0xc7d/0x1450 [ 1195.541659][ T31] ? __pfx_kthread+0x10/0x10 [ 1195.541681][ T31] ret_from_fork_asm+0x1a/0x30 [ 1195.541730][ T31] [ 1195.541738][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1195.660431][ C0] NMI backtrace for cpu 0 [ 1195.660452][ C0] CPU: 0 UID: 0 PID: 18754 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 1195.660478][ C0] Tainted: [L]=SOFTLOCKUP [ 1195.660485][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1195.660498][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1195.660527][ C0] RIP: 0010:__lock_acquire+0x524/0x2cf0 [ 1195.660554][ C0] Code: 00 48 83 c3 28 41 89 c4 49 39 cf 0f 8d c7 00 00 00 49 83 ff 31 0f 83 83 00 00 00 8b 03 25 ff 1f 00 00 48 0f a3 05 bc c2 a7 12 <73> 10 48 69 c0 c8 00 00 00 48 8d 88 90 a2 ea 93 eb 32 83 3d 83 52 [ 1195.660571][ C0] RSP: 0018:ffffc90019e0f3b8 EFLAGS: 00000003 [ 1195.660587][ C0] RAX: 00000000000000d3 RBX: ffff88802e1e4878 RCX: 00000000ffffffff [ 1195.660600][ C0] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 1195.660611][ C0] RBP: ffff88802e1e48f8 R08: ffffffff8176ca45 R09: ffffffff8e960320 [ 1195.660626][ C0] R10: ffffc90019e0f698 R11: ffffffff81b11090 R12: ffffffffffffff05 [ 1195.660640][ C0] R13: ffff88802e1e48f8 R14: ffff88802e1e3d00 R15: 0000000000000000 [ 1195.660654][ C0] FS: 0000000000000000(0000) GS:ffff888125003000(0000) knlGS:0000000000000000 [ 1195.660669][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1195.660682][ C0] CR2: 000055ad7a6a1820 CR3: 00000000736b4000 CR4: 00000000003526f0 [ 1195.660699][ C0] Call Trace: [ 1195.660707][ C0] [ 1195.660718][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1195.660749][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1195.660778][ C0] lock_acquire+0xf0/0x2e0 [ 1195.660800][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1195.660828][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1195.660853][ C0] ? process_one_work+0x949/0x1650 [ 1195.660876][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1195.660901][ C0] unwind_next_frame+0xc2/0x23c0 [ 1195.660927][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1195.660955][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1195.660981][ C0] ? nsim_dev_trap_report_work+0x7cf/0xb80 [ 1195.661002][ C0] ? process_one_work+0x949/0x1650 [ 1195.661024][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1195.661044][ C0] arch_stack_walk+0x11b/0x150 [ 1195.661072][ C0] ? process_one_work+0x949/0x1650 [ 1195.661096][ C0] stack_trace_save+0xa9/0x100 [ 1195.661114][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1195.661131][ C0] ? __kfree_skb+0x5d/0x210 [ 1195.661157][ C0] ? kthread+0x388/0x470 [ 1195.661172][ C0] ? ret_from_fork+0x51e/0xb90 [ 1195.661193][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1195.661227][ C0] kasan_save_track+0x3e/0x80 [ 1195.661245][ C0] ? kasan_save_track+0x3e/0x80 [ 1195.661261][ C0] ? kasan_save_free_info+0x46/0x50 [ 1195.661284][ C0] ? __kasan_slab_free+0x5c/0x80 [ 1195.661307][ C0] ? kmem_cache_free+0x187/0x630 [ 1195.661326][ C0] ? nsim_dev_trap_report_work+0x7cf/0xb80 [ 1195.661346][ C0] ? process_one_work+0x949/0x1650 [ 1195.661387][ C0] ? skb_release_data+0x6f0/0x940 [ 1195.661414][ C0] kasan_save_free_info+0x46/0x50 [ 1195.661438][ C0] __kasan_slab_free+0x5c/0x80 [ 1195.661457][ C0] kmem_cache_free+0x187/0x630 [ 1195.661475][ C0] ? nsim_dev_trap_report_work+0x7cf/0xb80 [ 1195.661497][ C0] nsim_dev_trap_report_work+0x7cf/0xb80 [ 1195.661527][ C0] ? process_one_work+0x87c/0x1650 [ 1195.661549][ C0] process_one_work+0x949/0x1650 [ 1195.661581][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1195.661602][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1195.661626][ C0] worker_thread+0xb46/0x1140 [ 1195.661653][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1195.661686][ C0] kthread+0x388/0x470 [ 1195.661702][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1195.661724][ C0] ? __pfx_kthread+0x10/0x10 [ 1195.661740][ C0] ret_from_fork+0x51e/0xb90 [ 1195.661764][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1195.661786][ C0] ? __switch_to+0xc7d/0x1450 [ 1195.661807][ C0] ? __pfx_kthread+0x10/0x10 [ 1195.661823][ C0] ret_from_fork_asm+0x1a/0x30 [ 1195.661857][ C0] [ 1196.052910][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1196.059817][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1196.070658][ T31] Tainted: [L]=SOFTLOCKUP [ 1196.075008][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1196.085090][ T31] Call Trace: [ 1196.088467][ T31] [ 1196.091607][ T31] vpanic+0x56c/0xa60 [ 1196.095634][ T31] ? __pfx___schedule+0x10/0x10 [ 1196.100523][ T31] ? __pfx_vpanic+0x10/0x10 [ 1196.105149][ T31] ? __pfx_console_unlock+0x10/0x10 [ 1196.110444][ T31] panic+0xc5/0xd0 [ 1196.114218][ T31] ? __pfx_panic+0x10/0x10 [ 1196.118757][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1196.124164][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1196.130421][ T31] watchdog+0x1023/0x1030 [ 1196.134793][ T31] ? watchdog+0x21a/0x1030 [ 1196.139257][ T31] kthread+0x388/0x470 [ 1196.143458][ T31] ? __pfx_watchdog+0x10/0x10 [ 1196.148345][ T31] ? __pfx_kthread+0x10/0x10 [ 1196.152966][ T31] ret_from_fork+0x51e/0xb90 [ 1196.157679][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1196.162816][ T31] ? __switch_to+0xc7d/0x1450 [ 1196.167522][ T31] ? __pfx_kthread+0x10/0x10 [ 1196.172137][ T31] ret_from_fork_asm+0x1a/0x30 [ 1196.176949][ T31] [ 1196.180595][ T31] Kernel Offset: disabled [ 1196.184940][ T31] Rebooting in 86400 seconds..