last executing test programs: 2.266934898s ago: executing program 2 (id=7715): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x1c, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@typed={0x8, 0x9, 0x0, 0x0, @binary="77990ed6"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0x0) 2.048850852s ago: executing program 2 (id=7718): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) accept(r0, 0x0, 0x0) 1.808205256s ago: executing program 2 (id=7726): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000002400)={0xc, {"a2e3ad21ed0d52f91b5d300887f70e06d038e7ff7fc6e5539b3272298b089b07081b37090890e0878f0e1ac6e7049b366d959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b39070d075d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b78583709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc825d8e524b2451138e495bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546850a27af9544ae15a7e454dea05918b4fd42513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c9000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cfe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdc80c47ee4f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2691491abf8ab9c015073014d9e08d4338b8780bdecd436cf0541e4505bc3a45237f104b962102de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78ff95b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd735892892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca810461b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b47dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af0000807e0000000002d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880ad6988170ba1712e2998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd9432d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae408925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5407000000e3ad038f2211f1033195563c7f93cd54b9094f226e78b271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b4051db55e0510a6e4114a53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937caea5410e0513005008000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c730600000000000000bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b839b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a6d8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaafb6d546def271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a974064bcd2b29f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652770711935f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f42f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599af400046edb44a78f615255490a4b621501f2a9e4d24624c4dace874118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fd30d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb84d9a88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678458fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000bd7000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200", 0x1000}}, 0x1006) 1.448097101s ago: executing program 2 (id=7733): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 1.236893858s ago: executing program 2 (id=7739): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELCHAIN={0x90, 0x5, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_CHAIN_USERDATA={0x42, 0xc, "b409a276f3c5c6dae3534bc5433e8492fd7d23f0a38737b9f6d5b3ce06108eb8a6bd6273a211015ff23aa7af32b122769a1574b3ab0f1d51729986dfd4e5"}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0xf0, 0xb, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_USERDATA={0x59, 0xd, 0x1, 0x0, "dd3227868b750aa2ed7173fb21579c15ffd2c13f4e992e01a52efcaae37e41711fd2772b8daf0821464084698dfefa3e30a42d51592d9d0abe474005ac301f4de7bffca90fd937f8149db78618468ad2754781752e"}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @reject={{0xb}, @void}}, @NFTA_SET_EXPRESSIONS={0x40, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}]}}}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xbd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x60}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x158, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_USERDATA={0xbf, 0x7, 0x1, 0x0, "e654c7fcd8d0f0c1dfe3706cf051679f7b6843815849694a563ef511f349055d5dfc80de99d05c83af846f1ca2c616db7be0e80e49695e89af829daf1a2e47e1bf86d7a80fa236733eb7ccaf8436ecbd34bcbb1ada454a6da108215d769c21fa21122bef83c97f2bdedad701d6d8eb76ba488ea5b60db76e3060d6b746d794719b2bb43913e7dea1dda75208fc3dce9d7817fcacbd2bf6555299925aa1e0418a1c2e4c46fe8f8162929b7d0190ca3c23aaf8a826028a84590fc5c1"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x25, 0x7, 0x1, 0x0, "5a0f411c11027a8e60b73ee0e41120c1e15be55ea8c8a1b513012f96448cf76b4f"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x31, 0x7, 0x1, 0x0, "ba50a1a7955b9f640f59f5e645dbcc71092c5c4717e5f6719ff1b6a4619659c52a9ee89003ea618f9ad4e7c65c"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x1f8, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_FLOWTABLE_HOOK={0x1cc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'bond0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xc25}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x518}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 1.075031977s ago: executing program 2 (id=7741): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 917.77251ms ago: executing program 0 (id=7745): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x100000) 916.976665ms ago: executing program 1 (id=7746): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x20000) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000240)={0x25, &(0x7f0000000880)=[{0x37, '\x00', @st={0x4, [{0x1, @uvalue=0xa3d}, {0x2, @svalue=0x8e}, {0x1, @svalue}, {0x2, @uvalue=0x8000}]}, 0x131}]}) 786.540372ms ago: executing program 0 (id=7748): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000046c0)={0x0, 0x0, &(0x7f0000004680)={&(0x7f0000004640)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x24}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000044}, 0x8800) 786.419499ms ago: executing program 1 (id=7749): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="b8000000290001000000000000080000ac1414bb000000000000000000000000fc00000000000000000000000000000000000000100000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000ea440000000000000000000000000000000000000000000000000100000000000000090000000000000000000000000000000000000000000000010000000000000002"], 0xb8}, 0x1, 0x0, 0x0, 0x2404c831}, 0x0) 653.148457ms ago: executing program 1 (id=7751): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r0, 0x4b41, 0x0) 595.330928ms ago: executing program 3 (id=7753): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000384c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c000280080001800000000014000000020a01"], 0xf4}}, 0x0) 594.585374ms ago: executing program 0 (id=7754): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x1) faccessat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2) 495.943121ms ago: executing program 3 (id=7755): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x4000, 0x0, 0x0, 0xd4}, 0x9c) 426.306148ms ago: executing program 1 (id=7756): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, 0x0, 0x0) 381.488648ms ago: executing program 0 (id=7757): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000001ec0)="66d69c4d8da22a05fd81768efa50b5a4", 0x20) 272.874847ms ago: executing program 3 (id=7758): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000c00)={0x0, 0x2, 0x82, 0x40000000000000, 0x0, 0xf0}) 271.847538ms ago: executing program 1 (id=7766): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000200)={0x2, @none={0x0, 0xffff}}, 0x14) 240.742411ms ago: executing program 0 (id=7759): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xc2100) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000180)={{0x0, 0x1}, {0xe}, 0xbf, 0xbf04}) 162.743941ms ago: executing program 3 (id=7760): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000031c0)={0x34, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x12, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb894f"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x34}}, 0x0) 49.457606ms ago: executing program 3 (id=7761): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xb2fd}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0xc0}}, 0x4000000) 15.818719ms ago: executing program 3 (id=7762): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002fc0)={0x2020}, 0x2020) 8.883256ms ago: executing program 1 (id=7763): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x26, 0x29, 0x70bd2d, 0x0, {0x11}, [@typed={0xe, 0x15e, 0x0, 0x0, @binary="759b2506bf0b006c2600"}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c811}, 0x40040) 0s ago: executing program 0 (id=7764): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000340)={0x94d0, 0x1, [{0x1, 0x1}]}) kernel console output (not intermixed with test programs): B device number 16 using dummy_hcd [ 587.562892][ T9] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 587.573452][ T9] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 587.573490][ T9] usb 2-1: config 1 has no interface number 0 [ 587.573530][ T9] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 587.573557][ T9] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 587.573585][ T9] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 587.627303][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.636732][ T9] usb 2-1: Product: syz [ 587.636780][ T9] usb 2-1: Manufacturer: syz [ 587.636800][ T9] usb 2-1: SerialNumber: syz [ 587.666775][T17713] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 587.829291][T17742] Process accounting resumed [ 587.903356][ T9] usb 2-1: Error in usbnet_get_endpoints (-71) [ 587.927124][ T9] usb 2-1: USB disconnect, device number 16 [ 587.979926][ T5354] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 588.143893][ T5354] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 588.145101][ T5354] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 588.145129][ T5354] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 588.145151][ T5354] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 588.145172][ T5354] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 588.145208][ T5354] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.150090][ T5354] usb 1-1: config 0 descriptor?? [ 588.386418][ T5354] hdpvr 1-1:0.0: firmware version 0x12 dated 継򂧥訠綍D奮jvi0 [ 588.386418][ T5354] 喢洃阷Y [ 588.619711][ T5354] hdpvr 1-1:0.0: device init failed [ 588.619989][ T5354] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 588.634694][ T5354] usb 1-1: USB disconnect, device number 5 [ 588.690827][T17776] autofs4:pid:17776:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 588.845957][T17778] ieee802154 phy0 wpan0: encryption failed: -22 [ 588.878804][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 588.926053][T17781] overlayfs: workdir and upperdir must be separate subtrees [ 589.053449][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 589.061457][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 589.075083][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.088147][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.088189][ T9] usb 4-1: Product: syz [ 589.088218][ T9] usb 4-1: Manufacturer: syz [ 589.088237][ T9] usb 4-1: SerialNumber: syz [ 589.152895][ T9] usb 4-1: config 0 descriptor?? [ 589.392601][ T9] usb 4-1: USB disconnect, device number 13 [ 589.559582][T17799] netlink: 264 bytes leftover after parsing attributes in process `syz.1.5732'. [ 590.016907][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 590.179730][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 590.185486][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 590.211414][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 590.211474][ T9] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x65, changing to 0x5 [ 590.211524][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 25966, setting to 1024 [ 590.211554][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 590.211589][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 590.271158][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.279298][ T9] usb 1-1: Product: syz [ 590.283576][ T9] usb 1-1: Manufacturer: syz [ 590.288758][ T9] usb 1-1: SerialNumber: syz [ 590.297372][T17809] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 590.305772][T17809] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 590.317170][ T9] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 590.326734][ T9] usbtest 1-1:1.0: Linux user mode ISO test driver [ 590.333460][ T9] usbtest 1-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 590.538175][ T9] usb 1-1: USB disconnect, device number 6 [ 591.304653][T17868] openvswitch: netlink: Actions may not be safe on all matching packets [ 591.355127][T17871] netlink: 'syz.1.5767': attribute type 2 has an invalid length. [ 591.355327][T17871] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5767'. [ 591.396278][T17873] netlink: 'syz.2.5768': attribute type 2 has an invalid length. [ 591.548940][T17879] qrtr: Invalid version 0 [ 591.683217][T17887] netlink: 'syz.3.5774': attribute type 2 has an invalid length. [ 591.892563][T17897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5779'. [ 591.987580][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 592.162241][ T9] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 592.176497][ T9] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 592.185360][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 592.200759][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.200803][ T9] usb 1-1: Product: syz [ 592.200827][ T9] usb 1-1: Manufacturer: syz [ 592.200846][ T9] usb 1-1: SerialNumber: syz [ 592.235999][ T9] usb 1-1: config 0 descriptor?? [ 592.246631][ T9] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 592.347712][T17915] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 592.399290][ T5868] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 592.567952][ T5868] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 592.578389][ T5868] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 592.578474][ T5868] usb 4-1: config 0 interface 0 has no altsetting 0 [ 592.598606][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.606768][ T5868] usb 4-1: Product: syz [ 592.606827][ T5868] usb 4-1: Manufacturer: syz [ 592.606878][ T5868] usb 4-1: SerialNumber: syz [ 592.631657][ T5868] usb 4-1: config 0 descriptor?? [ 592.645693][ T5868] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 592.665685][ T5868] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 592.676795][ T5868] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 592.685640][ T5868] usb 4-1: media controller created [ 592.710921][ T5868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 592.719661][ T9] gspca_sunplus: reg_r err -71 [ 592.719818][ T9] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 592.753429][ T9] usb 1-1: USB disconnect, device number 7 [ 592.801966][ T5868] DVB: Unable to find symbol tda10046_attach() [ 592.809867][ T5868] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 592.809915][ T5868] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 592.861328][T17929] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5795'. [ 593.091095][ T5868] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 593.112204][ T5868] usb 4-1: USB disconnect, device number 14 [ 593.563269][T17959] netlink: 'syz.0.5810': attribute type 4 has an invalid length. [ 593.709584][T17965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5814'. [ 593.860363][T17971] program syz.3.5815 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 594.231864][T17990] netlink: Conntrack attr has 8 unknown bytes [ 594.231919][T17990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 594.534361][T18008] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 594.566194][T18009] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5834'. [ 594.672104][T18014] netlink: 'syz.0.5837': attribute type 15 has an invalid length. [ 595.380100][T18045] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5852'. [ 595.557606][T18053] netlink: 'syz.0.5856': attribute type 2 has an invalid length. [ 595.605400][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 595.779447][ T9] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 595.796159][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.796205][ T9] usb 4-1: Product: syz [ 595.796245][ T9] usb 4-1: Manufacturer: syz [ 595.796270][ T9] usb 4-1: SerialNumber: syz [ 595.845011][ T9] usb 4-1: USB2VGA dongle found at address 15 [ 595.856555][ T9] usb 4-1: Allocated 8 output buffers [ 595.881115][T18065] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5862'. [ 595.969826][T18068] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 596.094485][ T9] usb 4-1: Failed to early initialize device [ 596.123793][ T9] usb 4-1: USB disconnect, device number 15 [ 596.579377][T18088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5873'. [ 597.805122][T18142] comedi comedi3: unsupported base address 0x10001 [ 598.298908][T18163] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5908'. [ 598.394891][T18168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 599.050609][ T5868] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 599.226932][ T5868] usb 4-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 599.250355][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.258703][ T5868] usb 4-1: Product: syz [ 599.258751][ T5868] usb 4-1: Manufacturer: syz [ 599.258772][ T5868] usb 4-1: SerialNumber: syz [ 599.284313][ T5868] usb 4-1: config 0 descriptor?? [ 599.300255][ T5868] go7007 4-1:0.0: Sensoray 2250 found [ 599.306237][ T5868] go7007 4-1:0.0: probe with driver go7007 failed with error -12 [ 599.519991][ T5710] usb 4-1: USB disconnect, device number 16 [ 599.548205][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 599.591787][ T5868] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 599.732342][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 599.738313][ T9] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 599.751588][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.765772][ T5868] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 599.782517][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.782564][ T9] usb 1-1: Product: syz [ 599.782599][ T9] usb 1-1: Manufacturer: syz [ 599.782618][ T9] usb 1-1: SerialNumber: syz [ 599.807391][ T9] usb 1-1: config 0 descriptor?? [ 599.812973][ T5868] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 599.813015][ T5868] usb 2-1: config 0 has no interface number 0 [ 599.813071][ T5868] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 599.813098][ T5868] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 599.853064][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.853108][ T5868] usb 2-1: Product: syz [ 599.853142][ T5868] usb 2-1: Manufacturer: syz [ 599.853161][ T5868] usb 2-1: SerialNumber: syz [ 599.876310][ T9] quatech2 1-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 599.888477][ T5868] usb 2-1: config 0 descriptor?? [ 599.894993][T18213] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 599.912841][ T5868] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 599.934541][ T5868] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 600.063408][T18233] netlink: 'syz.2.5945': attribute type 12 has an invalid length. [ 600.086297][ T9] usb 1-1: qt2_setup_urbs - submit read urb failed -8 [ 600.093606][ T9] quatech2 1-1:0.0: probe with driver quatech2 failed with error -8 [ 600.242115][T18238] netlink: 'syz.3.5948': attribute type 10 has an invalid length. [ 600.248274][T18239] openvswitch: netlink: Port -2146435068 exceeds max allowable 65535 [ 600.277130][T18238] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 600.288410][T18238] team0: Port device netdevsim1 added [ 600.329374][ T5725] usb 1-1: USB disconnect, device number 8 [ 600.366780][ T5710] usb 2-1: USB disconnect, device number 17 [ 600.420988][ T5710] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 600.422118][ T5710] cyberjack 2-1:0.69: device disconnected [ 600.779124][T18253] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5955'. [ 600.791480][T18253] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 601.632881][T18298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5977'. [ 601.725463][ T5811] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 601.768018][T18304] netlink: ct_mark mask cannot be 0 [ 601.773509][T18304] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 601.891354][ T5811] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 601.903797][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.922833][ T5811] usb 1-1: config 0 descriptor?? [ 601.946370][ T5811] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 601.975537][T18315] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5984'. [ 602.046793][T18319] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5985'. [ 602.065385][T18319] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 602.389753][ T5811] gspca_cpia1: usb_control_msg 03, error -71 [ 602.396264][ T5811] gspca_cpia1: usb_control_msg 01, error -71 [ 602.396286][ T5811] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 602.413574][ T5811] usb 1-1: USB disconnect, device number 9 [ 602.732808][ T9] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 602.895237][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 602.900947][ T9] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 602.911933][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 602.926058][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.926103][ T9] usb 3-1: Product: syz [ 602.926138][ T9] usb 3-1: Manufacturer: syz [ 602.926155][ T9] usb 3-1: SerialNumber: syz [ 602.955142][ T9] usb 3-1: config 0 descriptor?? [ 602.971172][ T9] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 602.979223][ T9] usb 3-1: selecting invalid altsetting 1 [ 603.103886][T18372] nfs: Deprecated parameter 'nointr' [ 603.201893][ T9] gspca_stk014: init reg: 0x00 [ 603.202005][ T9] stk014 3-1:0.0: probe with driver stk014 failed with error -5 [ 603.279257][T18382] comedi comedi4: bad chanlist[0]=0x00000008 chan=8 range length=2 [ 603.439525][ T5811] usb 3-1: USB disconnect, device number 105 [ 603.483563][T18396] netlink: 'syz.0.6012': attribute type 21 has an invalid length. [ 603.501888][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 603.664305][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 603.670668][ T9] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 603.687339][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 603.697765][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.697806][ T9] usb 4-1: Product: syz [ 603.697825][ T9] usb 4-1: Manufacturer: syz [ 603.697844][ T9] usb 4-1: SerialNumber: syz [ 603.725481][ T9] usb 4-1: config 0 descriptor?? [ 603.746490][ T9] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 603.881143][ T5770] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 603.973670][ T9] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 603.987157][ T9] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 604.055258][ T5770] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 604.068461][ T5770] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.082326][ T5770] usb 1-1: config 0 descriptor?? [ 604.096289][ T5770] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 604.216895][ T5354] usb 4-1: USB disconnect, device number 17 [ 604.538786][ T5770] gp8psk: usb in 128 operation failed. [ 604.545606][ T5770] gp8psk: usb in 137 operation failed. [ 604.545643][ T5770] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 604.545687][ T5770] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 604.578340][ T5770] usb 1-1: USB disconnect, device number 10 [ 604.880438][T18460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6034'. [ 605.184886][T18475] random: crng reseeded on system resumption [ 605.218487][T18476] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6041'. [ 605.496309][ T5770] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 605.559491][T18500] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6051'. [ 605.575121][T18500] openvswitch: netlink: EtherType 300 is less than min 600 [ 605.658171][ T5770] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 605.671117][ T5770] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.679246][ T5770] usb 1-1: Product: syz [ 605.683516][ T5770] usb 1-1: Manufacturer: syz [ 605.688209][ T5770] usb 1-1: SerialNumber: syz [ 605.732851][ T5811] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 606.517048][ T5770] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 606.688375][ T5770] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 606.712497][ T5770] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.720989][ T5770] usb 3-1: Product: syz [ 606.725700][ T5770] usb 3-1: Manufacturer: syz [ 606.730533][ T5770] usb 3-1: SerialNumber: syz [ 606.774318][T18546] xt_hashlimit: overflow, try lower: 0/0 [ 606.793278][ T9] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 606.849345][ T5811] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 606.856823][ T5811] ath9k_htc: Failed to initialize the device [ 606.909612][ T5811] usb 1-1: ath9k_htc: USB layer deinitialized [ 607.159054][ T923] usb 1-1: USB disconnect, device number 11 [ 607.274669][ T5811] usb 3-1: USB disconnect, device number 106 [ 607.964119][T18588] ceph: Path missing in source [ 607.990152][ T9] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 607.990359][ T9] ath9k_htc: Failed to initialize the device [ 608.009041][ T5811] usb 3-1: ath9k_htc: USB layer deinitialized [ 608.216930][T18600] dvmrp0: entered allmulticast mode [ 608.372115][T18616] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 608.496113][ T5354] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 608.655984][T18629] comedi comedi1: pcmda12: I/O base address not correctly aligned [ 608.697011][ T5354] usb 3-1: unable to get BOS descriptor or descriptor too short [ 608.697250][ T5354] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 608.703412][ T5354] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 608.703453][ T5354] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 608.703481][ T5354] usb 3-1: config 1 interface 0 has no altsetting 1 [ 608.712236][ T5354] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.712265][ T5354] usb 3-1: Product: syz [ 608.712281][ T5354] usb 3-1: Manufacturer: syz [ 608.712296][ T5354] usb 3-1: SerialNumber: syz [ 608.770785][ T5354] smsusb:smsusb_probe: board id=8, interface number 0 [ 608.795303][T18637] sctp: [Deprecated]: syz.1.6103 (pid 18637) Use of struct sctp_assoc_value in delayed_ack socket option. [ 608.795303][T18637] Use struct sctp_sack_info instead [ 608.977524][ T5354] smsusb:smsusb_probe: Device initialized with return code -19 [ 608.988878][T18644] netlink: 'syz.3.6105': attribute type 17 has an invalid length. [ 609.143992][T18658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 609.254810][ T9] usb 3-1: USB disconnect, device number 107 [ 609.363089][ T5770] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 609.546995][ T5770] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 609.561663][ T5770] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 609.574017][ T5770] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.610011][T18683] netlink: 'syz.3.6115': attribute type 10 has an invalid length. [ 610.068473][ T5770] qmi_wwan 1-1:1.0: probe with driver qmi_wwan failed with error -22 [ 610.091529][ T5770] usb 1-1: USB disconnect, device number 12 [ 610.205656][T18712] overlayfs: workdir and upperdir must be separate subtrees [ 610.386655][T18723] netlink: 'syz.1.6128': attribute type 21 has an invalid length. [ 610.386856][T18723] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6128'. [ 610.386935][T18723] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6128'. [ 610.520930][ T9] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 610.688943][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 610.706268][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 610.706311][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 610.706351][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 610.706377][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 610.706420][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.760590][ T9] usb 3-1: config 0 descriptor?? [ 611.003224][ T9] hdpvr 3-1:0.0: firmware version 0x12 dated 継򂧥訠綍D奮jvi0 [ 611.003224][ T9] 喢洃阷Y [ 611.228150][ T9] hdpvr 3-1:0.0: device init failed [ 611.233628][ T9] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 611.256271][ T9] usb 3-1: USB disconnect, device number 108 [ 611.713035][T18788] netlink: 'syz.0.6157': attribute type 62 has an invalid length. [ 611.796431][T18794] netlink: 'syz.3.6160': attribute type 2 has an invalid length. [ 611.804851][T18794] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6160'. [ 611.971906][T18800] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6163'. [ 611.988466][T18798] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 612.122064][T18808] netlink: 'syz.0.6164': attribute type 2 has an invalid length. [ 612.353139][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 612.535804][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 612.541921][ T9] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 612.554824][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.554867][ T9] usb 4-1: Product: syz [ 612.554918][ T9] usb 4-1: Manufacturer: syz [ 612.554937][ T9] usb 4-1: SerialNumber: syz [ 612.582395][ T9] usb 4-1: config 0 descriptor?? [ 612.598829][ T9] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 612.677364][ T5710] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 612.852863][ T5710] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 612.854019][ T5710] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 612.854045][ T5710] usb 1-1: config 1 has no interface number 0 [ 612.854082][ T5710] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 612.854107][ T5710] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 612.854132][ T5710] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 612.859075][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.859103][ T5710] usb 1-1: Product: syz [ 612.859117][ T5710] usb 1-1: Manufacturer: syz [ 612.859131][ T5710] usb 1-1: SerialNumber: syz [ 612.880180][T18818] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 613.036126][ T9] usb 4-1: clie_3_5_startup: get interface number failed: -71 [ 613.036300][ T9] visor 4-1:0.0: probe with driver visor failed with error -71 [ 613.069354][ T9] usb 4-1: USB disconnect, device number 18 [ 613.132785][T18846] netlink: 'syz.2.6179': attribute type 1 has an invalid length. [ 613.141638][T18846] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6179'. [ 613.156126][ T5710] usb 1-1: Error in usbnet_get_endpoints (-71) [ 613.305622][ T5710] usb 1-1: USB disconnect, device number 13 [ 613.722186][T18880] program syz.1.6198 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 614.086969][T18898] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 614.169213][T18900] MTDSB: Device #1 doesn't appear to exist [ 614.169213][T18900] [ 614.827533][T18933] kAFS: unable to lookup cell 'syze藄0' [ 614.844582][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 615.017946][ T9] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 615.033102][ T9] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 615.033159][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 615.057604][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.057648][ T9] usb 2-1: Product: syz [ 615.057678][ T9] usb 2-1: Manufacturer: syz [ 615.057697][ T9] usb 2-1: SerialNumber: syz [ 615.086045][ T9] usb 2-1: config 0 descriptor?? [ 615.105142][ T9] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 615.251565][T18952] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6222'. [ 615.506970][T18961] netlink: 'syz.2.6227': attribute type 2 has an invalid length. [ 615.540586][ T9] gspca_sunplus: reg_r err -71 [ 615.540698][ T9] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 615.560636][ T9] usb 2-1: USB disconnect, device number 18 [ 616.463102][T19011] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 616.595180][T19018] binder: 19016:19018 ioctl c0306201 200000004a40 returned -22 [ 616.682236][T19025] netlink: 'syz.0.6255': attribute type 7 has an invalid length. [ 616.973630][T19039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 617.211519][T19055] cifs: Unknown parameter '泖糜'4,峑z-#F<骢]%gC炇 [ 617.211519][T19055] S萌権葹Z6熉' [ 617.300748][T19057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 617.391341][ T5811] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 617.572473][ T5811] usb 3-1: Using ep0 maxpacket: 32 [ 617.581191][ T5811] usb 3-1: unable to get BOS descriptor or descriptor too short [ 617.581270][ T5811] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=27.24 [ 617.601866][ T5811] usb 3-1: config 165 has an invalid interface number: 162 but max is 0 [ 617.602119][T19073] netlink: 'syz.1.6277': attribute type 15 has an invalid length. [ 617.620536][ T5811] usb 3-1: config 165 has no interface number 0 [ 617.621501][ T5811] usb 3-1: config 165 interface 162 has no altsetting 0 [ 617.639919][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.639965][ T5811] usb 3-1: Product: syz [ 617.639995][ T5811] usb 3-1: Manufacturer: syz [ 617.640015][ T5811] usb 3-1: SerialNumber: syz [ 617.917646][ T5811] usb 3-1: USB disconnect, device number 109 [ 618.005760][ T5770] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 618.136276][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 618.180016][ T5770] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 618.193395][ T5770] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.205945][ T5770] usb 1-1: Product: syz [ 618.205969][ T5770] usb 1-1: Manufacturer: syz [ 618.205984][ T5770] usb 1-1: SerialNumber: syz [ 618.236038][ T5770] usb 1-1: USB2VGA dongle found at address 14 [ 618.246115][ T5770] usb 1-1: Allocated 8 output buffers [ 618.309060][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 618.316184][ T9] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 618.330761][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.339139][ T9] usb 2-1: Product: syz [ 618.339161][ T9] usb 2-1: Manufacturer: syz [ 618.339177][ T9] usb 2-1: SerialNumber: syz [ 618.362625][ T9] usb 2-1: config 0 descriptor?? [ 618.375366][ T9] gspca_main: spca508-2.14.0 probing 041e:4018 [ 618.473362][ T5770] usb 1-1: Failed to early initialize device [ 618.499333][ T5770] usb 1-1: USB disconnect, device number 14 [ 618.789641][T19128] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6288'. [ 618.820465][ T9] gspca_spca508: reg_read err -71 [ 618.827839][ T9] gspca_spca508: reg_read err -71 [ 618.836249][ T9] gspca_spca508: reg_read err -71 [ 618.842712][ T9] gspca_spca508: reg_read err -71 [ 618.848161][ T9] gspca_spca508: reg write: error -71 [ 618.848257][ T9] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 618.881220][ T9] usb 2-1: USB disconnect, device number 19 [ 619.110790][ T49] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 619.284646][ T49] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 619.285902][ T49] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.285937][ T49] usb 3-1: config 0 interface 0 has no altsetting 0 [ 619.287928][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.287952][ T49] usb 3-1: Product: syz [ 619.287967][ T49] usb 3-1: Manufacturer: syz [ 619.287982][ T49] usb 3-1: SerialNumber: syz [ 619.317060][ T49] usb 3-1: config 0 descriptor?? [ 619.335535][ T49] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 619.392424][ T49] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 619.398343][ T49] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 619.398401][ T49] usb 3-1: media controller created [ 619.430684][ T49] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 619.645674][ T49] DVB: Unable to find symbol tda10046_attach() [ 619.645874][ T49] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 619.645890][ T49] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 619.721901][T19175] netlink: 'syz.1.6303': attribute type 1 has an invalid length. [ 619.781443][T19179] sctp: [Deprecated]: syz.3.6302 (pid 19179) Use of struct sctp_assoc_value in delayed_ack socket option. [ 619.781443][T19179] Use struct sctp_sack_info instead [ 619.898615][ T49] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 619.912128][ T49] usb 3-1: USB disconnect, device number 110 [ 619.955877][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 620.117995][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 620.125838][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 620.136382][ T9] usb 1-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 620.149948][ T9] usb 1-1: config 1 has an invalid interface number: 151 but max is 0 [ 620.158312][ T9] usb 1-1: config 1 has no interface number 0 [ 620.164608][ T9] usb 1-1: config 1 interface 151 has no altsetting 0 [ 620.176772][ T9] usb 1-1: string descriptor 0 read error: -22 [ 620.183445][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.217878][ T9] gspca_main: pac7311-2.14.0 probing 093a:260e [ 620.652650][ T9] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 620.652759][ T9] pac7311 1-1:1.151: probe with driver pac7311 failed with error -71 [ 620.675530][ T9] usb 1-1: USB disconnect, device number 15 [ 620.952062][ T5770] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 621.095109][T19221] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 621.114518][ T5770] usb 4-1: Using ep0 maxpacket: 32 [ 621.120739][ T5770] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 621.136520][ T5770] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.136564][ T5770] usb 4-1: Product: syz [ 621.136584][ T5770] usb 4-1: Manufacturer: syz [ 621.136603][ T5770] usb 4-1: SerialNumber: syz [ 621.163826][ T5770] usb 4-1: config 0 descriptor?? [ 621.422026][T19235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 621.623690][ T5770] airspy 4-1:0.0: usb_control_msg() failed -71 request 0a [ 621.623735][ T5770] airspy 4-1:0.0: Could not detect board [ 621.623840][ T5770] airspy 4-1:0.0: probe with driver airspy failed with error -71 [ 621.653552][ T5770] usb 4-1: USB disconnect, device number 19 [ 622.116008][ T31] audit: type=1400 audit(1787765380.111:424): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=19283 comm="syz.0.6336" [ 622.296073][ T5770] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 622.316868][ T9] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 622.365496][T19292] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6340'. [ 622.382440][T19292] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 622.459571][ T5770] usb 2-1: Using ep0 maxpacket: 8 [ 622.468939][ T5770] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 622.479446][ T5770] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 622.479505][ T5770] usb 2-1: config 179 has no interface number 0 [ 622.479630][ T5770] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 622.479662][ T5770] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 622.479694][ T5770] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 622.479747][ T5770] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 622.479778][ T5770] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 622.479832][ T5770] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.495940][ T9] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 622.519497][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 622.519548][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.603111][T19274] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 622.876540][ T9] qmi_wwan 3-1:1.0: cdc-wdm0: USB WDM device [ 622.963677][ T9] wwan wwan0: port wwan0qmi0 attached [ 623.071053][ T49] usb 2-1: USB disconnect, device number 20 [ 623.071103][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 623.071153][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 623.146370][ T9] qmi_wwan 3-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.2-1, WWAN/QMI device, 06:ed:ea:1d:39:59 [ 623.163571][ T9] usb 3-1: USB disconnect, device number 111 [ 623.184100][ T9] qmi_wwan 3-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.2-1, WWAN/QMI device [ 623.264064][ T9] wwan wwan0: port wwan0qmi0 disconnected [ 623.736669][T19366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6360'. [ 623.806794][T19369] bond0: entered promiscuous mode [ 623.816619][T19369] bond_slave_0: entered promiscuous mode [ 623.824415][T19369] bond_slave_1: entered promiscuous mode [ 623.824602][T19369] bond0: entered allmulticast mode [ 623.824621][T19369] bond_slave_0: entered allmulticast mode [ 623.824640][T19369] bond_slave_1: entered allmulticast mode [ 623.920689][T19374] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 623.990451][T19378] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6367'. [ 624.005685][T19378] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 624.173512][T19386] netlink: 6060 bytes leftover after parsing attributes in process `syz.0.6368'. [ 624.266666][T19390] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6372'. [ 624.472664][T19400] netlink: 'syz.0.6376': attribute type 3 has an invalid length. [ 625.005921][T19429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6390'. [ 625.111625][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 625.277776][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 625.285382][ T9] usb 2-1: New USB device found, idVendor=0499, idProduct=5000, bcdDevice=57.9f [ 625.298204][ T9] usb 2-1: config 105 has an invalid interface number: 223 but max is 0 [ 625.306685][ T9] usb 2-1: config 105 has no interface number 0 [ 625.310432][T19445] openvswitch: netlink: Actions may not be safe on all matching packets [ 625.322209][ T9] usb 2-1: config 105 interface 223 altsetting 3 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 625.322259][ T9] usb 2-1: config 105 interface 223 has no altsetting 0 [ 625.343256][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.343300][ T9] usb 2-1: Product: syz [ 625.343332][ T9] usb 2-1: Manufacturer: syz [ 625.343351][ T9] usb 2-1: SerialNumber: syz [ 625.545254][T19453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6400'. [ 625.607502][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 625.715746][ T9] snd-usb-audio 2-1:105.223: probe with driver snd-usb-audio failed with error -2 [ 625.733459][ T9] usb 2-1: USB disconnect, device number 21 [ 625.767457][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:105.223/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 626.092221][ T923] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 626.271910][ T923] usb 3-1: Using ep0 maxpacket: 8 [ 626.277745][ T923] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 626.290386][ T923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.297622][T19500] netlink: 'syz.3.6416': attribute type 21 has an invalid length. [ 626.297772][T19500] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6416'. [ 626.306726][ T923] usb 3-1: Product: syz [ 626.306750][ T923] usb 3-1: Manufacturer: syz [ 626.306767][ T923] usb 3-1: SerialNumber: syz [ 626.336119][ T923] usb 3-1: config 0 descriptor?? [ 626.350213][ T923] gspca_main: se401-2.14.0 probing 047d:5003 [ 626.668340][T19517] cgroup: subsys name conflicts with all [ 626.792515][ T923] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 626.792627][ T923] se401 3-1:0.0: probe with driver se401 failed with error -71 [ 626.817851][ T923] usb 3-1: USB disconnect, device number 112 [ 627.921559][T19581] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6450'. [ 627.921988][T19581] openvswitch: netlink: EtherType 300 is less than min 600 [ 627.943412][T19584] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6452'. [ 628.118454][T19591] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6454'. [ 628.404432][ T5354] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 628.584771][ T5354] usb 4-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 628.600811][ T5354] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 628.609804][ T5354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.609834][ T5354] usb 4-1: Product: syz [ 628.609848][ T5354] usb 4-1: Manufacturer: syz [ 628.609871][ T5354] usb 4-1: SerialNumber: syz [ 628.646487][ T5354] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 628.871450][ T5354] gspca_mr97310a: reg read [21] error -71 [ 628.871774][ T5354] mr97310a 4-1:1.0: probe with driver mr97310a failed with error -71 [ 628.890050][ T5354] usb 4-1: USB disconnect, device number 20 [ 629.190773][T19655] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6479'. [ 629.206924][T19655] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 629.446517][T19663] netlink: Conntrack attr has 8 unknown bytes [ 629.446724][T19663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 629.762320][T19679] mmap: syz.3.6494 (19679): VmData 37597184 exceed data ulimit 262144. Update limits or use boot option ignore_rlimit_data. [ 629.802036][T19678] gfs2: not a GFS2 filesystem [ 630.072526][ T5725] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 630.141641][T19702] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6504'. [ 630.141849][T19702] netlink: 112 bytes leftover after parsing attributes in process `syz.2.6504'. [ 630.267228][ T5725] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 630.270095][ T5725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.273353][ T5725] usb 2-1: config 0 descriptor?? [ 630.297700][ T5725] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 630.314659][T19710] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 630.362170][T19712] Sensor B: ================= START STATUS ================= [ 630.362378][T19712] Sensor B: Test Pattern: 75% Colorbar [ 630.362532][T19712] Sensor B: Show Information: All [ 630.362552][T19712] Sensor B: Vertical Flip: false [ 630.362572][T19712] Sensor B: Horizontal Flip: false [ 630.362590][T19712] Sensor B: Brightness: 128 [ 630.362609][T19712] Sensor B: Contrast: 128 [ 630.362627][T19712] Sensor B: Hue: 0 [ 630.362645][T19712] Sensor B: Saturation: 128 [ 630.362663][T19712] Sensor B: Pixel Rate: 160000000 [ 630.362708][T19712] Sensor B: Horizontal Blanking: 800 [ 630.362727][T19712] Sensor B: Vertical Blanking: 3223 [ 630.362747][T19712] Sensor B: ================== END STATUS ================== [ 630.608014][T19725] comedi comedi1: pcl726: I/O base address not correctly aligned [ 630.633085][T19726] sctp: [Deprecated]: syz.2.6514 (pid 19726) Use of struct sctp_assoc_value in delayed_ack socket option. [ 630.633085][T19726] Use struct sctp_sack_info instead [ 630.761728][ T5725] gspca_cpia1: usb_control_msg 03, error -71 [ 630.762270][ T5725] gspca_cpia1: usb_control_msg 01, error -71 [ 630.762286][ T5725] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 630.785734][ T5725] usb 2-1: USB disconnect, device number 22 [ 630.929410][T19745] comedi comedi0: Minor 3 could not be opened [ 631.124544][T19755] netlink: 'syz.0.6524': attribute type 10 has an invalid length. [ 631.139921][T19754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 632.012327][ T5770] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 632.058662][T19800] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6547'. [ 632.175347][ T5770] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 632.186061][ T5770] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 632.186102][ T5770] usb 1-1: config 0 has no interface number 0 [ 632.186148][ T5770] usb 1-1: config 0 interface 41 has no altsetting 0 [ 632.212808][ T5770] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.219617][T19807] netlink: 'syz.3.6549': attribute type 21 has an invalid length. [ 632.219643][T19807] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6549'. [ 632.219696][T19807] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6549'. [ 632.241118][ T5770] usb 1-1: Product: syz [ 632.241140][ T5770] usb 1-1: Manufacturer: syz [ 632.241156][ T5770] usb 1-1: SerialNumber: syz [ 632.270715][ T5770] usb 1-1: config 0 descriptor?? [ 632.753672][ T5770] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 632.766428][ T5770] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 632.786704][ T5770] usb 1-1: USB disconnect, device number 16 [ 632.814263][T19831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 632.873722][T19839] ceph: Path missing in source [ 633.192225][ T923] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 633.367375][ T923] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 633.381987][ T923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.382031][ T923] usb 2-1: Product: syz [ 633.382062][ T923] usb 2-1: Manufacturer: syz [ 633.382080][ T923] usb 2-1: SerialNumber: syz [ 633.443764][ T5770] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 633.857902][T19883] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6579'. [ 633.955277][ T923] usb 2-1: USB disconnect, device number 23 [ 634.537199][T19918] netlink: 'syz.0.6592': attribute type 12 has an invalid length. [ 634.537245][T19918] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6592'. [ 634.579331][ T5770] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 634.579537][ T5770] ath9k_htc: Failed to initialize the device [ 634.593400][ T923] usb 2-1: ath9k_htc: USB layer deinitialized [ 635.717961][T19966] netlink: 'syz.3.6615': attribute type 12 has an invalid length. [ 635.718159][T19966] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6615'. [ 636.376702][ T49] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 636.428514][T20004] MTDSB: Device #1 doesn't appear to exist [ 636.428514][T20004] [ 636.552435][ T49] usb 1-1: Using ep0 maxpacket: 8 [ 636.553333][ T49] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 636.554968][ T49] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 636.554994][ T49] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 636.555013][ T49] usb 1-1: config 0 has no interface number 0 [ 636.555050][ T49] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 636.555075][ T49] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 636.555096][ T49] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 636.555121][ T49] usb 1-1: config 0 interface 52 has no altsetting 0 [ 636.560397][ T49] usb 1-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 636.560423][ T49] usb 1-1: Product: syz [ 636.560438][ T49] usb 1-1: SerialNumber: syz [ 636.572016][ T49] usb 1-1: config 0 descriptor?? [ 636.811375][ T49] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 636.824645][ T49] synaptics_usb 1-1:0.52: probe with driver synaptics_usb failed with error -5 [ 637.035480][ T49] usb 1-1: USB disconnect, device number 17 [ 637.037748][ T5354] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 637.189055][ T5770] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 637.200027][ T5354] usb 4-1: Using ep0 maxpacket: 32 [ 637.203133][ T5354] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 637.205344][ T5354] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 637.205374][ T5354] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 245, changing to 11 [ 637.205400][ T5354] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 58613, setting to 1024 [ 637.205425][ T5354] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 637.205450][ T5354] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 637.217568][ T5354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.217596][ T5354] usb 4-1: Product: syz [ 637.217611][ T5354] usb 4-1: Manufacturer: syz [ 637.217625][ T5354] usb 4-1: SerialNumber: syz [ 637.225626][ T5354] usb 4-1: config 0 descriptor?? [ 637.368903][ T5770] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 637.380024][ T5770] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 637.393272][ T5770] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.401666][ T5770] usb 3-1: Product: syz [ 637.406135][ T5770] usb 3-1: Manufacturer: syz [ 637.410822][ T5770] usb 3-1: SerialNumber: syz [ 637.612138][ T923] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 637.650983][ T5770] snd-usb-caiaq 3-1:1.0: invalid EPs [ 637.656612][ T5770] usb 3-1: unable to init card! (ret=-22) [ 637.657025][ T5770] snd-usb-caiaq 3-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 637.684730][ T5354] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 637.685041][ T5354] input input99: Device does not respond to id packet M [ 637.690905][ T5354] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 637.690956][ T5354] input input99: Device does not respond to id packet P [ 637.692423][ T5354] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 637.692474][ T5354] input input99: Device does not respond to id packet B [ 637.699007][ T5354] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 637.699052][ T5354] input input99: Device does not respond to id packet N [ 637.701766][ T5354] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 637.704047][ T5354] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 637.707441][ T5354] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 637.707863][ T5354] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 637.721339][ T5354] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input99 [ 637.760137][ T5354] usb 4-1: USB disconnect, device number 21 [ 637.761035][ C0] iforce 4-1:0.0: iforce_usb_irq - usb_submit_urb failed with result -19 [ 637.807751][ T923] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice= 1.08 [ 637.818719][ T923] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 637.830308][ T923] usb 2-1: config 1 interface 0 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 637.846038][ T923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.846082][ T923] usb 2-1: Product: syz [ 637.846122][ T923] usb 2-1: Manufacturer: syz [ 637.846139][ T923] usb 2-1: SerialNumber: syz [ 637.888533][ T5811] usb 3-1: USB disconnect, device number 113 [ 638.118258][ T923] ath6kl: Failed to submit usb control message: -71 [ 638.118345][ T923] ath6kl: unable to send the bmi data to the device: -71 [ 638.118388][ T923] ath6kl: Unable to send get target info: -71 [ 638.126223][ T923] ath6kl: Failed to init ath6kl core: -71 [ 638.167921][ T923] ath6kl_usb 2-1:1.0: probe with driver ath6kl_usb failed with error -71 [ 638.186217][ T923] usb 2-1: USB disconnect, device number 24 [ 638.600426][T20121] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 638.630386][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 638.694704][ T5354] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 638.792221][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 638.798355][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 638.809002][ T9] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 638.831098][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.839354][ T9] usb 1-1: Product: syz [ 638.839404][ T9] usb 1-1: Manufacturer: syz [ 638.839423][ T9] usb 1-1: SerialNumber: syz [ 638.857152][ T5354] usb 4-1: Using ep0 maxpacket: 8 [ 638.859584][ T5354] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 638.860655][ T5354] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 638.863736][ T5354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.863760][ T5354] usb 4-1: Product: syz [ 638.863775][ T5354] usb 4-1: Manufacturer: syz [ 638.863789][ T5354] usb 4-1: SerialNumber: syz [ 638.909835][ T9] r8152-cfgselector 1-1: Unknown version 0x0000 [ 638.917121][ T9] r8152-cfgselector 1-1: config 0 descriptor?? [ 638.928921][ T5354] usb 4-1: config 0 descriptor?? [ 638.959434][ T5354] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 638.959711][ T5354] usb 4-1: selecting invalid altsetting 1 [ 639.175994][ T5354] gspca_stk014: init reg: 0x00 [ 639.176248][ T5354] stk014 4-1:0.0: probe with driver stk014 failed with error -5 [ 639.202466][T20143] binder: 20141:20143 ioctl c0306201 200000004a40 returned -22 [ 639.289990][T20147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 639.370353][T20150] XFS (nullb0): Invalid superblock magic number [ 639.393683][ T9] r8152-cfgselector 1-1: USB disconnect, device number 18 [ 639.450817][ T923] usb 4-1: USB disconnect, device number 22 [ 639.776030][T20179] netlink: 17 bytes leftover after parsing attributes in process `syz.1.6677'. [ 640.375030][ T5725] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 640.540441][ T5725] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 640.542984][ T5725] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 640.543022][ T5725] usb 2-1: config 0 interface 0 has no altsetting 0 [ 640.544923][ T5725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.544946][ T5725] usb 2-1: Product: syz [ 640.544961][ T5725] usb 2-1: Manufacturer: syz [ 640.544975][ T5725] usb 2-1: SerialNumber: syz [ 640.888066][T20227] comedi comedi4: bad chanlist[0]=0x00000008 chan=8 range length=2 [ 640.903991][T20228] vivid-002: ================= START STATUS ================= [ 640.920947][T20228] vivid-002: ================== END STATUS ================== [ 640.924943][ T5725] usb 2-1: config 0 descriptor?? [ 640.934133][ T5725] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 640.946220][ T5725] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 640.947006][ T5725] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 640.947056][ T5725] usb 2-1: media controller created [ 641.019634][ T5624] Bluetooth: hci3: unexpected event for opcode 0x2006 [ 641.028825][ T5725] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 641.109901][T20239] tmpfs: Bad value for 'mpol' [ 641.592801][T20255] netlink: 'syz.3.6711': attribute type 7 has an invalid length. [ 641.592845][T20255] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6711'. [ 641.592901][T20255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6711'. [ 641.708958][ T5725] DVB: Unable to find symbol tda10046_attach() [ 641.709150][ T5725] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 641.709165][ T5725] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 641.752575][T20266] openvswitch: netlink: IPv4 tunnel dst address is zero [ 641.931158][ T5725] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 641.940873][ T5725] usb 2-1: USB disconnect, device number 25 [ 641.944913][ T5354] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 642.047491][T20284] netlink: 'syz.0.6727': attribute type 1 has an invalid length. [ 642.106712][ T5354] usb 3-1: Using ep0 maxpacket: 16 [ 642.107590][ T5354] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 642.108658][ T5354] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 642.108682][ T5354] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 642.108701][ T5354] usb 3-1: config 0 has no interface number 0 [ 642.110668][ T5354] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=21 [ 642.110692][ T5354] usb 3-1: Product: syz [ 642.110707][ T5354] usb 3-1: Manufacturer: syz [ 642.110722][ T5354] usb 3-1: SerialNumber: syz [ 642.137946][ T5354] usb 3-1: config 0 descriptor?? [ 642.178474][ T5354] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 642.178702][ T5354] uvcvideo 3-1:0.105: No valid video chain found. [ 642.260738][T20294] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6722'. [ 642.275507][T20294] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 642.375277][ T5354] usb 3-1: USB disconnect, device number 114 [ 642.893290][T20323] tipc: Can't bind to reserved service type 1 [ 643.059186][T20335] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 643.258879][ T923] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 643.433033][ T923] usb 1-1: Using ep0 maxpacket: 32 [ 643.441636][ T923] usb 1-1: unable to get BOS descriptor or descriptor too short [ 643.441699][ T923] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=27.24 [ 643.459991][ T923] usb 1-1: config 165 has an invalid interface number: 162 but max is 0 [ 643.460035][ T923] usb 1-1: config 165 has no interface number 0 [ 643.460091][ T923] usb 1-1: config 165 interface 162 has no altsetting 0 [ 643.490819][ T923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.490904][ T923] usb 1-1: Product: syz [ 643.490937][ T923] usb 1-1: Manufacturer: syz [ 643.490956][ T923] usb 1-1: SerialNumber: syz [ 643.645258][T20362] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6748'. [ 643.657013][T20362] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 643.710861][ T5354] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 643.791432][ T923] usb 1-1: USB disconnect, device number 19 [ 643.886569][ T5354] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 643.894514][ T5354] usb 4-1: config 0 has an invalid interface number: 99 but max is 0 [ 643.894543][ T5354] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 643.894562][ T5354] usb 4-1: config 0 has no interface number 0 [ 643.902672][ T5354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.902700][ T5354] usb 4-1: Product: syz [ 643.902715][ T5354] usb 4-1: Manufacturer: syz [ 643.902730][ T5354] usb 4-1: SerialNumber: syz [ 643.909352][ T5354] usb 4-1: config 0 descriptor?? [ 644.139692][ T5354] usb 4-1: USB disconnect, device number 23 [ 644.224879][T20402] netlink: 'syz.1.6759': attribute type 23 has an invalid length. [ 644.327264][ T923] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 644.391534][T20408] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6762'. [ 644.501712][ T923] usb 3-1: not running at top speed; connect to a high speed hub [ 644.501764][ T923] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 644.519872][ T923] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 644.519915][ T923] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 644.519980][ T923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.563299][ T923] gspca_main: spca501-2.14.0 probing 0000:0000 [ 644.711588][T20422] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 644.963196][T20432] netlink: 228 bytes leftover after parsing attributes in process `syz.0.6773'. [ 645.012805][ T923] gspca_spca501: reg write: error -71 [ 645.012842][ T923] spca501 3-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 645.012940][ T923] spca501 3-1:1.0: probe with driver spca501 failed with error -22 [ 645.037815][ T923] usb 3-1: USB disconnect, device number 115 [ 645.076763][T20440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6775'. [ 646.072472][T20490] netlink: 'syz.2.6794': attribute type 46 has an invalid length. [ 646.072513][T20490] netlink: 'syz.2.6794': attribute type 28 has an invalid length. [ 646.126197][T20491] bond0: entered promiscuous mode [ 646.126477][T20491] bond_slave_0: entered promiscuous mode [ 646.129533][T20491] bond_slave_1: entered promiscuous mode [ 646.131377][T20491] bond0: entered allmulticast mode [ 646.131394][T20491] bond_slave_0: entered allmulticast mode [ 646.131715][T20491] bond_slave_1: entered allmulticast mode [ 646.383223][T20505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6797'. [ 646.652129][ T923] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 646.840815][ T923] usb 1-1: Using ep0 maxpacket: 8 [ 646.846737][ T923] usb 1-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=6c.24 [ 646.857286][ T923] usb 1-1: config 0 has an invalid interface number: 125 but max is 0 [ 646.857328][ T923] usb 1-1: config 0 has no interface number 0 [ 646.857383][ T923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.889252][ T923] usb 1-1: config 0 descriptor?? [ 646.917379][ T923] gspca_main: spca501-2.14.0 probing 0497:c001 [ 647.295259][ T5725] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 647.362348][ T923] gspca_spca501: reg write: error -71 [ 647.362385][ T923] spca501 1-1:0.125: Reg write failed for 0x02,0xa048,0x00 [ 647.362493][ T923] spca501 1-1:0.125: probe with driver spca501 failed with error -22 [ 647.398536][ T923] usb 1-1: USB disconnect, device number 20 [ 647.479331][ T5725] usb 2-1: Using ep0 maxpacket: 32 [ 647.480121][ T5725] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 647.482967][ T5725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.482992][ T5725] usb 2-1: Product: syz [ 647.483006][ T5725] usb 2-1: Manufacturer: syz [ 647.483021][ T5725] usb 2-1: SerialNumber: syz [ 647.489535][ T5725] usb 2-1: config 0 descriptor?? [ 647.570845][T20559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6819'. [ 647.585026][T20561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6820'. [ 647.717847][T20561] hsr_slave_0 (unregistering): left promiscuous mode [ 647.948469][ T5725] airspy 2-1:0.0: usb_control_msg() failed -71 request 0a [ 647.948681][ T5725] airspy 2-1:0.0: Could not detect board [ 647.948773][ T5725] airspy 2-1:0.0: probe with driver airspy failed with error -71 [ 647.963044][ T5725] usb 2-1: USB disconnect, device number 26 [ 647.973580][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 648.165611][ T9] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 648.176180][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 648.176243][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.244238][T20599] netlink: 'syz.0.6829': attribute type 2 has an invalid length. [ 648.446905][ T9] qmi_wwan 4-1:1.0: cdc-wdm0: USB WDM device [ 648.478977][ T9] wwan wwan0: port wwan0qmi0 attached [ 648.572819][T20616] syz.2.6836: vmalloc error: size 68719476738, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 648.595418][T20616] CPU: 0 UID: 0 PID: 20616 Comm: syz.2.6836 Not tainted syzkaller #0 PREEMPT(full) [ 648.595475][T20616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 648.595489][T20616] Call Trace: [ 648.595498][T20616] [ 648.595508][T20616] dump_stack_lvl+0xe8/0x150 [ 648.595545][T20616] warn_alloc+0x24d/0x270 [ 648.595583][T20616] ? __pfx_warn_alloc+0x10/0x10 [ 648.595620][T20616] ? __mutex_trylock_common+0x15f/0x270 [ 648.595683][T20616] ? dvb_dvr_do_ioctl+0x12b/0x220 [ 648.595718][T20616] __vmalloc_node_range_noprof+0x127/0x1540 [ 648.595745][T20616] ? rcu_is_watching+0x16/0xb0 [ 648.595775][T20616] ? trace_contention_end+0x3d/0x140 [ 648.595800][T20616] ? __mutex_lock+0x30b/0x1550 [ 648.595829][T20616] ? tomoyo_path_number_perm+0x219/0x5f0 [ 648.595874][T20616] ? tomoyo_path_number_perm+0x219/0x5f0 [ 648.595900][T20616] ? dvb_dvr_do_ioctl+0x76/0x220 [ 648.595935][T20616] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 648.595970][T20616] ? dvb_dvr_do_ioctl+0x12b/0x220 [ 648.596000][T20616] vmalloc_noprof+0xb2/0xe0 [ 648.596026][T20616] ? dvb_dvr_do_ioctl+0x12b/0x220 [ 648.596055][T20616] dvb_dvr_do_ioctl+0x12b/0x220 [ 648.596090][T20616] dvb_usercopy+0x199/0x2e0 [ 648.596117][T20616] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 648.596147][T20616] ? __pfx_dvb_usercopy+0x10/0x10 [ 648.596186][T20616] ? __fget_files+0x3a2/0x420 [ 648.596209][T20616] ? __fget_files+0x2a/0x420 [ 648.596234][T20616] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 648.596262][T20616] dvb_dvr_ioctl+0x29/0x40 [ 648.596290][T20616] __se_sys_ioctl+0xfc/0x170 [ 648.596321][T20616] do_syscall_64+0x166/0x520 [ 648.596340][T20616] ? trace_irq_disable+0x3b/0x140 [ 648.596370][T20616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.596392][T20616] ? clear_bhb_loop+0x70/0xc0 [ 648.596417][T20616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.596437][T20616] RIP: 0033:0x7fe6f679e0d9 [ 648.596458][T20616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.596478][T20616] RSP: 002b:00007fe6f75f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 648.596501][T20616] RAX: ffffffffffffffda RBX: 00007fe6f6a25fa0 RCX: 00007fe6f679e0d9 [ 648.596516][T20616] RDX: 0000001000000002 RSI: 0000000000006f2d RDI: 0000000000000003 [ 648.596529][T20616] RBP: 00007fe6f6835024 R08: 0000000000000000 R09: 0000000000000000 [ 648.596543][T20616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 648.596556][T20616] R13: 00007fe6f6a26038 R14: 00007fe6f6a25fa0 R15: 00007ffcc22b3038 [ 648.596584][T20616] [ 648.670370][T20616] Mem-Info: [ 648.670388][T20616] active_anon:6050 inactive_anon:1 isolated_anon:0 [ 648.670388][T20616] active_file:287 inactive_file:54249 isolated_file:0 [ 648.670388][T20616] unevictable:0 dirty:295 writeback:0 [ 648.670388][T20616] slab_reclaimable:10871 slab_unreclaimable:92417 [ 648.670388][T20616] mapped:25244 shmem:527 pagetables:1225 [ 648.670388][T20616] sec_pagetables:0 bounce:0 [ 648.670388][T20616] kernel_misc_reclaimable:0 [ 648.670388][T20616] free:1329198 free_pcp:8770 free_cma:0 [ 648.670453][T20616] Node 0 active_anon:24200kB inactive_anon:4kB active_file:1148kB inactive_file:216788kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100976kB dirty:1180kB writeback:0kB shmem:2108kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11324kB pagetables:4788kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 648.670511][T20616] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 648.670563][T20616] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 648.670622][T20616] lowmem_reserve[]: 0 2482 2484 2484 2484 [ 648.670659][T20616] Node 0 DMA32 free:1358324kB boost:0kB min:34096kB low:42620kB high:51144kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24200kB inactive_anon:4kB active_file:1148kB inactive_file:216788kB unevictable:0kB writepending:1180kB zspages:0kB present:3129332kB managed:2542440kB mlocked:0kB bounce:0kB free_pcp:35076kB local_pcp:16724kB free_cma:0kB [ 648.672279][T20616] lowmem_reserve[]: 0 0 1 1 1 [ 648.672318][T20616] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1712kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 648.672386][T20616] lowmem_reserve[]: 0 0 0 0 0 [ 648.672420][T20616] Node 1 Normal free:3943108kB boost:0kB min:55780kB low:69724kB high:83668kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 648.672480][T20616] lowmem_reserve[]: 0 0 0 0 0 [ 648.672515][T20616] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 648.672628][T20616] Node 0 DMA32: 577*4kB (UME) 370*8kB (UME) 324*16kB (UM) 355*32kB (UME) 217*64kB (UM) 135*128kB (M) 57*256kB (UM) 25*512kB (UME) 6*1024kB (M) 3*2048kB (UME) 309*4096kB (UM) = 1358324kB [ 648.672781][T20616] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 648.672876][T20616] Node 1 Normal: 1*4kB (M) 4*8kB (UM) 4*16kB (UM) 3*32kB (UM) 6*64kB (UM) 3*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3943108kB [ 648.673531][T20616] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 648.673549][T20616] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 648.673566][T20616] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 648.673582][T20616] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 648.673598][T20616] 55060 total pagecache pages [ 648.673607][T20616] 1 pages in swap cache [ 648.673615][T20616] Free swap = 124992kB [ 648.673623][T20616] Total swap = 124996kB [ 648.673631][T20616] 2097051 pages RAM [ 648.673638][T20616] 0 pages HighMem/MovableOnly [ 648.673646][T20616] 429397 pages reserved [ 648.673654][T20616] 0 pages cma reserved [ 649.147065][T20626] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6839'. [ 649.277027][ T9] qmi_wwan 4-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, aa:d9:cc:37:e5:89 [ 649.291718][ T9] usb 4-1: USB disconnect, device number 24 [ 649.301088][ T9] qmi_wwan 4-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 649.377631][ T9] wwan wwan0: port wwan0qmi0 disconnected [ 649.778527][T20665] comedi comedi1: 8255: I/O base address not correctly aligned [ 650.763260][T20712] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6873'. [ 650.763379][T20712] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6873'. [ 650.763419][T20712] netlink: 'syz.3.6873': attribute type 1 has an invalid length. [ 651.114730][T20731] comedi comedi1: 8255: I/O base address not correctly aligned [ 651.337298][T20743] netlink: 'syz.3.6887': attribute type 2 has an invalid length. [ 651.345324][T20743] netlink: 252 bytes leftover after parsing attributes in process `syz.3.6887'. [ 651.479137][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 651.479368][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 651.670470][T20763] xt_hashlimit: size too large, truncated to 1048576 [ 651.682445][T20763] xt_hashlimit: max too large, truncated to 1048576 [ 651.682621][T20763] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old? [ 651.856853][ T9] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 652.018562][ T9] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 652.030243][ T9] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 652.038879][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4E, changing to 0xE [ 652.038918][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 652.065894][ T9] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 652.065938][ T9] usb 3-1: Manufacturer: syz [ 652.083425][ T9] usb 3-1: config 0 descriptor?? [ 652.093285][ T9] igorplugusb 3-1:0.0: endpoint incorrect [ 652.126247][ T5770] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 652.226530][ T5710] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 652.300802][ T5770] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 652.314309][ T5770] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 652.314351][ T5770] usb 4-1: config 1 has no interface number 0 [ 652.314398][ T5770] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 652.314429][ T5770] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 652.314459][ T5770] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.367120][ T5770] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.375343][ T5770] usb 4-1: Product: syz [ 652.379587][ T5770] usb 4-1: Manufacturer: syz [ 652.384274][ T5770] usb 4-1: SerialNumber: syz [ 652.394477][ T9] usb 3-1: USB disconnect, device number 116 [ 652.420641][T20773] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 652.473265][ T5710] usb 2-1: Using ep0 maxpacket: 32 [ 652.475430][ T5710] usb 2-1: unable to get BOS descriptor or descriptor too short [ 652.475477][ T5710] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=27.24 [ 652.477858][ T5710] usb 2-1: config 165 has an invalid interface number: 162 but max is 0 [ 652.477883][ T5710] usb 2-1: config 165 has no interface number 0 [ 652.477923][ T5710] usb 2-1: config 165 interface 162 has no altsetting 0 [ 652.481117][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.481140][ T5710] usb 2-1: Product: syz [ 652.481154][ T5710] usb 2-1: Manufacturer: syz [ 652.481169][ T5710] usb 2-1: SerialNumber: syz [ 652.656192][T20773] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 652.738472][ T5710] usb 2-1: USB disconnect, device number 27 [ 652.883519][ T5770] usb 4-1: Incompatible driver and firmware versions [ 652.905652][ T5770] usb 4-1: USB disconnect, device number 25 [ 653.020982][T20826] gfs2: not a GFS2 filesystem [ 653.317809][ T923] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 653.481533][ T923] usb 1-1: Using ep0 maxpacket: 32 [ 653.488070][ T923] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 653.501371][ T923] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 653.501444][ T923] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.501466][ T923] usb 1-1: config 0 has no interface number 0 [ 653.501509][ T923] usb 1-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 653.501540][ T923] usb 1-1: config 0 interface 196 has no altsetting 0 [ 653.551810][ T923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.560311][ T923] usb 1-1: Product: syz [ 653.566136][ T923] usb 1-1: Manufacturer: syz [ 653.566191][ T923] usb 1-1: SerialNumber: syz [ 653.667206][ T923] usb 1-1: config 0 descriptor?? [ 653.694026][ T923] ipheth 1-1:0.196: Unable to find endpoints [ 654.216439][T20878] netlink: 6060 bytes leftover after parsing attributes in process `syz.3.6929'. [ 654.319106][T20885] kAFS: unable to lookup cell 'syze藄0' [ 654.531003][ T5770] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 654.627396][T20900] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 654.693411][ T5770] usb 4-1: Using ep0 maxpacket: 8 [ 654.699156][ T5770] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 654.716202][ T5770] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.716245][ T5770] usb 4-1: Product: syz [ 654.716275][ T5770] usb 4-1: Manufacturer: syz [ 654.716295][ T5770] usb 4-1: SerialNumber: syz [ 654.744146][ T5770] usb 4-1: config 0 descriptor?? [ 654.751763][ T923] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 654.771584][ T5770] gspca_main: se401-2.14.0 probing 047d:5003 [ 654.921803][ T923] usb 3-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 654.933663][ T923] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 654.951309][ T923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.959703][ T923] usb 3-1: Product: syz [ 654.959748][ T923] usb 3-1: Manufacturer: syz [ 654.959801][ T923] usb 3-1: SerialNumber: syz [ 655.001416][ T923] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 655.024978][T20912] comedi comedi1: pcl726: I/O base address not correctly aligned [ 655.100416][T20914] comedi comedi0: Minor 3 could not be opened [ 655.218962][ T923] gspca_mr97310a: reg read [21] error -71 [ 655.219090][ T923] mr97310a 3-1:1.0: probe with driver mr97310a failed with error -71 [ 655.236773][ T5770] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 655.236884][ T5770] se401 4-1:0.0: probe with driver se401 failed with error -71 [ 655.260523][ T5770] usb 4-1: USB disconnect, device number 26 [ 655.288332][ T923] usb 3-1: USB disconnect, device number 117 [ 655.866587][T20931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6952'. [ 655.924352][T20931] hsr_slave_0 (unregistering): left promiscuous mode [ 656.339349][T20958] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6955'. [ 656.531540][ T5710] usb 1-1: USB disconnect, device number 21 [ 659.108572][T21086] netlink: 'syz.1.7015': attribute type 13 has an invalid length. [ 659.239981][T21094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7020'. [ 659.334985][T21096] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 659.464682][T21106] netlink: 'syz.1.7025': attribute type 1 has an invalid length. [ 659.485013][T21106] netlink: 'syz.1.7025': attribute type 2 has an invalid length. [ 659.485104][T21106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7025'. [ 659.624795][T21114] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 659.805705][T21122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7034'. [ 660.001477][T21126] netlink: 'syz.2.7032': attribute type 10 has an invalid length. [ 660.062555][T21126] team0 (unregistering): Port device team_slave_0 removed [ 660.292963][T21147] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7043'. [ 660.371040][ T5725] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 660.542585][ T5725] usb 1-1: Using ep0 maxpacket: 16 [ 660.543448][ T5725] usb 1-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 660.545127][ T5725] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 660.545151][ T5725] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 660.547046][ T5725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.547069][ T5725] usb 1-1: Product: syz [ 660.547083][ T5725] usb 1-1: Manufacturer: syz [ 660.547097][ T5725] usb 1-1: SerialNumber: syz [ 660.925380][ T5725] usb 1-1: USB disconnect, device number 22 [ 660.986833][T21193] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7057'. [ 661.008020][T21180] udevd[21180]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 661.195320][T21205] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7062'. [ 661.207262][T21205] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 661.256104][T21207] netlink: 600 bytes leftover after parsing attributes in process `syz.1.7061'. [ 661.723281][ T5770] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 661.852704][T21236] netlink: 'syz.0.7074': attribute type 29 has an invalid length. [ 661.886641][ T5770] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 661.899122][ T5770] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 661.899174][ T5770] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 661.899224][ T5770] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 661.936551][ T5770] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.936594][ T5770] usb 3-1: Product: syz [ 661.936636][ T5770] usb 3-1: Manufacturer: syz [ 661.936655][ T5770] usb 3-1: SerialNumber: syz [ 661.965952][ T5770] usb 3-1: config 0 descriptor?? [ 661.980271][ T5770] streamzap 3-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 662.202434][ T5770] usb 3-1: USB disconnect, device number 118 [ 662.296303][T21266] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7083'. [ 662.308268][ T5725] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 662.471349][ T5725] usb 2-1: New USB device found, idVendor=05c6, idProduct=9211, bcdDevice= 0.00 [ 662.474529][ T5725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.474556][ T5725] usb 2-1: Product: syz [ 662.474571][ T5725] usb 2-1: Manufacturer: syz [ 662.474585][ T5725] usb 2-1: SerialNumber: syz [ 662.489762][ T5725] qcserial 2-1:1.0: Qualcomm USB modem converter detected [ 662.513603][ T5725] usb 2-1: Qualcomm USB modem converter now attached to ttyUSB0 [ 662.828629][ T5770] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 663.002838][ T5770] usb 4-1: Using ep0 maxpacket: 16 [ 663.012485][ T5770] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 663.030379][ T5770] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 663.041096][ T5770] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.041138][ T5770] usb 4-1: Product: syz [ 663.041173][ T5770] usb 4-1: Manufacturer: syz [ 663.041191][ T5770] usb 4-1: SerialNumber: syz [ 663.076504][ T5770] r8152-cfgselector 4-1: Unknown version 0x0000 [ 663.083933][ T5770] r8152-cfgselector 4-1: config 0 descriptor?? [ 663.115999][T21299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7092'. [ 663.627622][ T5770] r8152-cfgselector 4-1: USB disconnect, device number 27 [ 663.802532][ T5354] usb 2-1: USB disconnect, device number 28 [ 663.923630][ T5354] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0 [ 663.924871][ T5354] qcserial 2-1:1.0: device disconnected [ 664.456976][T21364] netlink: 'syz.0.7115': attribute type 12 has an invalid length. [ 664.672873][T21376] netlink: 'syz.2.7119': attribute type 7 has an invalid length. [ 664.672918][T21376] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7119'. [ 664.672973][T21376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7119'. [ 665.331288][T21411] IPVS: Unknown mcast interface: pim6reg1 [ 665.483340][ T5770] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 665.666880][ T5770] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 665.684061][ T5770] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 665.703368][ T5770] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.703414][ T5770] usb 2-1: Product: syz [ 665.703452][ T5770] usb 2-1: Manufacturer: syz [ 665.703472][ T5770] usb 2-1: SerialNumber: syz [ 665.969392][ T5770] snd-usb-caiaq 2-1:1.0: invalid EPs [ 665.969436][ T5770] usb 2-1: unable to init card! (ret=-22) [ 665.969806][ T5770] snd-usb-caiaq 2-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 666.108067][T21447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7152'. [ 666.205844][ T5770] usb 2-1: USB disconnect, device number 29 [ 666.575928][ T9] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 666.749387][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 666.757084][ T9] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 666.774875][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.783092][ T9] usb 3-1: Product: syz [ 666.787361][ T9] usb 3-1: Manufacturer: syz [ 666.792108][ T9] usb 3-1: SerialNumber: syz [ 666.808644][ T9] usb 3-1: config 0 descriptor?? [ 666.818509][T21482] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 666.834066][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 667.107784][ T5770] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 667.264116][ T9] gspca_ov534_9: reg_w failed -71 [ 667.280015][ T5770] usb 4-1: Using ep0 maxpacket: 16 [ 667.288402][ T5770] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 667.304627][ T5770] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 667.304672][ T5770] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.304711][ T5770] usb 4-1: config 0 has no interface number 0 [ 667.333950][ T5770] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=21 [ 667.333994][ T5770] usb 4-1: Product: syz [ 667.334038][ T5770] usb 4-1: Manufacturer: syz [ 667.334105][ T5770] usb 4-1: SerialNumber: syz [ 667.361063][ T5770] usb 4-1: config 0 descriptor?? [ 667.378009][ T5770] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 667.385511][ T5770] uvcvideo 4-1:0.105: No valid video chain found. [ 667.589074][T21524] netlink: 'syz.0.7179': attribute type 46 has an invalid length. [ 667.597423][T21524] netlink: 'syz.0.7179': attribute type 28 has an invalid length. [ 667.627857][ T5354] usb 4-1: USB disconnect, device number 28 [ 667.713271][ T9] gspca_ov534_9: Unknown sensor 0000 [ 667.713391][ T9] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 667.729764][ T9] usb 3-1: USB disconnect, device number 119 [ 667.914589][T21546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7187'. [ 667.961858][T21548] IPv6: NLM_F_CREATE should be specified when creating new route [ 668.240074][T21562] kAFS: No cell specified [ 669.317104][ T5354] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 669.429251][T21628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 669.479526][ T5354] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 0.06 [ 669.480703][ T5354] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 669.480737][ T5354] usb 1-1: config 0 interface 0 has no altsetting 0 [ 669.481686][ T5354] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 669.481707][ T5354] usb 1-1: SerialNumber: syz [ 669.487648][ T5354] usb 1-1: config 0 descriptor?? [ 669.576499][ T5770] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 669.674402][ T5725] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 669.752575][ T5770] usb 4-1: unable to get BOS descriptor or descriptor too short [ 669.761826][ T5770] usb 4-1: not running at top speed; connect to a high speed hub [ 669.769848][ T5770] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 669.781257][ T5770] usb 4-1: config 1 has an invalid descriptor of length 98, skipping remainder of the config [ 669.791871][ T5770] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 669.806236][ T5770] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.814408][ T5770] usb 4-1: Product: syz [ 669.814429][ T5770] usb 4-1: Manufacturer: syz [ 669.814444][ T5770] usb 4-1: SerialNumber: syz [ 669.836359][ T5725] usb 2-1: Using ep0 maxpacket: 32 [ 669.837124][ T5725] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice= 0.40 [ 669.842332][ T5725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.842357][ T5725] usb 2-1: Product: syz [ 669.842371][ T5725] usb 2-1: Manufacturer: syz [ 669.842386][ T5725] usb 2-1: SerialNumber: syz [ 669.935462][ T923] usb 1-1: USB disconnect, device number 23 [ 670.079491][ T5770] usb 4-1: 3:0: failed to get current value for ch 1 (-71) [ 670.089320][ T5770] usb 4-1: 3:0: failed to get current value for ch 2 (-71) [ 670.104080][ T5770] usb 4-1: 3:0: failed to get current value for ch 0 (-71) [ 670.114986][ T5770] usb 4-1: 3:0: cannot get min/max values for control 2 (id 3) [ 670.122906][ T5770] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 670.133330][ T5770] usb 4-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1 [ 670.142906][ T5770] usb 4-1: 3:0: cannot get min/max values for control 3 (id 3) [ 670.152568][ T5770] usb 4-1: 3:0: cannot get min/max values for control 4 (id 3) [ 670.162233][ T5770] usb 4-1: 3:0: cannot get min/max values for control 4 (id 3) [ 670.171786][ T5770] usb 4-1: 3:0: cannot get min/max values for control 5 (id 3) [ 670.181253][ T5770] usb 4-1: 3:0: cannot get min/max values for control 8 (id 3) [ 670.190779][ T5770] usb 4-1: 3:0: failed to get current value for ch 0 (-71) [ 670.203968][ T5770] usb 4-1: 3:0: failed to get current value for ch 1 (-71) [ 670.216430][ T5770] usb 4-1: 3:0: failed to get current value for ch 2 (-71) [ 670.225655][ T5770] usb 4-1: 3:0: failed to get current value for ch 0 (-71) [ 670.238691][ T5770] usb 4-1: 3:0: cannot get min/max values for control 12 (id 3) [ 670.248221][ T5770] usb 4-1: 3:0: cannot get min/max values for control 12 (id 3) [ 670.257276][ T5770] usb 4-1: 3:0: failed to get current value for ch 1 (-71) [ 670.265478][ T5770] usb 4-1: 3:0: failed to get current value for ch 2 (-71) [ 670.295243][ T5770] usb 4-1: 3:0: cannot get min/max values for control 3 (id 3) [ 670.304160][ T5770] usb 4-1: 3:0: cannot get min/max values for control 5 (id 3) [ 670.335477][ T5725] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 670.335711][ T5725] usb 2-1: MIDIStreaming interface descriptor not found [ 670.354146][ T5770] usb 4-1: USB disconnect, device number 29 [ 670.449639][ T5725] usb 2-1: USB disconnect, device number 30 [ 670.491884][T21180] udevd[21180]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 670.627162][T21678] udevd[21678]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 670.963888][T21708] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7231'. [ 671.028060][ T5770] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 671.214539][ T5770] usb 4-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 671.228757][ T5770] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.228802][ T5770] usb 4-1: Product: syz [ 671.237393][ T5770] usb 4-1: Manufacturer: syz [ 671.237418][ T5770] usb 4-1: SerialNumber: syz [ 671.257960][ T5770] usb 4-1: config 0 descriptor?? [ 671.275326][ T5770] hub 4-1:0.0: bad descriptor, ignoring hub [ 671.275369][ T5770] hub 4-1:0.0: probe with driver hub failed with error -5 [ 671.276182][ T5770] f81232 4-1:0.0: f81534a converter detected [ 671.278158][ T5725] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 671.386871][T21726] XFS (loop2): SB validate failed with error -5. [ 671.439470][ T5725] usb 2-1: Using ep0 maxpacket: 16 [ 671.440324][ T5725] usb 2-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 671.441268][ T5725] usb 2-1: config 251 has an invalid interface number: 202 but max is 0 [ 671.441292][ T5725] usb 2-1: config 251 has no interface number 0 [ 671.441330][ T5725] usb 2-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 671.441353][ T5725] usb 2-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 671.441374][ T5725] usb 2-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 671.441400][ T5725] usb 2-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 671.441424][ T5725] usb 2-1: config 251 interface 202 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.441449][ T5725] usb 2-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 671.441475][ T5725] usb 2-1: config 251 interface 202 has no altsetting 0 [ 671.444516][ T5725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.444539][ T5725] usb 2-1: Product: syz [ 671.444554][ T5725] usb 2-1: Manufacturer: syz [ 671.444568][ T5725] usb 2-1: SerialNumber: syz [ 671.456347][T21710] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 671.579484][ T5770] usb 4-1: f81534a converter now attached to ttyUSB0 [ 671.685997][T21740] openvswitch: netlink: IP tunnel dst address not specified [ 671.772424][ T5725] cxacru 2-1:251.202: cxacru_bind: interface has incorrect endpoints [ 671.772743][ T5725] cxacru 2-1:251.202: usbatm_usb_probe: bind failed: -19! [ 671.792424][ T5725] usb 2-1: USB disconnect, device number 31 [ 671.869269][ T5354] usb 4-1: USB disconnect, device number 30 [ 671.888802][ T5354] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 671.889873][ T5354] f81232 4-1:0.0: device disconnected [ 672.108084][T21773] openvswitch: netlink: IP tunnel dst address not specified [ 672.125182][ T5770] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 672.306034][ T5770] usb 3-1: Using ep0 maxpacket: 32 [ 672.312097][ T5770] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 672.323180][ T5770] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 672.323240][ T5770] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 672.323265][ T5770] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 672.323313][ T5770] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 672.323339][ T5770] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 672.323366][ T5770] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 672.323391][ T5770] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 672.323416][ T5770] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 672.323457][ T5770] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.418778][ T5770] usb 3-1: config 0 descriptor?? [ 672.661151][ T5770] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 120 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 672.869131][ T5770] usb 3-1: USB disconnect, device number 120 [ 672.888099][ T5770] usblp0: removed [ 673.779360][ T5354] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 674.024146][ T5354] usb 2-1: not running at top speed; connect to a high speed hub [ 674.024362][ T5354] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 674.025368][ T5354] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 674.025391][ T5354] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 674.025448][ T5354] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.065276][ T5354] gspca_main: spca501-2.14.0 probing 0000:0000 [ 674.094629][T21823] netlink: 108 bytes leftover after parsing attributes in process `syz.0.7261'. [ 674.426407][T21840] fuse: Bad value for 'fd' [ 674.514604][ T5354] gspca_spca501: reg write: error -71 [ 674.514803][ T5354] spca501 2-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 674.514881][ T5354] spca501 2-1:1.0: probe with driver spca501 failed with error -22 [ 674.548292][ T5354] usb 2-1: USB disconnect, device number 32 [ 675.347775][T21892] netlink: 148 bytes leftover after parsing attributes in process `syz.1.7289'. [ 675.360292][T21892] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7289'. [ 675.360349][T21892] netlink: 'syz.1.7289': attribute type 1 has an invalid length. [ 675.859861][T21915] tmpfs: Bad value for 'mpol' [ 676.052860][T21924] netlink: 5028 bytes leftover after parsing attributes in process `syz.1.7304'. [ 676.230313][T21933] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.7308'. [ 676.386782][T21942] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 677.040099][ T5354] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 677.070684][T21978] netlink: 'syz.0.7328': attribute type 4 has an invalid length. [ 677.227079][ T5354] usb 4-1: unable to get BOS descriptor or descriptor too short [ 677.230427][ T5354] usb 4-1: not running at top speed; connect to a high speed hub [ 677.230463][ T5354] usb 4-1: New USB device found, idVendor=0547, idProduct=0080, bcdDevice=2a.0d [ 677.237075][ T5354] usb 4-1: config 5 has an invalid interface number: 193 but max is 0 [ 677.237112][ T5354] usb 4-1: config 5 has no interface number 0 [ 677.237140][ T5354] usb 4-1: config 5 interface 193 has no altsetting 0 [ 677.246833][ T5354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.246860][ T5354] usb 4-1: Product: syz [ 677.246874][ T5354] usb 4-1: Manufacturer: syz [ 677.246888][ T5354] usb 4-1: SerialNumber: syz [ 677.487915][ T5354] usbtest 4-1:5.193: EZ-USB device [ 677.497054][ T5354] usbtest 4-1:5.193: full-speed {control bulk-in bulk-out} tests (+alt) [ 677.516944][ T5354] usb 4-1: USB disconnect, device number 31 [ 677.545726][T22008] openvswitch: netlink: IP tunnel dst address not specified [ 677.655670][T22015] overlayfs: conflicting options: userxattr,metacopy=on [ 677.754605][T22019] autofs4:pid:22019:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2.1), cmd(0xc0189374) [ 677.754901][T22019] autofs4:pid:22019:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 678.275050][T22042] overlay: Bad value for 'workdir' [ 678.664438][ T5354] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 678.730680][T22066] usb usb5: usbfs: process 22066 (syz.1.7366) did not claim interface 0 before use [ 678.842551][ T5354] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 678.845315][ T5354] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 678.845344][ T5354] usb 1-1: config 1 has no interface number 0 [ 678.845381][ T5354] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 678.845407][ T5354] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 678.845432][ T5354] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.847393][ T5354] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.847416][ T5354] usb 1-1: Product: syz [ 678.847430][ T5354] usb 1-1: Manufacturer: syz [ 678.847446][ T5354] usb 1-1: SerialNumber: syz [ 678.861241][T22049] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 678.978750][ T5725] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 679.019831][T22086] echo interval is out of bounds [ 679.019831][T22086] [ 679.031432][T22086] CIFS: VFS: echo interval is out of bounds [ 679.106985][T22049] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 679.158977][ T5725] usb 4-1: unable to get BOS descriptor or descriptor too short [ 679.159221][ T5725] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 679.160200][ T5725] usb 4-1: config 129 has an invalid interface number: 135 but max is 0 [ 679.160224][ T5725] usb 4-1: config 129 has an invalid interface number: 5 but max is 0 [ 679.160243][ T5725] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 679.160263][ T5725] usb 4-1: config 129 has no interface number 0 [ 679.160281][ T5725] usb 4-1: config 129 has no interface number 1 [ 679.160326][ T5725] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 679.160352][ T5725] usb 4-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 679.160386][ T5725] usb 4-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 679.160410][ T5725] usb 4-1: config 129 interface 135 has no altsetting 0 [ 679.160427][ T5725] usb 4-1: config 129 interface 5 has no altsetting 0 [ 679.176383][ T5725] usb 4-1: string descriptor 0 read error: -22 [ 679.176506][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.262430][ T5725] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 679.262482][ T5725] usb 4-1: MIDIStreaming interface descriptor not found [ 679.270894][ T9] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 679.328914][ T5354] usb 1-1: Incompatible driver and firmware versions [ 679.381892][ T5354] usb 1-1: USB disconnect, device number 24 [ 679.444828][ T9] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 679.456273][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.496712][ T9] usb 3-1: config 0 descriptor?? [ 679.511414][ T9] cp210x 3-1:0.0: cp210x converter detected [ 679.616433][ T5725] usb 4-1: USB disconnect, device number 32 [ 679.739917][ T9] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 679.739979][ T9] cp210x 3-1:0.0: querying part number failed [ 679.766951][ T9] usb 3-1: cp210x converter now attached to ttyUSB0 [ 679.786971][ T9] usb 3-1: USB disconnect, device number 121 [ 679.800966][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 679.814534][ T9] cp210x 3-1:0.0: device disconnected [ 680.461577][T22171] nfs: Bad value for 'source' [ 680.635755][T22182] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7392'. [ 680.761576][T22189] netlink: 'syz.3.7396': attribute type 13 has an invalid length. [ 681.059644][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 681.183807][T22214] netlink: 'syz.3.7409': attribute type 10 has an invalid length. [ 681.225152][T22214] team0 (unregistering): Port device team_slave_0 removed [ 681.232611][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 681.238673][ T9] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 681.253009][ T9] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 681.254698][ T9] usb 2-1: config 0 has no interface number 0 [ 681.255647][ T9] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 681.255681][ T9] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 681.301535][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.301580][ T9] usb 2-1: Product: syz [ 681.301612][ T9] usb 2-1: Manufacturer: syz [ 681.301629][ T9] usb 2-1: SerialNumber: syz [ 681.332465][ T9] usb 2-1: config 0 descriptor?? [ 681.354292][T22214] team0 (unregistering): Port device team_slave_1 removed [ 681.367702][T22214] team0 (unregistering): Port device netdevsim1 removed [ 681.423841][T22226] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7411'. [ 681.782572][T22239] netlink: 'syz.0.7416': attribute type 3 has an invalid length. [ 681.782617][T22239] netlink: 'syz.0.7416': attribute type 1 has an invalid length. [ 681.782649][T22239] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7416'. [ 681.782826][T22239] NCSI netlink: No device for ifindex 511 [ 681.815162][ T9] radio-si470x 2-1:0.35: si470x_get_report: usb_control_msg returned -71 [ 681.815479][ T9] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5 [ 681.838868][ T9] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 681.854956][ T9] usb 2-1: USB disconnect, device number 33 [ 682.342775][ T9] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 682.514759][ T9] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 682.525934][ T9] usb 1-1: config 0 has an invalid interface number: 37 but max is 1 [ 682.525975][ T9] usb 1-1: config 0 has an invalid interface number: 255 but max is 1 [ 682.526000][ T9] usb 1-1: config 0 has no interface number 0 [ 682.526019][ T9] usb 1-1: config 0 has no interface number 1 [ 682.526061][ T9] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 682.526099][ T9] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 682.526130][ T9] usb 1-1: config 0 interface 255 has no altsetting 0 [ 682.591309][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.591351][ T9] usb 1-1: Product: syz [ 682.591390][ T9] usb 1-1: Manufacturer: syz [ 682.591409][ T9] usb 1-1: SerialNumber: syz [ 682.620287][ T9] usb 1-1: config 0 descriptor?? [ 682.667241][ T9] usb 1-1: selecting invalid altsetting 0 [ 682.673158][ T9] usb 1-1: Could not set interface, error -22 [ 682.899975][ T9] usb 1-1: USB disconnect, device number 25 [ 683.072960][ T5354] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 683.257075][ T5725] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 683.257801][ T5354] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 683.263211][ T5354] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.266511][ T5354] usb 2-1: config 0 descriptor?? [ 683.419911][ T5725] usb 4-1: Using ep0 maxpacket: 8 [ 683.437857][ T5725] usb 4-1: unable to get BOS descriptor or descriptor too short [ 683.438087][ T5725] usb 4-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 683.444321][ T5725] usb 4-1: config 142 has an invalid interface number: 251 but max is 0 [ 683.444350][ T5725] usb 4-1: config 142 has no interface number 0 [ 683.444378][ T5725] usb 4-1: config 142 interface 251 has no altsetting 0 [ 683.450913][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.450941][ T5725] usb 4-1: Product: syz [ 683.450956][ T5725] usb 4-1: Manufacturer: syz [ 683.450970][ T5725] usb 4-1: SerialNumber: syz [ 683.701290][ T5725] cypress_m8 4-1:142.251: HID->COM RS232 Adapter converter detected [ 683.709693][ T5725] cyphidcom ttyUSB0: required endpoint is missing [ 683.725942][ T5725] usb 4-1: USB disconnect, device number 33 [ 683.735446][ T5354] usb 2-1: Cannot set MAC address [ 683.735839][ T5354] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 683.765923][ T5725] cypress_m8 4-1:142.251: device disconnected [ 683.811207][ T5354] usb 2-1: USB disconnect, device number 34 [ 684.193151][T22378] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7445'. [ 684.193366][T22378] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 685.183351][T22422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7463'. [ 685.183406][T22422] openvswitch: netlink: Flow key attr not present in new flow. [ 685.209035][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 685.375015][T22433] tipc: Enabling of bearer rejected, media not registered [ 685.383580][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 685.390206][ T9] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 685.400645][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 685.400693][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 245, changing to 11 [ 685.400739][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 58613, setting to 1024 [ 685.400771][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 685.400801][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 685.469795][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.469888][ T9] usb 2-1: Product: syz [ 685.469920][ T9] usb 2-1: Manufacturer: syz [ 685.469941][ T9] usb 2-1: SerialNumber: syz [ 685.497524][ T9] usb 2-1: config 0 descriptor?? [ 686.037975][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 686.044898][ T9] input input102: Device does not respond to id packet M [ 686.052678][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 686.058839][ T9] input input102: Device does not respond to id packet P [ 686.069940][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 686.076318][ T9] input input102: Device does not respond to id packet B [ 686.084274][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 686.091726][ T9] input input102: Device does not respond to id packet N [ 686.099408][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 686.105947][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 686.113809][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 686.120313][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 686.129532][ T9] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input102 [ 686.159853][ T9] usb 2-1: USB disconnect, device number 35 [ 686.521416][T22488] netlink: 'syz.2.7486': attribute type 4 has an invalid length. [ 686.601340][T22491] comedi comedi2: rti800: I/O base address not correctly aligned [ 687.070202][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 687.243946][ T9] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 687.254463][ T9] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 687.254505][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 687.254529][ T9] usb 1-1: config 0 has no interface number 0 [ 687.254562][ T9] usb 1-1: config 0 interface 4 has no altsetting 0 [ 687.295314][ T9] usb 1-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 687.304067][ T9] usb 1-1: Product: syz [ 687.304119][ T9] usb 1-1: SerialNumber: syz [ 687.316102][ T9] usb 1-1: config 0 descriptor?? [ 687.329182][ T9] ftdi_sio 1-1:0.4: FTDI USB Serial Device converter detected [ 687.352045][ T9] usb 1-1: Detected SIO [ 687.364607][ T9] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 687.549510][ T9] usb 1-1: USB disconnect, device number 26 [ 687.570650][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 687.582661][ T9] ftdi_sio 1-1:0.4: device disconnected [ 688.363561][T22586] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 688.574294][T22597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7530'. [ 688.729397][T22603] netlink: 'syz.1.7533': attribute type 75 has an invalid length. [ 688.780275][T22607] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 689.134736][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 689.302759][ T9] usb 2-1: New USB device found, idVendor=2912, idProduct=0001, bcdDevice= 0.00 [ 689.330986][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.331033][ T9] usb 2-1: Product: syz [ 689.331069][ T9] usb 2-1: Manufacturer: syz [ 689.331087][ T9] usb 2-1: SerialNumber: syz [ 690.492697][T22674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7565'. [ 690.664916][T22681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7568'. [ 690.827608][T22688] IPVS: Unknown mcast interface: pim6reg1 [ 690.874041][T22690] kAFS: No cell specified [ 690.986304][T22697] netlink: 'syz.3.7575': attribute type 12 has an invalid length. [ 691.397268][T22709] netlink: 393 bytes leftover after parsing attributes in process `syz.2.7578'. [ 691.768797][ T9] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 691.793642][ T9] usb 2-1: USB disconnect, device number 36 [ 692.080012][T22748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7591'. [ 692.142979][T22750] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7593'. [ 692.440060][T22762] kAFS: No cell specified [ 692.667753][T22770] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7602'. [ 692.738385][T22776] XFS (loop0): SB validate failed with error -5. [ 692.890190][T22789] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7609'. [ 693.114087][ T9] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 693.290776][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 693.299327][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 693.299379][ T9] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 693.319518][ T9] usb 2-1: config 1 has an invalid descriptor of length 98, skipping remainder of the config [ 693.319561][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 693.346953][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.347000][ T9] usb 2-1: Product: syz [ 693.347037][ T9] usb 2-1: Manufacturer: syz [ 693.347056][ T9] usb 2-1: SerialNumber: syz [ 693.633114][ T9] usb 2-1: 3:0: failed to get current value for ch 1 (-71) [ 693.642085][ T9] usb 2-1: 3:0: failed to get current value for ch 2 (-71) [ 693.654233][ T9] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 693.666081][ T9] usb 2-1: 3:0: cannot get min/max values for control 2 (id 3) [ 693.674180][ T9] usb 2-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 693.674208][ T9] usb 2-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1 [ 693.695548][ T9] usb 2-1: 3:0: cannot get min/max values for control 3 (id 3) [ 693.706020][ T9] usb 2-1: 3:0: cannot get min/max values for control 4 (id 3) [ 693.716684][ T9] usb 2-1: 3:0: cannot get min/max values for control 4 (id 3) [ 693.725696][ T9] usb 2-1: 3:0: cannot get min/max values for control 5 (id 3) [ 693.736325][ T9] usb 2-1: 3:0: cannot get min/max values for control 8 (id 3) [ 693.747099][ T9] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 693.764213][ T9] usb 2-1: 3:0: failed to get current value for ch 1 (-71) [ 693.778307][ T9] usb 2-1: 3:0: failed to get current value for ch 2 (-71) [ 693.788369][ T9] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 693.804860][ T9] usb 2-1: 3:0: cannot get min/max values for control 12 (id 3) [ 693.816212][ T9] usb 2-1: 3:0: cannot get min/max values for control 12 (id 3) [ 693.826804][ T9] usb 2-1: 3:0: failed to get current value for ch 1 (-71) [ 693.834514][ T9] usb 2-1: 3:0: failed to get current value for ch 2 (-71) [ 693.880339][ T9] usb 2-1: 3:0: cannot get min/max values for control 3 (id 3) [ 693.889691][ T9] usb 2-1: 3:0: cannot get min/max values for control 5 (id 3) [ 693.931570][ T9] usb 2-1: USB disconnect, device number 37 [ 693.948666][ T5354] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 693.958734][T22844] /dev/sg0: Can't lookup blockdev [ 694.011886][T21180] udevd[21180]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 694.086233][T22853] openvswitch: netlink: IP tunnel dst address not specified [ 694.111913][ T5354] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 694.114919][ T5354] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 694.114952][ T5354] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 694.114976][ T5354] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 694.116958][ T5354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.116982][ T5354] usb 4-1: Product: syz [ 694.116997][ T5354] usb 4-1: Manufacturer: syz [ 694.117010][ T5354] usb 4-1: SerialNumber: syz [ 694.126379][ T5354] usb 4-1: config 0 descriptor?? [ 694.128359][T22830] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 694.128465][T22830] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 694.144941][ T5354] usb 4-1: ucan: probing device on interface #0 [ 694.249091][T22857] netlink: 108 bytes leftover after parsing attributes in process `syz.2.7629'. [ 694.583603][ T5354] usb 4-1: ucan: failed to retrieve device info [ 694.583809][ T5354] usb 4-1: ucan: probe failed; try to update the device firmware [ 694.621395][ T5354] usb 4-1: USB disconnect, device number 34 [ 694.998847][ T923] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 695.162371][ T923] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 0.06 [ 695.173982][ T923] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 695.187524][ T923] usb 2-1: config 0 interface 0 has no altsetting 0 [ 695.199759][ T923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 695.199804][ T923] usb 2-1: SerialNumber: syz [ 695.219700][ T923] usb 2-1: config 0 descriptor?? [ 695.261435][T22913] IPVS: length: 140 != 8 [ 695.378119][T22918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7651'. [ 695.709547][ T9] usb 2-1: USB disconnect, device number 38 [ 696.398127][T22971] comedi comedi3: fl512: I/O base address not correctly aligned [ 696.407898][T22972] netlink: 'syz.2.7673': attribute type 6 has an invalid length. [ 696.408093][T22972] netlink: 'syz.2.7673': attribute type 6 has an invalid length. [ 697.037502][T23000] IPv6: NLM_F_CREATE should be specified when creating new route [ 697.604805][T23027] binder: 23025:23027 ioctl 400c620e 200000000140 returned -22 [ 697.652079][ T31] audit: type=1326 audit(1787765449.840:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23031 comm="syz.3.7706" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb546b9e0d9 code=0x7ffc0000 [ 697.680319][ T31] audit: type=1326 audit(1787765449.868:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23031 comm="syz.3.7706" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb546b9e0d9 code=0x7ffc0000 [ 697.707479][ T31] audit: type=1326 audit(1787765449.905:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23031 comm="syz.3.7706" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb546b5e90e code=0x7ffc0000 [ 697.733961][ T31] audit: type=1326 audit(1787765449.923:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23031 comm="syz.3.7706" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb546b9dd6b code=0x7ffc0000 [ 697.761582][ T31] audit: type=1326 audit(1787765449.951:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23031 comm="syz.3.7706" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb546b9dd6b code=0x7ffc0000 [ 697.788482][ T31] audit: type=1326 audit(1787765449.969:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23031 comm="syz.3.7706" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb546b9dd6b code=0x7ffc0000 [ 697.788545][ T31] audit: type=1326 audit(1787765449.969:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23031 comm="syz.3.7706" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb546b9dd6b code=0x7ffc0000 [ 697.894405][ T31] audit: type=1326 audit(1787765450.071:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23031 comm="syz.3.7706" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb546b9dd6b code=0x7ffc0000 [ 697.967477][ T31] audit: type=1326 audit(1787765450.145:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23031 comm="syz.3.7706" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb546b9dd6b code=0x7ffc0000 [ 697.998742][T23041] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7709'. [ 698.009920][T23041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7709'. [ 698.040241][ T5354] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 698.131805][ T31] audit: type=1326 audit(1787765450.292:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23031 comm="syz.3.7706" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb546b9dd6b code=0x7ffc0000 [ 698.306872][ T5354] usb 4-1: Using ep0 maxpacket: 8 [ 698.323847][ T5354] usb 4-1: unable to get BOS descriptor or descriptor too short [ 698.324280][ T5354] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=44.07 [ 698.339379][ T5354] usb 4-1: config 1 has an invalid interface number: 8 but max is 0 [ 698.339409][ T5354] usb 4-1: config 1 has no interface number 0 [ 698.339447][ T5354] usb 4-1: config 1 interface 8 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 698.339469][ T5354] usb 4-1: config 1 interface 8 altsetting 7 has an endpoint descriptor with address 0x11, changing to 0x1 [ 698.339493][ T5354] usb 4-1: config 1 interface 8 altsetting 7 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 698.339517][ T5354] usb 4-1: config 1 interface 8 altsetting 7 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 698.339542][ T5354] usb 4-1: config 1 interface 8 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 698.339567][ T5354] usb 4-1: config 1 interface 8 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 698.339588][ T5354] usb 4-1: config 1 interface 8 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 698.339613][ T5354] usb 4-1: config 1 interface 8 has no altsetting 0 [ 698.355184][ T5354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.355214][ T5354] usb 4-1: Product: syz [ 698.355228][ T5354] usb 4-1: Manufacturer: syz [ 698.355242][ T5354] usb 4-1: SerialNumber: syz [ 698.657708][ T5354] cxacru 4-1:1.8: usbatm_usb_probe: invalid endpoint 02! [ 698.658065][ T5354] cxacru 4-1:1.8: probe with driver cxacru failed with error -22 [ 698.681894][ T5354] usb 4-1: USB disconnect, device number 35 [ 698.709423][T23078] netlink: 'syz.1.7724': attribute type 4 has an invalid length. [ 699.328777][T23105] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 699.427922][T23110] autofs4:pid:23110:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2.1), cmd(0xc0189374) [ 699.429292][T23110] autofs4:pid:23110:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 699.819849][T23133] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7749'. [ 699.862516][ T9] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 700.039335][ T9] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 700.051066][ T9] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 700.059879][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.070907][ T9] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 700.070953][ T9] usb 3-1: Manufacturer: syz [ 700.090469][ T9] usb 3-1: config 0 descriptor?? [ 700.200391][ T9] rc_core: IR keymap rc-hauppauge not found [ 700.200430][ T9] Registered IR keymap rc-empty [ 700.201730][ T9] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1 [ 700.230384][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1/input103 [ 700.369362][ C0] igorplugusb 3-1:0.0: Error: urb status = -32 [ 700.395030][ T5354] usb 3-1: USB disconnect, device number 122 [ 700.618410][T23181] ================================================================== [ 700.618430][T23181] BUG: KASAN: slab-use-after-free in string+0x216/0x2d0 [ 700.618576][T23181] Read of size 1 at addr ffff88802a691758 by task syz.3.7762/23181 [ 700.618595][T23181] [ 700.618607][T23181] CPU: 1 UID: 0 PID: 23181 Comm: syz.3.7762 Not tainted syzkaller #0 PREEMPT(full) [ 700.618629][T23181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 700.618642][T23181] Call Trace: [ 700.618651][T23181] [ 700.618660][T23181] dump_stack_lvl+0xe8/0x150 [ 700.618689][T23181] print_address_description+0x55/0x1e0 [ 700.618727][T23181] ? string ** replaying previous printk message ** [ 700.618727][T23181] ? string+0x216/0x2d0 [ 700.618750][T23181] print_report+0x58/0x70 [ 700.618775][T23181] kasan_report+0x117/0x150 [ 700.618803][T23181] ? string+0x216/0x2d0 [ 700.618841][T23181] string+0x216/0x2d0 [ 700.618866][T23181] vsnprintf+0x74a/0xef0 [ 700.618894][T23181] seq_printf+0x188/0x290 [ 700.618921][T23181] ? __kmalloc_noprof+0x38c/0x720 [ 700.618947][T23181] ? __pfx_seq_printf+0x10/0x10 [ 700.618976][T23181] ? __asan_memcpy+0x40/0x70 [ 700.619004][T23181] input_devices_seq_show+0x10f/0x640 [ 700.619111][T23181] seq_read_iter+0x8d5/0xca0 [ 700.619148][T23181] seq_read+0x367/0x480 [ 700.619179][T23181] ? __pfx_seq_read+0x10/0x10 [ 700.619206][T23181] ? __mutex_trylock_common+0x15f/0x270 [ 700.619232][T23181] ? common_file_perm+0x20e/0x2b0 [ 700.619299][T23181] ? __pfx_seq_read+0x10/0x10 [ 700.619326][T23181] proc_reg_read+0x1e9/0x2e0 [ 700.619412][T23181] ? __pfx_proc_reg_read+0x10/0x10 [ 700.619438][T23181] vfs_read+0x213/0xa80 [ 700.619474][T23181] ? __pfx___mutex_lock+0x10/0x10 [ 700.619493][T23181] ? __pfx_vfs_read+0x10/0x10 [ 700.619573][T23181] ? __fget_files+0x2a/0x420 [ 700.619597][T23181] ? __fget_files+0x3a2/0x420 [ 700.619617][T23181] ? __fget_files+0x2a/0x420 [ 700.619642][T23181] ksys_read+0x150/0x270 [ 700.619663][T23181] ? __pfx_ksys_read+0x10/0x10 [ 700.619689][T23181] do_syscall_64+0x166/0x520 [ 700.619705][T23181] ? trace_irq_disable+0x3b/0x140 [ 700.619729][T23181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.619748][T23181] ? clear_bhb_loop+0x70/0xc0 [ 700.619767][T23181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.619786][T23181] RIP: 0033:0x7fb546b9e0d9 [ 700.619802][T23181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.619818][T23181] RSP: 002b:00007fb5479c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 700.619841][T23181] RAX: ffffffffffffffda RBX: 00007fb546e25fa0 RCX: 00007fb546b9e0d9 [ 700.619856][T23181] RDX: 0000000000002020 RSI: 0000200000002fc0 RDI: 0000000000000003 [ 700.619870][T23181] RBP: 00007fb546c35024 R08: 0000000000000000 R09: 0000000000000000 [ 700.619883][T23181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 700.619895][T23181] R13: 00007fb546e26038 R14: 00007fb546e25fa0 R15: 00007ffde12fe078 [ 700.619917][T23181] [ 700.619925][T23181] [ 700.619938][T23181] Allocated by task 23122: [ 700.619950][T23181] kasan_save_track+0x3e/0x80 [ 700.619979][T23181] __kasan_kmalloc+0x93/0xb0 [ 700.620002][T23181] __kmalloc_noprof+0x36b/0x720 [ 700.620021][T23181] sk_prot_alloc+0xe7/0x210 [ 700.620143][T23181] sk_alloc+0x3a/0x390 [ 700.620160][T23181] __netlink_create+0x62/0x260 [ 700.620231][T23181] netlink_create+0x3ca/0x590 [ 700.620288][T23181] __sock_create+0x4b3/0x9d0 [ 700.620302][T23181] __sys_socket+0xd6/0x1b0 [ 700.620317][T23181] __x64_sys_socket+0x7a/0x90 [ 700.620332][T23181] do_syscall_64+0x166/0x520 [ 700.620347][T23181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.620364][T23181] [ 700.620369][T23181] Freed by task 15: [ 700.620380][T23181] kasan_save_track+0x3e/0x80 [ 700.620406][T23181] kasan_save_free_info+0x40/0x50 [ 700.620427][T23181] __kasan_slab_free+0x5c/0x80 [ 700.620451][T23181] kfree+0x1c5/0x650 [ 700.620468][T23181] __sk_destruct+0x751/0x9d0 [ 700.620486][T23181] rcu_core+0x926/0x1260 [ 700.620520][T23181] handle_softirqs+0x226/0x860 [ 700.620554][T23181] run_ksoftirqd+0x36/0x60 [ 700.620574][T23181] smpboot_thread_fn+0x565/0xa70 [ 700.620595][T23181] kthread+0x38b/0x480 [ 700.620617][T23181] ret_from_fork+0x514/0xb70 [ 700.620658][T23181] ret_from_fork_asm+0x1a/0x30 [ 700.620681][T23181] [ 700.620687][T23181] Last potentially related work creation: [ 700.620695][T23181] kasan_save_stack+0x3e/0x60 [ 700.620721][T23181] kasan_record_aux_stack+0xbd/0xd0 [ 700.620742][T23181] call_rcu+0xee/0x8b0 [ 700.620759][T23181] netlink_release+0x16be/0x1a80 [ 700.620784][T23181] __sock_release+0xa0/0x1f0 [ 700.620844][T23181] sock_close+0x1c/0x30 [ 700.620869][T23181] __fput+0x418/0xa50 [ 700.620884][T23181] task_work_run+0x1d9/0x270 [ 700.620909][T23181] exit_to_user_mode_loop+0x204/0x770 [ 700.620936][T23181] do_syscall_64+0x328/0x520 [ 700.620952][T23181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.620971][T23181] [ 700.620976][T23181] The buggy address belongs to the object at ffff88802a691000 [ 700.620976][T23181] which belongs to the cache kmalloc-2k of size 2048 [ 700.620994][T23181] The buggy address is located 1880 bytes inside of [ 700.620994][T23181] freed 2048-byte region [ffff88802a691000, ffff88802a691800) [ 700.621015][T23181] [ 700.621020][T23181] The buggy address belongs to the physical page: [ 700.621037][T23181] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a690 [ 700.621057][T23181] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 700.621074][T23181] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 700.621092][T23181] page_type: f5(slab) [ 700.621111][T23181] raw: 00fff00000000040 ffff88813ff16000 dead000000000100 dead000000000122 [ 700.621129][T23181] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 700.621148][T23181] head: 00fff00000000040 ffff88813ff16000 dead000000000100 dead000000000122 [ 700.621166][T23181] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 700.621184][T23181] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 700.621202][T23181] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 700.621213][T23181] page dumped because: kasan: bad access detected [ 700.621227][T23181] page_owner tracks the page as allocated [ 700.621235][T23181] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1013, tgid 1013 (kworker/u8:7), ts 7357397406 [ 700.621266][T23181] post_alloc_hook+0x1f9/0x250 [ 700.621289][T23181] get_page_from_freelist+0x2209/0x2280 [ 700.621315][T23181] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 700.621340][T23181] allocate_slab+0x7d/0x620 [ 700.621358][T23181] refill_objects+0x2d5/0x350 [ 700.621377][T23181] __pcs_replace_empty_main+0x2c8/0x6c0 [ 700.621395][T23181] __kmalloc_noprof+0x47b/0x720 [ 700.621417][T23181] scsi_alloc_target+0x138/0xbd0 [ 700.621531][T23181] __scsi_scan_target+0xff/0xd10 [ 700.621547][T23181] scsi_scan_host_selected+0x391/0x6c0 [ 700.621564][T23181] do_scan_async+0x10e/0x660 [ 700.621580][T23181] async_run_entry_fn+0x9d/0x430 [ 700.621602][T23181] process_scheduled_works+0xc3d/0x1630 [ 700.621622][T23181] worker_thread+0xa47/0xfb0 [ 700.621641][T23181] kthread+0x38b/0x480 [ 700.621665][T23181] ret_from_fork+0x514/0xb70 [ 700.621688][T23181] page_owner free stack trace missing [ 700.621696][T23181] [ 700.621701][T23181] Memory state around the buggy address: [ 700.621712][T23181] ffff88802a691600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 700.621725][T23181] ffff88802a691680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 700.621737][T23181] >ffff88802a691700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 700.621747][T23181] ^ [ 700.621759][T23181] ffff88802a691780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 700.621770][T23181] ffff88802a691800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 700.621779][T23181] ================================================================== [ 700.687079][T23181] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 701.405914][T23181] CPU: 1 UID: 0 PID: 23181 Comm: syz.3.7762 Not tainted syzkaller #0 PREEMPT(full) [ 701.415284][T23181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 701.425342][T23181] Call Trace: [ 701.428623][T23181] [ 701.431546][T23181] vpanic+0x56d/0xa60 [ 701.435543][T23181] ? __pfx_vpanic+0x10/0x10 [ 701.440060][T23181] ? __pfx___schedule+0x10/0x10 [ 701.444947][T23181] panic+0xc5/0xd0 [ 701.448689][T23181] ? __pfx_panic+0x10/0x10 [ 701.453122][T23181] ? preempt_schedule_thunk+0x16/0x40 [ 701.458502][T23181] ? string+0x216/0x2d0 [ 701.462657][T23181] check_panic_on_warn+0x89/0xb0 [ 701.467745][T23181] ? string+0x216/0x2d0 [ 701.471900][T23181] end_report+0x73/0x170 [ 701.476139][T23181] ? string+0x216/0x2d0 [ 701.480292][T23181] kasan_report+0x128/0x150 [ 701.484803][T23181] ? string+0x216/0x2d0 [ 701.488988][T23181] string+0x216/0x2d0 [ 701.492992][T23181] vsnprintf+0x74a/0xef0 [ 701.497246][T23181] seq_printf+0x188/0x290 [ 701.501591][T23181] ? __kmalloc_noprof+0x38c/0x720 [ 701.506646][T23181] ? __pfx_seq_printf+0x10/0x10 [ 701.511506][T23181] ? __asan_memcpy+0x40/0x70 [ 701.516125][T23181] input_devices_seq_show+0x10f/0x640 [ 701.521509][T23181] seq_read_iter+0x8d5/0xca0 [ 701.526117][T23181] seq_read+0x367/0x480 [ 701.530278][T23181] ? __pfx_seq_read+0x10/0x10 [ 701.534970][T23181] ? __mutex_trylock_common+0x15f/0x270 [ 701.540520][T23181] ? common_file_perm+0x20e/0x2b0 [ 701.545565][T23181] ? __pfx_seq_read+0x10/0x10 [ 701.550267][T23181] proc_reg_read+0x1e9/0x2e0 [ 701.554869][T23181] ? __pfx_proc_reg_read+0x10/0x10 [ 701.559992][T23181] vfs_read+0x213/0xa80 [ 701.564147][T23181] ? __pfx___mutex_lock+0x10/0x10 [ 701.569167][T23181] ? __pfx_vfs_read+0x10/0x10 [ 701.573848][T23181] ? __fget_files+0x2a/0x420 [ 701.578439][T23181] ? __fget_files+0x3a2/0x420 [ 701.583120][T23181] ? __fget_files+0x2a/0x420 [ 701.587714][T23181] ksys_read+0x150/0x270 [ 701.591964][T23181] ? __pfx_ksys_read+0x10/0x10 [ 701.596732][T23181] do_syscall_64+0x166/0x520 [ 701.601323][T23181] ? trace_irq_disable+0x3b/0x140 [ 701.606371][T23181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.612440][T23181] ? clear_bhb_loop+0x70/0xc0 [ 701.617119][T23181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.623017][T23181] RIP: 0033:0x7fb546b9e0d9 [ 701.627430][T23181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 701.647041][T23181] RSP: 002b:00007fb5479c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 701.655462][T23181] RAX: ffffffffffffffda RBX: 00007fb546e25fa0 RCX: 00007fb546b9e0d9 [ 701.663431][T23181] RDX: 0000000000002020 RSI: 0000200000002fc0 RDI: 0000000000000003 [ 701.671407][T23181] RBP: 00007fb546c35024 R08: 0000000000000000 R09: 0000000000000000 [ 701.679390][T23181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 701.687366][T23181] R13: 00007fb546e26038 R14: 00007fb546e25fa0 R15: 00007ffde12fe078 [ 701.695431][T23181] [ 701.698803][T23181] Kernel Offset: disabled [ 701.703168][T23181] Rebooting in 86400 seconds..