last executing test programs: 2m39.604307296s ago: executing program 4 (id=4518): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2m37.692076741s ago: executing program 4 (id=4542): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x3b) 2m37.26978144s ago: executing program 4 (id=4548): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xfffd, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_sa={0x2, 0x1, 0x4d5, 0x0, 0x0, 0x8, 0x2, 0x40000001}, @sadb_address={0x3, 0x5, 0x32, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}, 0x1, 0x7}, 0x0) 2m36.703204528s ago: executing program 4 (id=4556): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x1001, 0x2}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r0, &(0x7f00000001c0), 0x0}, 0x20) 2m36.484571435s ago: executing program 4 (id=4560): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syncfs(0xffffffffffffffff) 2m36.150745994s ago: executing program 4 (id=4566): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x2a401) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0xdff, 0x3f, 0x0, 0xffffffff, 0x0}) 2m20.993667968s ago: executing program 32 (id=4566): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x2a401) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0xdff, 0x3f, 0x0, 0xffffffff, 0x0}) 1.567107999s ago: executing program 1 (id=6831): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/uevent_seqnum', 0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000000), 0x0, 0x2, 0x1) fgetxattr(r0, &(0x7f0000000000)=ANY=[], 0x0, 0x8) 1.419084145s ago: executing program 5 (id=6833): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001c0000001800018014000200"], 0x2c}}, 0x0) 1.400904446s ago: executing program 2 (id=6834): r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x800d4b1, 0x13100, 0x4, 0x2db}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xfffffffffffffff9, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7}) io_uring_enter(r0, 0x2def, 0xb80c, 0xe, 0x0, 0x0) 1.355904699s ago: executing program 3 (id=6835): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x5}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 1.33507359s ago: executing program 1 (id=6836): r0 = socket$key(0xf, 0x3, 0x2) unshare(0xa000400) signalfd(r0, &(0x7f0000000000)={[0x1]}, 0x8) 1.250970154s ago: executing program 0 (id=6837): unshare(0x24060400) r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r0, 0x9, 0x4) 1.220360423s ago: executing program 5 (id=6838): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x0, 0x83}, {0x9, 0x0, 0xb187}], 0x2, 0x201, 0x0, 0x0, 0x42, 0x5c}) 1.1565784s ago: executing program 2 (id=6839): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xff}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)) 1.133390536s ago: executing program 3 (id=6840): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x800) ioctl$int_in(r0, 0x5452, &(0x7f0000006a00)=0x1) fchmod(r0, 0xa0) 1.109759212s ago: executing program 1 (id=6841): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000001200)="4c4228369f88e91870041ef4c8baa41449dc6ad5553764e898ddee1dfbb587ef4e6854a6bea12aecd99ac5dd4e39745d195df155a8628b7483b791d4de8609a893ccfbe9dc5c2ed555df193d92968b81da97fe3f0f220dd48b29c98152d9ecb2bb68cbf0bfe454a10e0adf453bd021ba3b502665c757d209f1fa9daa8979aa1fc22684d52bba1cd3c5946a6ea16b40f3bf8cc0134fb55a63817f6bac437682ed4c30147c2d86997f970ba094a19b0de4904bf83ff6fc3f0e46aba38692387ce1", 0x4}, 0x4c) syz_clone(0x4029000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.089853287s ago: executing program 0 (id=6842): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x7}, 0x1c) 968.992037ms ago: executing program 2 (id=6843): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x31, &(0x7f00000008c0)={0xe, 0xfffffff9, 0x6}, 0x0) 968.351086ms ago: executing program 5 (id=6844): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) 866.647659ms ago: executing program 3 (id=6845): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1220}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0) 757.517101ms ago: executing program 0 (id=6846): r0 = socket$inet(0x2, 0x3, 0x33) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000000)={0x6, 0xb}) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 751.990427ms ago: executing program 2 (id=6847): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x2401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x54, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x20, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x3fd, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x5, 0x1, 0x32, 0x98, 0x7f, 0x0, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0xfe, 0x4, 0x40, 0x9, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x3042c26b, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffff0000, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x4, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0x2, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x2, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x80000004, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x7, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x5, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x8, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x7, 0xfffffeff, 0x100, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0xe, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x6, 0x1, 0xa9c, 0x9, 0x9, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0xb, 0x4, 0x8000005, 0x3, 0x4b5f, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x0, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x7f, 0x5, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb8, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x81, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0x9, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0x10, 0x0, 0x3, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x0, 0x7f, 0x6, 0x8, 0x40, 0x2, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x2, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa958, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x1c00, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x6, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x5, 0xffff8000, 0xe0, 0xfffffffb, 0x85, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x101, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x4000, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x8, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x8000002, 0x8, 0x2b, 0x200006, 0x4, 0x1, 0x2, 0xfb4, 0xbf9, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x8, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x8, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x10001, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6330, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0x7, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x8, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0xb, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0x65, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x7, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x8, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x7, 0x2, 0x2, 0x43, 0x3ff, 0x8, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 677.807253ms ago: executing program 5 (id=6848): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001c40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3f}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78}}, 0x0) 548.24109ms ago: executing program 0 (id=6849): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r0, 0x100, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 537.724414ms ago: executing program 2 (id=6850): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x3}, 0x1c) 516.054741ms ago: executing program 3 (id=6851): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x44a01, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/time_for_children\x00') open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f1000000"], 0x4000) 458.874562ms ago: executing program 1 (id=6852): r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000040), 0x4) 386.250634ms ago: executing program 5 (id=6853): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x2098, 0x5, 0x1000, 0xfffffffd}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@delchain={0x24, 0x5f, 0xf31, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 367.687085ms ago: executing program 0 (id=6854): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f00000006c0)=[{&(0x7f00000000c0)="f3", 0x1}], 0x1, 0x17, 0x0) 254.967997ms ago: executing program 2 (id=6855): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="10010000000000407d1ed43000000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xa, "050d00"}, @local=@item_012={0x0, 0x2, 0x9}, @global=@item_012={0x0, 0x1, 0x1}]}}, 0x0}, 0x0) 252.949037ms ago: executing program 1 (id=6856): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x7}, 0x8) 216.811022ms ago: executing program 5 (id=6857): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)=@mmap={0x0, 0x2, 0x4, 0x100, 0x0, {}, {0x0, 0xc, 0x0, 0x0, 0x0, 0x0, "180cf300"}}) 204.216619ms ago: executing program 3 (id=6858): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000100)=[{&(0x7f0000000080)=""/86, 0x56}], 0xffa1}}], 0x48}, 0x0) 122.634373ms ago: executing program 0 (id=6859): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r1, 0xb09, 0x70bd29, 0x25dfdbfd, {0x5}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x80) 47.271747ms ago: executing program 1 (id=6860): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 0s ago: executing program 3 (id=6861): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x765, {"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", 0x1000}}, 0x1006) kernel console output (not intermixed with test programs): ype 26 has an invalid length. [ 412.792185][T14581] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4151'. [ 413.040241][ T5946] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 413.231325][ T5946] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.251837][ T5946] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 413.295531][ T5946] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 413.312884][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 413.339673][ T5946] usb 3-1: SerialNumber: syz [ 413.400829][ T5946] usb 3-1: 0:2 : does not exist [ 413.836787][ T29] usb 3-1: USB disconnect, device number 93 [ 413.884398][T14610] rtc_cmos 00:00: Alarms can be up to one day in the future [ 414.062414][ T797] usb 2-1: new low-speed USB device number 89 using dummy_hcd [ 414.247110][ T797] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 414.267943][ T797] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 414.300495][ T797] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 414.339982][ T797] usb 2-1: config 1 interface 0 has no altsetting 0 [ 414.362683][ T797] usb 2-1: string descriptor 0 read error: -22 [ 414.369256][ T797] usb 2-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 414.399795][ T797] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 414.448491][ T797] usb 2-1: 0:2 : does not exist [ 414.486974][ T30] audit: type=1326 audit(1773042831.805:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14625 comm="syz.4.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd5d9c799 code=0x7ffc0000 [ 414.604986][ T30] audit: type=1326 audit(1773042831.805:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14625 comm="syz.4.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd5d9c799 code=0x7ffc0000 [ 414.705575][ T797] usb-storage 2-1:1.1: USB Mass Storage device detected [ 414.749711][ T30] audit: type=1326 audit(1773042831.845:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14625 comm="syz.4.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7fccd5d9c799 code=0x7ffc0000 [ 414.839674][ T30] audit: type=1326 audit(1773042831.845:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14625 comm="syz.4.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd5d9c799 code=0x7ffc0000 [ 414.866397][ T30] audit: type=1326 audit(1773042831.845:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14625 comm="syz.4.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd5d9c799 code=0x7ffc0000 [ 415.133053][ T797] usb 2-1: us122l: couldn't allocate write buffer [ 415.160853][ T797] snd-usb-us122l 2-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 415.215160][ T797] usb 2-1: USB disconnect, device number 89 [ 416.669819][T14704] futex_wake_op: syz.0.4212 tries to shift op by 32; fix this program [ 417.324508][T14735] netlink: 'syz.4.4228': attribute type 21 has an invalid length. [ 417.352141][T14735] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4228'. [ 417.400985][T14735] netlink: 'syz.4.4228': attribute type 4 has an invalid length. [ 417.425866][T14735] netlink: 'syz.4.4228': attribute type 3 has an invalid length. [ 417.451447][T14735] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4228'. [ 418.077091][T14768] netlink: 'syz.0.4243': attribute type 29 has an invalid length. [ 418.110882][T14768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4243'. [ 418.589899][T14786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4255'. [ 418.598952][T14786] netlink: 'syz.0.4255': attribute type 3 has an invalid length. [ 418.912896][T14801] delete_channel: no stack [ 419.103520][T14805] block device autoloading is deprecated and will be removed. [ 419.110407][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 419.357852][T14819] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4269'. [ 419.582525][T14827] netlink: 'syz.2.4272': attribute type 1 has an invalid length. [ 419.629921][T14827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.025966][T14848] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4284'. [ 420.972427][ T30] audit: type=1326 audit(1773042838.285:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14885 comm="syz.0.4303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71419c799 code=0x7ffc0000 [ 420.995796][T14884] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.069727][ T30] audit: type=1326 audit(1773042838.285:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14885 comm="syz.0.4303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71419c799 code=0x7ffc0000 [ 421.176432][ T30] audit: type=1326 audit(1773042838.325:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14885 comm="syz.0.4303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe71419c799 code=0x7ffc0000 [ 421.233769][T14893] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4306'. [ 421.244410][ T30] audit: type=1326 audit(1773042838.325:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14885 comm="syz.0.4303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71419c799 code=0x7ffc0000 [ 421.244464][ T30] audit: type=1326 audit(1773042838.325:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14885 comm="syz.0.4303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71419c799 code=0x7ffc0000 [ 421.409693][ T5946] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 421.567922][ T797] IPVS: starting estimator thread 0... [ 421.582225][ T5946] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 421.599400][ T5946] usb 3-1: config 0 has no interface number 0 [ 421.629527][ T5946] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 421.669932][T14903] IPVS: using max 27 ests per chain, 64800 per kthread [ 421.687153][ T5946] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 421.708525][ T5946] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 421.742209][ T5946] usb 3-1: config 0 interface 2 has no altsetting 0 [ 421.768372][ T5946] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 421.788169][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.807704][ T5946] usb 3-1: Product: syz [ 421.828365][ T5946] usb 3-1: Manufacturer: syz [ 421.850303][ T5946] usb 3-1: SerialNumber: syz [ 421.873487][ T5946] usb 3-1: config 0 descriptor?? [ 421.889717][T14888] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 421.899210][T14888] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 422.120795][ T5946] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 422.329154][ T5946] usb 3-1: USB disconnect, device number 94 [ 422.409242][ T6832] udevd[6832]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 422.610332][T14928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.660341][T14928] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.708711][T14928] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 422.918182][T14940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4329'. [ 424.578436][T15002] netlink: 'syz.3.4360': attribute type 30 has an invalid length. [ 424.874756][ T2346] pvrusb2: request_firmware fatal error with code=-110 [ 424.919783][ T2346] pvrusb2: Failure uploading firmware1 [ 424.925582][ T2346] pvrusb2: Device initialization was not successful. [ 424.980062][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 425.019884][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 425.052718][ T5918] pvrusb2: Device being rendered inoperable [ 425.762033][T15047] xt_l2tp: invalid flags combination: 8 [ 425.879971][ T5918] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 426.110790][ T5918] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 426.142236][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 426.177662][ T5918] usb 2-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 426.189230][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.206489][ T5918] usb 2-1: Product: syz [ 426.243643][ T5918] usb 2-1: Manufacturer: syz [ 426.248365][ T5918] usb 2-1: SerialNumber: syz [ 426.282915][ T5918] usb 2-1: config 0 descriptor?? [ 426.570593][ T5918] input: Griffin PowerMate as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input27 [ 426.617878][ C1] powermate: config urb returned -71 [ 426.623547][ C1] powermate: config urb returned -71 [ 426.629136][ C1] powermate: config urb returned -71 [ 426.635453][ C1] powermate: config urb returned -71 [ 426.666481][ T5918] usb 2-1: USB disconnect, device number 90 [ 426.672527][ C1] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 427.037096][T15087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4402'. [ 427.450015][T15103] netlink: 'syz.2.4409': attribute type 10 has an invalid length. [ 427.459316][T15103] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 427.554392][T15103] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 428.049720][ T5918] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 428.222942][ T5918] usb 2-1: Using ep0 maxpacket: 8 [ 428.239516][ T5918] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.269840][T15127] netlink: 'syz.0.4422': attribute type 28 has an invalid length. [ 428.277746][T15127] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4422'. [ 428.286569][ T5918] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 428.316453][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.343974][ T5918] usb 2-1: Product: syz [ 428.358579][ T5918] usb 2-1: Manufacturer: syz [ 428.375023][ T5918] usb 2-1: SerialNumber: syz [ 428.411177][ T5918] usb 2-1: config 0 descriptor?? [ 428.481336][ T5918] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 428.488360][ T5918] usb 2-1: selecting invalid altsetting 1 [ 428.710528][ T5918] gspca_stk014: init reg: 0x00 [ 428.715510][ T5918] stk014 2-1:0.0: probe with driver stk014 failed with error -5 [ 428.936495][ T5918] usb 2-1: USB disconnect, device number 91 [ 429.860092][ T5918] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 430.071404][ T5918] usb 4-1: Using ep0 maxpacket: 32 [ 430.085594][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.117033][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.159664][ T5918] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 430.187447][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.218345][ T5918] usb 4-1: config 0 descriptor?? [ 430.250237][ T5918] hub 4-1:0.0: USB hub found [ 430.444864][ T5918] hub 4-1:0.0: 1 port detected [ 430.498397][T15191] ip6t_srh: unknown srh match flags 4000 [ 430.651331][ T5918] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 430.689277][ T5918] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 430.720970][ T5918] usbhid 4-1:0.0: can't add hid device: -71 [ 430.727540][ T5918] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 430.791161][ T5918] usb 4-1: USB disconnect, device number 88 [ 431.679792][ T797] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 431.836601][ T797] usb 3-1: Using ep0 maxpacket: 32 [ 431.856937][ T797] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 431.886569][ T797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.919778][ T797] usb 3-1: Product: syz [ 431.930953][ T797] usb 3-1: Manufacturer: syz [ 431.946103][ T797] usb 3-1: SerialNumber: syz [ 431.977046][ T797] usb 3-1: config 0 descriptor?? [ 432.084240][T15229] netlink: 'syz.0.4473': attribute type 10 has an invalid length. [ 432.115458][T15229] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 432.146161][T15229] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 432.180756][T15229] team0: Port device netdevsim0 removed [ 432.214531][T15229] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 432.349798][ T5918] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 432.383067][ T797] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: failure sending bit rate [ 432.428858][ T797] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 432.490080][ T797] usb 3-1: USB disconnect, device number 95 [ 432.522573][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.542838][ T5918] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 432.577211][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.613671][ T5918] usb 2-1: Product: syz [ 432.645298][ T5918] usb 2-1: Manufacturer: syz [ 432.670233][ T5918] usb 2-1: SerialNumber: syz [ 432.692908][ T5918] usb 2-1: config 0 descriptor?? [ 432.723229][ T5918] uvcvideo 2-1:0.0: Found UVC 0.00 device syz (18ec:3288) [ 432.735287][ T5918] uvcvideo 2-1:0.0: No valid video chain found. [ 432.957946][ T5918] usb 2-1: USB disconnect, device number 92 [ 433.425923][T15267] IPVS: set_ctl: invalid protocol: 47 10.1.1.2:20004 [ 433.515938][T15264] bond1 (unregistering): Released all slaves [ 433.541459][T15271] netlink: 'syz.2.4493': attribute type 1 has an invalid length. [ 433.549408][T15271] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4493'. [ 434.453728][T15310] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 434.801234][ T5919] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 434.990035][ T5919] usb 4-1: Using ep0 maxpacket: 8 [ 435.025289][ T5919] usb 4-1: config 0 has an invalid interface number: 151 but max is 1 [ 435.050214][ T5919] usb 4-1: config 0 has no interface number 1 [ 435.062286][ T5919] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 435.100003][ T5919] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 435.147978][ T5919] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 435.181722][ T5919] usb 4-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 435.223781][ T5919] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 435.280838][ T5919] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 435.303311][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 435.333934][ T5919] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 435.350315][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.370319][ T5919] usb 4-1: Product: syz [ 435.374612][ T5919] usb 4-1: Manufacturer: syz [ 435.379247][ T5919] usb 4-1: SerialNumber: syz [ 435.385395][ T5946] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 435.440072][ T5919] usb 4-1: config 0 descriptor?? [ 435.460576][T15313] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 435.482475][ T5919] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 435.508355][ T5919] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 435.569695][ T5946] usb 5-1: Using ep0 maxpacket: 16 [ 435.584218][ T5946] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 435.622272][ T5946] usb 5-1: config 0 has no interface number 0 [ 435.663057][ T5946] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 435.701612][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.737734][ T5946] usb 5-1: Product: syz [ 435.757526][ T5946] usb 5-1: Manufacturer: syz [ 435.769949][ T5946] usb 5-1: SerialNumber: syz [ 435.791052][ T5919] usb 4-1: USB disconnect, device number 89 [ 435.813946][ T5946] usb 5-1: config 0 descriptor?? [ 435.865871][ T5946] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 435.956852][ T5953] udevd[5953]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 436.240277][ T5946] gspca_spca1528: reg_w err -71 [ 436.275893][ T5946] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 436.313449][ T5946] usb 5-1: USB disconnect, device number 96 [ 436.319782][ T5918] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 436.522261][ T5918] usb 2-1: Using ep0 maxpacket: 16 [ 436.531798][ T5918] usb 2-1: unable to get BOS descriptor or descriptor too short [ 436.550647][ T5918] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 196, changing to 7 [ 436.568680][ T5918] usb 2-1: string descriptor 0 read error: -22 [ 436.585831][ T5918] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 436.602321][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.664539][ T5918] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 436.872610][ T5918] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 436.960122][ T30] audit: type=1326 audit(1773042854.275:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15378 comm="syz.2.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ee919c799 code=0x7ffc0000 [ 437.067959][ T30] audit: type=1326 audit(1773042854.275:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15378 comm="syz.2.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ee919c799 code=0x7ffc0000 [ 437.115444][ T5918] usb 2-1: USB disconnect, device number 93 [ 437.181926][ T30] audit: type=1326 audit(1773042854.275:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15378 comm="syz.2.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ee919c799 code=0x7ffc0000 [ 437.293880][ T30] audit: type=1326 audit(1773042854.315:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15378 comm="syz.2.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ee919c799 code=0x7ffc0000 [ 437.330318][ T30] audit: type=1326 audit(1773042854.315:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15378 comm="syz.2.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f5ee919c799 code=0x7ffc0000 [ 437.397831][ T30] audit: type=1326 audit(1773042854.315:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15378 comm="syz.2.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ee919c799 code=0x7ffc0000 [ 437.454271][ T30] audit: type=1326 audit(1773042854.315:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15378 comm="syz.2.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ee919c799 code=0x7ffc0000 [ 437.550603][T15397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4550'. [ 437.566748][ T30] audit: type=1326 audit(1773042854.325:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15378 comm="syz.2.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ee919c799 code=0x7ffc0000 [ 437.677012][ T30] audit: type=1326 audit(1773042854.325:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15378 comm="syz.2.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5ee919c799 code=0x7ffc0000 [ 437.759658][ T30] audit: type=1326 audit(1773042854.325:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15378 comm="syz.2.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5ee919c799 code=0x7ffc0000 [ 438.150509][T15418] xt_hashlimit: size too large, truncated to 1048576 [ 438.150540][T15418] xt_hashlimit: max too large, truncated to 1048576 [ 438.479174][T15430] bond2: option fail_over_mac: invalid value (244) [ 438.512923][T15430] bond2 (unregistering): Released all slaves [ 438.629802][T15429] bond2: entered promiscuous mode [ 438.660134][T15429] 8021q: adding VLAN 0 to HW filter on device bond2 [ 439.221215][T15458] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4577'. [ 439.288384][T15458] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4577'. [ 439.808563][T15479] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 440.093617][T15493] usb usb8: usbfs: process 15493 (syz.2.4594) did not claim interface 0 before use [ 440.131587][T15493] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 440.223856][T15495] binder: 15494:15495 unknown command 1077961494 [ 440.235789][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.245654][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.271132][T15495] binder: 15494:15495 ioctl c0306201 200000000100 returned -22 [ 441.195310][T15538] Zero length message leads to an empty skb [ 441.332875][T15541] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4618'. [ 441.352397][T15543] netlink: 'syz.0.4619': attribute type 89 has an invalid length. [ 441.358165][T15541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4618'. [ 441.469702][T15547] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 441.835599][T15559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4627'. [ 441.995261][T15565] netlink: 'syz.0.4630': attribute type 1 has an invalid length. [ 442.039721][T15565] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4630'. [ 442.419523][T15584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4639'. [ 442.469183][T15586] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4640'. [ 442.827783][T15597] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4645'. [ 443.602420][T15627] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 443.631433][T15628] [U] .h0FwZ,iqgҏV2sO [ 443.647877][T15628] [U] ` w*BBOLhU [ 443.652468][T15628] [U] w$n|#%o.z\̧mРw [ 443.678350][T15628] [U] R{ꫢ S [ 443.684289][T15626] [U] [ 444.043129][T15642] netlink: 'syz.2.4669': attribute type 2 has an invalid length. [ 444.070519][T15642] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 444.107912][T15644] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 444.360816][T15651] netlink: 'syz.1.4672': attribute type 8 has an invalid length. [ 444.578644][T15662] netlink: 'syz.1.4678': attribute type 1 has an invalid length. [ 444.611546][T15662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4678'. [ 444.795427][T15672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4683'. [ 444.997358][T15680] openvswitch: netlink: IP tunnel TTL not specified. [ 445.329727][ T5946] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 445.520415][ T5946] usb 3-1: Using ep0 maxpacket: 32 [ 445.538404][ T5946] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 445.570042][ T5946] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.610370][ T5946] usb 3-1: config 0 has no interface number 0 [ 445.616575][ T5946] usb 3-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 445.676662][ T5946] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 445.704075][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.732598][ T5946] usb 3-1: Product: syz [ 445.736927][ T5946] usb 3-1: Manufacturer: syz [ 445.760096][ T5946] usb 3-1: SerialNumber: syz [ 445.792134][ T5946] usb 3-1: config 0 descriptor?? [ 445.822644][ T5946] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 445.850690][ T5946] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 446.013850][ T5946] radio-raremono 3-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 446.242534][ T5946] radio-raremono 3-1:0.35: raremono_cmd_main failed (-71) [ 446.278836][ T5946] radio-raremono 3-1:0.35: V4L2 device registered as radio48 [ 446.282058][T15730] netlink: 'syz.0.4710': attribute type 29 has an invalid length. [ 446.304809][ T5946] usb 3-1: USB disconnect, device number 96 [ 446.319224][ T5946] radio-raremono 3-1:0.35: Thanko's Raremono disconnected [ 446.355331][T15730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4710'. [ 446.985493][T15753] netlink: 'syz.3.4719': attribute type 11 has an invalid length. [ 447.025380][T15753] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.4719'. [ 447.204460][T15759] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4723'. [ 447.632889][T15776] netlink: 'syz.2.4731': attribute type 3 has an invalid length. [ 448.103093][T15796] netlink: 'syz.3.4739': attribute type 11 has an invalid length. [ 448.136694][T15796] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4739'. [ 448.402437][T15807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4745'. [ 448.629837][ T5946] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 448.816962][ T5946] usb 2-1: Using ep0 maxpacket: 32 [ 448.835067][ T5946] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 448.864165][ T5946] usb 2-1: config 0 has no interface number 0 [ 448.881160][ T5946] usb 2-1: config 0 interface 132 has no altsetting 0 [ 448.911670][ T5946] usb 2-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 3.02 [ 448.923632][ T5946] usb 2-1: New USB device strings: Mfr=19, Product=95, SerialNumber=25 [ 448.932722][ T5946] usb 2-1: Product: syz [ 448.937135][ T5946] usb 2-1: Manufacturer: syz [ 448.942221][ T5946] usb 2-1: SerialNumber: syz [ 448.953222][T15825] program syz.3.4754 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 448.964853][ T5946] usb 2-1: config 0 descriptor?? [ 448.975949][ T5946] ftdi_sio 2-1:0.132: FTDI USB Serial Device converter detected [ 448.999375][ T5946] ftdi_sio ttyUSB0: unknown device type: 0x302 [ 449.187685][ T5946] usb 2-1: USB disconnect, device number 94 [ 449.199378][ T5946] ftdi_sio 2-1:0.132: device disconnected [ 449.322744][T15834] netlink: 'syz.3.4759': attribute type 27 has an invalid length. [ 449.486572][T15834] bridge_slave_0: left promiscuous mode [ 449.507834][T15834] vti0: left promiscuous mode [ 450.232838][T15862] xt_l2tp: v2 sid > 0xffff: 4294967293 [ 450.722627][T15838] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 450.891747][T15838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 450.912025][T15838] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 450.929633][T15838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.948295][T15838] usb 4-1: Product: syz [ 450.955836][T15838] usb 4-1: Manufacturer: syz [ 450.960986][T15838] usb 4-1: SerialNumber: syz [ 450.970724][T15838] usb 4-1: config 0 descriptor?? [ 450.981702][T15870] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 450.990549][T15870] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 451.002384][ C1] port100 4-1:0.0: NFC: Urb failure (status -71) [ 451.008925][ C1] port100 4-1:0.0: NFC: Urb failure (status -71) [ 451.018052][T15884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4781'. [ 451.041438][T15838] port100 4-1:0.0: NFC: Could not get supported command types [ 451.100101][ T5918] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 451.219459][T15838] usb 4-1: USB disconnect, device number 90 [ 451.264515][ T5918] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 451.275463][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.312654][ T5918] usb 2-1: config 0 descriptor?? [ 451.330813][ T5918] cp210x 2-1:0.0: cp210x converter detected [ 451.451279][T15890] xt_CT: No such helper "pptp" [ 451.548086][ T5918] usb 2-1: cp210x converter now attached to ttyUSB0 [ 451.748939][ T5918] usb 2-1: USB disconnect, device number 95 [ 451.792690][ T5918] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 451.824003][ T5918] cp210x 2-1:0.0: device disconnected [ 452.457118][T15921] netlink: 'syz.2.4799': attribute type 3 has an invalid length. [ 453.926157][T15965] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 453.960499][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 453.972705][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 453.981798][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 454.001072][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 454.010104][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 454.305602][T15977] netlink: 'syz.3.4826': attribute type 15 has an invalid length. [ 454.657322][T15969] chnl_net:caif_netlink_parms(): no params data found [ 454.743171][T15990] pimreg: entered allmulticast mode [ 454.996434][T16002] netlink: 'syz.2.4836': attribute type 10 has an invalid length. [ 455.056852][T16002] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4836'. [ 455.160563][T15840] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 455.278632][T15969] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.309789][T15969] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.334240][T15969] bridge_slave_0: entered allmulticast mode [ 455.342073][T15840] usb 2-1: Using ep0 maxpacket: 32 [ 455.359285][T15840] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 455.376655][T15840] usb 2-1: config 0 has no interface number 0 [ 455.385611][T15969] bridge_slave_0: entered promiscuous mode [ 455.398530][T15840] usb 2-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 455.431156][T15969] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.452489][T15840] usb 2-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 455.469804][T15969] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.499351][T15969] bridge_slave_1: entered allmulticast mode [ 455.514707][T15840] usb 2-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 455.537068][T15969] bridge_slave_1: entered promiscuous mode [ 455.546067][T15840] usb 2-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 455.589675][T15840] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 455.642638][T16016] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.662419][T15840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.699690][T15840] usb 2-1: Product: syz [ 455.724440][T15840] usb 2-1: Manufacturer: syz [ 455.729114][T15840] usb 2-1: SerialNumber: syz [ 455.788437][T15969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.805361][T15840] usb 2-1: config 0 descriptor?? [ 455.831627][T15996] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 455.844262][T15840] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.119/input/input30 [ 455.869023][T15969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.899057][ T5182] usb 2-1: BOGUS urb xfer, pipe 1 != type 3 [ 456.047371][T15969] team0: Port device team_slave_0 added [ 456.069865][ T5843] Bluetooth: hci5: command tx timeout [ 456.139053][T15969] team0: Port device team_slave_1 added [ 456.203338][T15838] usb 2-1: USB disconnect, device number 96 [ 456.203570][ C0] bcm5974 2-1:0.119: trackpad urb failed: -19 [ 456.349802][T15969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.391760][T15969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.603685][T15969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.631911][T15969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.638956][T15969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.709611][T15969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.078292][T15969] hsr_slave_0: entered promiscuous mode [ 457.144178][T15969] hsr_slave_1: entered promiscuous mode [ 457.160724][T15969] debugfs: 'hsr0' already exists in 'hsr' [ 457.166558][T15969] Cannot create hsr debugfs directory [ 457.352843][ T5934] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 457.509836][ T5934] usb 2-1: Using ep0 maxpacket: 8 [ 457.517649][ T5934] usb 2-1: unable to get BOS descriptor or descriptor too short [ 457.546478][ T5934] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 223, changing to 7 [ 457.602160][ T5934] usb 2-1: New USB device found, idVendor=0e41, idProduct=4156, bcdDevice= 0.40 [ 457.631898][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.659760][ T5934] usb 2-1: Product: syz [ 457.674341][ T5934] usb 2-1: Manufacturer: syz [ 457.699712][ T5934] usb 2-1: SerialNumber: syz [ 457.808630][T16069] netlink: 'syz.3.4869': attribute type 3 has an invalid length. [ 457.948279][ T5934] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 457.979883][ T5934] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 458.010166][ T5934] usb 2-1: 2:1 : invalid channels 0 [ 458.046549][T16074] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4871'. [ 458.061209][T15969] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 458.096628][T15969] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 458.127170][T15969] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 458.149774][ T5843] Bluetooth: hci5: command tx timeout [ 458.168119][T15969] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 458.252325][ T5934] usb 2-1: USB disconnect, device number 97 [ 458.367340][T15684] udevd[15684]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 458.589426][T15969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.665531][T15969] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.736701][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.743945][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.793151][T16099] fuse: Invalid rootmode [ 458.834825][ T3489] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.842075][ T3489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.158551][T15969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.282241][T16115] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 459.375559][T15969] veth0_vlan: entered promiscuous mode [ 459.445928][T15969] veth1_vlan: entered promiscuous mode [ 459.579506][T15969] veth0_macvtap: entered promiscuous mode [ 459.622629][T15969] veth1_macvtap: entered promiscuous mode [ 459.699473][T15969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.766495][T15969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.817474][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.839486][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.880485][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.889283][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.230763][ T5843] Bluetooth: hci5: command tx timeout [ 460.262904][ T1343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.292395][ T1343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.389480][ T1343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.424658][ T1343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.593828][T16198] netlink: 'syz.3.4929': attribute type 62 has an invalid length. [ 462.309790][ T5843] Bluetooth: hci5: command tx timeout [ 462.510195][T16228] bond2: peer notification delay (315) is not a multiple of miimon (100), value rounded to 300 ms [ 462.960018][T15838] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 463.161820][T15838] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 463.210858][T15838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 463.252248][T15838] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 463.281184][T15838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.307336][T15838] usb 4-1: Product: syz [ 463.317940][T15838] usb 4-1: Manufacturer: syz [ 463.348207][T15838] usb 4-1: SerialNumber: syz [ 463.450705][T15838] usb 4-1: config 0 descriptor?? [ 463.470230][T16273] kAFS: unparsable volume name [ 463.699032][T15838] powermate: unknown product id 0240 [ 463.725519][T15838] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input31 [ 463.784355][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 463.784375][ T30] audit: type=1326 audit(1773042881.105:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16280 comm="syz.5.4970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668c99c799 code=0x7ffc0000 [ 463.852140][ C1] powermate: config urb returned -71 [ 463.858292][ C1] powermate: config urb returned -71 [ 463.864553][ C1] powermate: config urb returned -71 [ 463.871411][ C1] powermate: config urb returned -71 [ 463.911931][ T30] audit: type=1326 audit(1773042881.145:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16280 comm="syz.5.4970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f668c99c799 code=0x7ffc0000 [ 463.951052][T15838] usb 4-1: USB disconnect, device number 91 [ 463.957102][ C1] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 464.043304][T16285] nvme_fabrics: unknown parameter or missing value ')' in ctrl creation request [ 464.057900][ T30] audit: type=1326 audit(1773042881.145:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16280 comm="syz.5.4970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668c99c799 code=0x7ffc0000 [ 464.160086][ T30] audit: type=1326 audit(1773042881.145:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16280 comm="syz.5.4970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668c99c799 code=0x7ffc0000 [ 464.251104][ T30] audit: type=1326 audit(1773042881.425:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16286 comm="syz.0.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71419c799 code=0x7ffc0000 [ 464.347977][ T30] audit: type=1326 audit(1773042881.425:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16286 comm="syz.0.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71419c799 code=0x7ffc0000 [ 464.441917][ T30] audit: type=1326 audit(1773042881.435:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16286 comm="syz.0.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71419c799 code=0x7ffc0000 [ 464.540502][ T30] audit: type=1326 audit(1773042881.435:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16286 comm="syz.0.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71419c799 code=0x7ffc0000 [ 464.592882][T16295] xt_CT: No such helper "snmp_trap" [ 464.633654][ T30] audit: type=1326 audit(1773042881.445:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16286 comm="syz.0.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fe71419c799 code=0x7ffc0000 [ 464.699892][ T30] audit: type=1326 audit(1773042881.445:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16286 comm="syz.0.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71419c799 code=0x7ffc0000 [ 464.760793][T15838] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 464.993098][T15838] usb 4-1: Using ep0 maxpacket: 8 [ 465.010278][T15838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 465.037459][T15838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 465.079629][T15838] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 465.112624][T15838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 465.176345][T15838] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 465.207310][T15838] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 465.236956][T15838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.276348][T15838] usb 4-1: config 0 descriptor?? [ 465.318001][T16300] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 465.647852][ C0] Bluetooth: hci6: Unexpected continuation: 1 bytes [ 465.655728][ T5841] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 465.662967][ T5841] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 465.673070][ T5841] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 465.680047][ T5841] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 465.687036][ T5841] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 465.694014][ T5841] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 465.701170][ T5841] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 465.709158][ T5841] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 465.716402][ T5841] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 465.723448][ T5841] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 465.727431][T16330] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.740033][ T5841] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 465.749383][ T5841] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 465.757245][ T5841] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 465.764304][ T5841] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 465.771404][ T5841] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 465.778284][ T5841] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 465.785357][ T5841] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 465.792349][ T5841] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 465.799346][ T5841] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 465.807686][ T5841] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 465.814804][ T5841] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 465.821743][ T5841] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 465.830732][ T5841] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 465.837757][ T5841] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 465.844774][ T5841] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 465.856021][T15838] usb 4-1: USB disconnect, device number 92 [ 465.862317][ T5841] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 465.869321][ T5841] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 465.876282][ T5841] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 465.883323][ T5841] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 465.891700][ T5843] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 466.949163][T16371] PKCS8: Unsupported PKCS#8 version [ 466.978521][T16374] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 467.299792][T16390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5024'. [ 467.758884][T16403] bond3: entered promiscuous mode [ 467.803767][T16403] 8021q: adding VLAN 0 to HW filter on device bond3 [ 468.542505][T16438] xt_TCPMSS: Only works on TCP SYN packets [ 468.615138][T16443] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5049'. [ 469.232857][T16465] openvswitch: netlink: IP tunnel dst address not specified [ 469.840689][T16491] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5072'. [ 469.867611][T16492] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5071'. [ 470.159678][T16499] misc userio: Invalid payload size [ 470.231758][ T5843] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 470.241569][ T5843] Bluetooth: hci5: Injecting HCI hardware error event [ 470.250989][ T5843] Bluetooth: hci5: hardware error 0x00 [ 470.342309][T16508] netlink: 'syz.2.5080': attribute type 3 has an invalid length. [ 470.384288][T16508] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5080'. [ 470.403127][T15840] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 470.622719][T15840] usb 2-1: unable to get BOS descriptor or descriptor too short [ 470.650550][T15840] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 470.675576][T15840] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 470.717529][T15840] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 470.814969][T15840] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 470.846637][T15840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.873196][T15840] usb 2-1: Product: syz [ 470.889638][T15840] usb 2-1: Manufacturer: syz [ 470.894317][T15840] usb 2-1: SerialNumber: syz [ 471.164260][T15840] cdc_ncm 2-1:1.0: skipping garbage [ 471.191793][T15840] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 471.198686][T15840] cdc_ncm 2-1:1.0: bind() failure [ 471.236400][T15840] usb 2-1: USB disconnect, device number 98 [ 471.739969][T16545] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5098'. [ 471.809772][T16545] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5098'. [ 471.818800][T16545] netlink: 'syz.3.5098': attribute type 3 has an invalid length. [ 471.868324][T16550] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 471.876405][T16545] netlink: 11 bytes leftover after parsing attributes in process `syz.3.5098'. [ 472.240731][T16561] netlink: 'syz.1.5106': attribute type 32 has an invalid length. [ 472.394908][ T5843] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 472.458966][T16566] sg_write: data in/out 294879/80 bytes for SCSI command 0x2-- guessing data in; [ 472.458966][T16566] program syz.1.5109 not setting count and/or reply_len properly [ 472.539871][T15844] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 472.720039][T15844] usb 3-1: Using ep0 maxpacket: 16 [ 472.738635][T15844] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 472.757000][T15844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.788653][T15844] usb 3-1: Product: syz [ 472.802569][T15844] usb 3-1: Manufacturer: syz [ 472.818872][T15844] usb 3-1: SerialNumber: syz [ 472.844936][T15844] r8152-cfgselector 3-1: Unknown version 0x0000 [ 472.864628][T15844] r8152-cfgselector 3-1: config 0 descriptor?? [ 472.879737][T16573] PKCS7: Unknown OID: [4] 0.0 [ 472.905157][T16573] PKCS7: Only support pkcs7_signedData type [ 473.235033][T16581] netlink: 'syz.3.5116': attribute type 13 has an invalid length. [ 473.360713][ T5934] r8152-cfgselector 3-1: USB disconnect, device number 97 [ 474.089873][ T5934] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 474.249848][T16610] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5130'. [ 474.259437][ T5934] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 474.660192][ T3489] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 474.715368][T16628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5139'. [ 474.852352][T16636] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5143'. [ 474.921766][T16628] bond2 (unregistering): Released all slaves [ 475.117207][T16641] netlink: zone id is out of range [ 475.147551][T16641] netlink: zone id is out of range [ 475.193379][T16641] netlink: zone id is out of range [ 475.224114][T16641] netlink: zone id is out of range [ 475.237043][T16641] netlink: zone id is out of range [ 475.259675][T16641] netlink: zone id is out of range [ 475.269931][T16641] netlink: zone id is out of range [ 475.287933][T16641] netlink: zone id is out of range [ 475.308236][T16641] netlink: zone id is out of range [ 475.326330][T16647] IPv6: NLM_F_CREATE should be specified when creating new route [ 475.351771][T16646] netlink: 'syz.5.5147': attribute type 1 has an invalid length. [ 475.413420][T16646] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5147'. [ 475.748375][ T1332] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 475.789854][ T1332] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 476.379948][ T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 476.555263][ T9] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 476.759665][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 476.781177][ T9] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 476.799728][ T9] usb 2-1: config 0 has no interface number 0 [ 476.806677][ T9] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 476.845092][T16699] xt_hashlimit: max too large, truncated to 1048576 [ 476.868146][ T9] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 476.906840][ T9] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 476.959914][ T9] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 476.993887][ T9] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 477.039765][ T9] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 477.080625][ T9] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 477.113873][ T9] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 477.149828][ T9] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 477.173485][T16708] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 477.194996][ T9] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 477.205388][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.236490][ T9] usb 2-1: Product: syz [ 477.259774][ T9] usb 2-1: Manufacturer: syz [ 477.272601][ T9] usb 2-1: SerialNumber: syz [ 477.295977][ T9] usb 2-1: config 0 descriptor?? [ 477.318399][T16684] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 477.347188][ T9] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 477.380457][ T9] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 477.443390][T16715] xt_TCPMSS: Only works on TCP SYN packets [ 477.614381][T15844] usb 2-1: USB disconnect, device number 99 [ 477.685239][T16723] net_ratelimit: 349 callbacks suppressed [ 477.685345][T16723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.889759][ T9] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 478.049692][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 478.062509][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 478.092454][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 478.128501][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.159737][ T9] usb 4-1: Product: syz [ 478.164083][ T9] usb 4-1: Manufacturer: syz [ 478.168828][ T9] usb 4-1: SerialNumber: syz [ 478.231495][ T9] usb 4-1: config 0 descriptor?? [ 478.255618][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 478.456962][T16741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5192'. [ 478.466487][ T9] gspca_zc3xx: reg_w_i err -71 [ 478.472579][T16742] openvswitch: netlink: Message has 2 unknown bytes. [ 478.501315][T16742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 479.079932][ T9] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 479.086338][ T9] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 479.140876][ T9] usb 4-1: USB disconnect, device number 93 [ 479.909766][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 480.029810][T16799] SET target dimension over the limit! [ 480.154887][T15844] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 480.360416][T15844] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.390228][T15844] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 480.415464][T15844] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0017, bcdDevice=2f.a3 [ 480.467608][T15844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.507627][T15844] usb 2-1: Product: syz [ 480.540415][T15844] usb 2-1: Manufacturer: syz [ 480.545102][T15844] usb 2-1: SerialNumber: syz [ 480.575360][T15844] usb 2-1: config 0 descriptor?? [ 480.816363][ T9] usb 2-1: USB disconnect, device number 100 [ 480.960534][T16828] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5235'. [ 481.134859][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 481.134881][ T30] audit: type=1326 audit(1773042898.455:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16832 comm="syz.0.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71419c799 code=0x7ffc0000 [ 481.207337][ T30] audit: type=1326 audit(1773042898.495:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16832 comm="syz.0.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71419c799 code=0x7ffc0000 [ 481.243657][ T30] audit: type=1326 audit(1773042898.495:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16832 comm="syz.0.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71419c799 code=0x7ffc0000 [ 481.301369][ T30] audit: type=1326 audit(1773042898.505:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16832 comm="syz.0.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fe71419c799 code=0x7ffc0000 [ 481.366479][ T30] audit: type=1326 audit(1773042898.505:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16832 comm="syz.0.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71419c799 code=0x7ffc0000 [ 481.474237][ T30] audit: type=1326 audit(1773042898.505:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16832 comm="syz.0.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71419c799 code=0x7ffc0000 [ 481.575502][ T30] audit: type=1326 audit(1773042898.505:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16832 comm="syz.0.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71419c799 code=0x7ffc0000 [ 481.694631][ T30] audit: type=1326 audit(1773042898.505:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16832 comm="syz.0.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe71419c799 code=0x7ffc0000 [ 481.726004][ T30] audit: type=1326 audit(1773042898.505:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16832 comm="syz.0.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe71419c799 code=0x7ffc0000 [ 481.749249][ T30] audit: type=1326 audit(1773042898.885:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16842 comm="syz.1.5241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03899c799 code=0x7ffc0000 [ 482.460425][T16884] netlink: 'syz.0.5259': attribute type 23 has an invalid length. [ 482.562604][T16891] hma(sha224): entered promiscuous mode [ 482.619962][ T5934] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 482.765362][T16899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5264'. [ 482.779634][ T5934] usb 4-1: Using ep0 maxpacket: 16 [ 482.802186][ T5934] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 482.829936][ T5934] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 482.861984][ T5934] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 482.889836][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.919635][ T5934] usb 4-1: Product: syz [ 482.948299][ T5934] usb 4-1: Manufacturer: syz [ 482.971269][ T5934] usb 4-1: SerialNumber: syz [ 483.249448][ T5934] usb 4-1: 0:2 : does not exist [ 483.302204][ T5934] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 483.413764][T16936] netlink: get zone limit has 4 unknown bytes [ 483.476749][ T5934] usb 4-1: USB disconnect, device number 94 [ 483.997353][T16966] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5282'. [ 485.608221][T17048] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5315'. [ 486.230289][T17079] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5331'. [ 487.196809][T17126] netlink: 'syz.2.5350': attribute type 3 has an invalid length. [ 487.228858][T17125] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 487.280849][T17161] netlink: 'syz.3.5352': attribute type 3 has an invalid length. [ 487.284263][T17125] bond4 (unregistering): Released all slaves [ 487.710159][T17208] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5359'. [ 488.124719][T17232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5364'. [ 488.172339][T15844] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 488.299463][T17243] delete_channel: no stack [ 488.350139][T15844] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 488.384638][T15844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.418298][T15844] usb 2-1: Product: syz [ 488.446427][T15844] usb 2-1: Manufacturer: syz [ 488.455175][T15844] usb 2-1: SerialNumber: syz [ 488.500888][T15844] usb 2-1: config 0 descriptor?? [ 488.548066][T15844] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 488.869796][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 488.993707][T15844] gspca_stk1135: reg_w 0x0 err -71 [ 489.022202][T15844] gspca_stk1135: serial bus timeout: status=0x00 [ 489.040390][T15844] gspca_stk1135: Sensor write failed [ 489.045784][T15844] gspca_stk1135: serial bus timeout: status=0x00 [ 489.085960][T15844] gspca_stk1135: Sensor write failed [ 489.109921][T15844] gspca_stk1135: serial bus timeout: status=0x00 [ 489.116507][T15844] gspca_stk1135: Sensor read failed [ 489.122302][T15844] gspca_stk1135: serial bus timeout: status=0x00 [ 489.128810][T15844] gspca_stk1135: Sensor read failed [ 489.134642][T15844] gspca_stk1135: Detected sensor type unknown (0x0) [ 489.142406][T15844] gspca_stk1135: serial bus timeout: status=0x00 [ 489.148922][T15844] gspca_stk1135: Sensor read failed [ 489.154914][T15844] gspca_stk1135: serial bus timeout: status=0x00 [ 489.162631][T15844] gspca_stk1135: Sensor read failed [ 489.168252][T15844] gspca_stk1135: serial bus timeout: status=0x00 [ 489.181803][T15844] gspca_stk1135: Sensor write failed [ 489.196867][T15844] gspca_stk1135: serial bus timeout: status=0x00 [ 489.212926][T15844] gspca_stk1135: Sensor write failed [ 489.249717][T15844] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 489.296720][T15844] usb 2-1: USB disconnect, device number 101 [ 489.420766][T17294] netlink: 'syz.3.5388': attribute type 7 has an invalid length. [ 489.449771][T17294] netlink: 'syz.3.5388': attribute type 8 has an invalid length. [ 489.482950][T17294] netlink: 'syz.3.5388': attribute type 15 has an invalid length. [ 489.524664][T17298] SET target dimension over the limit! [ 489.772740][T17306] netlink: 'syz.5.5393': attribute type 2 has an invalid length. [ 490.932571][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 490.932603][ T30] audit: type=1326 audit(1773042908.255:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17360 comm="syz.1.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03899c799 code=0x7ffc0000 [ 491.044689][ T30] audit: type=1326 audit(1773042908.305:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17360 comm="syz.1.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03899c799 code=0x7ffc0000 [ 491.124836][ T30] audit: type=1326 audit(1773042908.305:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17360 comm="syz.1.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fb03899c799 code=0x7ffc0000 [ 491.218916][ T30] audit: type=1326 audit(1773042908.305:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17360 comm="syz.1.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03899c799 code=0x7ffc0000 [ 491.329638][ T30] audit: type=1326 audit(1773042908.305:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17360 comm="syz.1.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03899c799 code=0x7ffc0000 [ 491.429830][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 491.468676][T17379] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 491.589849][T17384] macsec0: entered promiscuous mode [ 491.902401][T17398] xt_cgroup: invalid path, errno=-2 [ 492.388487][T17424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 493.009764][T17452] binder: 17451:17452 unknown command 0 [ 493.032448][T17452] binder: 17451:17452 ioctl c0306201 200000000080 returned -22 [ 493.322234][ T30] audit: type=1326 audit(1773042910.645:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17471 comm="syz.2.5458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ee919c799 code=0x7ffc0000 [ 493.380071][ T30] audit: type=1326 audit(1773042910.645:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17471 comm="syz.2.5458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ee919c799 code=0x7ffc0000 [ 493.406391][ T30] audit: type=1326 audit(1773042910.675:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17471 comm="syz.2.5458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f5ee919c799 code=0x7ffc0000 [ 493.440367][ T30] audit: type=1326 audit(1773042910.675:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17471 comm="syz.2.5458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ee919c799 code=0x7ffc0000 [ 493.504372][ T30] audit: type=1326 audit(1773042910.675:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17471 comm="syz.2.5458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ee919c799 code=0x7ffc0000 [ 493.703265][T17488] netlink: 'syz.2.5462': attribute type 21 has an invalid length. [ 493.733782][T17488] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5462'. [ 493.782711][T17488] netlink: 'syz.2.5462': attribute type 4 has an invalid length. [ 493.811496][T17488] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5462'. [ 494.040687][T17463] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 494.047523][T17463] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 494.120523][T17463] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 494.126527][T17463] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 494.189401][T17463] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 494.219715][T17463] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 494.281236][T17463] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 494.300466][T17463] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 494.345421][T17463] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 494.379787][T17463] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 494.406547][T17537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5472'. [ 494.447071][T17537] tc_dump_action: action bad kind [ 495.024392][T17583] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5479'. [ 495.159983][T15838] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 495.259868][T17590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5481'. [ 495.357534][T15838] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 495.421260][T15838] usb 3-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50 [ 495.452314][T15838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.497816][T15838] usb 3-1: Product: syz [ 495.518695][T15838] usb 3-1: Manufacturer: syz [ 495.538188][T15838] usb 3-1: SerialNumber: syz [ 495.802500][T15838] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 495.809088][T15838] command write [95] error -22 [ 495.890219][T15838] usb 3-1: USB disconnect, device number 98 [ 496.120631][T17641] netlink: 'syz.0.5492': attribute type 29 has an invalid length. [ 496.128712][T17641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5492'. [ 496.551644][T17653] geneve4: entered promiscuous mode [ 496.559194][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.589174][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.632448][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.646273][T17665] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5500'. [ 496.671258][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.751014][T17665] ip6tnl1: entered allmulticast mode [ 496.900263][T17676] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5505'. [ 497.921622][T15844] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 498.139713][T15844] usb 2-1: Using ep0 maxpacket: 8 [ 498.152772][T15844] usb 2-1: config 0 has an invalid interface number: 176 but max is 2 [ 498.164338][T15844] usb 2-1: config 0 has no interface number 1 [ 498.174508][T15844] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 498.199894][T15844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.248244][T15844] usb 2-1: config 0 descriptor?? [ 498.329798][ T5934] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 498.510124][ T5934] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 498.529756][T15844] qcserial 2-1:0.2: Qualcomm USB modem converter detected [ 498.538424][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 384, setting to 64 [ 498.623564][ T5934] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 498.656669][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.685947][ T5934] usb 3-1: Product: syz [ 498.699985][ T5934] usb 3-1: Manufacturer: syz [ 498.704676][ T5934] usb 3-1: SerialNumber: syz [ 498.750519][ T5934] usb 3-1: config 0 descriptor?? [ 498.757189][T17714] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 498.766304][T15844] usb 2-1: USB disconnect, device number 102 [ 498.802698][T15844] qcserial 2-1:0.2: device disconnected [ 498.838204][T17739] team0: entered promiscuous mode [ 498.891669][T17739] team_slave_0: entered promiscuous mode [ 498.897733][T17739] team_slave_1: entered promiscuous mode [ 498.970925][T17739] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 499.030072][ T5934] rc_core: IR keymap rc-streamzap not found [ 499.036054][ T5934] Registered IR keymap rc-empty [ 499.051117][ T5934] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 499.102978][ T5934] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input35 [ 499.186052][ T5934] usb 3-1: USB disconnect, device number 99 [ 499.664625][T17788] xt_CT: You must specify a L4 protocol and not use inversions on it [ 500.010076][T17799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 500.259666][T15844] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 500.453612][T15844] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 500.491359][T15844] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 500.549834][T15844] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.583190][T15844] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 500.610945][T15844] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 500.653997][T15844] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 500.706121][T15844] usb 2-1: config 1 interface 1 has no altsetting 0 [ 500.758281][T15844] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 500.779742][T15844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.787996][T15844] usb 2-1: Product: syz [ 500.792486][T15844] usb 2-1: Manufacturer: syz [ 500.797145][T15844] usb 2-1: SerialNumber: syz [ 500.818407][T15844] cdc_ncm 2-1:1.0: skipping garbage [ 500.829638][T15844] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 500.847404][T15844] cdc_ncm 2-1:1.0: bind() failure [ 501.233990][T15844] usb 2-1: USB disconnect, device number 103 [ 501.294039][T17868] program syz.5.5542 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 501.675480][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.682078][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.794161][T17880] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.802920][T17880] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.263208][T17880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.306281][T17880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.962500][T17864] dvmrp0: entered allmulticast mode [ 502.990582][T15840] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 503.031141][ T1007] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.062383][ T1007] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.104456][ T1007] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.140962][ T1007] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.174031][T15840] usb 2-1: Using ep0 maxpacket: 16 [ 503.188101][T15840] usb 2-1: too many endpoints for config 0 interface 0 altsetting 229: 247, using maximum allowed: 30 [ 503.219242][T15840] usb 2-1: config 0 interface 0 altsetting 229 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 503.249794][T15840] usb 2-1: config 0 interface 0 has no altsetting 0 [ 503.285590][T15840] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31 [ 503.315224][T15840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.339683][T15840] usb 2-1: Product: syz [ 503.376687][T15840] usb 2-1: Manufacturer: syz [ 503.400289][T15840] usb 2-1: SerialNumber: syz [ 503.430229][T15840] usb 2-1: config 0 descriptor?? [ 503.482148][T15840] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 503.515354][T15840] usb 2-1: MIDIStreaming interface descriptor not found [ 503.553875][T17935] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 503.823088][T15840] usb 2-1: USB disconnect, device number 104 [ 505.998281][T18060] sctp: [Deprecated]: syz.5.5593 (pid 18060) Use of struct sctp_assoc_value in delayed_ack socket option. [ 505.998281][T18060] Use struct sctp_sack_info instead [ 506.109827][ T5934] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 506.269687][ T5934] usb 2-1: Using ep0 maxpacket: 8 [ 506.269903][T18068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5596'. [ 506.311100][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 506.349951][ T5934] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 506.403833][ T5934] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 506.423807][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.469758][ T5934] usb 2-1: Product: syz [ 506.484242][ T5934] usb 2-1: Manufacturer: syz [ 506.488928][ T5934] usb 2-1: SerialNumber: syz [ 506.540933][ T5934] usb 2-1: config 0 descriptor?? [ 506.960116][T15840] usb 2-1: USB disconnect, device number 105 [ 506.979800][ T5934] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 507.164505][ T5934] usb 6-1: Using ep0 maxpacket: 8 [ 507.192189][ T5934] usb 6-1: unable to get BOS descriptor or descriptor too short [ 507.212608][ T5934] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 90, changing to 7 [ 507.242559][ T5934] usb 6-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 507.273033][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.293519][ T5934] usb 6-1: Product: syz [ 507.297765][ T5934] usb 6-1: Manufacturer: syz [ 507.320202][ T5934] usb 6-1: SerialNumber: syz [ 507.591533][ T5934] usb 6-1: 1:1: invalid format type 0x1005 is detected, processed as PCM [ 507.630190][ T5934] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 507.854768][ T5934] usb 6-1: USB disconnect, device number 2 [ 508.522803][T18171] xt_hashlimit: invalid rate [ 509.391103][T18208] !: renamed from dummy0 [ 509.619987][T18217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5643'. [ 509.791176][T18226] netlink: 'syz.3.5647': attribute type 1 has an invalid length. [ 510.532808][T18262] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5663'. [ 510.859733][T15840] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 510.922358][T18281] netlink: 'syz.0.5670': attribute type 10 has an invalid length. [ 510.942050][T18281] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5670'. [ 511.073142][T15840] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 511.121362][T15840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.155584][T15840] usb 6-1: config 0 descriptor?? [ 511.180465][T15840] cp210x 6-1:0.0: cp210x converter detected [ 511.605379][T15840] usb 6-1: cp210x converter now attached to ttyUSB0 [ 511.660379][T15840] usb 6-1: USB disconnect, device number 3 [ 511.696889][T15840] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 511.736233][T15840] cp210x 6-1:0.0: device disconnected [ 512.283284][T18354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5694'. [ 512.325263][T18354] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 512.719464][T18364] bond3 (unregistering): Released all slaves [ 512.843320][T18370] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5701'. [ 512.866227][T18370] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 513.375938][T18472] netlink: 'syz.3.5713': attribute type 3 has an invalid length. [ 513.409666][T18472] netlink: 666 bytes leftover after parsing attributes in process `syz.3.5713'. [ 513.684644][T18489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5722'. [ 514.141612][T18510] program syz.1.5730 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 514.433745][ T30] audit: type=1800 audit(1773042931.755:367): pid=18520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5734" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=5485 res=0 errno=0 [ 514.990689][T18632] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5745'. [ 515.370761][T18647] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 515.699709][T15838] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 515.923895][T15838] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 515.939921][T15838] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 515.978189][T15838] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 515.987907][T15838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.008536][T15838] usb 2-1: Product: syz [ 516.032630][T18680] openvswitch: netlink: IPv6 tunnel dst address is zero [ 516.049869][T15838] usb 2-1: Manufacturer: syz [ 516.062920][T15838] usb 2-1: SerialNumber: syz [ 516.323987][T18695] program syz.2.5768 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 516.524079][T15838] usb 2-1: cannot find UAC_HEADER [ 516.719389][T15838] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 516.742849][T18721] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5775'. [ 516.765631][T15838] usb 2-1: USB disconnect, device number 106 [ 516.812597][T15684] udevd[15684]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 516.963713][T18733] netlink: 'syz.3.5777': attribute type 21 has an invalid length. [ 517.416373][T18753] delete_channel: no stack [ 517.580830][T15840] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 517.771229][T15838] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 517.819957][T15840] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 517.831247][T15840] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 517.858255][T15840] usb 2-1: config 0 interface 0 has no altsetting 0 [ 517.882075][T15840] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 517.893539][T18769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 517.905181][T15840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.937438][T15840] usb 2-1: Product: syz [ 517.949326][T15840] usb 2-1: Manufacturer: syz [ 517.960281][T15840] usb 2-1: SerialNumber: syz [ 517.976699][T15838] usb 4-1: config 0 has an invalid interface number: 199 but max is 1 [ 517.991575][T15838] usb 4-1: config 0 has no interface number 1 [ 517.998930][T15840] usb 2-1: config 0 descriptor?? [ 518.004233][T15838] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 518.027142][T15838] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 518.028273][T18770] bond3 (unregistering): Released all slaves [ 518.072449][T15838] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 518.085707][T15838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 518.094016][T15838] usb 4-1: SerialNumber: syz [ 518.104201][T15838] usb 4-1: config 0 descriptor?? [ 518.176411][T18826] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5792'. [ 518.347224][T15838] uvcvideo 4-1:0.199: Found UVC 0.00 device (0002:0000) [ 518.365475][T15838] uvcvideo 4-1:0.199: No valid video chain found. [ 518.406648][T15838] usb 4-1: USB disconnect, device number 95 [ 518.497939][T15840] usb 2-1: USB disconnect, device number 107 [ 519.143025][T18885] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5803'. [ 519.586835][T18907] overlayfs: missing 'lowerdir' [ 519.930532][T18921] netlink: 763 bytes leftover after parsing attributes in process `syz.3.5819'. [ 520.119091][T18927] netlink: 6 bytes leftover after parsing attributes in process `syz.3.5822'. [ 521.117337][T18978] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 521.195325][T18978] bond0: (slave lo): Error: Device type is different from other slaves [ 522.093532][T19023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5863'. [ 522.480091][T15840] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 522.692091][T15840] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 522.741119][T15840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 522.767962][T19050] ip6t_REJECT: ECHOREPLY is not supported [ 522.783878][T15840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 522.820218][T15840] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 522.847210][T15840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.878822][T15840] usb 6-1: Product: syz [ 522.893866][T15840] usb 6-1: Manufacturer: syz [ 522.915221][T15840] usb 6-1: SerialNumber: syz [ 522.943558][T15840] usb 6-1: config 0 descriptor?? [ 524.236977][T19094] veth3: entered promiscuous mode [ 524.331850][T19095] m>e5n: entered promiscuous mode [ 524.836381][T19132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5904'. [ 525.487682][T19159] netlink: 'syz.1.5916': attribute type 16 has an invalid length. [ 525.530597][T19159] netlink: 'syz.1.5916': attribute type 17 has an invalid length. [ 525.838516][T19161] bond4: Removing last arp target with arp_interval on [ 525.897880][T19161] bond4: entered promiscuous mode [ 525.935005][T19161] bond4: entered allmulticast mode [ 526.000451][T19161] 8021q: adding VLAN 0 to HW filter on device bond4 [ 526.490719][ T30] audit: type=1326 audit(1773042943.815:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19218 comm="syz.3.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6ea59c799 code=0x7ffc0000 [ 526.619633][ T30] audit: type=1326 audit(1773042943.845:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19218 comm="syz.3.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6ea59c799 code=0x7ffc0000 [ 526.724510][ T30] audit: type=1326 audit(1773042943.865:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19218 comm="syz.3.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fd6ea59c799 code=0x7ffc0000 [ 526.829776][ T30] audit: type=1326 audit(1773042943.865:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19218 comm="syz.3.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6ea59c799 code=0x7ffc0000 [ 526.892190][ T30] audit: type=1326 audit(1773042943.865:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19218 comm="syz.3.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6ea59c799 code=0x7ffc0000 [ 526.918135][ T30] audit: type=1326 audit(1773042943.915:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19221 comm="syz.5.5929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668c99c799 code=0x7ffc0000 [ 526.941780][ T30] audit: type=1326 audit(1773042943.945:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19221 comm="syz.5.5929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f668c99c799 code=0x7ffc0000 [ 526.965845][ T30] audit: type=1326 audit(1773042943.945:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19221 comm="syz.5.5929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668c99c799 code=0x7ffc0000 [ 527.130144][ T30] audit: type=1326 audit(1773042943.945:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19221 comm="syz.5.5929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668c99c799 code=0x7ffc0000 [ 527.220880][T19241] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 527.746659][T19261] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.5946'. [ 528.015083][T19268] xt_TCPMSS: Only works on TCP SYN packets [ 528.331305][T19285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5956'. [ 528.415773][T19284] ip6tnl2: entered promiscuous mode [ 528.424883][T19287] netlink: 'syz.3.5957': attribute type 1 has an invalid length. [ 528.921226][T19308] netlink: 'syz.5.5965': attribute type 6 has an invalid length. [ 529.799942][ T30] audit: type=1326 audit(1773042947.115:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19337 comm="syz.2.5978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ee919c799 code=0x7ffc0000 [ 529.883583][T19342] netlink: 'syz.1.5980': attribute type 21 has an invalid length. [ 529.927708][T19342] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5980'. [ 529.979927][T19342] netlink: 'syz.1.5980': attribute type 5 has an invalid length. [ 530.002853][T19342] netlink: 35 bytes leftover after parsing attributes in process `syz.1.5980'. [ 530.079890][T19348] binder: 19345:19348 ioctl c00c6211 0 returned -14 [ 530.886999][T19372] [U] v3f"S/4:XTzWtlW= [ 530.925253][T19372] [U] J"e:" [ 531.458463][T19398] netlink: 'syz.5.6002': attribute type 21 has an invalid length. [ 531.939421][T19416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 532.759764][T19439] netlink: 'syz.5.6020': attribute type 17 has an invalid length. [ 532.767948][T19439] netlink: 148 bytes leftover after parsing attributes in process `syz.5.6020'. [ 533.269935][T19456] sg_write: data in/out 229343/136 bytes for SCSI command 0x2-- guessing data in; [ 533.269935][T19456] program syz.1.6026 not setting count and/or reply_len properly [ 533.669802][T15840] iguanair 6-1:0.0: failed to get version [ 533.670210][T15840] iguanair 6-1:0.0: probe with driver iguanair failed with error -110 [ 533.704558][T15840] usb 6-1: USB disconnect, device number 4 [ 533.879002][T19479] dlm: non-version read from control device 0 [ 534.129992][T19493] ipt_REJECT: TCP_RESET invalid for non-tcp [ 534.589666][ T797] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 534.651303][T19520] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6052'. [ 534.679132][T19520] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6052'. [ 534.771269][ T797] usb 2-1: Using ep0 maxpacket: 8 [ 534.821272][ T797] usb 2-1: unable to get BOS descriptor or descriptor too short [ 534.841608][ T797] usb 2-1: config 4 has an invalid interface number: 112 but max is 0 [ 534.871489][ T797] usb 2-1: config 4 has no interface number 0 [ 534.877681][ T797] usb 2-1: config 4 interface 112 has no altsetting 0 [ 534.913769][ T797] usb 2-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice= 8.40 [ 534.952549][ T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.994686][ T797] usb 2-1: Product: syz [ 535.007126][T19534] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 535.012428][ T797] usb 2-1: Manufacturer: syz [ 535.039970][ T797] usb 2-1: SerialNumber: syz [ 535.298309][ T797] pcwd_usb: The device isn't a Human Interface Device [ 535.348419][ T797] usb 2-1: USB disconnect, device number 108 [ 536.199988][ T797] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 536.382003][ T797] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 536.430476][ T797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.467425][ T797] usb 3-1: config 0 descriptor?? [ 536.581559][T19616] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 536.588154][T19616] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 536.601289][T19616] vhci_hcd vhci_hcd.0: Device attached [ 536.614881][T19616] vhci_hcd vhci_hcd.0: port 0 already used [ 536.632023][T19617] vhci_hcd: connection closed [ 536.633941][ T3489] vhci_hcd vhci_hcd.1: stop threads [ 536.689808][ T3489] vhci_hcd vhci_hcd.1: release socket [ 536.695616][ T3489] vhci_hcd vhci_hcd.1: disconnect device [ 536.877716][T19627] bond5: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 536.906788][T19627] bond5 (unregistering): Released all slaves [ 536.921878][ T797] ath6kl: Failed to submit usb control message: -71 [ 536.928595][ T797] ath6kl: unable to send the bmi data to the device: -71 [ 536.948624][ T797] ath6kl: Unable to send get target info: -71 [ 536.973153][ T797] ath6kl: Failed to init ath6kl core: -71 [ 537.000384][ T797] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 537.061685][ T797] usb 3-1: USB disconnect, device number 100 [ 537.939689][T19735] bond4: option resend_igmp: invalid value (18345) [ 537.946932][T19735] bond4: option resend_igmp: allowed values 0 - 255 [ 537.982959][T19735] bond4 (unregistering): Released all slaves [ 538.156251][T19809] netlink: 'syz.2.6105': attribute type 21 has an invalid length. [ 538.214204][T19809] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6105'. [ 538.233914][T19809] netlink: 'syz.2.6105': attribute type 4 has an invalid length. [ 538.258260][T19809] netlink: 'syz.2.6105': attribute type 5 has an invalid length. [ 538.309848][T19809] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6105'. [ 538.496822][T19821] netlink: 156 bytes leftover after parsing attributes in process `syz.5.6111'. [ 538.882382][T19841] netlink: 'syz.1.6118': attribute type 7 has an invalid length. [ 538.905054][T19841] netlink: 176 bytes leftover after parsing attributes in process `syz.1.6118'. [ 539.000039][T15838] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 539.209558][T15838] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 539.229476][T15838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.286196][T15838] usb 6-1: config 0 descriptor?? [ 539.312643][T15838] cp210x 6-1:0.0: cp210x converter detected [ 539.597913][T19867] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 539.725987][T15838] cp210x 6-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 539.758937][T15838] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 539.811493][T15838] usb 6-1: cp210x converter now attached to ttyUSB0 [ 539.861225][T15838] usb 6-1: USB disconnect, device number 5 [ 539.900612][T15838] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 539.937626][T19888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6135'. [ 539.947508][T15838] cp210x 6-1:0.0: device disconnected [ 539.976384][T19888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6135'. [ 540.079840][T19902] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 540.138962][T19904] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6138'. [ 540.239821][ T797] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 540.399927][ T797] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 540.401067][T19913] netlink: 'syz.0.6143': attribute type 29 has an invalid length. [ 540.408894][ T797] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 540.408920][ T797] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 540.409068][ T797] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.570100][ T797] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.604140][ T797] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 540.614316][ T797] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 540.623279][ T797] usb 2-1: Product: syz [ 540.641690][ T797] usb 2-1: Manufacturer: syz [ 540.683830][ T797] cdc_wdm 2-1:1.0: skipping garbage [ 540.700176][ T797] cdc_wdm 2-1:1.0: skipping garbage [ 540.719818][T19926] dlm: Unknown command passed to DLM device : 33 [ 540.719818][T19926] [ 540.749343][ T797] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 540.788782][ T797] cdc_wdm 2-1:1.0: Unknown control protocol [ 540.932853][T19895] cdc_wdm 2-1:1.0: Error submitting int urb - -90 [ 540.954751][T19936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6151'. [ 540.971865][T15838] usb 2-1: USB disconnect, device number 109 [ 542.840609][T20021] bond4 (unregistering): Released all slaves [ 543.610026][T20116] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6195'. [ 543.698573][T20118] dlm: no locking on control device [ 544.203347][T20141] vivid-001: disconnect [ 544.237645][T20139] xt_CT: You must specify a L4 protocol and not use inversions on it [ 544.260446][T20137] vivid-001: reconnect [ 544.422015][T20149] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6209'. [ 544.458669][T20149] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6209'. [ 544.510011][T20149] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6209'. [ 544.772217][T20149] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6209'. [ 544.782534][T15840] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 544.813324][T20149] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6209'. [ 544.832119][T20149] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6209'. [ 544.958273][T15840] usb 2-1: not running at top speed; connect to a high speed hub [ 544.987549][T15840] usb 2-1: config 95 has an invalid interface number: 1 but max is 0 [ 545.017770][T15840] usb 2-1: config 95 has no interface number 0 [ 545.035745][T15840] usb 2-1: config 95 interface 1 has no altsetting 0 [ 545.063373][T15840] usb 2-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 545.094469][T15840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.255767][T15840] usb 2-1: Product: syz [ 545.315010][T15840] usb 2-1: Manufacturer: syz [ 545.339595][T15840] usb 2-1: SerialNumber: syz [ 545.349310][T20180] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6219'. [ 545.696709][T20193] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 545.782135][T20196] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6223'. [ 545.928018][T20206] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6225'. [ 545.966310][T15840] usb 2-1: USB disconnect, device number 110 [ 546.236050][T15684] udevd[15684]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 547.567350][T20271] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 547.606596][T20367] netlink: 'syz.1.6253': attribute type 36 has an invalid length. [ 547.664726][T20367] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 547.768123][T20367] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 548.305738][T20396] netlink: 'syz.3.6265': attribute type 17 has an invalid length. [ 548.928388][T20487] __nla_validate_parse: 2 callbacks suppressed [ 548.928447][T20487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6277'. [ 549.407483][T20801] program syz.3.6282 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 550.272571][T21203] netlink: 'syz.3.6292': attribute type 1 has an invalid length. [ 552.239764][ T797] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 552.420260][ T797] usb 4-1: Using ep0 maxpacket: 32 [ 552.450721][ T797] usb 4-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=1a.51 [ 552.484197][ T797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.526561][ T797] usb 4-1: Product: syz [ 552.555050][ T797] usb 4-1: Manufacturer: syz [ 552.579624][ T797] usb 4-1: SerialNumber: syz [ 552.600834][ T797] usb 4-1: config 0 descriptor?? [ 552.646026][ T797] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 552.833293][ T797] gspca_sn9c2028: read1 error -71 [ 552.841129][ T797] gspca_sn9c2028: read1 error -71 [ 552.865473][ T797] gspca_sn9c2028: read1 error -71 [ 552.906101][ T797] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -71 [ 552.952357][ T797] usb 4-1: USB disconnect, device number 96 [ 553.829277][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 553.829395][ T30] audit: type=1326 audit(1773042971.145:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23380 comm="syz.1.6314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03899c799 code=0x7ffc0000 [ 553.934416][ T30] audit: type=1326 audit(1773042971.145:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23380 comm="syz.1.6314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03899c799 code=0x7ffc0000 [ 554.015686][ T30] audit: type=1326 audit(1773042971.195:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23380 comm="syz.1.6314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fb03899c799 code=0x7ffc0000 [ 554.108479][ T30] audit: type=1326 audit(1773042971.195:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23380 comm="syz.1.6314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03899c799 code=0x7ffc0000 [ 554.198757][ T30] audit: type=1326 audit(1773042971.195:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23380 comm="syz.1.6314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03899c799 code=0x7ffc0000 [ 559.889228][T20417] : entered allmulticast mode [ 559.904932][T21142] xfrm0: entered promiscuous mode [ 559.933907][T21142] xfrm0: entered allmulticast mode [ 560.140711][T27992] fuse: Unknown parameter 'su' [ 560.800374][ T797] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 560.960247][ T797] usb 3-1: Using ep0 maxpacket: 8 [ 560.981035][ T797] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 560.989458][ T797] usb 3-1: config 179 has no interface number 0 [ 560.999992][T15840] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 561.019642][ T797] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 561.043491][T28044] netlink: 'syz.3.6341': attribute type 1 has an invalid length. [ 561.069763][ T797] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 561.109703][ T797] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 561.152038][ T797] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 561.179667][ T797] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 561.212141][T15840] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 561.223040][ T797] usb 3-1: config 179 interface 65 has no altsetting 0 [ 561.237873][T15840] usb 6-1: config 0 has no interface number 0 [ 561.257830][T15840] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 561.260120][ T797] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 561.298506][T15840] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 561.310162][T28048] netlink: 'syz.0.6344': attribute type 5 has an invalid length. [ 561.325742][T15840] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 561.357462][T15840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.359919][ T797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.387710][T15840] usb 6-1: config 0 descriptor?? [ 561.425828][T15840] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 561.519644][T15838] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 561.540331][ T797] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input37 [ 561.682811][T28029] iowarrior 6-1:0.1: Error -90 while submitting URB [ 561.692648][T15838] usb 2-1: Using ep0 maxpacket: 16 [ 561.722802][T15840] usb 3-1: USB disconnect, device number 101 [ 561.741756][T15838] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 561.780166][T15838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.801936][ T797] usb 6-1: USB disconnect, device number 6 [ 561.836658][T15838] usb 2-1: Product: syz [ 561.856496][T15838] usb 2-1: Manufacturer: syz [ 561.881828][T15838] usb 2-1: SerialNumber: syz [ 561.923199][T15838] usb 2-1: config 0 descriptor?? [ 562.012069][T28101] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 562.152904][T15838] speedtch 2-1:0.0: speedtch_bind: data interface not found! [ 562.180452][T15838] speedtch 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 562.356587][T15838] usb 2-1: USB disconnect, device number 111 [ 563.013683][T28145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6367'. [ 563.126656][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.135365][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.225907][T28156] openvswitch: netlink: IP tunnel TTL not specified. [ 563.289927][T15838] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 563.327817][T28163] tipc: Trying to set illegal importance in message [ 563.459894][T15838] usb 2-1: Using ep0 maxpacket: 16 [ 563.477080][T15838] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 563.500563][T15838] usb 2-1: config 0 has no interface number 0 [ 563.537739][T15838] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 563.583667][T15838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.632683][T15838] usb 2-1: Product: syz [ 563.637370][T15838] usb 2-1: Manufacturer: syz [ 563.678981][T15838] usb 2-1: SerialNumber: syz [ 563.702877][T15838] usb 2-1: config 0 descriptor?? [ 563.739932][ T30] audit: type=1400 audit(1773042981.055:387): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=28175 comm="syz.0.6379" [ 563.763506][T28179] autofs4:pid:28179:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 563.931826][T15838] usb 2-1: selecting invalid altsetting 1 [ 563.963166][T15838] speedtch 2-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 563.990274][T15838] speedtch 2-1:0.1: usbatm_usb_probe: bind failed: -22! [ 564.013671][T15838] speedtch 2-1:0.1: probe with driver speedtch failed with error -22 [ 564.022075][T15840] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 564.066711][T15838] usb 2-1: USB disconnect, device number 112 [ 564.200353][T15840] usb 4-1: Using ep0 maxpacket: 16 [ 564.209194][T15840] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 564.225373][T15840] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 564.260292][T15840] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 564.299900][T15840] usb 4-1: config 1 interface 2 has no altsetting 0 [ 564.358269][T15840] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 564.382176][T15840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.411258][T15840] usb 4-1: Product: syz [ 564.421565][T15840] usb 4-1: Manufacturer: syz [ 564.439595][T15840] usb 4-1: SerialNumber: syz [ 564.684083][T15840] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 564.729436][T15840] usb 4-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 564.749604][T15840] usb 4-1: found format II with max.bitrate = 3, frame size=7 [ 564.759050][T15840] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 564.823670][T15840] usb 4-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 564.879637][T15840] usb 4-1: found format II with max.bitrate = 3, frame size=7 [ 564.901528][T15840] usb 4-1: selecting invalid altsetting 0 [ 564.950148][T15840] usb 4-1: selecting invalid altsetting 0 [ 565.154852][T15840] usb 4-1: USB disconnect, device number 97 [ 565.289785][ T797] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 565.490733][ T797] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 565.529678][ T797] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 565.560447][ T797] usb 3-1: config 220 has no interface number 2 [ 565.588227][ T797] usb 3-1: config 220 interface 1 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 56 [ 565.619726][ T797] usb 3-1: config 220 interface 1 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1023 [ 565.658203][ T797] usb 3-1: config 220 interface 1 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 565.683589][T15838] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 565.704002][ T797] usb 3-1: config 220 interface 0 has no altsetting 0 [ 565.724546][ T797] usb 3-1: config 220 interface 76 has no altsetting 0 [ 565.748141][ T797] usb 3-1: config 220 interface 1 has no altsetting 0 [ 565.772657][ T797] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 565.809926][ T797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.838814][ T797] usb 3-1: Product: syz [ 565.849226][ T797] usb 3-1: Manufacturer: syz [ 565.870018][ T797] usb 3-1: SerialNumber: syz [ 565.879826][T15838] usb 2-1: Using ep0 maxpacket: 32 [ 565.900341][T15838] usb 2-1: unable to get BOS descriptor or descriptor too short [ 565.937507][T15838] usb 2-1: config 1 has an invalid interface number: 255 but max is 2 [ 565.976897][T15838] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 566.040796][T15838] usb 2-1: config 1 has no interface number 2 [ 566.047266][T15838] usb 2-1: config 1 interface 255 has no altsetting 0 [ 566.082628][T15838] usb 2-1: config 1 interface 1 has no altsetting 0 [ 566.103511][T28305] netlink: 156 bytes leftover after parsing attributes in process `syz.5.6413'. [ 566.130590][ T797] usb 3-1: selecting invalid altsetting 0 [ 566.143458][T15838] usb 2-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice= 0.40 [ 566.148285][ T797] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 566.189957][ T797] uvcvideo 3-1:220.0: No valid video chain found. [ 566.198159][T15838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.227862][T15838] usb 2-1: Product: syz [ 566.240978][ T797] usb 3-1: selecting invalid altsetting 0 [ 566.248171][T15838] usb 2-1: Manufacturer: syz [ 566.266696][T15838] usb 2-1: SerialNumber: syz [ 566.270400][ T797] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 566.364604][ T797] usb 3-1: USB disconnect, device number 102 [ 566.720031][T15838] usb 2-1: USB disconnect, device number 113 [ 566.838327][T28259] udevd[28259]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 567.299737][T15838] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 567.502138][T15838] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 567.519591][T15838] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 567.562429][T15838] usb 6-1: config 0 has no interface number 0 [ 567.582178][T28394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6434'. [ 567.593134][T15838] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 567.593169][T15838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.593193][T15838] usb 6-1: Product: syz [ 567.593211][T15838] usb 6-1: Manufacturer: syz [ 567.593228][T15838] usb 6-1: SerialNumber: syz [ 567.615658][T15838] usb 6-1: config 0 descriptor?? [ 567.731346][T28399] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6436'. [ 567.792855][T28399] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6436'. [ 567.918570][T28399] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 568.139806][T15838] uvcvideo 6-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 568.171668][T15838] uvcvideo 6-1:0.64: No valid video chain found. [ 568.217185][T15838] usb 6-1: USB disconnect, device number 7 [ 568.703962][T28448] program syz.3.6450 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 569.107465][T28468] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6461'. [ 569.340334][T28484] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 569.489739][ T797] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 569.679592][ T797] usb 3-1: Using ep0 maxpacket: 16 [ 569.699251][T28500] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6472'. [ 569.733432][ T797] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 569.769716][ T797] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 569.812317][ T797] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 569.849737][ T797] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 569.879656][ T797] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 569.889488][ T797] usb 3-1: config 1 interface 0 has no altsetting 0 [ 569.937220][ T797] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 569.979680][ T797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.016256][ T797] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 570.132253][ T30] audit: type=1326 audit(1773042987.455:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28516 comm="syz.3.6477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6ea59c799 code=0x7ffc0000 [ 570.210151][ T30] audit: type=1326 audit(1773042987.455:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28516 comm="syz.3.6477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6ea59c799 code=0x7ffc0000 [ 570.258820][ T797] scsi host1: usb-storage 3-1:1.0 [ 570.345244][ T30] audit: type=1326 audit(1773042987.495:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28516 comm="syz.3.6477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7fd6ea59c799 code=0x7ffc0000 [ 570.432513][T28529] netlink: 'syz.1.6480': attribute type 5 has an invalid length. [ 570.469876][T15838] usb 3-1: USB disconnect, device number 103 [ 570.495295][ T30] audit: type=1326 audit(1773042987.505:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28516 comm="syz.3.6477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6ea59c799 code=0x7ffc0000 [ 570.532825][T28529] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.6480'. [ 570.800106][T28551] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6485'. [ 570.854066][T28553] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 570.890325][T28553] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 572.747083][T28643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6523'. [ 573.111607][T28661] netlink: 'syz.0.6532': attribute type 1 has an invalid length. [ 573.260229][T28668] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 573.293963][T28670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6536'. [ 573.869407][T28695] netlink: 'syz.1.6547': attribute type 11 has an invalid length. [ 573.907161][T28695] netlink: 140 bytes leftover after parsing attributes in process `syz.1.6547'. [ 573.959173][T28697] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6548'. [ 574.790027][T15838] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 574.970536][T15838] usb 4-1: Using ep0 maxpacket: 32 [ 574.998926][T15838] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 575.017586][T15838] usb 4-1: config 2 has no interface number 0 [ 575.040233][T15838] usb 4-1: config 2 interface 88 has no altsetting 0 [ 575.073948][T15838] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 575.092971][T15838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.106554][T28749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6567'. [ 575.123213][T15838] usb 4-1: Product: syz [ 575.159599][T15838] usb 4-1: Manufacturer: syz [ 575.164919][T28751] sg_write: process 2770 (syz.2.6568) changed security contexts after opening file descriptor, this is not allowed. [ 575.179623][T15838] usb 4-1: SerialNumber: syz [ 575.560415][T28768] IPv6: NLM_F_CREATE should be specified when creating new route [ 575.821166][T15838] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 575.871309][T15838] asix 4-1:2.88: probe with driver asix failed with error -71 [ 575.916512][T15838] usb 4-1: USB disconnect, device number 98 [ 576.479816][T28818] tipc: Enabling of bearer rejected, failed to enable media [ 577.289765][T15840] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 577.462296][T15840] usb 4-1: Using ep0 maxpacket: 32 [ 577.476537][T15840] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 577.503153][T15840] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 577.523245][T15840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.553363][T15840] usb 4-1: config 0 descriptor?? [ 577.595347][T15840] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 577.813201][T15840] usb 4-1: USB disconnect, device number 99 [ 578.300145][T15840] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 578.319733][ T5918] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 578.482620][T15840] usb 4-1: Using ep0 maxpacket: 8 [ 578.503207][T15840] usb 4-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=a5.79 [ 578.519872][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 578.531731][ T5918] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 578.549783][T15840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.558048][ T5918] usb 3-1: config 0 has no interface number 0 [ 578.575253][ T5918] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 578.592175][T15840] usb 4-1: config 0 descriptor?? [ 578.624318][T15840] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 578.655021][ T5918] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 578.675307][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.708173][ T5918] usb 3-1: Product: syz [ 578.729625][ T5918] usb 3-1: Manufacturer: syz [ 578.734310][ T5918] usb 3-1: SerialNumber: syz [ 578.793167][ T5918] usb 3-1: config 0 descriptor?? [ 578.843154][ T5918] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 578.859939][ T9] usb 4-1: USB disconnect, device number 100 [ 578.869589][ T5918] em28xx 3-1:0.132: Video interface 132 found: isoc [ 578.914885][T28925] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6622'. [ 579.100291][ T5918] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 579.239780][ T5918] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 579.279707][ T5918] em28xx 3-1:0.132: board has no eeprom [ 579.369730][ T5918] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 579.390964][ T5918] em28xx 3-1:0.132: analog set to isoc mode. [ 579.407209][T15838] em28xx 3-1:0.132: Registering V4L2 extension [ 579.479982][ T5918] usb 3-1: USB disconnect, device number 104 [ 579.535467][ T5918] em28xx 3-1:0.132: Disconnecting em28xx [ 580.029692][T15838] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 580.057691][T15838] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 580.088243][T15838] em28xx 3-1:0.132: No AC97 audio processor [ 580.140648][T15838] usb 3-1: Decoder not found [ 580.153441][T15838] em28xx 3-1:0.132: failed to create media graph [ 580.160568][T15838] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 580.223747][T15838] em28xx 3-1:0.132: Remote control support is not available for this card. [ 580.246165][ T5918] em28xx 3-1:0.132: Closing input extension [ 580.399808][ T5918] em28xx 3-1:0.132: Freeing device [ 581.663053][T29055] program syz.3.6664 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 582.429791][T29090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6678'. [ 583.751555][ T797] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 583.950971][ T797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.979718][ T797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.010357][ T797] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 584.019492][ T797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.070954][ T797] usb 3-1: config 0 descriptor?? [ 584.528508][ T797] cp2112 0003:10C4:EA90.0001: item fetching failed at offset 5/7 [ 584.560367][ T797] cp2112 0003:10C4:EA90.0001: parse failed [ 584.566456][ T797] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -22 [ 584.772888][ T5918] usb 3-1: USB disconnect, device number 105 [ 585.350126][T29220] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6720'. [ 585.659047][T29242] netlink: 'syz.5.6727': attribute type 2 has an invalid length. [ 585.689769][ T5918] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 585.865747][ T5918] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 585.903686][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.941866][ T5918] usb 2-1: config 0 descriptor?? [ 585.968763][ T5918] cp210x 2-1:0.0: cp210x converter detected [ 586.176061][T29261] netlink: 'syz.2.6734': attribute type 39 has an invalid length. [ 586.409581][ T5918] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 586.428032][ T5918] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 586.460150][ T5918] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 586.500736][ T5918] usb 2-1: cp210x converter now attached to ttyUSB0 [ 586.560970][ T5918] usb 2-1: USB disconnect, device number 114 [ 586.622373][ T5918] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 586.674906][ T5918] cp210x 2-1:0.0: device disconnected [ 587.029024][T29310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6741'. [ 587.060607][T29310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6741'. [ 587.089678][ T5918] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 587.111064][T29310] netlink: 'syz.2.6741': attribute type 11 has an invalid length. [ 587.173582][T29321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6744'. [ 587.241903][ T5918] usb 6-1: Using ep0 maxpacket: 16 [ 587.250557][ T5918] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 587.283785][ T5918] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 587.290354][ T797] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 587.312292][ T5918] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 587.329592][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.348353][ T5918] usb 6-1: Product: syz [ 587.358512][ T5918] usb 6-1: Manufacturer: syz [ 587.369586][ T5918] usb 6-1: SerialNumber: syz [ 587.479742][ T797] usb 4-1: Using ep0 maxpacket: 8 [ 587.494428][ T797] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.539865][ T797] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.569924][ T797] usb 4-1: config 0 interface 0 has no altsetting 0 [ 587.576628][ T797] usb 4-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 587.619384][ T5918] usb 6-1: 0:2 : does not exist [ 587.619874][ T797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.651280][ T5918] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 587.680283][ T797] usb 4-1: config 0 descriptor?? [ 587.798993][ T5918] usb 6-1: USB disconnect, device number 8 [ 588.117697][ T797] smartjoyplus 0003:6666:8804.0002: item fetching failed at offset 2/5 [ 588.150500][ T797] smartjoyplus 0003:6666:8804.0002: parse failed [ 588.157096][ T797] smartjoyplus 0003:6666:8804.0002: probe with driver smartjoyplus failed with error -22 [ 588.353050][T15838] usb 4-1: USB disconnect, device number 101 [ 589.093677][T29413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6766'. [ 589.153007][T29413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6766'. [ 590.783785][T29474] netlink: 16146 bytes leftover after parsing attributes in process `syz.1.6791'. [ 591.570031][T15838] usb 4-1: new low-speed USB device number 102 using dummy_hcd [ 591.773102][T15838] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 591.806605][T15838] usb 4-1: config 0 has no interface number 0 [ 591.840814][T15838] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 591.895895][T15838] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 591.928301][T15838] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 591.989905][T15838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.014234][T15838] usb 4-1: config 0 descriptor?? [ 592.055860][T29500] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 592.085886][T15838] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 592.167407][T29542] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6816'. [ 592.206619][T29542] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6816'. [ 592.360636][T15838] usb 4-1: USB disconnect, device number 102 [ 593.263887][T29595] ip6tnl0: Caught tx_queue_len zero misconfig [ 593.783618][T29617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6845'. [ 593.809741][T29617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6845'. [ 594.479987][ T31] INFO: task syz.4.4566:15431 blocked for more than 143 seconds. [ 594.489286][ T31] Not tainted syzkaller #0 [ 594.499394][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 594.539674][ T31] task:syz.4.4566 state:D stack:28160 pid:15431 tgid:15426 ppid:5852 task_flags:0x400040 flags:0x00080002 [ 594.579803][ T31] Call Trace: [ 594.583377][ T31] [ 594.586432][ T31] __schedule+0x15dd/0x52d0 [ 594.591536][ T9] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 594.633119][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 594.633310][ T31] ? __pfx___schedule+0x10/0x10 [ 594.633357][ T31] ? schedule+0x90/0x360 [ 594.633394][ T31] schedule+0x164/0x360 [ 594.633430][ T31] schedule_preempt_disabled+0x13/0x30 [ 594.633464][ T31] __mutex_lock+0x7fe/0x1300 [ 594.633494][ T31] ? __mutex_lock+0x5ac/0x1300 [ 594.633529][ T31] ? usbdev_open+0x182/0x770 [ 594.633597][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 594.633622][ T31] ? bus_find_device+0x27d/0x2d0 [ 594.633662][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 594.633698][ T31] ? usbdev_open+0xa7/0x770 [ 594.633725][ T31] ? __kmalloc_cache_noprof+0x15b/0x660 [ 594.633783][ T31] usbdev_open+0x182/0x770 [ 594.633814][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 594.633842][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 594.633875][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 594.633905][ T31] chrdev_open+0x4cd/0x5e0 [ 594.633954][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 594.633983][ T31] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 594.634029][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 594.634057][ T31] do_dentry_open+0x785/0x14e0 [ 594.634106][ T31] vfs_open+0x3b/0x340 [ 594.634135][ T31] ? path_openat+0x2df0/0x3860 [ 594.634166][ T31] path_openat+0x2e08/0x3860 [ 594.634208][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 594.634245][ T31] ? stack_depot_save_flags+0x33/0x810 [ 594.634314][ T31] ? __pfx_path_openat+0x10/0x10 [ 594.634338][ T31] ? __x64_sys_openat+0x138/0x170 [ 594.634370][ T31] ? do_syscall_64+0x14d/0xf80 [ 594.634429][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.634518][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 594.634556][ T31] do_file_open+0x23e/0x4a0 [ 594.634589][ T31] ? __pfx_do_file_open+0x10/0x10 [ 594.634638][ T31] ? _raw_spin_unlock+0x28/0x50 [ 594.634694][ T31] ? alloc_fd+0x64b/0x6c0 [ 594.634740][ T31] do_sys_openat2+0x113/0x200 [ 594.634778][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 594.634814][ T31] ? exc_page_fault+0x6a/0xc0 [ 594.634853][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 594.634905][ T31] __x64_sys_openat+0x138/0x170 [ 594.634945][ T31] do_syscall_64+0x14d/0xf80 [ 594.634966][ T31] ? trace_irq_disable+0x3b/0x150 [ 594.635023][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.635048][ T31] ? clear_bhb_loop+0x40/0x90 [ 594.635076][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.635107][ T31] RIP: 0033:0x7fccd5d5cfce [ 594.635171][ T31] RSP: 002b:00007fccd3ff5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 594.635230][ T31] RAX: ffffffffffffffda RBX: 00007fccd3ff66c0 RCX: 00007fccd5d5cfce [ 594.635249][ T31] RDX: 000000000002a401 RSI: 00007fccd3ff5c00 RDI: ffffffffffffff9c [ 594.635266][ T31] RBP: 00007fccd3ff5c00 R08: 0000000000000000 R09: 0000000000000000 [ 594.635283][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 594.635299][ T31] R13: 00007fccd6016038 R14: 00007fccd6015fa0 R15: 00007fccd613fa48 [ 594.635334][ T31] [ 594.635396][ T31] [ 594.635396][ T31] Showing all locks held in the system: [ 594.635409][ T31] 6 locks held by kworker/0:0/9: [ 594.635456][ T31] #0: ffff8880212df948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 594.635550][ T31] #1: ffffc900000e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 594.635635][ T31] #2: ffff88802a014198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 594.635696][ T31] #3: ffff88802a059518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 594.635753][ T31] #4: ffff888028e4f268 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 594.635811][ T31] #5: ffffffff8f473ab0 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14e/0x1840 [ 594.635873][ T31] 1 lock held by khungtaskd/31: [ 594.635886][ T31] #0: ffffffff8e75e3e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 594.636089][ T31] 2 locks held by getty/5588: [ 594.636106][ T31] #0: ffff8880365b80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 594.636200][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 594.636266][ T31] 6 locks held by kworker/0:3/5833: [ 594.636291][ T31] 1 lock held by syz.4.4566/15431: [ 594.636306][ T31] #0: ffff8880299ed198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 594.636371][ T31] 4 locks held by kworker/1:7/15838: [ 594.636386][ T31] #0: ffff88813fe0f148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 594.636453][ T31] #1: ffffc9000fccfc40 ((work_completion)(&helper->damage_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 594.636530][ T31] #2: ffff888025c81a80 (&helper->lock){+.+.}-{4:4}, at: drm_fb_helper_damage_work+0x125/0x750 [ 594.636622][ T31] #3: ffff888025caa130 (&dev->master_mutex){+.+.}-{4:4}, at: drm_master_internal_acquire+0x20/0x80 [ 594.636704][ T31] 3 locks held by syz.5.6857/29648: [ 594.636719][ T31] 2 locks held by syz.0.6859/29652: [ 594.636734][ T31] 2 locks held by syz.1.6860/29655: [ 594.636749][ T31] 5 locks held by syz.3.6861/29657: [ 594.636765][ T31] [ 594.636773][ T31] ============================================= [ 594.636773][ T31] [ 594.636792][ T31] NMI backtrace for cpu 0 [ 594.636812][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 594.636841][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 594.636855][ T31] Call Trace: [ 594.636864][ T31] [ 594.636874][ T31] dump_stack_lvl+0xe8/0x150 [ 594.636912][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 594.637012][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 594.637043][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 594.637074][ T31] sys_info+0x135/0x170 [ 594.637102][ T31] watchdog+0xfd9/0x1030 [ 594.637142][ T31] ? watchdog+0x21a/0x1030 [ 594.637181][ T31] kthread+0x388/0x470 [ 594.637210][ T31] ? __pfx_watchdog+0x10/0x10 [ 594.637241][ T31] ? __pfx_kthread+0x10/0x10 [ 594.637264][ T31] ret_from_fork+0x51e/0xb90 [ 594.637294][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 594.637326][ T31] ? __switch_to+0xc7d/0x1450 [ 594.637374][ T31] ? __pfx_kthread+0x10/0x10 [ 594.637397][ T31] ret_from_fork_asm+0x1a/0x30 [ 594.637446][ T31] [ 594.637455][ T31] Sending NMI from CPU 0 to CPUs 1: [ 594.637485][ C1] NMI backtrace for cpu 1 [ 594.637499][ C1] CPU: 1 UID: 0 PID: 29652 Comm: syz.0.6859 Not tainted syzkaller #0 PREEMPT(full) [ 594.637521][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 594.637532][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 594.637562][ C1] Code: 89 fb e8 23 00 00 00 48 8b 3d 24 42 55 0c 48 89 de 5b e9 73 96 5e 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0d 48 32 56 11 65 8b 15 69 32 56 [ 594.637579][ C1] RSP: 0018:ffffc9001fdaf580 EFLAGS: 00000283 [ 594.637594][ C1] RAX: ffffffff82196549 RBX: dffffc0000000000 RCX: 0000000000000000 [ 594.637608][ C1] RDX: ffff8880304e9e80 RSI: 00000000000001fd RDI: 000000000000010d [ 594.637621][ C1] RBP: 000000000000010d R08: ffffea000048bab3 R09: 1ffffd4000091756 [ 594.637634][ C1] R10: dffffc0000000000 R11: fffff94000091757 R12: ffff88803a27a000 [ 594.637648][ C1] R13: 00000000000001fd R14: 1ffff92003fb5f5d R15: ffffc9001fdafac0 [ 594.637661][ C1] FS: 0000000000000000(0000) GS:ffff888125563000(0000) knlGS:0000000000000000 [ 594.637676][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 594.637689][ C1] CR2: 0000200000002000 CR3: 000000005de3a000 CR4: 00000000003526f0 [ 594.637706][ C1] Call Trace: [ 594.637713][ C1] [ 594.637720][ C1] __tlb_remove_folio_pages_size+0x153/0x5a0 [ 594.637767][ C1] unmap_page_range+0x1d3c/0x48f0 [ 594.637813][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 594.637845][ C1] ? mas_find+0xb0e/0xd30 [ 594.637904][ C1] ? unmap_vmas+0x1c4/0x6a0 [ 594.637928][ C1] unmap_vmas+0x48f/0x6a0 [ 594.637955][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 594.637989][ C1] exit_mmap+0x280/0xa10 [ 594.638016][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 594.638045][ C1] ? __pfx_exit_aio+0x10/0x10 [ 594.638079][ C1] ? uprobe_clear_state+0x27c/0x290 [ 594.638118][ C1] __mmput+0x118/0x430 [ 594.638142][ C1] exit_mm+0x168/0x220 [ 594.638161][ C1] do_exit+0x6a2/0x23c0 [ 594.638180][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 594.638208][ C1] ? __pfx_do_exit+0x10/0x10 [ 594.638225][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 594.638251][ C1] ? preempt_schedule_common+0x82/0xd0 [ 594.638278][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 594.638304][ C1] do_group_exit+0x21b/0x2d0 [ 594.638325][ C1] __x64_sys_exit_group+0x3f/0x40 [ 594.638344][ C1] x64_sys_call+0x221a/0x2240 [ 594.638370][ C1] do_syscall_64+0x14d/0xf80 [ 594.638386][ C1] ? trace_irq_disable+0x3b/0x150 [ 594.638413][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.638431][ C1] ? clear_bhb_loop+0x40/0x90 [ 594.638452][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.638470][ C1] RIP: 0033:0x7fe71419c799 [ 594.638486][ C1] Code: Unable to access opcode bytes at 0x7fe71419c76f. [ 594.638496][ C1] RSP: 002b:00007fe71453fd88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 594.638514][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe71419c799 [ 594.638527][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 594.638539][ C1] RBP: 00007fe71453fdec R08: 0000000000000006 R09: 00000000000927c0 [ 594.638551][ C1] R10: 00000000005faffc R11: 0000000000000246 R12: 0000000000000522 [ 594.638562][ C1] R13: 00000000000927c0 R14: 0000000000091140 R15: 00007fe71453fe40 [ 594.638584][ C1] [ 594.639515][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 594.639563][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 594.639629][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 594.639664][ T31] Call Trace: [ 594.639695][ T31] [ 594.639724][ T31] vpanic+0x56c/0xa60 [ 594.639825][ T31] ? __pfx_vpanic+0x10/0x10 [ 594.639934][ T31] panic+0xc5/0xd0 [ 594.640011][ T31] ? __pfx_panic+0x10/0x10 [ 594.640080][ T31] ? printk_trigger_flush+0x13d/0x180 [ 594.640177][ T31] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 594.640264][ T31] watchdog+0x1023/0x1030 [ 594.640414][ T31] ? watchdog+0x21a/0x1030 [ 594.640547][ T31] kthread+0x388/0x470 [ 594.640613][ T31] ? __pfx_watchdog+0x10/0x10 [ 594.640697][ T31] ? __pfx_kthread+0x10/0x10 [ 594.640753][ T31] ret_from_fork+0x51e/0xb90 [ 594.640840][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 594.640916][ T31] ? __switch_to+0xc7d/0x1450 [ 594.640993][ T31] ? __pfx_kthread+0x10/0x10 [ 594.641061][ T31] ret_from_fork_asm+0x1a/0x30 [ 594.641190][ T31] [ 594.644401][ T31] Kernel Offset: disabled