last executing test programs: 2m32.262117191s ago: executing program 1 (id=3479): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xa000) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000240)={0x0, 0x3d, 0xa49, 0x1, 0x18, 0x18, 0x70e}) 2m32.031413286s ago: executing program 1 (id=3484): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x4e20, @loopback}, {0x6, @multicast}, 0x10, {0x2, 0x4e21, @loopback}}) 2m31.848620787s ago: executing program 1 (id=3485): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 2m31.661321421s ago: executing program 1 (id=3491): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x0) 2m31.461473598s ago: executing program 1 (id=3495): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="14010000230001000000000004000000020100800c00010002000000000000001bf6febb9f61a97c00000000000000000000000050bb2d6f67d29d6fab98adb107d0def49c88ea04abde1d5e8d3fb22a1b50f8778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f"], 0x114}], 0x1}, 0x0) 2m31.301916034s ago: executing program 1 (id=3499): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000012bc0)={0x0, 0x0, &(0x7f0000012b80)={&(0x7f0000012b40)={0x18, 0x1404, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000800}, 0x30048000) 2m16.239732667s ago: executing program 32 (id=3499): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000012bc0)={0x0, 0x0, &(0x7f0000012b80)={&(0x7f0000012b40)={0x18, 0x1404, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000800}, 0x30048000) 3.270605443s ago: executing program 2 (id=6483): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 2.439010158s ago: executing program 2 (id=6503): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="d40000000209050500000000000000000000000908000340000000010c0004800800014000000007ac0002002c00018014000300fe88000000000000000000000000000114000400fe88028005000100110000000c000280050001"], 0xd4}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) 2.200057799s ago: executing program 2 (id=6508): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x7fd, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xffff60fe}]}}}]}, 0x3c}}, 0x0) 1.598649941s ago: executing program 2 (id=6523): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) pread64(r0, 0x0, 0x0, 0x10000000000a) 1.449903114s ago: executing program 2 (id=6526): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r0, 0x0, 0x0) 1.298439224s ago: executing program 4 (id=6530): r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) 1.260616217s ago: executing program 2 (id=6531): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000380)={0x20, 0x16, 0x1, "e1"}, 0x0, 0x0, 0x0, 0x0}) 1.152204258s ago: executing program 5 (id=6534): r0 = eventfd(0x80000) quotactl_fd$Q_SETINFO(r0, 0xa10694443b52fa7, 0x0, 0x0) 1.104475346s ago: executing program 4 (id=6535): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd29, 0xfffffffc, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) 1.007342763s ago: executing program 3 (id=6536): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) 948.276965ms ago: executing program 5 (id=6537): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 931.638162ms ago: executing program 3 (id=6538): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 879.923429ms ago: executing program 4 (id=6539): r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000240)=0x3, 0x4) 811.53329ms ago: executing program 0 (id=6540): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x2, 0x44}) 754.932926ms ago: executing program 5 (id=6541): r0 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$smackfs_logging(r0, &(0x7f0000000140), 0x14) 704.731704ms ago: executing program 3 (id=6542): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @raw_data="0fdf3153944c2f40424131306c71c41e2f1262451e3b3a80e5c644c93d74e68536c830114bac7436f5cc99fec56f1e0b9c975d172d8e3861116b8badd2da2079f4ebc3563e47905fdc18a56d601e5f16453b0c363e26caf4046c82706c33f441a54ff99258971a2a602198aba3c2a5698432704f12df85e65bd6d969b7d7a691a59e698e77b2c21fe6534a04f5950df988145d6d34b2600ac7b0a7a49c9d78801822f75781c94a7017360e2568d86769a7f6d4eca303939592c3472938285d03b686f79e11fa09d8"}) 683.930906ms ago: executing program 0 (id=6543): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0002}]}) pipe2$watch_queue(&(0x7f0000000240), 0x80) 672.784356ms ago: executing program 4 (id=6544): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000080)={0x28, 0x1000000, 0x0, 0x0, 0x0}) 518.264792ms ago: executing program 5 (id=6545): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x8, 0x0, 0x0) 435.877474ms ago: executing program 3 (id=6546): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='-'], 0x28) 429.709773ms ago: executing program 0 (id=6547): r0 = syz_open_dev$vim2m(&(0x7f0000000e40), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x2, 0x0, "a66d077a5c000800ec4283772a2ca2d7000000007800", 0xa0363159}) 363.666499ms ago: executing program 4 (id=6548): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x1a, 0xf, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0x24}, 0x94) 285.269823ms ago: executing program 3 (id=6549): r0 = socket(0x2d, 0x2, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x11d, 0x1, 0x0, 0x0) 239.889308ms ago: executing program 0 (id=6550): symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000010880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00') 207.608935ms ago: executing program 5 (id=6551): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 126.946327ms ago: executing program 0 (id=6552): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x7, 0x6, 0x6}, 0x50223a078320e1e6}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) 40.610236ms ago: executing program 4 (id=6553): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='-', @ANYRESDEC], 0x28) 29.084215ms ago: executing program 3 (id=6554): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000002}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}]}}}]}]}], {0x14}}, 0xdc}}, 0x0) 28.351429ms ago: executing program 5 (id=6555): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) 0s ago: executing program 0 (id=6556): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d80080001"], 0x38}}, 0x0) kernel console output (not intermixed with test programs): rface 235 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 311.030773][ T5890] usb 5-1: config 254 interface 235 altsetting 2 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 311.030802][ T5890] usb 5-1: config 254 interface 235 altsetting 2 endpoint 0x8F has invalid wMaxPacketSize 0 [ 311.030828][ T5890] usb 5-1: config 254 interface 235 has no altsetting 0 [ 311.035835][ T5890] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 311.035867][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.035890][ T5890] usb 5-1: Product: syz [ 311.035905][ T5890] usb 5-1: Manufacturer: syz [ 311.035921][ T5890] usb 5-1: SerialNumber: syz [ 311.324980][ T5890] usbtest 5-1:254.235: Linux gadget zero [ 311.325007][ T5890] usbtest 5-1:254.235: high-speed {control in/out int-in} tests (+alt) [ 311.536260][ T5784] usb 5-1: USB disconnect, device number 63 [ 311.767669][T12135] netlink: 'syz.2.3000': attribute type 3 has an invalid length. [ 311.998711][ T5890] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 312.158270][ T5890] usb 2-1: config 4 has an invalid interface number: 231 but max is 0 [ 312.158302][ T5890] usb 2-1: config 4 has no interface number 0 [ 312.178953][ T5890] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 312.178989][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.179004][ T5890] usb 2-1: Product: syz [ 312.179015][ T5890] usb 2-1: Manufacturer: syz [ 312.179025][ T5890] usb 2-1: SerialNumber: syz [ 312.231508][ T5890] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 312.442428][T12157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3011'. [ 312.520851][T12161] vivid-007: ================= START STATUS ================= [ 312.520986][T12161] vivid-007: Generate PTS: true [ 312.521040][T12161] vivid-007: Generate SCR: true [ 312.521064][T12161] tpg source WxH: 320x240 (Y'CbCr) [ 312.521079][T12161] tpg field: 1 [ 312.521087][T12161] tpg crop: (0,0)/320x240 [ 312.521101][T12161] tpg compose: (0,0)/320x240 [ 312.521115][T12161] tpg colorspace: 8 [ 312.521123][T12161] tpg transfer function: 0/0 [ 312.521134][T12161] tpg Y'CbCr encoding: 0/0 [ 312.521144][T12161] tpg quantization: 0/0 [ 312.521155][T12161] tpg RGB range: 0/2 [ 312.521165][T12161] vivid-007: ================== END STATUS ================== [ 312.673601][T12165] netlink: 'syz.4.3016': attribute type 10 has an invalid length. [ 312.708690][ T5890] vp7045: USB control message 'in' went wrong. [ 312.708712][ T5890] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 312.708756][ T5890] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 312.780025][ T5890] usb 2-1: USB disconnect, device number 61 [ 312.931820][T12165] bridge0: entered promiscuous mode [ 312.937474][T12165] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 313.215341][T12180] block device autoloading is deprecated and will be removed. [ 313.441129][T12192] netlink: 'syz.0.3031': attribute type 4 has an invalid length. [ 314.145515][T12234] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3053'. [ 314.289092][T12240] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3054'. [ 314.342585][T12242] netlink: 312 bytes leftover after parsing attributes in process `syz.1.3055'. [ 314.749028][T12257] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 316.048007][T12292] openvswitch: netlink: IPv4 tunnel dst address is zero [ 316.738132][T12315] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 316.738166][T12315] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 316.764781][T12315] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 317.789275][T12376] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3118'. [ 317.789304][T12376] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3118'. [ 317.789322][T12376] netlink: 'syz.2.3118': attribute type 5 has an invalid length. [ 317.789336][T12376] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3118'. [ 317.851121][T12378] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 318.294305][ T37] audit: type=1326 audit(2000000128.740:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12401 comm="syz.1.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6ceff749 code=0x7ffc0000 [ 318.294701][ T37] audit: type=1326 audit(2000000128.740:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12401 comm="syz.1.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7efc6ceff749 code=0x7ffc0000 [ 318.295063][ T37] audit: type=1326 audit(2000000128.740:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12401 comm="syz.1.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6ceff749 code=0x7ffc0000 [ 318.908299][T12434] batadv0: entered promiscuous mode [ 318.913393][T12434] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 319.138830][T12447] netlink: 'syz.4.3153': attribute type 21 has an invalid length. [ 319.385269][T12462] netlink: 'syz.0.3161': attribute type 1 has an invalid length. [ 319.601499][T12473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3167'. [ 319.601565][T12473] openvswitch: netlink: Missing key (keys=40, expected=80) [ 319.607621][T12474] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 319.607853][T12474] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 319.973519][T12492] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3176'. [ 321.849622][ T6377] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 322.020905][ T6377] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 322.020945][ T6377] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 322.026404][ T6377] usb 5-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 322.026438][ T6377] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.026460][ T6377] usb 5-1: Product: syz [ 322.026477][ T6377] usb 5-1: Manufacturer: syz [ 322.026497][ T6377] usb 5-1: SerialNumber: syz [ 322.098248][ T6377] usb 5-1: config 0 descriptor?? [ 322.190523][T12609] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3233'. [ 322.190616][T12609] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3233'. [ 322.350032][ T6377] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 322.592245][ T805] usb 5-1: USB disconnect, device number 64 [ 322.658263][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.658339][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.111032][ T805] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 323.268670][ T805] usb 1-1: Using ep0 maxpacket: 8 [ 323.271016][ T805] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 323.271045][ T805] usb 1-1: config 0 has no interface number 0 [ 323.280104][ T805] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice= 4.16 [ 323.280134][ T805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.280161][ T805] usb 1-1: Product: syz [ 323.280175][ T805] usb 1-1: Manufacturer: syz [ 323.280189][ T805] usb 1-1: SerialNumber: syz [ 323.303419][ T805] usb 1-1: config 0 descriptor?? [ 323.567975][ T805] uvcvideo 1-1:0.31: probe with driver uvcvideo failed with error -22 [ 323.589872][ T805] usb 1-1: USB disconnect, device number 64 [ 325.463591][T12694] syz.2.3271 (12694): drop_caches: 2 [ 325.542630][ T37] audit: type=1326 audit(2000000135.990:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12739 comm="syz.1.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6ceff749 code=0x7ffc0000 [ 325.542979][ T37] audit: type=1326 audit(2000000135.990:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12739 comm="syz.1.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6ceff749 code=0x7ffc0000 [ 325.545035][ T37] audit: type=1326 audit(2000000135.990:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12739 comm="syz.1.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7efc6ceff749 code=0x7ffc0000 [ 325.545485][ T37] audit: type=1326 audit(2000000135.990:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12739 comm="syz.1.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6ceff749 code=0x7ffc0000 [ 325.545806][ T37] audit: type=1326 audit(2000000135.990:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12739 comm="syz.1.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6ceff749 code=0x7ffc0000 [ 326.450811][T12792] program syz.2.3317 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 326.656290][T12803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3325'. [ 326.682549][T12804] netlink: 284 bytes leftover after parsing attributes in process `syz.4.3324'. [ 326.761773][T12806] netlink: 'syz.1.3326': attribute type 1 has an invalid length. [ 326.761801][T12806] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3326'. [ 327.549299][T12847] netlink: 'syz.1.3346': attribute type 10 has an invalid length. [ 327.549323][T12847] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3346'. [ 327.955707][T12868] netlink: 'syz.1.3356': attribute type 1 has an invalid length. [ 328.219801][ T37] audit: type=1326 audit(2000000138.670:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12880 comm="syz.1.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6ceff749 code=0x7ffc0000 [ 328.220138][ T37] audit: type=1326 audit(2000000138.670:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12880 comm="syz.1.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6ceff749 code=0x7ffc0000 [ 328.227029][ T37] audit: type=1326 audit(2000000138.670:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12880 comm="syz.1.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7efc6ceff749 code=0x7ffc0000 [ 328.227340][ T37] audit: type=1326 audit(2000000138.670:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12880 comm="syz.1.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6ceff749 code=0x7ffc0000 [ 328.628906][ T5967] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 328.692987][T12906] i2c i2c-0: Invalid block read size 255 [ 328.789168][ T5967] usb 3-1: Using ep0 maxpacket: 16 [ 328.793928][ T5967] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 328.793961][ T5967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.793983][ T5967] usb 3-1: Product: syz [ 328.793998][ T5967] usb 3-1: Manufacturer: syz [ 328.794013][ T5967] usb 3-1: SerialNumber: syz [ 328.857145][ T5967] r8152-cfgselector 3-1: Unknown version 0x0000 [ 328.857176][ T5967] r8152-cfgselector 3-1: config 0 descriptor?? [ 328.918659][ T805] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 329.063396][T12915] bond0: left promiscuous mode [ 329.063422][T12915] bridge0: left promiscuous mode [ 329.109067][ T805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 329.129107][ T805] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 329.129138][ T805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.129159][ T805] usb 2-1: Product: syz [ 329.129174][ T805] usb 2-1: Manufacturer: syz [ 329.129202][ T805] usb 2-1: SerialNumber: syz [ 329.132822][T12915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.154691][ T805] usb 2-1: config 0 descriptor?? [ 329.311753][ T5967] r8152-cfgselector 3-1: USB disconnect, device number 70 [ 329.417205][T12915] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 329.466674][ T805] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 329.466789][ T805] dvb_usb_af9035 2-1:0.0: probe with driver dvb_usb_af9035 failed with error -8 [ 329.507854][ T805] usb 2-1: USB disconnect, device number 62 [ 330.139311][T12955] program syz.4.3400 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 330.698738][T12985] netlink: 'syz.4.3414': attribute type 21 has an invalid length. [ 330.768008][ T44] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.776002][ T44] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.776230][ T44] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.776340][ T44] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.765148][T13045] netlink: 'syz.4.3441': attribute type 5 has an invalid length. [ 331.848731][ T5954] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 332.002761][ T5954] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 332.002792][ T5954] usb 2-1: config 0 has no interface number 0 [ 332.002843][ T5954] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 332.002870][ T5954] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 332.050400][ T5954] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 332.050435][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.050457][ T5954] usb 2-1: Product: syz [ 332.050473][ T5954] usb 2-1: Manufacturer: syz [ 332.050488][ T5954] usb 2-1: SerialNumber: syz [ 332.094323][ T5954] usb 2-1: config 0 descriptor?? [ 332.095517][T13037] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 332.114570][ T5954] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 332.160220][ T5954] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 332.352157][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 332.553702][ T43] usb 2-1: USB disconnect, device number 63 [ 332.604838][ T43] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 332.605773][ T43] cyberjack 2-1:0.69: device disconnected [ 332.717246][ T5814] Bluetooth: hci2: unexpected event for opcode 0x0c1b [ 333.214377][T13100] netlink: 'syz.1.3470': attribute type 1 has an invalid length. [ 333.214406][T13100] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3470'. [ 333.293192][T13104] netlink: 'syz.0.3472': attribute type 21 has an invalid length. [ 333.299213][ T43] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 333.458835][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 333.461149][ T43] usb 5-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 333.461177][ T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 333.463592][ T43] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 333.463621][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.463645][ T43] usb 5-1: Product: syz [ 333.463660][ T43] usb 5-1: Manufacturer: syz [ 333.463676][ T43] usb 5-1: SerialNumber: syz [ 333.546247][T13114] ieee802154 phy0 wpan0: encryption failed: -22 [ 333.757300][ T43] usb 5-1: 0:2 : does not exist [ 333.757400][ T43] usb 5-1: unit 9 not found! [ 333.808843][ T43] usb 5-1: USB disconnect, device number 65 [ 333.862201][T12896] udevd[12896]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 334.438704][T13151] netlink: 'syz.1.3495': attribute type 1 has an invalid length. [ 334.438728][T13151] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3495'. [ 334.579018][T13160] binder: 13156:13160 ioctl c00c620f 0 returned -14 [ 334.633063][ T37] audit: type=1326 audit(2000000145.080:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13162 comm="syz.4.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eb196f749 code=0x7ffc0000 [ 334.637218][ T37] audit: type=1326 audit(2000000145.080:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13162 comm="syz.4.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eb196f749 code=0x7ffc0000 [ 334.637281][ T37] audit: type=1326 audit(2000000145.080:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13162 comm="syz.4.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f9eb196f749 code=0x7ffc0000 [ 334.637329][ T37] audit: type=1326 audit(2000000145.080:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13162 comm="syz.4.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eb196f749 code=0x7ffc0000 [ 334.637377][ T37] audit: type=1326 audit(2000000145.080:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13162 comm="syz.4.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eb196f749 code=0x7ffc0000 [ 334.676617][T13161] smc: removing ib device syz! [ 335.153814][T13184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3509'. [ 335.643285][ T37] audit: type=1326 audit(2000000146.080:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13209 comm="syz.4.3523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eb196f749 code=0x7ffc0000 [ 335.643617][ T37] audit: type=1326 audit(2000000146.090:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13209 comm="syz.4.3523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eb196f749 code=0x7ffc0000 [ 335.644822][ T37] audit: type=1326 audit(2000000146.090:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13209 comm="syz.4.3523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f9eb196f749 code=0x7ffc0000 [ 335.646418][ T37] audit: type=1326 audit(2000000146.090:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13209 comm="syz.4.3523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eb196f749 code=0x7ffc0000 [ 335.646473][ T37] audit: type=1326 audit(2000000146.090:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13209 comm="syz.4.3523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eb196f749 code=0x7ffc0000 [ 336.326586][T13235] nbd: couldn't find a device at index 2147483646 [ 336.507266][T13246] random: crng reseeded on system resumption [ 336.647712][T13253] netlink: 'syz.0.3544': attribute type 1 has an invalid length. [ 336.953282][T13264] openvswitch: netlink: Duplicate key (type 21). [ 337.020208][T13268] netlink: 'syz.4.3550': attribute type 1 has an invalid length. [ 337.020233][T13268] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3550'. [ 337.020259][T13268] NCSI netlink: No device for ifindex 0 [ 337.746947][T13306] netlink: 'syz.0.3571': attribute type 1 has an invalid length. [ 338.634685][T13351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3592'. [ 339.186407][T13379] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3607'. [ 339.285833][T13385] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3609'. [ 339.734157][T13409] netlink: 'syz.2.3622': attribute type 1 has an invalid length. [ 339.746567][T13411] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3623'. [ 339.746590][T13411] tc_dump_action: action bad kind [ 340.615792][T13455] 9p: Bad value for 'version' [ 340.636074][T13457] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3647'. [ 340.943115][T13477] netlink: 'syz.0.3654': attribute type 30 has an invalid length. [ 341.124114][T13486] comedi comedi0: aio_aio12_8: I/O port conflict (0xb02f,32) [ 341.299843][T13497] netlink: 'syz.0.3665': attribute type 5 has an invalid length. [ 341.299864][T13497] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3665'. [ 341.809373][T13525] netlink: 300 bytes leftover after parsing attributes in process `syz.0.3677'. [ 341.813362][T13527] cgroup: Unknown subsys name 'cpuset' [ 341.964895][T13533] netlink: 'syz.4.3681': attribute type 1 has an invalid length. [ 342.445390][T13557] netlink: 'syz.4.3694': attribute type 1 has an invalid length. [ 343.931881][T13647] libceph: resolve '4' (ret=-3): failed [ 344.099827][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 344.099847][ T37] audit: type=1326 audit(2000000154.550:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13654 comm="syz.0.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c9c1f749 code=0x7ffc0000 [ 344.103309][ T37] audit: type=1326 audit(2000000154.550:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13654 comm="syz.0.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c9c1f749 code=0x7ffc0000 [ 344.108121][ T37] audit: type=1326 audit(2000000154.550:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13654 comm="syz.0.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f67c9c1f749 code=0x7ffc0000 [ 344.186950][T13658] netlink: 676 bytes leftover after parsing attributes in process `syz.4.3740'. [ 344.186979][T13658] netlink: 676 bytes leftover after parsing attributes in process `syz.4.3740'. [ 344.367709][T13665] vivid-003: ================= START STATUS ================= [ 344.367732][T13665] vivid-003: Radio HW Seek Mode: Bounded [ 344.367766][T13665] vivid-003: Radio Programmable HW Seek: false [ 344.367788][T13665] vivid-003: RDS Rx I/O Mode: Block I/O [ 344.367808][T13665] vivid-003: Generate RBDS Instead of RDS: false [ 344.367830][T13665] vivid-003: RDS Reception: true [ 344.367849][T13665] vivid-003: RDS Program Type: 0 inactive [ 344.367874][T13665] vivid-003: RDS PS Name: inactive [ 344.367897][T13665] vivid-003: RDS Radio Text: inactive [ 344.367920][T13665] vivid-003: RDS Traffic Announcement: false inactive [ 344.367944][T13665] vivid-003: RDS Traffic Program: false inactive [ 344.367968][T13665] vivid-003: RDS Music: false inactive [ 344.367993][T13665] vivid-003: ================== END STATUS ================== [ 344.528343][ T37] audit: type=1326 audit(2000000154.970:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13654 comm="syz.0.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c9c1f749 code=0x7ffc0000 [ 344.529417][ T37] audit: type=1326 audit(2000000154.980:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13654 comm="syz.0.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c9c1f749 code=0x7ffc0000 [ 346.571362][T13765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3795'. [ 346.571476][T13765] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 347.025231][T13791] cgroup: none used incorrectly [ 347.504885][T13817] netlink: 'syz.0.3820': attribute type 5 has an invalid length. [ 347.504908][T13817] netlink: 'syz.0.3820': attribute type 11 has an invalid length. [ 347.505954][T13810] bond1: option arp_validate: invalid value (18446744073709551614) [ 347.561672][T13810] bond1 (unregistering): Released all slaves [ 347.968287][T13837] netlink: 'syz.2.3831': attribute type 10 has an invalid length. [ 347.968312][T13837] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3831'. [ 348.079561][T13842] binfmt_misc: register: failed to install interpreter file ./file0 [ 348.403364][T13862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3843'. [ 348.600494][T13870] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3848'. [ 349.739071][ T5891] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 349.890518][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 349.892995][ T5891] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 349.893025][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.893046][ T5891] usb 3-1: Product: syz [ 349.893062][ T5891] usb 3-1: Manufacturer: syz [ 349.893078][ T5891] usb 3-1: SerialNumber: syz [ 349.962176][ T5891] usb 3-1: config 0 descriptor?? [ 349.998581][ T5807] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 350.003002][ T5807] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 350.037642][ T5891] hub 3-1:0.0: bad descriptor, ignoring hub [ 350.037684][ T5891] hub 3-1:0.0: probe with driver hub failed with error -5 [ 350.039207][ T5807] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 350.055578][ T5807] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 350.058051][ T5807] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 350.078288][T13942] ip6erspan0: entered promiscuous mode [ 350.088864][ T5891] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input24 [ 350.828642][ T43] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 350.981562][ T43] usb 1-1: config 0 has an invalid interface number: 199 but max is 1 [ 350.981595][ T43] usb 1-1: config 0 has no interface number 1 [ 350.981655][ T43] usb 1-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 350.981693][ T43] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 350.983775][ T43] usb 1-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 350.983804][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 350.983825][ T43] usb 1-1: SerialNumber: syz [ 351.072068][ T43] usb 1-1: config 0 descriptor?? [ 351.306125][ T43] uvcvideo 1-1:0.199: Found UVC 0.00 device (0002:0000) [ 351.306164][ T43] uvcvideo 1-1:0.199: No valid video chain found. [ 351.332634][ T43] usb 1-1: USB disconnect, device number 65 [ 351.420857][T13945] chnl_net:caif_netlink_parms(): no params data found [ 352.051473][T13945] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.054715][T13945] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.054958][T13945] bridge_slave_0: entered allmulticast mode [ 352.057733][T13945] bridge_slave_0: entered promiscuous mode [ 352.097459][ T5807] Bluetooth: hci5: command tx timeout [ 352.124355][T13945] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.124494][T13945] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.124660][T13945] bridge_slave_1: entered allmulticast mode [ 352.126585][T13945] bridge_slave_1: entered promiscuous mode [ 352.465280][T13945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.506242][T13945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.894251][T13945] team0: Port device team_slave_0 added [ 352.906078][T13945] team0: Port device team_slave_1 added [ 353.068812][ T5891] usb 3-1: USB disconnect, device number 71 [ 353.098887][T13945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.098908][T13945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.098938][T13945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.105596][T13945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.105615][T13945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.105645][T13945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.438597][ T5891] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 353.598577][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 353.632354][ T5891] usb 3-1: config 0 has no interfaces? [ 353.637143][ T5891] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 353.637173][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.637194][ T5891] usb 3-1: Product: syz [ 353.637209][ T5891] usb 3-1: Manufacturer: syz [ 353.637225][ T5891] usb 3-1: SerialNumber: syz [ 353.676018][T14068] binder: 14067:14068 ioctl c0306201 200000000680 returned -22 [ 353.688057][ T5891] usb 3-1: config 0 descriptor?? [ 353.833373][T13945] hsr_slave_0: entered promiscuous mode [ 353.836039][T13945] hsr_slave_1: entered promiscuous mode [ 353.837115][T13945] debugfs: 'hsr0' already exists in 'hsr' [ 353.837142][T13945] Cannot create hsr debugfs directory [ 353.898869][ T43] usb 3-1: USB disconnect, device number 72 [ 354.179197][ T5814] Bluetooth: hci5: command tx timeout [ 354.549071][ T5784] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 354.619981][T14110] ªªªªª»: renamed from hsr0 (while UP) [ 354.703078][ T5784] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 354.703111][ T5784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.728698][ T5967] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 354.748217][ T5784] usb 1-1: config 0 descriptor?? [ 354.878652][ T5967] usb 5-1: Using ep0 maxpacket: 16 [ 354.887166][ T5967] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 354.887197][ T5967] usb 5-1: config 0 has no interface number 0 [ 354.887249][ T5967] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 354.932040][ T5967] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 354.932129][ T5967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.932152][ T5967] usb 5-1: Product: syz [ 354.932168][ T5967] usb 5-1: Manufacturer: syz [ 354.932183][ T5967] usb 5-1: SerialNumber: syz [ 354.989115][ T5784] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 354.989619][ T5784] [drm:udl_init] *ERROR* Selecting channel failed [ 355.013338][ T5967] usb 5-1: config 0 descriptor?? [ 355.135853][T13945] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 355.183277][T13945] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 355.274547][ T5967] usbtouchscreen 5-1:0.214: Failed to read FW rev: -32 [ 355.274858][ T5967] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -32 [ 355.299010][T13945] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 355.347968][ T5784] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 355.347995][ T5784] [drm] Initialized udl on minor 2 [ 355.362780][T13945] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 355.364734][ T5967] usb 5-1: USB disconnect, device number 66 [ 355.459844][ T5784] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 355.485080][ T5784] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 355.593997][ T5784] usb 1-1: USB disconnect, device number 66 [ 355.637131][ T43] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 355.669519][ T43] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 355.740345][T13945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.803024][T13945] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.839337][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.840162][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.903036][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.903139][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.149906][T14146] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 356.249209][ T5814] Bluetooth: hci5: command tx timeout [ 356.849246][T13945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.903562][T14182] netlink: 'syz.2.3990': attribute type 1 has an invalid length. [ 357.063684][T14187] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3991'. [ 357.706112][T13945] veth0_vlan: entered promiscuous mode [ 357.738102][T13945] veth1_vlan: entered promiscuous mode [ 357.867361][T13945] veth0_macvtap: entered promiscuous mode [ 357.887760][T13945] veth1_macvtap: entered promiscuous mode [ 357.966675][T13945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.018598][ T5954] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 358.028339][T13945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.134392][ T45] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.144503][ T45] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.156960][ T45] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.157024][ T45] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.198405][ T5954] usb 5-1: Using ep0 maxpacket: 32 [ 358.206483][ T5954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.206519][ T5954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.206559][ T5954] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 358.206581][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.251127][ T5954] usb 5-1: config 0 descriptor?? [ 358.274580][ T5954] hub 5-1:0.0: USB hub found [ 358.346624][ T5814] Bluetooth: hci5: command tx timeout [ 358.487791][ T5954] hub 5-1:0.0: 1 port detected [ 358.519020][T14242] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4015'. [ 358.712783][ T5954] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 358.712810][ T5954] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 358.776768][ T5954] usbhid 5-1:0.0: can't add hid device: -71 [ 358.776902][ T5954] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 358.810207][ T5954] usb 5-1: USB disconnect, device number 67 [ 358.983511][ T3105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.983535][ T3105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.194517][ T1365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.194540][ T1365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.872674][T14289] netlink: 'syz.5.4038': attribute type 7 has an invalid length. [ 360.304026][T14312] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4050'. [ 360.580971][ T37] audit: type=1326 audit(2000000171.030:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14324 comm="syz.4.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eb196f749 code=0x7ffc0000 [ 360.581322][ T37] audit: type=1326 audit(2000000171.030:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14324 comm="syz.4.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eb196f749 code=0x7ffc0000 [ 360.584669][ T37] audit: type=1326 audit(2000000171.030:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14324 comm="syz.4.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eb196f749 code=0x7ffc0000 [ 360.586389][ T37] audit: type=1326 audit(2000000171.030:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14324 comm="syz.4.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eb196f749 code=0x7ffc0000 [ 360.586731][ T37] audit: type=1326 audit(2000000171.030:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14324 comm="syz.4.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f9eb196f749 code=0x7ffc0000 [ 360.587007][ T37] audit: type=1326 audit(2000000171.030:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14324 comm="syz.4.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eb196f749 code=0x7ffc0000 [ 360.587302][ T37] audit: type=1326 audit(2000000171.030:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14324 comm="syz.4.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eb196f749 code=0x7ffc0000 [ 360.587576][ T37] audit: type=1326 audit(2000000171.030:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14324 comm="syz.4.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eb196f749 code=0x7ffc0000 [ 360.588189][ T37] audit: type=1326 audit(2000000171.030:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14324 comm="syz.4.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9eb196f749 code=0x7ffc0000 [ 360.590924][ T37] audit: type=1326 audit(2000000171.030:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14324 comm="syz.4.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9eb196f749 code=0x7ffc0000 [ 360.916112][T14332] netlink: 'syz.0.4059': attribute type 12 has an invalid length. [ 360.987882][T14333] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4060'. [ 360.987911][T14333] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4060'. [ 361.045980][T14333] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4060'. [ 361.046690][T14333] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4060'. [ 361.046718][T14333] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4060'. [ 361.730136][ T5967] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 361.880602][ T5967] usb 6-1: Using ep0 maxpacket: 32 [ 361.882729][ T5967] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 361.882758][ T5967] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 361.882781][ T5967] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 361.882803][ T5967] usb 6-1: config 1 has no interface number 0 [ 361.882866][ T5967] usb 6-1: config 1 interface 1 altsetting 0 has an endpoint descriptor with address 0xF5, changing to 0x85 [ 361.882895][ T5967] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 361.882919][ T5967] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 361.882964][ T5967] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 361.882987][ T5967] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.033160][ T5967] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 362.077702][T14386] tmpfs: Bad value for 'mpol' [ 362.170436][ T5967] snd_usb_pod 6-1:1.1: endpoint not available, using fallback values [ 362.187747][ T5967] snd_usb_pod 6-1:1.1: invalid control EP [ 362.187769][ T5967] snd_usb_pod 6-1:1.1: cannot start listening: -22 [ 362.188356][ T5967] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 362.190009][ T5967] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 362.242898][T14392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4089'. [ 362.382293][ T5954] usb 6-1: USB disconnect, device number 2 [ 362.395520][ T6266] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 362.548685][ T6266] usb 3-1: Using ep0 maxpacket: 16 [ 362.554719][ T6266] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 362.554750][ T6266] usb 3-1: config 0 has no interface number 0 [ 362.597193][ T6266] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 362.597227][ T6266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.597249][ T6266] usb 3-1: Product: syz [ 362.597265][ T6266] usb 3-1: Manufacturer: syz [ 362.597281][ T6266] usb 3-1: SerialNumber: syz [ 362.650809][ T6266] usb 3-1: config 0 descriptor?? [ 362.868201][ T6266] uvcvideo 3-1:0.105: Found multiple Units with ID 1 [ 362.876033][ T6266] uvcvideo 3-1:0.105: Found UVC 9.07 device syz (046d:08d3) [ 362.876070][ T6266] uvcvideo 3-1:0.105: No valid video chain found. [ 362.896816][ T6266] usb 3-1: USB disconnect, device number 73 [ 363.281595][T14428] netlink: 136 bytes leftover after parsing attributes in process `syz.0.4106'. [ 363.298975][T14430] kAFS: unable to lookup cell '×­àé6Wêáâ6ß¾—™äé%¾$ɆJJ¼÷=1 ©üU–¿Çxƒì' [ 363.434901][T14434] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 363.513327][T14439] netlink: 'syz.0.4113': attribute type 8 has an invalid length. [ 363.605387][T14443] netlink: 'syz.0.4115': attribute type 96 has an invalid length. [ 363.649797][T14444] netlink: 'syz.2.4114': attribute type 11 has an invalid length. [ 364.051285][T14466] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4124'. [ 364.089104][ T805] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 364.251575][ T805] usb 6-1: unable to get BOS descriptor or descriptor too short [ 364.252208][ T805] usb 6-1: not running at top speed; connect to a high speed hub [ 364.259139][ T805] usb 6-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=42.64 [ 364.259228][ T805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.259284][ T805] usb 6-1: Product: syz [ 364.259327][ T805] usb 6-1: Manufacturer: syz [ 364.259394][ T805] usb 6-1: SerialNumber: syz [ 364.535496][ T805] snd-usb-audio 6-1:3.0: probe with driver snd-usb-audio failed with error -71 [ 364.557019][ T805] usb 6-1: USB disconnect, device number 3 [ 364.973117][T14504] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4145'. [ 366.029137][T14556] netlink: 284 bytes leftover after parsing attributes in process `syz.0.4167'. [ 366.167280][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 366.167300][ T37] audit: type=1326 audit(2000000176.600:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14559 comm="syz.2.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933d48f749 code=0x7ffc0000 [ 366.190541][ T37] audit: type=1326 audit(2000000176.620:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14559 comm="syz.2.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933d48f749 code=0x7ffc0000 [ 366.218610][ T37] audit: type=1326 audit(2000000176.660:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14559 comm="syz.2.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f933d48f749 code=0x7ffc0000 [ 366.218903][ T37] audit: type=1326 audit(2000000176.670:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14559 comm="syz.2.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933d48f749 code=0x7ffc0000 [ 366.249853][ T37] audit: type=1326 audit(2000000176.670:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14559 comm="syz.2.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933d48f749 code=0x7ffc0000 [ 366.726118][T14589] Í-: renamed from veth0_vlan (while UP) [ 369.319990][T14721] tmpfs: Bad value for 'mpol' [ 369.564909][T14734] Option ' ' to dns_resolver key: bad/missing value [ 369.971910][ T31] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 370.120287][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 370.123295][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 370.124667][ T31] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 370.124692][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 370.124713][ T31] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 370.124736][ T31] usb 1-1: config 1 has no interface number 1 [ 370.124816][ T31] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 370.124860][ T31] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 370.124888][ T31] usb 1-1: config 1 interface 2 has no altsetting 0 [ 370.226160][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 370.226194][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.226215][ T31] usb 1-1: Product: syz [ 370.226231][ T31] usb 1-1: Manufacturer: syz [ 370.226246][ T31] usb 1-1: SerialNumber: syz [ 370.500285][ T31] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 370.500347][ T31] usb 1-1: MIDIStreaming interface descriptor not found [ 370.589842][ T37] audit: type=1800 audit(2000002759.027:101): pid=14765 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.2.4273" name="/newroot/671/file1" dev="tmpfs" ino=3384 res=0 errno=0 [ 370.726965][ T31] usb 1-1: USB disconnect, device number 67 [ 371.054944][T14789] udevd[14789]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 371.945343][T14838] [U] [ 371.945397][T14838] [U] [ 371.945440][T14838] [U] [ 371.945491][T14838] [U] [ 371.945668][T14838] [U] [ 371.945716][T14838] [U] [ 371.968438][T14838] [U] [ 371.968497][T14838] [U] [ 371.968703][T14838] [U] [ 371.968748][T14838] [U] [ 371.968790][T14838] [U] [ 371.968832][T14838] [U] [ 371.968986][T14838] [U] [ 371.969025][T14838] [U] [ 371.969063][T14838] [U] [ 371.969102][T14838] [U] [ 371.969278][T14838] [U] [ 371.969320][T14838] [U] [ 371.969359][T14838] [U] [ 371.969401][T14838] [U] [ 371.969592][T14838] [U] [ 371.969633][T14838] [U] [ 371.969674][T14838] [U] [ 371.969717][T14838] [U] [ 371.969894][T14838] [U] [ 371.969937][T14838] [U] [ 371.969979][T14838] [U] [ 371.970019][T14838] [U] [ 371.970177][T14838] [U] [ 371.970231][T14838] [U] [ 371.970277][T14838] [U] [ 371.970321][T14838] [U] [ 371.970517][T14838] [U] [ 371.970563][T14838] [U] [ 371.970609][T14838] [U] [ 372.061165][T14838] [U] [ 372.061361][T14838] [U] [ 372.061406][T14838] [U] [ 372.061451][T14838] [U] [ 372.061496][T14838] [U] [ 372.061687][T14838] [U] [ 372.061739][T14838] [U] [ 372.061785][T14838] [U] [ 372.061829][T14838] [U] [ 372.061988][T14838] [U] [ 372.062043][T14838] [U] [ 372.062088][T14838] [U] [ 372.062143][T14838] [U] [ 372.062325][T14838] [U] [ 372.062368][T14838] [U] [ 372.062413][T14838] [U] [ 372.062457][T14838] [U] [ 372.062628][T14838] [U] [ 372.062677][T14838] [U] [ 372.062728][T14838] [U] [ 372.062771][T14838] [U] [ 372.062958][T14838] [U] [ 372.063005][T14838] [U] [ 372.063051][T14838] [U] [ 372.063097][T14838] [U] [ 372.063262][T14838] [U] [ 372.063308][T14838] [U] [ 372.063353][T14838] [U] [ 372.063397][T14838] [U] [ 372.063576][T14838] [U] [ 372.063622][T14838] [U] [ 372.063666][T14838] [U] [ 372.063717][T14838] [U] [ 372.065793][T14838] [U] [ 372.065843][T14838] [U] [ 372.065893][T14838] [U] [ 372.065937][T14838] [U] [ 372.066130][T14838] [U] [ 372.066175][T14838] [U] [ 372.066219][T14838] [U] [ 372.066261][T14838] [U] [ 372.066435][T14838] [U] [ 372.066480][T14838] [U] [ 372.066524][T14838] [U] [ 372.066566][T14838] [U] [ 372.066765][T14838] [U] [ 372.066826][T14838] [U] [ 372.066869][T14838] [U] [ 372.066912][T14838] [U] [ 372.067084][T14838] [U] [ 372.067141][T14838] [U] [ 372.067191][T14838] [U] [ 372.067237][T14838] [U] [ 372.067420][T14838] [U] [ 372.067468][T14838] [U] [ 372.067515][T14838] [U] [ 372.067562][T14838] [U] [ 372.067749][T14838] [U] [ 372.067793][T14838] [U] [ 372.067833][T14838] [U] [ 372.067874][T14838] [U] [ 372.068055][T14838] [U] [ 372.068102][T14838] [U] [ 372.068144][T14838] [U] [ 372.068187][T14838] [U] [ 372.068350][T14838] [U] [ 372.068392][T14838] [U] [ 372.068438][T14838] [U] [ 372.068480][T14838] [U] [ 372.068663][T14838] [U] [ 372.068717][T14838] [U] [ 372.068763][T14838] [U] [ 372.068808][T14838] [U] [ 372.068974][T14838] [U] [ 372.069022][T14838] [U] [ 372.069068][T14838] [U] [ 372.069115][T14838] [U] [ 372.069307][T14838] [U] [ 372.069354][T14838] [U] [ 372.069401][T14838] [U] [ 372.069469][T14838] [U] [ 372.069661][T14838] [U] [ 372.069716][T14838] [U] [ 372.069762][T14838] [U] [ 372.069810][T14838] [U] [ 372.069999][T14838] [U] [ 372.070043][T14838] [U] [ 372.070095][T14838] [U] [ 372.070138][T14838] [U] [ 372.070292][T14838] [U] [ 372.070339][T14838] [U] [ 372.070385][T14838] [U] [ 372.352998][T14835] [U] [ 372.400728][T14844] openvswitch: netlink: IP tunnel dst address not specified [ 372.931428][T14868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4320'. [ 373.148952][T14878] netlink: 'syz.0.4325': attribute type 1 has an invalid length. [ 373.673080][ T37] audit: type=1326 audit(2000002762.116:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14896 comm="syz.5.4337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad8adf749 code=0x7ffc0000 [ 373.673146][ T37] audit: type=1326 audit(2000002762.116:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14896 comm="syz.5.4337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad8adf749 code=0x7ffc0000 [ 373.674847][T14898] QAT: failed to copy from user. [ 373.703591][ T37] audit: type=1326 audit(2000002762.146:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14896 comm="syz.5.4337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f9ad8adf749 code=0x7ffc0000 [ 373.703921][ T37] audit: type=1326 audit(2000002762.146:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14896 comm="syz.5.4337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad8adf749 code=0x7ffc0000 [ 373.704204][ T37] audit: type=1326 audit(2000002762.146:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14896 comm="syz.5.4337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad8adf749 code=0x7ffc0000 [ 373.786867][T14902] netlink: 'syz.0.4335': attribute type 27 has an invalid length. [ 374.419105][ T37] audit: type=1107 audit(2000002762.855:107): pid=14931 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 374.537356][T14938] xfrm0: entered promiscuous mode [ 375.913790][T15007] IPv6: NLM_F_REPLACE set, but no existing node found! [ 376.051573][T15001] XFS (nbd0): SB validate failed with error -5. [ 377.120820][T15048] netlink: 'syz.5.4408': attribute type 7 has an invalid length. [ 377.120847][T15048] netlink: 'syz.5.4408': attribute type 8 has an invalid length. [ 377.194023][T15050] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4409'. [ 377.194057][T15050] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4409'. [ 377.377531][T15058] No source specified [ 378.774804][T15122] netlink: 1204 bytes leftover after parsing attributes in process `syz.4.4446'. [ 379.213266][T15143] netlink: 'syz.0.4454': attribute type 15 has an invalid length. [ 379.213292][T15143] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4454'. [ 380.053871][ T5954] usb 1-1: new low-speed USB device number 68 using dummy_hcd [ 380.230554][ T5954] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.230585][ T5954] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 380.230675][ T5954] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 380.230705][ T5954] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.230749][ T5954] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 380.230774][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.330412][ T5954] hub 1-1:1.0: bad descriptor, ignoring hub [ 380.330455][ T5954] hub 1-1:1.0: probe with driver hub failed with error -5 [ 380.331440][ T5954] cdc_wdm 1-1:1.0: skipping garbage [ 380.331456][ T5954] cdc_wdm 1-1:1.0: skipping garbage [ 380.379434][ T5954] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 380.379471][ T5954] cdc_wdm 1-1:1.0: Unknown control protocol [ 380.634565][ T805] usb 1-1: USB disconnect, device number 68 [ 381.177298][T15227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4497'. [ 381.351344][T15237] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4501'. [ 381.644747][ T31] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 381.686673][T15253] 9pnet: Found fid 0 not clunked [ 381.799111][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 381.814149][ T31] usb 1-1: config 67 has an invalid interface number: 41 but max is 0 [ 381.814183][ T31] usb 1-1: config 67 has no interface number 0 [ 381.814238][ T31] usb 1-1: config 67 interface 41 has no altsetting 0 [ 381.851092][ T31] usb 1-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=9b.eb [ 381.851128][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.851151][ T31] usb 1-1: Product: syz [ 381.851167][ T31] usb 1-1: Manufacturer: syz [ 381.851183][ T31] usb 1-1: SerialNumber: syz [ 382.127503][ T31] quatech2 1-1:67.41: Quatech 2nd gen USB to Serial Driver converter detected [ 382.132549][ T31] usb 1-1: qt2_attach - failed to power on unit: -71 [ 382.132795][ T31] quatech2 1-1:67.41: probe with driver quatech2 failed with error -71 [ 382.176729][ T31] usb 1-1: USB disconnect, device number 69 [ 382.438658][T15277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4521'. [ 382.734484][T15287] XFS (nullb0): Invalid superblock magic number [ 383.075223][ T6266] usb 5-1: new low-speed USB device number 68 using dummy_hcd [ 383.253016][ T6266] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.253079][ T6266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 200, setting to 8 [ 383.253109][ T6266] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 383.253152][ T6266] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 383.253176][ T6266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.316743][ T6266] usb 5-1: config 0 descriptor?? [ 383.329130][T15297] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 383.586811][ T6266] usb 5-1: USB disconnect, device number 68 [ 384.065353][ T31] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 384.117553][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.117631][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.223893][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 384.239328][ T31] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 384.239371][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.239394][ T31] usb 1-1: Product: syz [ 384.239410][ T31] usb 1-1: Manufacturer: syz [ 384.239426][ T31] usb 1-1: SerialNumber: syz [ 384.245162][ T31] usb 1-1: config 0 descriptor?? [ 384.288137][ T31] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 384.712236][ T31] usb 1-1: clie_3_5_startup: get interface number failed: -71 [ 384.712414][ T31] visor 1-1:0.0: probe with driver visor failed with error -71 [ 384.744119][ T31] usb 1-1: USB disconnect, device number 70 [ 384.873562][T15368] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 384.873590][T15368] openvswitch: netlink: Message has 16 unknown bytes. [ 386.182050][T15422] dummy0: mtu less than device minimum [ 386.417800][ T31] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 386.568633][ T31] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 386.568671][ T31] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 386.568694][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 386.606872][ T31] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 386.606907][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.606930][ T31] usb 1-1: Product: syz [ 386.606957][ T31] usb 1-1: Manufacturer: syz [ 386.607047][ T31] usb 1-1: SerialNumber: syz [ 386.655436][ T31] usb 1-1: config 0 descriptor?? [ 386.672825][ T31] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 386.916987][ T31] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 386.919186][ T31] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 386.921892][ T31] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 387.104758][ T6266] usb 1-1: USB disconnect, device number 71 [ 387.472144][T15461] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 390.258204][T15573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4661'. [ 392.337585][T15654] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4701'. [ 393.208062][T15684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4714'. [ 393.621475][T15694] 8021q: adding VLAN 0 to HW filter on device bond1 [ 395.455673][T15763] mac80211_hwsim hwsim15 wlan0: entered promiscuous mode [ 395.549889][T15783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4762'. [ 397.727090][T15879] netlink: 'syz.0.4808': attribute type 13 has an invalid length. [ 398.065500][T15879] gretap0: refused to change device tx_queue_len [ 398.065528][T15879] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 398.439117][T15905] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4822'. [ 398.439146][T15905] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4822'. [ 398.907729][T15929] netlink: 'syz.4.4834': attribute type 16 has an invalid length. [ 398.907754][T15929] netlink: 'syz.4.4834': attribute type 17 has an invalid length. [ 399.081587][T15929] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 399.661343][ T6119] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 399.831344][ T6119] usb 6-1: Using ep0 maxpacket: 32 [ 399.833560][ T6119] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 399.833589][ T6119] usb 6-1: config 0 has no interface number 0 [ 399.864444][ T6119] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 399.864477][ T6119] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.864499][ T6119] usb 6-1: Product: syz [ 399.864515][ T6119] usb 6-1: Manufacturer: syz [ 399.864530][ T6119] usb 6-1: SerialNumber: syz [ 399.904975][ T6119] usb 6-1: config 0 descriptor?? [ 399.969337][ T6119] smsc95xx v2.0.0 [ 400.357536][ T6119] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 400.357581][ T6119] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 400.369096][ T6119] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 400.370046][ T6119] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 400.429007][ T6119] usb 6-1: USB disconnect, device number 4 [ 400.784272][T16004] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4872'. [ 401.085984][T16019] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 401.086010][T16019] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 401.130700][T16022] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 401.532375][T16040] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4890'. [ 401.532957][T16040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 402.003405][T16063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4901'. [ 402.506590][T16090] overlayfs: conflicting options: userxattr,redirect_dir=on [ 402.765264][ T6377] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 402.930084][ T6377] usb 3-1: Using ep0 maxpacket: 16 [ 402.939986][ T6377] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 402.940015][ T6377] usb 3-1: config 0 has no interface number 0 [ 402.940063][ T6377] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 402.940092][ T6377] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 402.962710][ T6377] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 402.962750][ T6377] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.962770][ T6377] usb 3-1: Product: syz [ 402.962786][ T6377] usb 3-1: Manufacturer: syz [ 402.962801][ T6377] usb 3-1: SerialNumber: syz [ 403.024702][ T6377] usb 3-1: config 0 descriptor?? [ 403.044677][T16089] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 403.044883][T16089] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 403.262292][T16089] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 403.263328][T16089] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 403.482765][ T6377] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 403.482798][ T6377] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 403.483102][ T6377] asix 3-1:0.251: probe with driver asix failed with error -5 [ 403.533363][ T6377] usb 3-1: USB disconnect, device number 74 [ 403.625372][T16130] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4935'. [ 404.201114][T16158] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4948'. [ 404.393182][ T43] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 404.545165][ T43] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 404.545231][ T43] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 404.545257][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 404.547806][ T43] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 404.547838][ T43] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 404.547861][ T43] usb 1-1: Product: syz [ 404.547877][ T43] usb 1-1: Manufacturer: syz [ 404.547902][ T43] usb 1-1: SerialNumber: syz [ 404.623137][ T5784] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 404.655576][ T43] usb 1-1: config 0 descriptor?? [ 404.670433][ T43] hub 1-1:0.0: bad descriptor, ignoring hub [ 404.670475][ T43] hub 1-1:0.0: probe with driver hub failed with error -5 [ 404.724855][ T43] usb 1-1: selecting invalid altsetting 0 [ 404.788002][ T5784] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 404.788036][ T5784] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.828653][ T5784] usb 6-1: config 0 descriptor?? [ 404.872950][ T5784] cp210x 6-1:0.0: cp210x converter detected [ 404.960130][ T43] usb 1-1: USB disconnect, device number 72 [ 405.191353][T14789] udevd[14789]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 405.245462][ T5784] cp210x 6-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 405.245499][ T5784] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 405.285150][ T5784] usb 6-1: cp210x converter now attached to ttyUSB0 [ 405.322956][ T5784] usb 6-1: USB disconnect, device number 5 [ 405.403913][ T5784] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 405.432216][ T5784] cp210x 6-1:0.0: device disconnected [ 405.682241][T16200] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4970'. [ 405.682283][T16200] netlink: 192 bytes leftover after parsing attributes in process `syz.4.4970'. [ 405.773699][ T37] audit: type=1326 audit(2000002794.193:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16205 comm="syz.0.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c9c1f749 code=0x7ffc0000 [ 405.773760][ T37] audit: type=1326 audit(2000002794.193:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16205 comm="syz.0.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c9c1f749 code=0x7ffc0000 [ 405.782324][ T37] audit: type=1326 audit(2000002794.203:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16205 comm="syz.0.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f67c9c1f749 code=0x7ffc0000 [ 405.782469][ T37] audit: type=1326 audit(2000002794.203:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16205 comm="syz.0.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c9c1f749 code=0x7ffc0000 [ 405.782622][ T37] audit: type=1326 audit(2000002794.203:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16205 comm="syz.0.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c9c1f749 code=0x7ffc0000 [ 405.833979][ T43] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 405.998093][ T43] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 405.998125][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.998139][ T43] usb 3-1: Product: syz [ 405.998150][ T43] usb 3-1: Manufacturer: syz [ 405.998161][ T43] usb 3-1: SerialNumber: syz [ 406.085476][ T43] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 406.125402][ T5784] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 406.242370][T16216] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4977'. [ 406.242403][T16216] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4977'. [ 406.242422][T16216] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4977'. [ 406.552846][ T6119] usb 3-1: USB disconnect, device number 75 [ 406.774043][ T5890] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 406.934070][ T5890] usb 6-1: Using ep0 maxpacket: 8 [ 406.936689][ T5890] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 406.936716][ T5890] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 406.939902][ T5890] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 406.939931][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.939952][ T5890] usb 6-1: Product: syz [ 406.939967][ T5890] usb 6-1: Manufacturer: syz [ 406.939982][ T5890] usb 6-1: SerialNumber: syz [ 407.012670][ T5890] gspca_main: spca501-2.14.0 probing 0000:0000 [ 407.094141][ T43] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 407.215992][ T5890] gspca_spca501: reg write: error -71 [ 407.216013][ T5890] spca501 6-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 407.216107][ T5890] spca501 6-1:1.0: probe with driver spca501 failed with error -22 [ 407.220713][ T5890] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 407.244576][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 407.267185][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.267220][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.267259][ T43] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 407.267283][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.327126][ T43] usb 1-1: config 0 descriptor?? [ 407.332012][ T5784] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 407.332229][ T5784] ath9k_htc: Failed to initialize the device [ 407.332881][ T6119] usb 3-1: ath9k_htc: USB layer deinitialized [ 407.372705][ T5890] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 407.396050][ T43] hub 1-1:0.0: USB hub found [ 407.401241][ T5890] usb 6-1: USB disconnect, device number 6 [ 407.546733][ T43] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 407.642420][T14803] udevd[14803]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 407.765834][ T43] usbhid 1-1:0.0: can't add hid device: -71 [ 407.765971][ T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 407.802043][ T43] usb 1-1: USB disconnect, device number 73 [ 409.005050][ T5890] usb 3-1: new low-speed USB device number 76 using dummy_hcd [ 409.168473][ T5890] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 409.187617][ T5890] usb 3-1: string descriptor 0 read error: -22 [ 409.187800][ T5890] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 409.187826][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.449950][ T5890] usb 3-1: USB disconnect, device number 76 [ 409.655050][ T5784] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 409.807311][ T5784] usb 5-1: config 0 has an invalid interface number: 199 but max is 1 [ 409.807345][ T5784] usb 5-1: config 0 has no interface number 1 [ 409.807411][ T5784] usb 5-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 409.807451][ T5784] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 409.846658][ T5784] usb 5-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 409.846740][ T5784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 409.846797][ T5784] usb 5-1: SerialNumber: syz [ 409.886950][ T5784] usb 5-1: config 0 descriptor?? [ 409.893633][ T5784] uvcvideo 5-1:0.199: Found UVC 0.00 device (0002:0000) [ 409.893674][ T5784] uvcvideo 5-1:0.199: No valid video chain found. [ 410.116460][ T8597] usb 5-1: USB disconnect, device number 69 [ 410.345824][T16360] macvtap0: entered allmulticast mode [ 410.345851][T16360] veth0_macvtap: entered allmulticast mode [ 410.527738][ T5784] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 410.679380][ T5784] usb 1-1: config 0 has an invalid interface number: 40 but max is 0 [ 410.679412][ T5784] usb 1-1: config 0 has no interface number 0 [ 410.679493][ T5784] usb 1-1: config 0 interface 40 altsetting 3 bulk endpoint 0xA has invalid maxpacket 8 [ 410.679521][ T5784] usb 1-1: config 0 interface 40 altsetting 3 bulk endpoint 0x87 has invalid maxpacket 1024 [ 410.679548][ T5784] usb 1-1: config 0 interface 40 has no altsetting 0 [ 410.730843][ T5784] usb 1-1: New USB device found, idVendor=0402, idProduct=5632, bcdDevice=43.16 [ 410.730934][ T5784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.730991][ T5784] usb 1-1: Product: syz [ 410.731036][ T5784] usb 1-1: Manufacturer: syz [ 410.731080][ T5784] usb 1-1: SerialNumber: syz [ 410.803448][ T5784] usb 1-1: config 0 descriptor?? [ 410.804690][T16356] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 410.804967][T16356] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 410.917875][T16374] netlink: 'syz.2.5058': attribute type 10 has an invalid length. [ 410.917896][T16374] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5058'. [ 410.917923][T16374] team0: entered promiscuous mode [ 410.919761][T16374] team0: entered allmulticast mode [ 411.010361][T16356] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 411.010507][T16356] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 411.043320][T16374] bridge0: port 1(team0) entered blocking state [ 411.043424][T16374] bridge0: port 1(team0) entered disabled state [ 411.241652][ T5784] cdc_subset 1-1:0.40 usb0: register 'cdc_subset' at usb-dummy_hcd.0-1, ALi M5632, 2e:f5:bd:a5:d2:54 [ 411.253320][ T5784] usb 1-1: USB disconnect, device number 74 [ 411.289989][ T5784] cdc_subset 1-1:0.40 usb0: unregister 'cdc_subset' usb-dummy_hcd.0-1, ALi M5632 [ 411.393711][T16387] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5062'. [ 412.372519][T16432] i2c i2c-0: Invalid block write size 33 [ 412.674389][T16444] overlayfs: overlapping lowerdir path [ 413.649536][ T37] audit: type=1326 audit(2000002802.080:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16486 comm="syz.5.5112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad8adf749 code=0x7ffc0000 [ 413.655953][ T37] audit: type=1326 audit(2000002802.080:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16486 comm="syz.5.5112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f9ad8adf749 code=0x7ffc0000 [ 413.656247][ T37] audit: type=1326 audit(2000002802.080:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16486 comm="syz.5.5112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad8adf749 code=0x7ffc0000 [ 413.660041][ T37] audit: type=1326 audit(2000002802.080:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16486 comm="syz.5.5112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad8adf749 code=0x7ffc0000 [ 414.394220][T16518] netlink: 824 bytes leftover after parsing attributes in process `syz.0.5128'. [ 414.716524][T16534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5135'. [ 414.716559][T16534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5135'. [ 414.800363][T16536] netlink: 'syz.2.5137': attribute type 10 has an invalid length. [ 414.800416][T16536] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 414.803209][T16536] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 414.803384][T16536] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 414.805515][T16536] team0: Port device netdevsim0 added [ 415.011245][T16547] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5139'. [ 415.163411][ T37] audit: type=1326 audit(2000002803.590:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16554 comm="syz.0.5145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c9c1f749 code=0x7ffc0000 [ 415.165493][ T37] audit: type=1326 audit(2000002803.590:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16554 comm="syz.0.5145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c9c1f749 code=0x7ffc0000 [ 415.227296][ T37] audit: type=1326 audit(2000002803.650:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16554 comm="syz.0.5145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f67c9c1f749 code=0x7ffc0000 [ 415.530799][ T37] audit: type=1326 audit(2000002803.950:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16554 comm="syz.0.5145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c9c1f749 code=0x7ffc0000 [ 415.530975][ T37] audit: type=1326 audit(2000002803.960:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16554 comm="syz.0.5145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c9c1f749 code=0x7ffc0000 [ 415.762708][T16575] netlink: 'syz.2.5156': attribute type 64 has an invalid length. [ 415.770033][T16575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 416.235528][T16597] random: crng reseeded on system resumption [ 416.793526][T16625] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.992540][T16636] lo speed is unknown, defaulting to 1000 [ 416.992646][T16636] lo speed is unknown, defaulting to 1000 [ 416.994895][T16636] lo speed is unknown, defaulting to 1000 [ 417.036732][T16638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5185'. [ 417.054450][T16636] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 417.118171][T16636] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 417.224026][T16636] lo speed is unknown, defaulting to 1000 [ 417.231557][T16636] lo speed is unknown, defaulting to 1000 [ 417.273187][T16636] lo speed is unknown, defaulting to 1000 [ 417.276253][T16636] lo speed is unknown, defaulting to 1000 [ 417.290513][T16636] lo speed is unknown, defaulting to 1000 [ 417.325994][T16636] lo speed is unknown, defaulting to 1000 [ 418.513644][T16706] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5221'. [ 418.513673][T16706] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5221'. [ 418.978088][T16727] netlink: 'syz.0.5231': attribute type 10 has an invalid length. [ 418.978113][T16727] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5231'. [ 419.030152][T16727] team0: entered promiscuous mode [ 419.030177][T16727] team_slave_0: entered promiscuous mode [ 419.030434][T16727] team_slave_1: entered promiscuous mode [ 419.030639][T16727] geneve0: entered promiscuous mode [ 419.031426][T16727] bridge0: port 3(team0) entered blocking state [ 419.032413][T16727] bridge0: port 3(team0) entered disabled state [ 419.032655][T16727] team0: entered allmulticast mode [ 419.032672][T16727] team_slave_0: entered allmulticast mode [ 419.032691][T16727] team_slave_1: entered allmulticast mode [ 419.032710][T16727] geneve0: entered allmulticast mode [ 419.141847][T16727] bridge0: port 3(team0) entered blocking state [ 419.167341][T16727] bridge0: port 3(team0) entered forwarding state [ 419.567075][T16752] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5242'. [ 419.640699][T16755] netlink: 212 bytes leftover after parsing attributes in process `syz.0.5245'. [ 419.674642][T16752] bond2: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 419.707542][T16752] bond2 (unregistering): Released all slaves [ 420.196240][T16782] netlink: 'syz.0.5258': attribute type 5 has an invalid length. [ 420.527214][T16798] overlay: ./file0 is not a directory [ 421.143538][T16831] netlink: 'syz.5.5281': attribute type 2 has an invalid length. [ 421.143563][T16831] netlink: 'syz.5.5281': attribute type 1 has an invalid length. [ 421.144125][T16831] netlink: 'syz.5.5281': attribute type 1 has an invalid length. [ 421.751950][T16859] ubi31: detaching mtd0 [ 421.812203][T16859] ubi31: mtd0 is detached [ 422.004985][T16867] netlink: 'syz.5.5297': attribute type 4 has an invalid length. [ 422.681309][ T5890] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 422.740870][T16905] bond0: (slave rose0): Enslaving as an active interface with an up link [ 422.832590][ T5890] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 422.832625][ T5890] usb 1-1: config 1 has no interface number 1 [ 422.832678][ T5890] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 422.835286][ T5890] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 422.835316][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.835336][ T5890] usb 1-1: Product: syz [ 422.835358][ T5890] usb 1-1: Manufacturer: syz [ 422.835374][ T5890] usb 1-1: SerialNumber: syz [ 423.213454][ T5890] usb 1-1: found format II with max.bitrate = 26774, frame size=1 [ 423.213614][ T5890] usb 1-1: found format II with max.bitrate = 26774, frame size=1 [ 423.237173][ T5890] usb 1-1: failed to enable PITCH for EP 0x82 [ 423.458259][T16922] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 423.490821][ T5890] usb 1-1: USB disconnect, device number 75 [ 423.511014][T16922] bond1 (unregistering): Released all slaves [ 423.617292][T16937] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5329'. [ 423.617328][T16937] netlink: 'syz.5.5329': attribute type 5 has an invalid length. [ 423.617345][T16937] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5329'. [ 423.625891][T14789] udevd[14789]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 423.755668][T16937] geneve2: entered promiscuous mode [ 423.755688][T16937] geneve2: entered allmulticast mode [ 423.783301][ T1365] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 423.818361][ T1365] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 423.818412][ T1365] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 423.818452][ T1365] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 424.845333][T16983] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5352'. [ 425.491767][T17001] overlayfs: missing 'lowerdir' [ 425.704802][T17007] netlink: 184 bytes leftover after parsing attributes in process `syz.2.5364'. [ 425.884268][T17017] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5366'. [ 426.369091][T17038] 9pnet_virtio: no channels available for device syz [ 426.583126][T17009] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 426.583146][T17009] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 426.587528][T17009] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 426.587552][T17009] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 426.881673][ T6119] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 427.051641][ T6119] usb 3-1: Using ep0 maxpacket: 32 [ 427.054596][ T6119] usb 3-1: unable to get BOS descriptor or descriptor too short [ 427.056447][ T6119] usb 3-1: config 255 has an invalid interface number: 81 but max is 0 [ 427.056476][ T6119] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 427.056497][ T6119] usb 3-1: config 255 has no interface number 0 [ 427.056551][ T6119] usb 3-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 427.056578][ T6119] usb 3-1: config 255 interface 81 altsetting 3 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 427.056606][ T6119] usb 3-1: config 255 interface 81 altsetting 3 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 427.056634][ T6119] usb 3-1: config 255 interface 81 has no altsetting 0 [ 427.061039][ T6119] usb 3-1: string descriptor 0 read error: -22 [ 427.061193][ T6119] usb 3-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 427.061218][ T6119] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.118800][T17048] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 427.227969][ T6119] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:255.81/input/input26 [ 428.643776][ C1] usbtouchscreen 3-1:255.81: usbtouch_irq - usb_submit_urb failed with result: -1 [ 428.702954][ T6119] usb 3-1: USB disconnect, device number 77 [ 428.917003][ T43] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 429.090935][ T43] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 429.090971][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.097048][ T43] usb 6-1: config 0 descriptor?? [ 429.533608][ T43] ath6kl: Failed to submit usb control message: -71 [ 429.533663][ T43] ath6kl: unable to send the bmi data to the device: -71 [ 429.533680][ T43] ath6kl: Unable to send get target info: -71 [ 429.558842][ T43] ath6kl: Failed to init ath6kl core: -71 [ 429.560157][ T43] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 429.640003][ T43] usb 6-1: USB disconnect, device number 7 [ 430.240991][ T37] audit: type=1326 audit(2000002818.654:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17128 comm="syz.2.5411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933d48f749 code=0x7ffc0000 [ 430.292862][ T37] audit: type=1326 audit(2000002818.694:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17128 comm="syz.2.5411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933d48f749 code=0x7ffc0000 [ 430.292921][ T37] audit: type=1326 audit(2000002818.694:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17128 comm="syz.2.5411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933d48f749 code=0x7ffc0000 [ 430.292970][ T37] audit: type=1326 audit(2000002818.704:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17128 comm="syz.2.5411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f933d48f749 code=0x7ffc0000 [ 430.294849][ T37] audit: type=1326 audit(2000002818.714:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17128 comm="syz.2.5411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933d48f749 code=0x7ffc0000 [ 430.294902][ T37] audit: type=1326 audit(2000002818.714:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17128 comm="syz.2.5411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933d48f749 code=0x7ffc0000 [ 430.295216][ T37] audit: type=1326 audit(2000002818.714:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17128 comm="syz.2.5411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933d48f749 code=0x7ffc0000 [ 430.296752][ T37] audit: type=1326 audit(2000002818.714:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17128 comm="syz.2.5411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933d48f749 code=0x7ffc0000 [ 430.303062][ T37] audit: type=1326 audit(2000002818.714:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17128 comm="syz.2.5411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f933d48f749 code=0x7ffc0000 [ 430.310428][ T37] audit: type=1326 audit(2000002818.724:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17128 comm="syz.2.5411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f933d48f749 code=0x7ffc0000 [ 430.911407][T17009] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 430.911435][T17009] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 431.160825][T17165] netlink: 'syz.0.5424': attribute type 11 has an invalid length. [ 432.464451][ T5890] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 432.621723][ T5890] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 432.621759][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.621780][ T5890] usb 5-1: Product: syz [ 432.621797][ T5890] usb 5-1: Manufacturer: syz [ 432.621813][ T5890] usb 5-1: SerialNumber: syz [ 433.014500][ T5890] rtl8150 5-1:1.0: couldn't reset the device [ 433.014970][ T5890] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 433.061822][ T5890] usb 5-1: USB disconnect, device number 70 [ 434.861045][T17325] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5487'. [ 434.894745][ T43] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 435.044703][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 435.056711][ T43] usb 1-1: config 6 has an invalid interface number: 64 but max is 0 [ 435.056751][ T43] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 435.056774][ T43] usb 1-1: config 6 has no interface number 0 [ 435.056810][ T43] usb 1-1: too many endpoints for config 6 interface 64 altsetting 21: 207, using maximum allowed: 30 [ 435.056996][ T43] usb 1-1: config 6 interface 64 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 207 [ 435.057027][ T43] usb 1-1: config 6 interface 64 has no altsetting 0 [ 435.118078][ T43] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 435.118110][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.118130][ T43] usb 1-1: Product: syz [ 435.118145][ T43] usb 1-1: Manufacturer: syz [ 435.118161][ T43] usb 1-1: SerialNumber: syz [ 435.372409][ T6377] usb 1-1: USB disconnect, device number 76 [ 436.223093][T17364] bond1: entered promiscuous mode [ 436.223125][T17364] bond1: entered allmulticast mode [ 436.223682][T17364] 8021q: adding VLAN 0 to HW filter on device bond1 [ 436.945609][ T5890] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 437.132533][ T5890] usb 5-1: Using ep0 maxpacket: 32 [ 437.135159][ T5890] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 437.135196][ T5890] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 437.135226][ T5890] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 437.138976][ T5890] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 437.139080][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 437.139151][ T5890] usb 5-1: Product: syz [ 437.139174][ T5890] usb 5-1: Manufacturer: syz [ 437.139191][ T5890] usb 5-1: SerialNumber: syz [ 437.269293][ T5890] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input27 [ 437.982036][ T5784] usb 5-1: USB disconnect, device number 71 [ 437.982167][ C1] appletouch 5-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 438.171388][ T5784] appletouch 5-1:1.0: input: appletouch disconnected [ 438.746502][T17469] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5549'. [ 439.568115][T17512] netlink: 'syz.0.5571': attribute type 6 has an invalid length. [ 439.768110][T17521] netlink: 'syz.0.5575': attribute type 2 has an invalid length. [ 440.251710][T17544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5587'. [ 440.322249][T17548] netlink: 'syz.5.5589': attribute type 5 has an invalid length. [ 440.761572][T17568] bridge2: entered promiscuous mode [ 440.786848][ T6377] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 440.936910][ T6377] usb 5-1: Using ep0 maxpacket: 8 [ 440.939266][ T6377] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 440.939293][ T6377] usb 5-1: config 0 has no interface number 0 [ 440.942477][ T6377] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 440.942506][ T6377] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.942526][ T6377] usb 5-1: Product: syz [ 440.942542][ T6377] usb 5-1: Manufacturer: syz [ 440.942557][ T6377] usb 5-1: SerialNumber: syz [ 441.015160][ T6377] usb 5-1: config 0 descriptor?? [ 441.097557][T17579] bond2: entered promiscuous mode [ 441.097625][T17579] bond2: entered allmulticast mode [ 441.150848][T17579] 8021q: adding VLAN 0 to HW filter on device bond2 [ 441.297164][ T6377] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 441.297264][ T6377] uvcvideo 5-1:0.31: Failed to initialize entity for entity 6 [ 441.297283][ T6377] uvcvideo 5-1:0.31: Failed to register entities (-22). [ 441.444607][T17593] netlink: 'syz.0.5612': attribute type 1 has an invalid length. [ 441.444632][T17593] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5612'. [ 441.504513][ T5967] usb 5-1: USB disconnect, device number 72 [ 441.809991][T17605] netlink: 'syz.5.5618': attribute type 10 has an invalid length. [ 441.867321][T17605] macvlan0: entered allmulticast mode [ 441.888360][T17605] veth1_vlan: entered allmulticast mode [ 441.909370][T17605] team0: Port device macvlan0 added [ 442.191573][T17623] tmpfs: Bad value for 'mpol' [ 442.339891][T17629] netlink: 'syz.0.5630': attribute type 7 has an invalid length. [ 442.522179][T17639] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5633'. [ 442.682089][T17645] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5637'. [ 443.080273][T17666] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5648'. [ 443.975693][T17702] comedi comedi0: pcmda12: a I/O base address must be specified [ 444.041917][T17707] netlink: 45 bytes leftover after parsing attributes in process `syz.0.5666'. [ 444.209441][ T5784] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 444.358855][ T5784] usb 6-1: Using ep0 maxpacket: 32 [ 444.361333][ T5784] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 444.361361][ T5784] usb 6-1: config 0 has no interface number 0 [ 444.366080][ T5784] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 444.366112][ T5784] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.366134][ T5784] usb 6-1: Product: syz [ 444.366149][ T5784] usb 6-1: Manufacturer: syz [ 444.366164][ T5784] usb 6-1: SerialNumber: syz [ 444.438606][ T5784] usb 6-1: config 0 descriptor?? [ 444.456033][ T5784] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 444.456080][ T5784] usb 6-1: selecting invalid altsetting 1 [ 444.456097][ T5784] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 444.502825][ T5784] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 444.503251][ T5784] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 444.503306][ T5784] usb 6-1: media controller created [ 444.561190][ T5784] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 444.670329][ T5784] usb 6-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)... [ 444.671154][ T5784] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 444.900535][ T5784] DVB: Unable to find symbol mxl5005s_attach() [ 444.932452][ T5784] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 445.020692][ T5784] usb 6-1: USB disconnect, device number 8 [ 445.158654][ T43] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 445.308610][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 445.314473][ T43] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 445.314506][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.314528][ T43] usb 1-1: Product: syz [ 445.314544][ T43] usb 1-1: Manufacturer: syz [ 445.314560][ T43] usb 1-1: SerialNumber: syz [ 445.370508][ T43] usb 1-1: config 0 descriptor?? [ 445.578319][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.578397][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.624784][ T43] snd-usb-6fire 1-1:0.0: unknown device firmware state received from device: [ 445.624808][ T43] eb 00 00 00 00 00 00 00 [ 445.624895][ T43] snd-usb-6fire 1-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 445.693572][T17769] netlink: 'syz.4.5699': attribute type 12 has an invalid length. [ 445.759033][T17773] binder: 17771:17773 unknown command 1077961494 [ 445.759131][T17773] binder: 17771:17773 ioctl c0306201 200000000100 returned -22 [ 445.867193][ T8597] usb 1-1: USB disconnect, device number 77 [ 445.919186][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 445.919206][ T37] audit: type=1326 audit(2000002834.338:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17774 comm="syz.2.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933d48f749 code=0x7ffc0000 [ 445.927720][ T37] audit: type=1326 audit(2000002834.338:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17774 comm="syz.2.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933d48f749 code=0x7ffc0000 [ 445.998069][ T37] audit: type=1326 audit(2000002834.408:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17774 comm="syz.2.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f933d48f749 code=0x7ffc0000 [ 445.998128][ T37] audit: type=1326 audit(2000002834.408:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17774 comm="syz.2.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933d48f749 code=0x7ffc0000 [ 445.998173][ T37] audit: type=1326 audit(2000002834.408:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17774 comm="syz.2.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933d48f749 code=0x7ffc0000 [ 446.460178][T17796] openvswitch: netlink: IPv6 tunnel dst address is zero [ 446.673507][T17812] bridge_slave_0: entered promiscuous mode [ 447.133246][T17834] netlink: 'syz.0.5730': attribute type 15 has an invalid length. [ 447.133270][T17834] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5730'. [ 447.180950][T17835] netlink: 'syz.4.5731': attribute type 10 has an invalid length. [ 447.316878][T17835] bond0: (slave bridge0): Releasing backup interface [ 448.554265][T17906] QAT: failed to copy from user cfg_data. [ 449.426447][T17945] dlm: non-version read from control device 32 [ 449.468794][T17948] netlink: 'syz.5.5787': attribute type 1 has an invalid length. [ 450.677388][T17998] netlink: 'syz.0.5811': attribute type 10 has an invalid length. [ 450.794735][T17998] bridge0: port 3(team0) entered disabled state [ 450.795433][T17998] team0: left allmulticast mode [ 450.795452][T17998] team_slave_0: left allmulticast mode [ 450.795472][T17998] team_slave_1: left allmulticast mode [ 450.795491][T17998] geneve0: left allmulticast mode [ 450.795514][T17998] team0: left promiscuous mode [ 450.795527][T17998] team_slave_0: left promiscuous mode [ 450.803978][T17998] team_slave_1: left promiscuous mode [ 450.805012][T17998] geneve0: left promiscuous mode [ 450.829322][T17998] bridge0: port 3(team0) entered disabled state [ 450.967953][T17998] batman_adv: batadv0: Adding interface: team0 [ 450.967975][T17998] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 451.856573][T18050] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5837'. [ 452.171376][T18065] netlink: 'syz.5.5844': attribute type 1 has an invalid length. [ 452.171684][T18065] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5844'. [ 452.581325][ T5784] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 452.736757][ T5784] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 452.736787][ T5784] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 452.739538][ T5784] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 452.739569][ T5784] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.739601][ T5784] usb 6-1: Product: syz [ 452.739616][ T5784] usb 6-1: Manufacturer: syz [ 452.739631][ T5784] usb 6-1: SerialNumber: syz [ 452.890447][T18100] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5861'. [ 452.890513][T18100] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5861'. [ 452.890531][T18100] netlink: 'syz.2.5861': attribute type 3 has an invalid length. [ 452.894728][T18100] netlink: 11 bytes leftover after parsing attributes in process `syz.2.5861'. [ 453.012129][ T5784] usb 6-1: 0:2 : does not exist [ 453.035492][ T5784] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 453.121367][ T5784] usb 6-1: USB disconnect, device number 9 [ 453.234806][T14803] udevd[14803]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 453.581735][ T5784] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 453.682363][ T37] audit: type=1326 audit(2000002842.095:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18128 comm="syz.2.5875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933d48f749 code=0x7ffc0000 [ 453.683500][ T37] audit: type=1326 audit(2000002842.095:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18128 comm="syz.2.5875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933d48f749 code=0x7ffc0000 [ 453.686260][ T37] audit: type=1326 audit(2000002842.095:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18128 comm="syz.2.5875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f933d48f749 code=0x7ffc0000 [ 453.686561][ T37] audit: type=1326 audit(2000002842.095:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18128 comm="syz.2.5875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933d48f749 code=0x7ffc0000 [ 453.751789][ T5784] usb 5-1: Using ep0 maxpacket: 8 [ 453.783999][ T5784] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.784026][ T5784] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 453.784049][ T5784] usb 5-1: config 1 has no interface number 1 [ 453.784097][ T5784] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 453.837142][ T5784] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 453.837176][ T5784] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.837197][ T5784] usb 5-1: Product: syz [ 453.837212][ T5784] usb 5-1: Manufacturer: syz [ 453.837227][ T5784] usb 5-1: SerialNumber: syz [ 454.108157][T18144] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5880'. [ 454.134402][ T5784] usb 5-1: 0:8 : does not exist [ 454.227114][ T5784] usb 5-1: USB disconnect, device number 73 [ 454.395200][T14803] udevd[14803]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 455.047048][T18187] netlink: 'syz.0.5903': attribute type 1 has an invalid length. [ 455.247655][T18198] Smack: duplicate mount options [ 455.505332][T18211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5915'. [ 455.505362][T18211] openvswitch: netlink: Invalid VLAN frame [ 455.703751][T18220] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5919'. [ 455.703780][T18220] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5919'. [ 456.065187][T18237] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5927'. [ 456.322832][ T8597] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 456.475192][ T8597] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.478317][ T8597] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 456.478349][ T8597] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.478372][ T8597] usb 5-1: Product: syz [ 456.478388][ T8597] usb 5-1: Manufacturer: syz [ 456.478403][ T8597] usb 5-1: SerialNumber: syz [ 456.535063][ T8597] usb 5-1: config 0 descriptor?? [ 456.568896][ T8597] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 456.999219][ T8597] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 456.999297][ T8597] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 457.047458][ T8597] usb 5-1: USB disconnect, device number 74 [ 457.803505][ T5784] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 457.897814][T18329] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5973'. [ 457.954970][ T5784] usb 6-1: Using ep0 maxpacket: 8 [ 457.958081][ T5784] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 457.960625][ T5784] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 457.960655][ T5784] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 457.960678][ T5784] usb 6-1: Product: syz [ 457.960693][ T5784] usb 6-1: Manufacturer: syz [ 457.960708][ T5784] usb 6-1: SerialNumber: syz [ 458.269412][ T5784] usb 6-1: Invalid connection information received from device [ 458.483108][ T5890] usb 6-1: USB disconnect, device number 10 [ 458.784649][T18367] trusted_key: encrypted_key: keylen parameter is missing [ 459.309558][T18396] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 459.309578][T18396] IPv6: NLM_F_CREATE should be set when creating new route [ 459.309852][T18396] IPv6: NLM_F_CREATE should be set when creating new route [ 459.309885][T18396] IPv6: NLM_F_CREATE should be set when creating new route [ 459.783281][ T37] audit: type=1326 audit(2000002848.183:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18419 comm="syz.2.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933d48f749 code=0x7ffc0000 [ 459.783598][ T37] audit: type=1326 audit(2000002848.183:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18419 comm="syz.2.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933d48f749 code=0x7ffc0000 [ 459.847673][ T37] audit: type=1326 audit(2000002848.253:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18419 comm="syz.2.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f933d48f749 code=0x7ffc0000 [ 459.848025][ T37] audit: type=1326 audit(2000002848.253:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18419 comm="syz.2.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933d48f749 code=0x7ffc0000 [ 462.191305][T18538] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6078'. [ 463.108449][ T37] audit: type=1326 audit(2000002851.502:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18574 comm="syz.2.6096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933d48f749 code=0x7ffc0000 [ 463.108798][ T37] audit: type=1326 audit(2000002851.512:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18574 comm="syz.2.6096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933d48f749 code=0x7ffc0000 [ 463.113303][ T37] audit: type=1326 audit(2000002851.512:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18574 comm="syz.2.6096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f933d48f749 code=0x7ffc0000 [ 463.113655][ T37] audit: type=1326 audit(2000002851.512:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18574 comm="syz.2.6096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933d48f749 code=0x7ffc0000 [ 463.114428][ T37] audit: type=1326 audit(2000002851.512:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18574 comm="syz.2.6096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933d48f749 code=0x7ffc0000 [ 463.745832][ T6119] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 463.895690][ T6119] usb 3-1: Using ep0 maxpacket: 8 [ 463.898217][ T6119] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 463.898244][ T6119] usb 3-1: config 0 has no interface number 0 [ 463.898278][ T6119] usb 3-1: config 0 interface 1 has no altsetting 0 [ 463.901352][ T6119] usb 3-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 463.901382][ T6119] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.901403][ T6119] usb 3-1: Product: syz [ 463.901419][ T6119] usb 3-1: Manufacturer: syz [ 463.901435][ T6119] usb 3-1: SerialNumber: syz [ 463.972131][ T6119] usb 3-1: config 0 descriptor?? [ 464.190639][ T6119] i2c-cp2615 3-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 464.397360][ T43] usb 3-1: USB disconnect, device number 78 [ 464.520087][T18629] netlink: 'syz.5.6122': attribute type 21 has an invalid length. [ 464.520117][T18629] IPv6: NLM_F_CREATE should be specified when creating new route [ 464.520717][T18629] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 464.520731][T18629] IPv6: NLM_F_CREATE should be set when creating new route [ 464.520789][T18629] IPv6: NLM_F_CREATE should be set when creating new route [ 464.520821][T18629] IPv6: NLM_F_CREATE should be set when creating new route [ 464.545898][ T6119] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 464.727766][ T6119] usb 5-1: Using ep0 maxpacket: 16 [ 464.756533][ T6119] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.756574][ T6119] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 464.756590][ T6119] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 464.756607][ T6119] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 46144, setting to 1024 [ 464.756626][ T6119] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 464.756643][ T6119] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 464.757896][ T6119] usb 5-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 464.757931][ T6119] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 464.757947][ T6119] usb 5-1: SerialNumber: syz [ 464.763202][T18620] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 464.813448][ T6119] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 464.847523][ T6119] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 464.994137][ T43] usb 5-1: USB disconnect, device number 75 [ 466.312621][T18705] IPVS: length: 235 != 24 [ 466.531803][T18719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6166'. [ 467.016792][ T6377] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 467.168789][ T6377] usb 3-1: too many configurations: 241, using maximum allowed: 8 [ 467.215881][ T6377] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 467.215916][ T6377] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.215938][ T6377] usb 3-1: Product: syz [ 467.215953][ T6377] usb 3-1: Manufacturer: syz [ 467.215978][ T6377] usb 3-1: SerialNumber: syz [ 467.276135][ T6377] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 467.359173][ T5890] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 467.604276][T18764] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 467.604308][T18764] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 467.633741][ C0] usb 3-1: ath9k_htc: over RX MAX_PKT_NUM [ 467.711427][T18768] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 467.711457][T18768] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 467.728285][T18764] vhci_hcd vhci_hcd.0: Device attached [ 467.728851][T18768] vhci_hcd vhci_hcd.0: Device attached [ 467.753757][T18769] vhci_hcd: connection closed [ 467.762572][T18766] vhci_hcd: connection closed [ 467.782577][ T3105] vhci_hcd vhci_hcd.0: stop threads [ 467.783558][ T3105] vhci_hcd vhci_hcd.0: release socket [ 467.783672][ T3105] vhci_hcd vhci_hcd.0: disconnect device [ 467.784267][ T3105] vhci_hcd vhci_hcd.0: stop threads [ 467.784284][ T3105] vhci_hcd vhci_hcd.0: release socket [ 467.784323][ T3105] vhci_hcd vhci_hcd.0: disconnect device [ 468.067302][ T43] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 468.220029][ T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.220079][ T43] usb 6-1: config 0 interface 0 has no altsetting 0 [ 468.251286][ T43] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 468.251318][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.251339][ T43] usb 6-1: Product: syz [ 468.251354][ T43] usb 6-1: Manufacturer: syz [ 468.251369][ T43] usb 6-1: SerialNumber: syz [ 468.346631][ T43] usb 6-1: config 0 descriptor?? [ 468.377652][ T43] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 468.403557][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 468.421865][ T43] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 468.421929][ T43] usb 6-1: media controller created [ 468.488846][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 468.783210][ T5890] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 468.783411][ T5890] ath9k_htc: Failed to initialize the device [ 468.807731][ T6377] usb 3-1: USB disconnect, device number 79 [ 468.849328][ T43] DVB: Unable to find symbol tda10046_attach() [ 468.849348][ T43] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 468.849364][ T43] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 468.862085][ T6377] usb 3-1: ath9k_htc: USB layer deinitialized [ 469.055076][ T43] dvb_usb_m920x 6-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 469.079219][ T43] usb 6-1: USB disconnect, device number 11 [ 469.237954][ T6377] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 469.393841][ T6377] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 469.393873][ T6377] usb 3-1: config 0 has no interface number 0 [ 469.393928][ T6377] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 469.396736][ T6377] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 469.396769][ T6377] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 469.396784][ T6377] usb 3-1: Product: syz [ 469.396795][ T6377] usb 3-1: Manufacturer: syz [ 469.396807][ T6377] usb 3-1: SerialNumber: syz [ 469.455472][ T6377] usb 3-1: config 0 descriptor?? [ 469.475465][ T6377] keyspan 3-1:0.107: Keyspan 4 port adapter converter detected [ 469.475716][ T6377] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 81 [ 469.505232][ T6377] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 1 [ 469.541365][ T6377] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 469.602011][ T6377] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 2 [ 469.659548][ T6377] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 469.713506][ T6377] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 4 [ 469.716233][ T6377] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 469.741119][ T6377] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 6 [ 469.795832][ T6377] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 469.807690][T18821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6216'. [ 469.828805][ T6377] usb 3-1: USB disconnect, device number 80 [ 469.882482][ T6377] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 469.929703][ T6377] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 469.959696][ T6377] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 470.009104][ T6377] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 470.010230][ T6377] keyspan 3-1:0.107: device disconnected [ 470.273018][T18835] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 472.896233][ T37] audit: type=1326 audit(2000002861.298:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18952 comm="syz.4.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eb196f749 code=0x7ffc0000 [ 472.898772][ T37] audit: type=1326 audit(2000002861.298:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18952 comm="syz.4.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eb196f749 code=0x7ffc0000 [ 472.948313][ T37] audit: type=1326 audit(2000002861.348:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18952 comm="syz.4.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f9eb196f749 code=0x7ffc0000 [ 472.948664][ T37] audit: type=1326 audit(2000002861.348:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18952 comm="syz.4.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eb196f749 code=0x7ffc0000 [ 472.949149][ T37] audit: type=1326 audit(2000002861.348:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18952 comm="syz.4.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eb196f749 code=0x7ffc0000 [ 473.223145][T18964] ieee802154 phy0 wpan0: encryption failed: -22 [ 473.247648][T18957] bond2: Unable to set up delay as MII monitoring is disabled [ 473.314020][T18957] bond2 (unregistering): Released all slaves [ 473.498086][T18970] pim6reg: entered allmulticast mode [ 473.535761][T18976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6292'. [ 473.535795][T18976] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6292'. [ 473.722854][T18983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6296'. [ 474.439916][T19013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6311'. [ 475.239988][ T5967] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 475.401976][ T5967] usb 3-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 475.402009][ T5967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.430616][ T5967] usb 3-1: config 0 descriptor?? [ 475.437770][ T5967] usb 3-1: unsupported MDLM descriptors [ 475.644247][ T5967] usb 3-1: USB disconnect, device number 81 [ 476.387551][T19108] [U]  [ 477.010651][ T5890] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 477.121425][T19150] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6378'. [ 477.175675][ T5890] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 477.175706][ T5890] usb 6-1: config 0 has no interface number 0 [ 477.175754][ T5890] usb 6-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 477.175777][ T5890] usb 6-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 477.175804][ T5890] usb 6-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 477.175828][ T5890] usb 6-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 477.245264][ T5890] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 477.245298][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.245319][ T5890] usb 6-1: Product: syz [ 477.245335][ T5890] usb 6-1: Manufacturer: syz [ 477.245350][ T5890] usb 6-1: SerialNumber: syz [ 477.292913][ T5890] usb 6-1: config 0 descriptor?? [ 477.318655][ T5890] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.119/input/input29 [ 477.587083][ T5967] usb 6-1: USB disconnect, device number 12 [ 477.879859][T19175] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6390'. [ 478.588589][T19202] bond3: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 478.644849][T19202] bond3 (unregistering): Released all slaves [ 478.680190][T19214] usb usb1: usbfs: process 19214 (syz.4.6409) did not claim interface 8 before use [ 478.847480][ T5967] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 478.991435][ T5967] usb 6-1: Using ep0 maxpacket: 8 [ 478.993340][ T5967] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 478.993368][ T5967] usb 6-1: config 0 has no interface number 0 [ 478.993422][ T5967] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 478.993449][ T5967] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 478.993476][ T5967] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 478.993504][ T5967] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 478.993526][ T5967] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 478.993569][ T5967] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 478.993594][ T5967] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.017080][ T5967] usb 6-1: config 0 descriptor?? [ 479.121857][ T5967] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 479.248876][T19212] ldusb 6-1:0.55: Couldn't submit interrupt_in_urb -90 [ 479.252152][ T9] usb 6-1: USB disconnect, device number 13 [ 479.285333][ T9] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 480.034189][ T5784] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 480.065628][T19275] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6440'. [ 480.070079][T19276] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 480.185147][ T5784] usb 5-1: config 0 has an invalid interface number: 107 but max is 0 [ 480.185180][ T5784] usb 5-1: config 0 has no interface number 0 [ 480.185227][ T5784] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 480.230508][ T5784] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 480.230541][ T5784] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 480.230563][ T5784] usb 5-1: Product: syz [ 480.230579][ T5784] usb 5-1: Manufacturer: syz [ 480.230594][ T5784] usb 5-1: SerialNumber: syz [ 480.280080][ T5784] usb 5-1: config 0 descriptor?? [ 480.319117][ T5784] keyspan 5-1:0.107: Keyspan 4 port adapter converter detected [ 480.319537][ T5784] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 81 [ 480.353574][ T5784] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 1 [ 480.405016][ T5784] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 480.486489][ T5784] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 2 [ 480.521991][ T6377] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 480.522553][ T5784] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 480.525163][ T5784] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 4 [ 480.568204][ T5784] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 480.571020][ T5784] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 6 [ 480.593930][ T5784] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 480.628903][ T5784] usb 5-1: USB disconnect, device number 76 [ 480.672094][ T6377] usb 1-1: Using ep0 maxpacket: 16 [ 480.672702][ T5784] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 480.700281][ T6377] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 480.700312][ T6377] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 480.700334][ T6377] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 480.700355][ T6377] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 480.700375][ T6377] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 480.700396][ T6377] usb 1-1: config 0 has no interface number 0 [ 480.700451][ T6377] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 480.700481][ T6377] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 480.700505][ T6377] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 480.700529][ T6377] usb 1-1: config 0 interface 125 has no altsetting 1 [ 480.719585][ T5784] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 480.804194][ T6377] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 480.804225][ T6377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.804247][ T6377] usb 1-1: Product: syz [ 480.804261][ T6377] usb 1-1: Manufacturer: syz [ 480.804276][ T6377] usb 1-1: SerialNumber: syz [ 480.871720][ T5784] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 480.887513][ T6377] usb 1-1: config 0 descriptor?? [ 480.951763][ T5784] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 480.956472][ T5784] keyspan 5-1:0.107: device disconnected [ 481.254733][T19301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6452'. [ 481.326552][ T6377] usb 1-1: USB disconnect, device number 78 [ 481.501562][T19310] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 481.501583][T19310] IPv6: NLM_F_CREATE should be set when creating new route [ 482.683144][T19367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6483'. [ 482.683512][T19367] bridge0: port 1(team0) entered disabled state [ 483.145012][T19391] tmpfs: Bad value for 'mpol' [ 483.468820][T19406] netlink: 'syz.2.6503': attribute type 1 has an invalid length. [ 483.468844][T19406] netlink: 'syz.2.6503': attribute type 1 has an invalid length. [ 483.775390][T19413] bond3: option updelay: invalid value (18446744073709510910) [ 483.775412][T19413] bond3: option updelay: allowed values 0 - 2147483647 [ 483.829674][T19413] bond3 (unregistering): Released all slaves [ 484.883661][ T5784] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 485.044558][ T5784] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.044589][ T5784] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 485.044645][ T5784] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 485.044669][ T5784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.131124][ T5784] usb 3-1: config 0 descriptor?? [ 485.555069][ T5784] Bluetooth: Can't get state to change to load configuration err [ 485.555090][ T5784] Bluetooth: Loading sysconfig file failed [ 485.555128][ T5784] ath3k 3-1:0.0: probe with driver ath3k failed with error -16 [ 485.593997][ T5784] usb 3-1: USB disconnect, device number 82 [ 485.867464][T19511] PM: Enabling pm_trace changes system date and time during resume. [ 485.867464][T19511] PM: Correct system time has to be restored manually after resume. [ 485.894162][ T38] INFO: task syz.1.3499:13161 blocked for more than 143 seconds. [ 485.894199][ T38] Not tainted syzkaller #0 [ 485.894211][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 485.894222][ T38] task:syz.1.3499 state:D stack:23008 pid:13161 tgid:13157 ppid:5804 task_flags:0x400140 flags:0x00080002 [ 485.894303][ T38] Call Trace: [ 485.894315][ T38] [ 485.894329][ T38] __schedule+0x145f/0x5070 [ 485.894371][ T38] ? __lock_acquire+0x6b6/0x2cf0 [ 485.894419][ T38] ? check_noncircular+0xda/0x150 [ 485.894463][ T38] ? __pfx___schedule+0x10/0x10 [ 485.894509][ T38] ? schedule+0x91/0x360 [ 485.894547][ T38] schedule+0x165/0x360 [ 485.894583][ T38] schedule_timeout+0x9a/0x270 [ 485.894618][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 485.894654][ T38] ? do_raw_spin_lock+0x121/0x290 [ 485.894691][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 485.894712][ T38] ? wait_for_completion+0x267/0x5d0 [ 485.894737][ T38] wait_for_completion+0x2bf/0x5d0 [ 485.894772][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 485.894798][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 485.894821][ T38] ? lockdep_hardirqs_on+0x7b/0x110 [ 485.894844][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 485.894870][ T38] disable_device+0x1c6/0x320 [ 485.894892][ T38] ? __pfx_disable_device+0x10/0x10 [ 485.894914][ T38] ? lockdep_hardirqs_on+0x7b/0x110 [ 485.894938][ T38] ? mutex_lock_nested+0x154/0x1d0 [ 485.894968][ T38] ? __ib_unregister_device+0x284/0x3f0 [ 485.895004][ T38] __ib_unregister_device+0x2cb/0x3f0 [ 485.895039][ T38] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 485.895077][ T38] ib_unregister_device_and_put+0xb8/0xf0 [ 485.895113][ T38] nldev_dellink+0x2d1/0x320 [ 485.895145][ T38] ? __pfx_nldev_dellink+0x10/0x10 [ 485.895274][ T38] ? rcu_is_watching+0x15/0xb0 [ 485.895298][ T38] ? cap_capable+0x123/0x440 [ 485.895330][ T38] ? safesetid_security_capable+0xa9/0x1a0 [ 485.895366][ T38] ? bpf_lsm_capable+0x9/0x20 [ 485.895388][ T38] ? security_capable+0x7e/0x2e0 [ 485.895412][ T38] ? __pfx_nldev_dellink+0x10/0x10 [ 485.895442][ T38] rdma_nl_rcv+0x6ae/0x980 [ 485.895485][ T38] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 485.895538][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 485.895579][ T38] netlink_unicast+0x846/0xa10 [ 485.895616][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 485.895642][ T38] ? __alloc_skb+0x198/0x3a0 [ 485.895667][ T38] ? netlink_sendmsg+0x642/0xb30 [ 485.895696][ T38] ? skb_put+0x11b/0x210 [ 485.895727][ T38] netlink_sendmsg+0x805/0xb30 [ 485.895769][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.895810][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 485.895840][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.895872][ T38] __sock_sendmsg+0x21c/0x270 [ 485.895913][ T38] ____sys_sendmsg+0x508/0x810 [ 485.895950][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 485.895989][ T38] ? import_iovec+0x74/0xa0 [ 485.896016][ T38] ___sys_sendmsg+0x21f/0x2a0 [ 485.896048][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 485.896086][ T38] ? futex_wait+0x285/0x360 [ 485.896139][ T38] ? __fget_files+0x2a/0x420 [ 485.896163][ T38] ? __fget_files+0x3a6/0x420 [ 485.896205][ T38] __x64_sys_sendmsg+0x1a1/0x260 [ 485.896239][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 485.896279][ T38] ? rcu_is_watching+0x15/0xb0 [ 485.896315][ T38] do_syscall_64+0xec/0xf80 [ 485.896338][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.896360][ T38] ? trace_irq_disable+0x37/0x100 [ 485.896385][ T38] ? clear_bhb_loop+0x60/0xb0 [ 485.896413][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.896436][ T38] RIP: 0033:0x7efc6ceff749 [ 485.896460][ T38] RSP: 002b:00007efc6b15e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 485.896483][ T38] RAX: ffffffffffffffda RBX: 00007efc6d155fa0 RCX: 00007efc6ceff749 [ 485.896499][ T38] RDX: 0000000030048000 RSI: 0000200000012bc0 RDI: 0000000000000003 [ 485.896513][ T38] RBP: 00007efc6cf83f91 R08: 0000000000000000 R09: 0000000000000000 [ 485.896526][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 485.896540][ T38] R13: 00007efc6d156038 R14: 00007efc6d155fa0 R15: 00007ffef4291498 [ 485.896575][ T38] [ 485.896605][ T38] [ 485.896605][ T38] Showing all locks held in the system: [ 485.896618][ T38] 1 lock held by khungtaskd/38: [ 485.896631][ T38] #0: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 485.896721][ T38] 5 locks held by kworker/u8:6/183: [ 485.896755][ T38] 2 locks held by getty/5557: [ 485.896768][ T38] #0: ffff888034c720a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 485.896827][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x44f/0x1460 [ 485.896886][ T38] 10 locks held by syz-executor/5801: [ 485.896927][ T38] 3 locks held by kworker/0:5/5891: [ 485.896941][ T38] 2 locks held by syz.1.3499/13161: [ 485.896953][ T38] #0: ffffffff99013378 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 485.897009][ T38] #1: ffff88802a158750 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 485.897074][ T38] 4 locks held by syz.5.6555/19510: [ 485.897086][ T38] 4 locks held by syz.4.6553/19511: [ 485.897099][ T38] [ 485.897104][ T38] ============================================= [ 485.897104][ T38] [ 485.897113][ T38] NMI backtrace for cpu 1 [ 485.897142][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 485.897191][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 485.897205][ T38] Call Trace: [ 485.897213][ T38] [ 485.897221][ T38] dump_stack_lvl+0xe8/0x150 [ 485.897255][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 485.897285][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 485.897311][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 485.897345][ T38] sys_info+0x135/0x170 [ 485.897370][ T38] watchdog+0xf95/0xfe0 [ 485.897400][ T38] ? watchdog+0x20a/0xfe0 [ 485.897432][ T38] kthread+0x711/0x8a0 [ 485.897468][ T38] ? __pfx_watchdog+0x10/0x10 [ 485.897491][ T38] ? __pfx_kthread+0x10/0x10 [ 485.897520][ T38] ? rt_spin_unlock+0x150/0x200 [ 485.897554][ T38] ? rt_spin_unlock+0x161/0x200 [ 485.897581][ T38] ? __pfx_kthread+0x10/0x10 [ 485.897613][ T38] ret_from_fork+0x510/0xa50 [ 485.897640][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 485.897661][ T38] ? __switch_to+0xc9e/0x1480 [ 485.897698][ T38] ? __pfx_kthread+0x10/0x10 [ 485.897731][ T38] ret_from_fork_asm+0x1a/0x30 [ 485.897781][ T38] [ 485.897789][ T38] Sending NMI from CPU 1 to CPUs 0: [ 485.897823][ C0] NMI backtrace for cpu 0 [ 485.897840][ C0] CPU: 0 UID: 0 PID: 183 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 485.897874][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 485.897893][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 485.897940][ C0] RIP: 0010:in_aton+0x92/0x440 [ 485.897966][ C0] Code: 2e 74 6d 41 83 ff 0a 74 60 e8 4a 9b 03 f9 4b 8d 3c 26 48 ff c7 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 75 15 8d 04 9b 41 8d 1c 47 83 c3 d0 43 0f b6 6c 26 01 49 ff [ 485.897983][ C0] RSP: 0018:ffffc90003a27940 EFLAGS: 00000a02 [ 485.897999][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: dffffc0000000000 [ 485.898012][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8b80d761 [ 485.898024][ C0] RBP: 0000000000000031 R08: ffff88801df28000 R09: 0000000000000003 [ 485.898037][ C0] R10: 0000000000000100 R11: 000000000000002e R12: 0000000000000000 [ 485.898048][ C0] R13: 00000000000000c0 R14: ffffffff8b80d760 R15: 0000000000000031 [ 485.898061][ C0] FS: 0000000000000000(0000) GS:ffff888126cef000(0000) knlGS:0000000000000000 [ 485.898077][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 485.898089][ C0] CR2: 00007fdf745956c0 CR3: 0000000036b3e000 CR4: 00000000003526f0 [ 485.898106][ C0] Call Trace: [ 485.898113][ C0] [ 485.898119][ C0] ? skb_put+0x11b/0x210 [ 485.898144][ C0] nsim_dev_trap_report_work+0x4eb/0xbc0 [ 485.898182][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 485.898206][ C0] process_scheduled_works+0xad1/0x1770 [ 485.898243][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 485.898263][ C0] ? do_raw_spin_lock+0x121/0x290 [ 485.898294][ C0] worker_thread+0x8a0/0xda0 [ 485.898331][ C0] kthread+0x711/0x8a0 [ 485.898359][ C0] ? __pfx_worker_thread+0x10/0x10 [ 485.898381][ C0] ? __pfx_kthread+0x10/0x10 [ 485.898407][ C0] ? rt_spin_unlock+0x150/0x200 [ 485.898435][ C0] ? rt_spin_unlock+0x161/0x200 [ 485.898459][ C0] ? __pfx_kthread+0x10/0x10 [ 485.898487][ C0] ret_from_fork+0x510/0xa50 [ 485.898508][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 485.898527][ C0] ? __switch_to+0xc9e/0x1480 [ 485.898557][ C0] ? __pfx_kthread+0x10/0x10 [ 485.898585][ C0] ret_from_fork_asm+0x1a/0x30 [ 485.898623][ C0] [ 485.903676][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 485.903706][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 485.903731][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 485.903745][ T38] Call Trace: [ 485.903754][ T38] [ 485.903764][ T38] vpanic+0x1e0/0x670 [ 485.903804][ T38] panic+0xb9/0xc0 [ 485.903863][ T38] ? __pfx_panic+0x10/0x10 [ 485.903894][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 485.903925][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 485.903961][ T38] watchdog+0xfdf/0xfe0 [ 485.903992][ T38] ? watchdog+0x20a/0xfe0 [ 485.904024][ T38] kthread+0x711/0x8a0 [ 485.904060][ T38] ? __pfx_watchdog+0x10/0x10 [ 485.904086][ T38] ? __pfx_kthread+0x10/0x10 [ 485.904115][ T38] ? rt_spin_unlock+0x150/0x200 [ 485.904152][ T38] ? rt_spin_unlock+0x161/0x200 [ 485.904187][ T38] ? __pfx_kthread+0x10/0x10 [ 485.904221][ T38] ret_from_fork+0x510/0xa50 [ 485.904245][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 485.904267][ T38] ? __switch_to+0xc9e/0x1480 [ 485.904305][ T38] ? __pfx_kthread+0x10/0x10 [ 485.904339][ T38] ret_from_fork_asm+0x1a/0x30 [ 485.904391][ T38] [ 485.904999][ T38] Kernel Offset: disabled