last executing test programs: 2m29.50486172s ago: executing program 4 (id=2405): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r0, 0x80045520, 0x0) 2m29.319145s ago: executing program 4 (id=2408): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40603d10, 0x0) 2m29.012596678s ago: executing program 4 (id=2413): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000240)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x2, 0x3a, ']\xc8&\\^{^+-{%-)-', 0x3a, '', 0x3a, './file0', 0x3a, [0x50, 0x46]}, 0x37) 2m28.888111169s ago: executing program 4 (id=2418): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000040)={0x8098f905, 0x0, "6005588a3f9f90ac060100050000009a9f7e1db9c90600008040f722e62200", 0x1, 0xfff}) 2m28.733846857s ago: executing program 4 (id=2421): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=@newneigh={0x2c, 0x1c, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, 0x20, 0x80, 0x6}, [@NDA_PROTOCOL={0x5}, @NDA_DST_IPV4={0x8, 0x1, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4084}, 0x840) 2m28.542527465s ago: executing program 4 (id=2425): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x20, 0x3, 0x12}, 0x8, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0}) 2m13.476555447s ago: executing program 32 (id=2425): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x20, 0x3, 0x12}, 0x8, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0}) 1m41.020822674s ago: executing program 3 (id=3310): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, 0x0, 0x0) 1m40.627065455s ago: executing program 3 (id=3317): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0xa, 0x16, 0x0, 0x1, [@generic="47aa91083432"]}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 1m40.390675613s ago: executing program 3 (id=3322): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000380)=@mmap={0x401, 0x3, 0x4, 0xe000, 0x4, {0x77359400}, {0x3, 0x2, 0xf, 0x6, 0x3, 0x1, '\t\x00'}, 0x2, 0x1, {}, 0x5}) 1m40.033634082s ago: executing program 3 (id=3329): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x80085610, 0x10000000000004) 1m39.847545814s ago: executing program 3 (id=3332): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000600010000000800030003000000080007000500000008000100100000000600020001000000040005"], 0x84}}, 0x20008040) 1m39.462794641s ago: executing program 3 (id=3338): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r0, 0x8008551c, &(0x7f0000000180)={0x1, 0x18, 0x0, 0x1, 0x0, 0x0, 0x0}) 1m24.414440751s ago: executing program 33 (id=3338): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r0, 0x8008551c, &(0x7f0000000180)={0x1, 0x18, 0x0, 0x1, 0x0, 0x0, 0x0}) 1.649605742s ago: executing program 6 (id=5233): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, 0x0, r0, 0x0, 0x154) 1.623374532s ago: executing program 1 (id=5234): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f8, 0x2c8, 0x98, 0x168, 0x98, 0x98, 0x360, 0x360, 0x360, 0x360, 0x360, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'veth1_vlan\x00', {}, {0xff}, 0x5c, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x81, 0x9}}}, {{@ip={@private=0xa010100, @local, 0xff000000, 0x0, 'vcan0\x00', 'pim6reg1\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x6, 0x3]}, {0x0, [0x5, 0x0, 0x0, 0x2, 0x4, 0x4]}}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x8, 0x3], 0x1}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x3}}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) 1.513598016s ago: executing program 6 (id=5237): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000200)=@FILEID_BTRFS_WITHOUT_PARENT={0x28, 0x4e, {0x0, 0x6e6, 0x4, 0xaf, 0x98, 0x7}}, &(0x7f00000002c0), 0x600) 1.45515304s ago: executing program 1 (id=5239): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x34, 0x2, 0x3, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x3f}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x7}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1d}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000048}, 0x0) 1.334543017s ago: executing program 6 (id=5241): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x28, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1f, 0x0, 0x0, @fd=r0}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c080}, 0xc000) 1.273134639s ago: executing program 1 (id=5243): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000580)={0x0, 0x0}) 1.175636853s ago: executing program 6 (id=5245): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x1000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.149379932s ago: executing program 5 (id=5246): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f00000004c0), 0x4) 1.13276216s ago: executing program 2 (id=5247): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) 1.101502503s ago: executing program 1 (id=5248): r0 = socket$nl_generic(0x10, 0x3, 0x10) fchown(r0, 0x0, 0x0) 992.223681ms ago: executing program 0 (id=5249): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) 989.28683ms ago: executing program 5 (id=5250): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x48068}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) 941.084344ms ago: executing program 1 (id=5251): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) 939.09558ms ago: executing program 2 (id=5252): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x76, 0xfffff01c}, {0x6, 0x27, 0x3, 0x204}]}, 0x10) 816.245163ms ago: executing program 1 (id=5253): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 768.586739ms ago: executing program 2 (id=5254): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f00000020c0)=[{{&(0x7f00000000c0)=@generic={0xa, "e471faa1fa9feef6149ddafbed0e0e23ae0b45611c2e638d5c9049b6f74ad7d759608c1b8e9a32df62a14ab4fe14d63849a7e9263a6658458868c5004459d7147ee39cf5665e7e9ab27ba0747248bb68e69fe04fc6a1545f5cf8243aa3bfd910e967db1782db11e9227f070b8a1cc19f9f7c47662facba74ca6e1a59f301"}, 0x80, 0x0, 0x0, &(0x7f0000000500)=[{0x10, 0x11}], 0x10}}], 0x1, 0x0) 692.375512ms ago: executing program 0 (id=5255): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd29, 0xfffffffc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) 652.347263ms ago: executing program 5 (id=5256): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f0000000400)=[{r0}], 0x1, 0x0, 0x0, 0x0) 577.483102ms ago: executing program 2 (id=5257): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x70bd2d, 0x3, {0x0, 0x0, 0x0, 0x0, 0x38b2b, 0x8100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private0}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x16}]}, 0x50}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) 569.469339ms ago: executing program 0 (id=5258): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x1020) 440.940865ms ago: executing program 5 (id=5259): r0 = syz_open_dev$video(&(0x7f00000000c0), 0x4, 0x8000) ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f00000006c0)={0x1, @pix={0x0, 0x0, 0x34565348, 0x0, 0x0, 0x0, 0x9, 0xfeedcafe, 0x0, 0xffffff80, 0x0, 0x7}}) 392.673058ms ago: executing program 0 (id=5260): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0x7, 0x9, 0x4, 0x5, 0x6, 0x7]}, &(0x7f00000000c0)=0x78) 332.53643ms ago: executing program 5 (id=5261): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001d00)=ANY=[@ANYBLOB="1400000000000000010000002500000002010000000000004800000000000000080000000797dbc64107b42c556567f2219787566400007300000000000000000000000008000000ef3820f3439cb150a3651e799ef4dca1e3c32158996e4b2abde5f2ba8b679121ac0b0ad62ade31fb2c47f0bbf781eb8bd1e3064141e90e9eac25b189c0da98b676571bbeefba392c3e15a10e03dee4ae1dfe99793e51ec0c6bb5fa6d7b357d249502f5919ef251e5d0e5bed378265b8bd55fde4689cb509b14fa754813a27e72d175e8d677420e10d65108006e2ab8168b1d633b1bb9a7d4d59ebdc7083d93d35cd469deb0d81d7adee2ef7c2f058c2c262b97ecbfb32fe3e3ffcdf7b5c24d0ab0a7ae9e6be6c115c5663dd864d655a7babdcf8315dc29b6f18539abf1422502d7d53ce861d8a07dbb00c5a94e0186689f988628a0986d8f0419924348a32be8950099b4718e6109b9eed9e5b3e8ff86d22cf39479b26cc3e977df19f757432bf055090461", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) 314.722863ms ago: executing program 2 (id=5262): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0x0, 0x12, 0x60a, 0xd0, 0x202, 0x1a0, 0x2e8, 0x2e8, 0x1a0, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0xfc}, {0xffffffffffffffff, 0xf9, 0x6}}}}, {{@ipv6={@private2, @local, [], [], 'vxcan1\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) 269.507547ms ago: executing program 6 (id=5263): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x6, @sdr={0x30314752, 0x80000001}}) 233.222262ms ago: executing program 0 (id=5264): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x20000000204, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000002c0)={0x22, 0x2, 0x1, "1101ea5efdafb079179fb64c0000005c58aa37334c147c2d6eac12db00", 0x584e4f53}) 108.954914ms ago: executing program 2 (id=5265): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=@setlink={0x4c, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40601}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x6, 0x3, 0x7}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_vlan\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x4c}}, 0x48000) 90.205846ms ago: executing program 5 (id=5266): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d18001280140001ff0a0001006c696d69740000000400028008000340000001"], 0xa4}, 0x1, 0x0, 0x0, 0x4010}, 0x20050800) 41.309261ms ago: executing program 0 (id=5267): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e2000000400060008000a00b5"], 0x48}}, 0x4000) 0s ago: executing program 6 (id=5268): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000001c0)=0xfffffff8, 0x4) kernel console output (not intermixed with test programs): number 105 [ 276.563375][ T24] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 276.664138][ T9019] usb 5-1: USB disconnect, device number 107 [ 276.697778][ T9019] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 276.734747][ T9019] ftdi_sio 5-1:0.0: device disconnected [ 276.763298][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 276.779481][ T24] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 276.812587][ T24] usb 3-1: config 2 has no interface number 0 [ 276.830982][ T24] usb 3-1: config 2 interface 31 has no altsetting 0 [ 276.859547][ T24] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 276.881589][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.900342][ T24] usb 3-1: Product: syz [ 276.904978][ T24] usb 3-1: Manufacturer: syz [ 276.910661][ T24] usb 3-1: SerialNumber: syz [ 277.381013][ T24] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 277.430127][ T24] usb 3-1: USB disconnect, device number 98 [ 278.824835][ T5890] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 279.026358][ T5890] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 279.053819][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.082958][ T5890] usb 5-1: Product: syz [ 279.092291][ T5890] usb 5-1: Manufacturer: syz [ 279.102205][ T5890] usb 5-1: SerialNumber: syz [ 279.114927][ T5890] usb 5-1: config 0 descriptor?? [ 279.239221][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 279.239237][ T30] audit: type=1326 audit(1768380301.784:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10740 comm="syz.1.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974db8f749 code=0x7ffc0000 [ 279.339155][ T30] audit: type=1326 audit(1768380301.824:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10740 comm="syz.1.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974db8f749 code=0x7ffc0000 [ 279.362192][ T5890] hso 5-1:0.0: Failed to find BULK IN ep [ 279.386097][T10745] program syz.2.2295 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 279.400000][ T5890] usb-storage 5-1:0.0: USB Mass Storage device detected [ 279.414164][ T30] audit: type=1326 audit(1768380301.834:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10740 comm="syz.1.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f974db8f749 code=0x7ffc0000 [ 279.516594][ T30] audit: type=1326 audit(1768380301.834:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10740 comm="syz.1.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974db8f749 code=0x7ffc0000 [ 279.519182][T10751] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2297'. [ 279.565138][ T24] usb 5-1: USB disconnect, device number 108 [ 279.620678][ T30] audit: type=1326 audit(1768380301.834:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10740 comm="syz.1.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974db8f749 code=0x7ffc0000 [ 279.821361][ T30] audit: type=1800 audit(1768380302.364:36): pid=10758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2300" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 280.320474][T10773] program syz.4.2306 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 281.320061][T10804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2321'. [ 281.403743][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2323'. [ 281.433335][T10807] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2323'. [ 282.028354][T10827] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 282.094898][T10827] bond0 (unregistering): Released all slaves [ 282.389373][T10708] syz.3.2276 (10708): drop_caches: 3 [ 282.403354][T10842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.410750][T10842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.485053][T10842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.492470][T10842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.618627][T10853] openvswitch: netlink: Multiple metadata blocks provided [ 282.629221][T10851] netlink: 'syz.0.2345': attribute type 2 has an invalid length. [ 283.055647][ T5890] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 283.149698][T10876] netlink: 'syz.0.2357': attribute type 6 has an invalid length. [ 283.177745][T10876] netlink: 'syz.0.2357': attribute type 7 has an invalid length. [ 283.214045][T10876] netlink: 'syz.0.2357': attribute type 8 has an invalid length. [ 283.246519][ T5890] usb 4-1: config 0 has an invalid interface number: 199 but max is 1 [ 283.283675][ T5890] usb 4-1: config 0 has no interface number 1 [ 283.314000][ T5890] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 283.334383][ T5890] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 283.373557][ T5890] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 283.405033][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 283.413040][ T5890] usb 4-1: SerialNumber: syz [ 283.444357][ T5890] usb 4-1: config 0 descriptor?? [ 283.615530][T10886] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 283.658738][ T5890] uvcvideo 4-1:0.199: Found UVC 0.00 device (0002:0000) [ 283.692223][ T5890] uvcvideo 4-1:0.199: No valid video chain found. [ 283.737405][ T5890] usb 4-1: USB disconnect, device number 104 [ 283.973856][T10904] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2371'. [ 284.153414][T10913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2375'. [ 285.213603][ T30] audit: type=1326 audit(1768380307.764:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10963 comm="syz.2.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f361b98f749 code=0x7ffc0000 [ 285.313364][ T30] audit: type=1326 audit(1768380307.764:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10963 comm="syz.2.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f361b98f749 code=0x7ffc0000 [ 285.403241][ T30] audit: type=1326 audit(1768380307.764:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10963 comm="syz.2.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f361b98f749 code=0x7ffc0000 [ 285.451835][T10977] xt_TPROXY: Can be used only with -p tcp or -p udp [ 285.493343][ T30] audit: type=1326 audit(1768380307.844:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10969 comm="syz.2.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f361b9c2005 code=0x7ffc0000 [ 285.573398][ T30] audit: type=1326 audit(1768380307.994:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10969 comm="syz.2.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f361b98f749 code=0x7ffc0000 [ 285.590934][T10980] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 285.668385][ T30] audit: type=1326 audit(1768380307.994:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10963 comm="syz.2.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f361b98f749 code=0x7ffc0000 [ 285.763349][ T30] audit: type=1326 audit(1768380307.994:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10963 comm="syz.2.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f361b98f749 code=0x7ffc0000 [ 285.789525][T10987] trusted_key: encrypted_key: keylen parameter is missing [ 285.826210][T10989] binfmt_misc: register: failed to install interpreter file ./file0 [ 286.414196][T11020] xt_ecn: cannot match TCP bits for non-tcp packets [ 286.425002][T11021] netlink: 'syz.2.2429': attribute type 6 has an invalid length. [ 286.692848][T11030] Cannot find set identified by id 65534 to match [ 287.110547][T11050] kernel profiling enabled (shift: 6) [ 287.658162][T11078] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2455'. [ 287.689156][T11078] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2455'. [ 288.665094][T11114] bond1 (unregistering): Released all slaves [ 289.155865][T11137] program syz.0.2483 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 289.203408][T11139] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 289.210882][T11139] IPv6: NLM_F_CREATE should be set when creating new route [ 289.218208][T11139] IPv6: NLM_F_CREATE should be set when creating new route [ 289.672660][T11157] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2494'. [ 290.060803][T11174] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 290.469926][T11193] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2513'. [ 292.188716][T11275] netlink: 'syz.3.2551': attribute type 15 has an invalid length. [ 292.264582][T11272] : entered promiscuous mode [ 292.419999][T11282] netlink: 'syz.3.2553': attribute type 2 has an invalid length. [ 292.439559][T11282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2553'. [ 292.823351][ T9019] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 292.925057][T11304] netlink: 'syz.2.2564': attribute type 32 has an invalid length. [ 293.003487][ T9019] usb 2-1: Using ep0 maxpacket: 32 [ 293.010576][ T9019] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 293.024218][ T9019] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.057126][ T9019] usb 2-1: config 0 descriptor?? [ 293.078898][ T9019] gspca_main: sq930x-2.14.0 probing 041e:403c [ 293.082865][T11312] xt_limit: Overflow, try lower: 268435456/134217728 [ 293.107913][T11314] [U] .h0FwZ,iqgҏV2sO [ 293.128660][T11314] [U] ` w*BBOLhU [ 293.133182][T11314] [U] w$n|#%o.z\̧mРw [ 293.157881][T11314] [U] R{ꫢ S [ 293.173884][T11311] [U] [ 293.249716][T11316] xt_hashlimit: max too large, truncated to 1048576 [ 293.303506][T11316] No such timeout policy "syz1" [ 293.469786][ T9019] gspca_sq930x: ucbus_write failed -71 [ 293.493398][ T9019] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 293.525981][ T9019] usb 2-1: USB disconnect, device number 106 [ 293.780613][T11336] bridge_slave_0: left allmulticast mode [ 293.816067][T11336] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.852007][T11336] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 294.162476][T11350] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.706114][T11376] bond2: option min_links: invalid value (18446744073709551608) [ 294.713968][T11376] bond2: option min_links: allowed values 0 - 2147483647 [ 294.731012][T11376] bond2 (unregistering): Released all slaves [ 294.818433][ T5942] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 295.019901][ T5942] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 295.043732][ T5942] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.083241][ T5942] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 295.092213][ T5942] usb 2-1: config 1 has no interface number 1 [ 295.160709][ T5942] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 295.192791][ T5942] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 295.217423][T11396] tc_dump_action: action bad kind [ 295.249464][ T5942] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 295.279130][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.305325][ T5942] usb 2-1: Product: syz [ 295.314559][ T5942] usb 2-1: Manufacturer: syz [ 295.319176][ T5942] usb 2-1: SerialNumber: syz [ 295.526153][T11408] program syz.0.2613 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.588954][ T5942] usb 2-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 295.623740][ T5942] usb 2-1: MIDIStreaming interface descriptor not found [ 295.735775][ T5942] usb 2-1: USB disconnect, device number 107 [ 295.872157][T11419] udevd[11419]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 296.056004][T11428] bridge_slave_0: left allmulticast mode [ 296.103509][T11428] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.145392][T11428] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 296.550365][T11450] netlink: 'syz.1.2632': attribute type 11 has an invalid length. [ 296.588693][T11450] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2632'. [ 296.804920][T11460] SET target dimension over the limit! [ 296.879380][T11461] delete_channel: no stack [ 297.227240][T11479] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2645'. [ 297.604906][T11495] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2653'. [ 297.678648][T11501] netlink: 'syz.0.2655': attribute type 3 has an invalid length. [ 297.706380][T11500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2654'. [ 297.821016][T11506] gre0: entered promiscuous mode [ 297.849975][T11506] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 298.143707][ T5890] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 298.313435][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 298.322029][ T5890] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.342798][ T5890] usb 2-1: config 0 interface 0 has no altsetting 0 [ 298.372643][ T5890] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 298.390637][T11528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2668'. [ 298.413618][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.415376][T11528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2668'. [ 298.444794][ T5890] usb 2-1: Product: syz [ 298.448995][ T5890] usb 2-1: Manufacturer: syz [ 298.461661][ T5890] usb 2-1: SerialNumber: syz [ 298.484633][ T5890] usb 2-1: config 0 descriptor?? [ 298.953345][ T5890] usb 2-1: USB disconnect, device number 108 [ 299.123382][T11545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2676'. [ 299.733608][T11572] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 299.901813][T11583] netlink: 'syz.3.2693': attribute type 8 has an invalid length. [ 299.948907][T11583] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 300.142935][T11590] netlink: 'syz.0.2697': attribute type 10 has an invalid length. [ 300.156334][T11590] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2697'. [ 300.195102][T11590] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 300.200120][T11593] No such timeout policy "syz1" [ 300.223307][T11590] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 300.232441][T11590] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 300.567175][T11607] xt_CONNSECMARK: invalid mode: 3 [ 300.763125][T11616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2711'. [ 300.815844][T11619] netlink: 'syz.2.2713': attribute type 1 has an invalid length. [ 300.909071][T11623] fuse: Bad value for 'group_id' [ 300.974843][T11623] fuse: Bad value for 'group_id' [ 301.225811][T11636] binder: 11634:11636 ioctl c0306201 200000000dc0 returned -14 [ 301.443352][T11646] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2726'. [ 301.781534][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 301.790608][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 301.799705][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 301.814115][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 301.822437][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 301.893310][ T24] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 302.068969][ T24] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 302.097506][ T24] usb 2-1: config 0 has no interface number 0 [ 302.105400][ T24] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 302.120465][ T24] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 302.129897][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.138020][ T24] usb 2-1: Product: syz [ 302.142332][ T24] usb 2-1: Manufacturer: syz [ 302.147015][ T24] usb 2-1: SerialNumber: syz [ 302.154708][ T24] usb 2-1: config 0 descriptor?? [ 302.168464][ T24] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 302.396961][T11661] chnl_net:caif_netlink_parms(): no params data found [ 302.616173][T11686] m1Ie5n: entered promiscuous mode [ 302.630250][ T24] usb 2-1: USB disconnect, device number 109 [ 302.665707][ T24] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 302.810916][T11661] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.830398][T11661] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.850729][T11661] bridge_slave_0: entered allmulticast mode [ 302.873330][T11661] bridge_slave_0: entered promiscuous mode [ 302.901042][T11661] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.933520][T11661] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.964860][T11661] bridge_slave_1: entered allmulticast mode [ 302.977145][T11661] bridge_slave_1: entered promiscuous mode [ 303.110886][T11661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.152685][T11661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.339609][T11661] team0: Port device team_slave_0 added [ 303.358441][T11708] netlink: zone id is out of range [ 303.377217][T11661] team0: Port device team_slave_1 added [ 303.384169][T11708] netlink: zone id is out of range [ 303.389299][T11708] netlink: zone id is out of range [ 303.505043][T11661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.526276][T11661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.616557][T11661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.643369][T11661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.660523][T11661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.718689][T11661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.894188][ T5836] Bluetooth: hci5: command tx timeout [ 303.930994][T11661] hsr_slave_0: entered promiscuous mode [ 303.938409][T11661] hsr_slave_1: entered promiscuous mode [ 303.946606][T11661] debugfs: 'hsr0' already exists in 'hsr' [ 303.952364][T11661] Cannot create hsr debugfs directory [ 304.128761][T11732] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 304.188594][T11735] bond2: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 304.235863][T11735] bond2 (unregistering): Released all slaves [ 304.746890][T11661] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 304.789108][T11661] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 304.831003][T11661] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 304.885961][T11661] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 305.139765][T11768] __nla_validate_parse: 2 callbacks suppressed [ 305.139784][T11768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2779'. [ 305.341358][T11661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.412453][T11661] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.429467][ T3506] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.436645][ T3506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.476514][ T3506] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.483721][ T3506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.513966][ T5942] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 305.633743][ T5890] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 305.648492][T11661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.676024][ T5942] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 305.686162][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.711845][ T5942] usb 3-1: config 0 descriptor?? [ 305.777927][T11661] veth0_vlan: entered promiscuous mode [ 305.804745][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 305.812038][ T5890] usb 2-1: config 0 has an invalid interface number: 147 but max is 0 [ 305.823649][ T5890] usb 2-1: config 0 has no interface number 0 [ 305.829817][ T5890] usb 2-1: config 0 interface 147 altsetting 0 bulk endpoint 0xA has invalid maxpacket 40 [ 305.840860][ T5890] usb 2-1: config 0 interface 147 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 305.845554][T11661] veth1_vlan: entered promiscuous mode [ 305.864580][ T5890] usb 2-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=5b.44 [ 305.883328][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.893430][ T5890] usb 2-1: Product: syz [ 305.897659][ T5890] usb 2-1: Manufacturer: syz [ 305.902284][ T5890] usb 2-1: SerialNumber: syz [ 305.918188][ T5890] usb 2-1: config 0 descriptor?? [ 305.929686][T11778] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 305.937498][T11778] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 305.964233][ T5836] Bluetooth: hci5: command tx timeout [ 306.031161][T11793] netlink: 'syz.0.2791': attribute type 10 has an invalid length. [ 306.035656][T11661] veth0_macvtap: entered promiscuous mode [ 306.155806][ T5942] ath6kl: Failed to submit usb control message: -71 [ 306.162491][ T5942] ath6kl: unable to send the bmi data to the device: -71 [ 306.205428][ T5890] net1080 2-1:0.147: probe with driver net1080 failed with error -71 [ 306.225900][ T5942] ath6kl: Unable to send get target info: -71 [ 306.253379][ T5942] ath6kl: Failed to init ath6kl core: -71 [ 306.265108][ T5890] usb 2-1: USB disconnect, device number 110 [ 306.276252][ T5942] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 306.350962][ T5942] usb 3-1: USB disconnect, device number 99 [ 306.445153][T11661] veth1_macvtap: entered promiscuous mode [ 306.507559][T11661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.549878][T11661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.625988][ T152] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.735209][ T152] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.772841][ T152] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.828684][ T152] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.183298][ T6318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.191317][ T6318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.206155][T11819] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 307.213412][T11819] IPv6: NLM_F_CREATE should be set when creating new route [ 307.281579][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.320418][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.414857][ T30] audit: type=1326 audit(1768380329.964:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11827 comm="syz.0.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2df8f749 code=0x7ffc0000 [ 307.493271][ T30] audit: type=1326 audit(1768380329.964:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11827 comm="syz.0.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fde2df8f749 code=0x7ffc0000 [ 307.623428][ T30] audit: type=1326 audit(1768380329.964:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11827 comm="syz.0.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2df8f749 code=0x7ffc0000 [ 307.694478][T11841] openvswitch: netlink: IP tunnel dst address not specified [ 307.713685][ T30] audit: type=1326 audit(1768380329.964:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11827 comm="syz.0.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2df8f749 code=0x7ffc0000 [ 308.034120][ T5830] Bluetooth: hci5: command tx timeout [ 308.209086][T11864] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2825'. [ 308.211453][T11867] netlink: 'syz.5.2827': attribute type 39 has an invalid length. [ 310.123702][ T5836] Bluetooth: hci5: command tx timeout [ 310.161762][T11949] Cannot find add_set index 0 as target [ 310.724275][T11971] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2878'. [ 311.078279][T11987] netlink: 'syz.1.2885': attribute type 10 has an invalid length. [ 311.269289][T11993] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2889'. [ 312.327124][T12042] netlink: 388 bytes leftover after parsing attributes in process `syz.5.2914'. [ 312.706552][T12061] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2923'. [ 312.723509][T12060] xt_hashlimit: size too large, truncated to 1048576 [ 312.730214][T12060] xt_hashlimit: max too large, truncated to 1048576 [ 312.963431][T12070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2927'. [ 313.799424][T12110] netlink: 'syz.2.2947': attribute type 15 has an invalid length. [ 313.836461][T12110] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2947'. [ 313.853879][T12115] x_tables: duplicate underflow at hook 2 [ 314.433634][T12141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2963'. [ 314.445790][ T5890] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 314.659050][ T5890] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 314.690393][ T5890] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 314.727630][ T5890] usb 6-1: config 220 has no interface number 2 [ 314.748825][ T5890] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 314.820509][ T5890] usb 6-1: config 220 interface 0 has no altsetting 0 [ 314.839247][ T5890] usb 6-1: config 220 interface 76 has no altsetting 0 [ 314.846552][ T5890] usb 6-1: config 220 interface 1 has no altsetting 0 [ 314.859908][ T5890] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 314.871076][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.887208][ T5890] usb 6-1: Product: syz [ 314.895364][ T5890] usb 6-1: Manufacturer: syz [ 314.912177][ T5890] usb 6-1: SerialNumber: syz [ 315.157542][ T5890] usb 6-1: selecting invalid altsetting 0 [ 315.181937][ T5890] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 315.223042][ T5890] uvcvideo 6-1:220.0: No valid video chain found. [ 315.251046][ T5890] usb 6-1: selecting invalid altsetting 0 [ 315.270057][ T5890] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 315.314579][ T5890] usb 6-1: USB disconnect, device number 2 [ 315.323073][T12173] netlink: 'syz.2.2979': attribute type 2 has an invalid length. [ 315.680551][T12187] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.126622][T12205] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2995'. [ 316.176924][T12209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2997'. [ 316.513587][T12205] team0 (unregistering): Port device team_slave_0 removed [ 316.543007][T12205] team0 (unregistering): Port device team_slave_1 removed [ 316.997959][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.013483][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.143366][ T5918] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 317.303278][ T5918] usb 6-1: Using ep0 maxpacket: 32 [ 317.311645][ T5918] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.353445][ T5918] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 317.404956][ T5918] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.444105][ T5918] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 317.486551][ T5918] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.523603][ T5918] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 317.569376][ T5918] usb 6-1: New USB device found, idVendor=04e7, idProduct=6651, bcdDevice=ba.8a [ 317.603489][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.611503][ T5918] usb 6-1: Product: syz [ 317.643509][ T5918] usb 6-1: Manufacturer: syz [ 317.646066][T12264] netlink: 'syz.3.3022': attribute type 10 has an invalid length. [ 317.648190][ T5918] usb 6-1: SerialNumber: syz [ 317.684334][ T5918] usb 6-1: config 0 descriptor?? [ 317.728880][ T5918] usb 6-1: bad CDC descriptors [ 317.746713][ T5918] cdc_acm 6-1:0.0: Zero length descriptor references [ 317.773291][ T5918] cdc_acm 6-1:0.0: probe with driver cdc_acm failed with error -22 [ 317.818667][T12267] openvswitch: netlink: Key type 218 is out of range max 32 [ 317.907749][ T24] usb 6-1: USB disconnect, device number 3 [ 318.610703][T12295] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 319.072011][T12314] netlink: 'syz.1.3050': attribute type 89 has an invalid length. [ 319.264338][T12321] netlink: 'syz.1.3053': attribute type 5 has an invalid length. [ 319.289403][T12323] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3055'. [ 319.426100][T12327] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3056'. [ 319.822823][T12346] netlink: 'syz.5.3066': attribute type 10 has an invalid length. [ 319.833271][ T5911] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 319.984219][ T5911] usb 3-1: Using ep0 maxpacket: 16 [ 319.991279][ T5911] usb 3-1: config 254 has an invalid interface number: 235 but max is 0 [ 320.023382][ T5911] usb 3-1: config 254 has no interface number 0 [ 320.043397][ T5911] usb 3-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 320.056863][T12352] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3069'. [ 320.077141][ T5911] usb 3-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xA2, changing to 0x82 [ 320.113467][ T5911] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 320.163375][ T5911] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 320.194146][ T5911] usb 3-1: config 254 interface 235 has no altsetting 0 [ 320.215606][ T5911] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 320.252340][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.285543][ T5911] usb 3-1: Product: syz [ 320.289735][ T5911] usb 3-1: Manufacturer: syz [ 320.313347][ T5911] usb 3-1: SerialNumber: syz [ 320.351356][T12336] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 320.586512][T12367] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3075'. [ 320.614571][T12336] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 320.645001][ T5911] usbtest 3-1:254.235: Linux gadget zero [ 320.664499][ T5911] usbtest 3-1:254.235: high-speed {control in/out bulk-out iso-in} tests (+alt) [ 320.892967][ T5890] usb 3-1: USB disconnect, device number 100 [ 322.223427][ T5942] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 322.453397][ T5942] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 322.494198][ T5942] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.553422][ T5942] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 322.562417][ T5942] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.628547][ T5942] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.672157][ T5942] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 322.718695][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 322.773499][ T5942] usb 3-1: Product: syz [ 322.777698][ T5942] usb 3-1: Manufacturer: syz [ 322.817943][ T5942] cdc_wdm 3-1:1.0: skipping garbage [ 322.823176][ T5942] cdc_wdm 3-1:1.0: skipping garbage [ 322.873818][ T5942] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 322.879767][ T5942] cdc_wdm 3-1:1.0: Unknown control protocol [ 323.045733][T12402] cdc_wdm 3-1:1.0: Error submitting int urb - -90 [ 323.085061][ T5911] usb 3-1: USB disconnect, device number 101 [ 323.095223][T12373] syz.3.3080 (12373): drop_caches: 2 [ 323.103389][ T9019] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 323.285698][ T9019] usb 6-1: unable to get BOS descriptor or descriptor too short [ 323.306921][ T9019] usb 6-1: not running at top speed; connect to a high speed hub [ 323.334805][ T9019] usb 6-1: config 1 interface 0 altsetting 217 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 323.376032][ T9019] usb 6-1: config 1 interface 0 has no altsetting 0 [ 323.407907][ T9019] usb 6-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 323.423384][ T9019] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.451922][ T9019] usb 6-1: Product: syz [ 323.462292][ T9019] usb 6-1: Manufacturer: syz [ 323.482715][ T9019] usb 6-1: SerialNumber: syz [ 323.730842][ T9019] usbhid 6-1:1.0: can't add hid device: -71 [ 323.732934][T12450] xt_hashlimit: size too large, truncated to 1048576 [ 323.754661][ T9019] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 323.805775][ T9019] usb 6-1: USB disconnect, device number 4 [ 325.357610][ T30] audit: type=1326 audit(1768380347.904:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12512 comm="syz.5.3145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513738f749 code=0x7ffc0000 [ 325.387552][T12517] netlink: 'syz.1.3147': attribute type 8 has an invalid length. [ 325.443270][ T30] audit: type=1326 audit(1768380347.904:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12512 comm="syz.5.3145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513738f749 code=0x7ffc0000 [ 325.533298][ T30] audit: type=1326 audit(1768380347.944:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12512 comm="syz.5.3145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f513738f749 code=0x7ffc0000 [ 325.623601][ T30] audit: type=1326 audit(1768380347.944:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12512 comm="syz.5.3145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513738f749 code=0x7ffc0000 [ 325.703874][ T30] audit: type=1326 audit(1768380347.944:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12512 comm="syz.5.3145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513738f749 code=0x7ffc0000 [ 326.163612][T12546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3161'. [ 326.234719][T12549] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 326.932531][T12581] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3180'. [ 326.967229][T12581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3180'. [ 327.122868][T12587] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 327.150775][T12587] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 327.754385][T12614] libceph: resolve '4' (ret=-3): failed [ 327.933625][ T5942] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 327.936416][T12617] bond1: option fail_over_mac: invalid value (32) [ 327.961386][T12624] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 328.028290][T12617] bond1 (unregistering): Released all slaves [ 328.103286][ T5942] usb 3-1: Using ep0 maxpacket: 32 [ 328.121539][ T5942] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 328.168837][ T5942] usb 3-1: config 0 has no interface number 0 [ 328.205128][ T5942] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 328.260274][ T5942] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 328.310380][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.346290][ T5942] usb 3-1: Product: syz [ 328.371010][ T5942] usb 3-1: Manufacturer: syz [ 328.392797][ T5942] usb 3-1: SerialNumber: syz [ 328.420273][ T5942] usb 3-1: config 0 descriptor?? [ 328.451145][T12609] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 328.608548][T12642] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3209'. [ 328.654644][T12642] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 328.682576][T12609] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 328.868942][T12644] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.876673][T12644] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.913638][ T5942] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 328.958535][ T5942] asix 3-1:0.188: probe with driver asix failed with error -71 [ 329.000861][ T5942] usb 3-1: USB disconnect, device number 102 [ 329.119785][T12644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.137365][T12644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.183287][ T5918] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 329.375205][ T5918] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 329.403253][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.423658][ T5918] usb 6-1: Product: syz [ 329.427841][ T5918] usb 6-1: Manufacturer: syz [ 329.432441][ T5918] usb 6-1: SerialNumber: syz [ 329.476193][ T5918] usb 6-1: config 0 descriptor?? [ 329.506211][ T5918] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 329.674777][T12671] netlink: 'syz.0.3223': attribute type 2 has an invalid length. [ 329.845893][T12680] netlink: 'syz.0.3228': attribute type 39 has an invalid length. [ 329.913749][ T5890] usb 6-1: USB disconnect, device number 5 [ 330.649412][T12710] openvswitch: netlink: Actions may not be safe on all matching packets [ 331.686150][T12759] : renamed from vlan0 (while UP) [ 333.318662][T12826] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 333.493492][T12832] netlink: 'syz.1.3301': attribute type 5 has an invalid length. [ 333.501258][T12832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3301'. [ 333.976976][ T30] audit: type=1800 audit(1768380356.524:53): pid=12857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3313" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=3706 res=0 errno=0 [ 334.591862][T12881] netlink: 1100 bytes leftover after parsing attributes in process `syz.1.3324'. [ 335.170055][T12902] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3332'. [ 335.212731][T12904] program syz.5.3335 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 335.220772][T12902] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3332'. [ 335.267863][T12906] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3336'. [ 335.363437][ T5890] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 335.558361][ T5890] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 335.575890][ T5890] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 335.602660][T12917] kernel read not supported for file / 7âW)sPmQfsl{Tr)rO2:" (pid: 12917 comm: syz.1.3341) [ 335.663999][ T30] audit: type=1800 audit(1768380358.214:54): pid=12917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3341" name=20019C1437B1CFFCC3A25729EB7350C86DE0518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C099 dev="mqueue" ino=31361 res=0 errno=0 [ 335.911995][ T5890] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 335.925600][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.954373][T12900] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 336.092618][ T5890] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 336.412881][ T5890] usb 3-1: USB disconnect, device number 103 [ 336.861189][T12936] dlm: no locking on control device [ 337.193368][T12943] netlink: 'syz.1.3351': attribute type 10 has an invalid length. [ 337.678670][T12959] ip6erspan0: entered allmulticast mode [ 337.788080][T12965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3362'. [ 337.984905][T12973] $H: renamed from bond0 (while UP) [ 338.009075][T12973] $H: entered promiscuous mode [ 338.029701][T12973] bond_slave_0: entered promiscuous mode [ 338.052663][T12973] bond_slave_1: entered promiscuous mode [ 338.228928][T12983] netlink: 'syz.1.3371': attribute type 2 has an invalid length. [ 338.595548][T13002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3377'. [ 338.614038][T12996] can: request_module (can-proto-0) failed. [ 340.726721][T13095] netlink: 'syz.5.3425': attribute type 6 has an invalid length. [ 341.139476][T13113] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3433'. [ 341.169611][T13113] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3433'. [ 341.342830][T13123] xt_bpf: check failed: parse error [ 341.857371][ T30] audit: type=1326 audit(1768380364.404:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13144 comm="syz.0.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2df8f749 code=0x7ffc0000 [ 341.914351][ T5890] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 341.923656][ T30] audit: type=1326 audit(1768380364.434:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13144 comm="syz.0.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fde2df8f749 code=0x7ffc0000 [ 342.003303][ T30] audit: type=1326 audit(1768380364.434:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13144 comm="syz.0.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2df8f749 code=0x7ffc0000 [ 342.125782][ T5890] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 342.163490][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.200908][ T5890] usb 2-1: config 0 descriptor?? [ 342.226930][ T5890] cp210x 2-1:0.0: cp210x converter detected [ 342.236563][T13161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3455'. [ 342.652951][ T5890] usb 2-1: cp210x converter now attached to ttyUSB0 [ 342.692893][ T5890] usb 2-1: USB disconnect, device number 111 [ 342.712256][ T5890] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 342.714649][ T5890] cp210x 2-1:0.0: device disconnected [ 343.409753][T13208] netlink: 'syz.2.3478': attribute type 61 has an invalid length. [ 343.428408][T13208] netlink: 'syz.2.3478': attribute type 62 has an invalid length. [ 343.543379][ T5890] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 343.731805][ T5890] usb 6-1: not running at top speed; connect to a high speed hub [ 343.741606][ T5890] usb 6-1: config 1 interface 0 has no altsetting 0 [ 343.769251][ T5890] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 343.790928][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.820026][ T5890] usb 6-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 343.908631][ T5890] usb 6-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ엺 [ 343.942392][ T5890] usb 6-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩㐉琒햠댚ꈶ渨嗱䨂蕐Ꮴ裉췻㑶䥅袨䏱༯梹ﴑኁ밪ዸ┙滆㙱綒揭뭨㺵礌闵℘鄬㻞㔲㏖⠿쀋಍뛰잗䝳想ﯵᓇ븜ш佧㵺쑮ᑬ梺雬淽ڑ玒ঁ䠫䃙叴琺閾뉶⃔ [ 344.250985][ T5890] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 344.305863][ T5890] usb 6-1: USB disconnect, device number 6 [ 344.348787][ T5890] usblp0: removed [ 344.549169][T13245] xt_CT: No such helper "pptp" [ 344.580510][T13252] netlink: 'syz.0.3499': attribute type 1 has an invalid length. [ 344.643334][T13252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3499'. [ 345.575544][T13294] netlink: 'syz.1.3520': attribute type 11 has an invalid length. [ 345.602517][T13294] netlink: 448 bytes leftover after parsing attributes in process `syz.1.3520'. [ 345.644007][T13296] usb usb8: usbfs: process 13296 (syz.2.3522) did not claim interface 0 before use [ 346.417875][ T30] audit: type=1326 audit(1768380368.964:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13327 comm="syz.1.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974db8f749 code=0x7ffc0000 [ 346.426201][T13326] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3536'. [ 346.471796][ T30] audit: type=1326 audit(1768380368.994:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13327 comm="syz.1.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974db8f749 code=0x7ffc0000 [ 346.498609][ T30] audit: type=1326 audit(1768380368.994:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13327 comm="syz.1.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974db8f749 code=0x7ffc0000 [ 346.596850][ T30] audit: type=1326 audit(1768380369.004:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13327 comm="syz.1.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f974db8f749 code=0x7ffc0000 [ 346.679237][ T30] audit: type=1326 audit(1768380369.004:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13327 comm="syz.1.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974db8f749 code=0x7ffc0000 [ 346.775063][ T30] audit: type=1326 audit(1768380369.004:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13327 comm="syz.1.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974db8f749 code=0x7ffc0000 [ 346.884784][ T30] audit: type=1326 audit(1768380369.004:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13327 comm="syz.1.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f974db8f749 code=0x7ffc0000 [ 346.968053][ T30] audit: type=1326 audit(1768380369.004:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13327 comm="syz.1.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f974db8f749 code=0x7ffc0000 [ 347.413997][T13352] !: renamed from dummy0 [ 347.530018][T13315] syz.2.3530 (13315): drop_caches: 2 [ 347.793337][T13361] mmap: syz.2.3554 (13361) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 348.183509][ T5890] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 348.388723][ T5890] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 348.413643][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.473748][ T5890] usb 6-1: config 0 descriptor?? [ 348.492633][ T5890] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 348.677704][T13384] syz.1.3562 (13384): drop_caches: 2 [ 348.905235][ T5890] gp8psk: usb in 128 operation failed. [ 348.919277][ T5890] gp8psk: usb in 137 operation failed. [ 348.925486][ T5890] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 348.943329][ T5890] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 348.970326][ T5890] usb 6-1: USB disconnect, device number 7 [ 349.077319][T13394] netlink: 'syz.1.3568': attribute type 8 has an invalid length. [ 349.248480][T13398] veth3: entered promiscuous mode [ 349.370618][T13403] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3573'. [ 349.602235][T13410] syz.5.3575 (13410): drop_caches: 2 [ 350.470439][T13447] xt_hashlimit: size too large, truncated to 1048576 [ 350.487858][T13447] xt_hashlimit: max too large, truncated to 1048576 [ 350.758187][ T5830] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 350.770421][ T5830] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 350.778423][ T5830] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 350.786315][ T5830] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 350.796889][ T5830] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 350.894189][T13460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3601'. [ 351.033881][T13467] nft_compat: unsupported protocol 1 [ 351.368833][T13463] chnl_net:caif_netlink_parms(): no params data found [ 352.059523][T13463] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.093755][T13463] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.100995][T13463] bridge_slave_0: entered allmulticast mode [ 352.171982][T13463] bridge_slave_0: entered promiscuous mode [ 352.192451][T13463] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.229798][T13463] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.255311][T13463] bridge_slave_1: entered allmulticast mode [ 352.265325][T13463] bridge_slave_1: entered promiscuous mode [ 352.325002][T13513] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 352.355552][T13513] xt_cluster: node mask cannot exceed total number of nodes [ 352.364587][ T5890] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 352.467214][T13463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.516459][T13463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.564960][ T5890] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 352.604424][ T5890] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 352.643587][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.704677][ T5890] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 352.757331][T13463] team0: Port device team_slave_0 added [ 352.797681][T13463] team0: Port device team_slave_1 added [ 352.854643][ T30] audit: type=1326 audit(1768380375.404:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13524 comm="syz.2.3629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f361b98f749 code=0x7ffc0000 [ 352.918885][ T5830] Bluetooth: hci6: command tx timeout [ 352.924997][ T30] audit: type=1326 audit(1768380375.424:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13524 comm="syz.2.3629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f361b98f749 code=0x7ffc0000 [ 352.948923][ T30] audit: type=1326 audit(1768380375.434:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13524 comm="syz.2.3629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f361b98f749 code=0x7ffc0000 [ 352.972754][ T30] audit: type=1326 audit(1768380375.434:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13524 comm="syz.2.3629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f361b98f749 code=0x7ffc0000 [ 352.996840][ T30] audit: type=1326 audit(1768380375.434:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13524 comm="syz.2.3629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f361b98f749 code=0x7ffc0000 [ 353.075692][T13463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.093573][T13463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.179188][T13463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.225355][T13463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.232333][T13463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.333246][T13463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.537425][T13543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3637'. [ 353.570771][T13463] hsr_slave_0: entered promiscuous mode [ 353.634925][T13463] hsr_slave_1: entered promiscuous mode [ 353.641253][T13463] debugfs: 'hsr0' already exists in 'hsr' [ 353.673254][T13463] Cannot create hsr debugfs directory [ 353.885646][T13553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3644'. [ 353.996736][ T5890] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 354.027000][ T5890] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 354.067854][ T5890] stv0680 6-1:4.0: last error: 86, command = 0x78 [ 354.096925][ T5890] usb 6-1: USB disconnect, device number 8 [ 354.265575][T13564] ptrace attach of "./syz-executor exec"[5849] was attempted by ""[13564] [ 354.415122][T13463] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 354.545495][T13463] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 354.599060][T13463] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 354.608456][T13574] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3652'. [ 354.672729][T13463] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 354.770291][T13583] xt_l2tp: missing protocol rule (udp|l2tpip) [ 354.993719][ T5830] Bluetooth: hci6: command tx timeout [ 355.023712][T13463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.059803][T13463] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.082915][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.090120][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.154127][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.161299][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.359783][T13463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.502572][T13463] veth0_vlan: entered promiscuous mode [ 355.541392][T13463] veth1_vlan: entered promiscuous mode [ 355.636470][T13463] veth0_macvtap: entered promiscuous mode [ 355.666697][T13463] veth1_macvtap: entered promiscuous mode [ 355.725665][T13463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.778948][T13463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.812334][ T3429] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.854946][ T3429] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.897295][ T3429] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.972576][ T3429] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.201804][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.253270][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.334090][ T1122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.341960][ T1122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.622795][T13656] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3593'. [ 356.632347][T13656] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3593'. [ 356.642734][T13656] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3593'. [ 356.670763][T13656] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3593'. [ 356.976957][T13666] program syz.6.3693 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 357.073913][ T5830] Bluetooth: hci6: command tx timeout [ 357.485640][T13688] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3703'. [ 358.026319][T13711] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 358.126247][T13714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.491527][T13727] libceph: resolve '400' (ret=-3): failed [ 358.733159][T13739] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3727'. [ 358.793857][T13739] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3727'. [ 359.143659][ T891] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 359.163748][ T5830] Bluetooth: hci6: command tx timeout [ 359.335800][ T891] usb 2-1: Using ep0 maxpacket: 32 [ 359.358895][ T891] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.388086][ T891] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.410184][ T891] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 359.467939][ T891] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 359.508443][ T891] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 359.534044][ T891] usb 2-1: Product: syz [ 359.538237][ T891] usb 2-1: Manufacturer: syz [ 359.553119][ T891] usb 2-1: SerialNumber: syz [ 359.559523][ T30] audit: type=1326 audit(1768380382.104:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13766 comm="syz.5.3742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513738f749 code=0x7ffc0000 [ 359.629186][ T891] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input47 [ 359.667572][ T30] audit: type=1326 audit(1768380382.124:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13766 comm="syz.5.3742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513738f749 code=0x7ffc0000 [ 359.733376][T13771] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3744'. [ 359.754340][T13771] 0X: renamed from caif0 [ 359.764594][ T30] audit: type=1326 audit(1768380382.134:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13766 comm="syz.5.3742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f513738f749 code=0x7ffc0000 [ 359.773477][T13775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.842954][ T30] audit: type=1326 audit(1768380382.134:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13766 comm="syz.5.3742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513738f749 code=0x7ffc0000 [ 359.890635][ T891] usb 2-1: USB disconnect, device number 112 [ 359.902038][T13771] 0X: entered allmulticast mode [ 359.941257][ T891] appletouch 2-1:1.0: input: appletouch disconnected [ 359.943381][ T30] audit: type=1326 audit(1768380382.134:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13766 comm="syz.5.3742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513738f749 code=0x7ffc0000 [ 359.982592][T13771] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 360.136215][T13774] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.177887][T13774] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.628532][T13791] xfrm0: entered promiscuous mode [ 360.647155][T13791] xfrm0: entered allmulticast mode [ 361.094280][T13811] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3760'. [ 361.219047][T13819] netlink: 'syz.5.3767': attribute type 1 has an invalid length. [ 361.270818][T13817] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 361.330754][T13817] bond1 (unregistering): Released all slaves [ 361.537488][T13830] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3771'. [ 362.015322][T13853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3781'. [ 362.206999][T13857] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.214392][T13857] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.281969][T13857] vcan0: left promiscuous mode [ 362.589803][T13878] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3793'. [ 362.702995][T13882] netlink: 'syz.2.3795': attribute type 21 has an invalid length. [ 362.743944][T13882] netlink: 'syz.2.3795': attribute type 6 has an invalid length. [ 362.767977][T13882] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3795'. [ 362.845051][T13889] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3799'. [ 363.173480][T13904] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3806'. [ 363.283342][ T5911] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 363.443258][ T5911] usb 2-1: Using ep0 maxpacket: 32 [ 363.455844][ T5911] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 363.493283][ T5911] usb 2-1: config 2 has no interface number 0 [ 363.519842][ T5911] usb 2-1: config 2 interface 88 has no altsetting 0 [ 363.572465][ T5911] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 363.593491][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.602520][ T5911] usb 2-1: Product: syz [ 363.633512][ T5911] usb 2-1: Manufacturer: syz [ 363.638512][ T5911] usb 2-1: SerialNumber: syz [ 364.100218][ T5911] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 364.111791][T13950] netlink: 'syz.5.3827': attribute type 21 has an invalid length. [ 364.142020][T13950] netlink: 160 bytes leftover after parsing attributes in process `syz.5.3827'. [ 364.153791][ T5911] asix 2-1:2.88: probe with driver asix failed with error -71 [ 364.196603][ T5911] usb 2-1: USB disconnect, device number 113 [ 364.290062][T13954] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3829'. [ 364.328635][T13954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3829'. [ 364.378054][T13956] geneve2: entered promiscuous mode [ 364.836314][T13977] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3840'. [ 365.055116][T13985] xt_nfacct: accounting object `syz1' does not exist [ 365.390524][ T30] audit: type=1326 audit(1768380387.934:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14000 comm="syz.5.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513738f749 code=0x7ffc0000 [ 365.483801][ T30] audit: type=1326 audit(1768380387.974:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14000 comm="syz.5.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f513738f749 code=0x7ffc0000 [ 365.560976][ T30] audit: type=1326 audit(1768380387.974:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14000 comm="syz.5.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513738f749 code=0x7ffc0000 [ 365.669252][ T30] audit: type=1326 audit(1768380387.974:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14000 comm="syz.5.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513738f749 code=0x7ffc0000 [ 365.981096][T14031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3868'. [ 366.173316][T14041] program syz.2.3872 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 366.446230][T14056] netdevsim netdevsim6: Firmware load for '..' refused, path contains '..' component [ 366.916633][T14083] SET target dimension over the limit! [ 367.281484][T14101] netlink: 'syz.2.3902': attribute type 3 has an invalid length. [ 367.823104][T14128] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.973528][T14134] fuse: Unknown parameter 'su' [ 368.386691][T14157] __nla_validate_parse: 1 callbacks suppressed [ 368.386709][T14157] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3929'. [ 368.823290][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 369.008469][T14186] netlink: 'syz.6.3943': attribute type 1 has an invalid length. [ 369.025939][ T24] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 369.045651][T14186] netlink: 'syz.6.3943': attribute type 2 has an invalid length. [ 369.059964][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.092886][ T24] usb 6-1: Product: syz [ 369.104345][ T24] usb 6-1: Manufacturer: syz [ 369.115246][ T24] usb 6-1: SerialNumber: syz [ 369.139493][ T24] usb 6-1: config 0 descriptor?? [ 369.174385][ T24] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 009 [ 369.177097][T14194] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3947'. [ 369.234636][T14194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3947'. [ 369.380424][ T24] (null): failure setting delay to 10us [ 369.402626][ T24] i2c-tiny-usb 6-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 369.450792][ T24] usb 6-1: USB disconnect, device number 9 [ 369.629731][T14216] delete_channel: no stack [ 370.087574][T14239] C: renamed from team_slave_0 [ 370.116817][T14239] netlink: 'syz.5.3967': attribute type 1 has an invalid length. [ 370.151058][T14239] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3967'. [ 370.170950][T14239] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 370.199647][ T24] usb 2-1: new low-speed USB device number 114 using dummy_hcd [ 370.334354][T14247] netlink: 'syz.6.3971': attribute type 21 has an invalid length. [ 370.360589][T14247] netlink: 'syz.6.3971': attribute type 6 has an invalid length. [ 370.385557][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 370.405871][ T24] usb 2-1: config 0 has no interface number 0 [ 370.424916][T14247] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3971'. [ 370.443564][ T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 370.457812][ T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 370.471523][ T24] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 370.501989][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.541696][ T24] usb 2-1: config 0 descriptor?? [ 370.584472][ T24] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 370.805855][T14231] iowarrior 2-1:0.1: Error -90 while submitting URB [ 370.824955][T13869] usb 2-1: USB disconnect, device number 114 [ 370.914229][T10570] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 371.106556][T10570] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 371.141224][T10570] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x63, changing to 0x3 [ 371.170262][T10570] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12390, setting to 1024 [ 371.205145][T10570] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 371.244681][T10570] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 371.275997][T10570] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 371.304154][T10570] usb 6-1: Manufacturer: syz [ 371.326015][T10570] usb 6-1: config 0 descriptor?? [ 371.344086][T14259] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 371.364371][T10570] igorplugusb 6-1:0.0: endpoint incorrect [ 371.582280][ T9] usb 6-1: USB disconnect, device number 10 [ 371.656014][T14293] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 371.714186][T14297] netlink: 'syz.6.3997': attribute type 4 has an invalid length. [ 371.853371][T14301] netlink: 'syz.2.3999': attribute type 6 has an invalid length. [ 371.871411][T14301] netlink: 'syz.2.3999': attribute type 7 has an invalid length. [ 371.900462][T14301] netlink: 'syz.2.3999': attribute type 8 has an invalid length. [ 372.017156][T14307] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4002'. [ 372.043472][T14307] tc_dump_action: action bad kind [ 372.285776][T14317] validate_nla: 1 callbacks suppressed [ 372.285793][T14317] netlink: 'syz.5.4007': attribute type 10 has an invalid length. [ 372.348970][T14317] bridge0: port 3(netdevsim0) entered blocking state [ 372.373900][T14317] bridge0: port 3(netdevsim0) entered disabled state [ 372.395063][T14317] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 372.426371][T14317] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 372.465501][T14317] bridge0: port 3(netdevsim0) entered blocking state [ 372.472308][T14317] bridge0: port 3(netdevsim0) entered forwarding state [ 372.696788][ T30] audit: type=1326 audit(1768380395.244:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14331 comm="syz.1.4014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974db8f749 code=0x7ffc0000 [ 372.773396][ T30] audit: type=1326 audit(1768380395.244:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14331 comm="syz.1.4014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974db8f749 code=0x7ffc0000 [ 372.843414][ T30] audit: type=1326 audit(1768380395.244:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14331 comm="syz.1.4014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f974db8f749 code=0x7ffc0000 [ 372.923523][ T30] audit: type=1326 audit(1768380395.274:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14331 comm="syz.1.4014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974db8f749 code=0x7ffc0000 [ 373.005697][ T30] audit: type=1326 audit(1768380395.284:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14331 comm="syz.1.4014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974db8f749 code=0x7ffc0000 [ 373.120114][T14341] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4018'. [ 373.212481][T14345] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4020'. [ 373.405806][T14354] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4024'. [ 373.603401][T13869] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 373.784136][T13869] usb 2-1: too many configurations: 25, using maximum allowed: 8 [ 373.810863][T13869] usb 2-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 373.825743][T13869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.843843][T13869] usb 2-1: config 0 descriptor?? [ 373.855304][T13869] pwc: Creative Labs Webcam Pro Ex detected. [ 373.862965][T13869] pwc: Warning: more than 1 configuration available. [ 373.966761][T14378] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 374.061971][T13869] pwc: Failed to set LED on/off time (-71) [ 374.090414][T13869] pwc: send_video_command error -71 [ 374.119630][T13869] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 374.132257][T13869] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 374.133355][ T5911] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 374.150335][T13869] usb 2-1: USB disconnect, device number 115 [ 374.353279][ T5911] usb 3-1: Using ep0 maxpacket: 8 [ 374.368154][ T5911] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 374.403497][ T5911] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 374.432363][ T5911] usb 3-1: config 0 has no interface number 0 [ 374.452689][ T5911] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 374.480882][T14393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4043'. [ 374.493400][ T5911] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 374.533336][ T5911] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 374.565730][ T5911] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 374.579562][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 374.597934][ T5911] usb 3-1: Product: syz [ 374.639356][ T5911] usb 3-1: config 0 descriptor?? [ 374.659562][T14375] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 375.148018][ T5911] usb 3-1: USB disconnect, device number 104 [ 375.797301][T14453] netlink: 'syz.5.4072': attribute type 23 has an invalid length. [ 375.831122][T14453] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4072'. [ 376.219173][T14468] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 376.245965][T14468] bond1 (unregistering): Released all slaves [ 376.295709][T14475] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4081'. [ 377.071855][T14513] netlink: 176 bytes leftover after parsing attributes in process `syz.5.4102'. [ 377.701069][T14542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.853661][T14548] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4119'. [ 377.994125][T14554] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4122'. [ 378.052068][T14558] fuse: Bad value for 'fd' [ 378.296696][T14570] misc userio: No port type given on /dev/userio [ 378.440029][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.447413][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.634589][T14586] netlink: 676 bytes leftover after parsing attributes in process `syz.0.4138'. [ 379.257943][T14614] netlink: 'syz.2.4151': attribute type 3 has an invalid length. [ 379.404541][ T30] audit: type=1326 audit(1768380401.944:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14620 comm="syz.6.4156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3938f749 code=0x7ffc0000 [ 379.501587][ T30] audit: type=1326 audit(1768380401.984:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14620 comm="syz.6.4156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3938f749 code=0x7ffc0000 [ 379.613300][ T30] audit: type=1326 audit(1768380401.984:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14620 comm="syz.6.4156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f5f3938f749 code=0x7ffc0000 [ 379.716199][ T30] audit: type=1326 audit(1768380401.984:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14620 comm="syz.6.4156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3938f749 code=0x7ffc0000 [ 379.793589][ T30] audit: type=1326 audit(1768380401.984:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14620 comm="syz.6.4156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3938f749 code=0x7ffc0000 [ 379.862340][T14641] ALSA: mixer_oss: invalid OSS volume '' [ 379.885539][ T30] audit: type=1326 audit(1768380402.124:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14625 comm="syz.1.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974db8f749 code=0x7ffc0000 [ 379.903294][T14641] ALSA: mixer_oss: invalid OSS volume ' a=!˹=+LKWM:~' [ 379.973335][T14641] ALSA: mixer_oss: invalid OSS volume '%wѺM#i6[NVLKK-' [ 379.990581][T14641] ALSA: mixer_oss: invalid OSS volume 'ڶZ:3.F?Y^x1b' [ 379.993796][ T30] audit: type=1326 audit(1768380402.124:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14625 comm="syz.1.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974db8f749 code=0x7ffc0000 [ 380.031132][T14641] ALSA: mixer_oss: invalid OSS volume ' $i.A_|#Xd#>z^a' [ 380.273481][ T30] audit: type=1326 audit(1768380402.124:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14625 comm="syz.1.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974db8f749 code=0x7ffc0000 [ 380.287925][T14641] ALSA: mixer_oss: invalid OSS volume '*moG%BuZk@mIv (046d:089b) [ 406.218241][ T5942] uvcvideo 3-1:7.112: No valid video chain found. [ 406.421498][T13869] usb 3-1: USB disconnect, device number 108 [ 406.574098][T15745] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 406.603837][ T5942] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 406.766848][ T5942] usb 7-1: Using ep0 maxpacket: 32 [ 406.785723][ T5942] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 406.806260][ T5942] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 406.821847][ T5942] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 406.848945][ T5942] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 406.862320][ T5942] usb 7-1: config 1 has no interface number 0 [ 406.877836][ T5942] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 406.887618][ T5942] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.935449][ T5942] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 407.122239][ T5942] snd_usb_pod 7-1:1.1: set_interface failed [ 407.154692][ T5942] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 407.162002][ T5942] snd_usb_pod 7-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 407.223593][ T5942] usb 7-1: USB disconnect, device number 5 [ 407.855274][T15798] usb usb8: usbfs: process 15798 (syz.5.4687) did not claim interface 0 before use [ 408.200158][T15816] openvswitch: netlink: Tunnel attr 92 out of range max 16 [ 409.124592][T15866] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4722'. [ 409.506480][T15885] x_tables: unsorted underflow at hook 3 [ 411.163069][T15960] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4769'. [ 411.557457][T15978] bond1 (unregistering): Released all slaves [ 411.586073][T15985] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 411.768583][T15991] usb usb8: usbfs: process 15991 (syz.1.4784) did not claim interface 0 before use [ 411.918121][T15995] gre1: entered allmulticast mode [ 412.051947][T15998] IPv6: sit2: Disabled Multicast RS [ 412.866027][T16032] openvswitch: netlink: ct_state flags 2c1414ac unsupported [ 413.492700][T16066] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 413.953832][ T5947] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 414.146413][ T5947] usb 3-1: Using ep0 maxpacket: 8 [ 414.169945][ T5947] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 414.190917][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.217786][ T5947] usb 3-1: Product: syz [ 414.232150][ T5947] usb 3-1: Manufacturer: syz [ 414.243395][ T5947] usb 3-1: SerialNumber: syz [ 414.265544][ T5947] usb 3-1: config 0 descriptor?? [ 414.308180][ T5947] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244) [ 414.382420][T16107] openvswitch: netlink: Unknown key attributes 1 [ 414.583671][ T5918] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 414.730223][ T5947] radio-usb-si4713 3-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 414.745193][ T5918] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.764275][ T5947] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 414.773440][ T5918] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 414.797646][ T5947] usb 3-1: USB disconnect, device number 109 [ 414.803472][ T5918] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 414.813002][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.851514][T16123] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 414.874346][ T5918] usb 2-1: config 0 descriptor?? [ 415.298699][ T5918] Bluetooth: Can't get state to change to load configuration err [ 415.333477][ T5918] Bluetooth: Loading sysconfig file failed [ 415.343541][ T5918] ath3k 2-1:0.0: probe with driver ath3k failed with error -16 [ 415.375063][ T5918] usb 2-1: USB disconnect, device number 121 [ 415.436082][T16143] program syz.5.4858 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 416.040448][T16170] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4871'. [ 416.497185][T16191] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 416.513286][T16191] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 416.721765][T16199] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.894501][T13869] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 417.063302][T13869] usb 7-1: Using ep0 maxpacket: 8 [ 417.080699][T13869] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 417.110586][T13869] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.142518][T16206] bond1: option arp_all_targets: invalid value (18446744073290121217) [ 417.153650][T13869] usb 7-1: config 0 has no interface number 0 [ 417.168738][T13869] usb 7-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 417.189308][T16206] bond1 (unregistering): Released all slaves [ 417.202192][T13869] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 417.242744][T13869] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 417.275448][ T152] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.293313][T13869] usb 7-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 417.316571][ T152] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.345047][T13869] usb 7-1: config 0 interface 52 has no altsetting 0 [ 417.351900][ T152] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.365455][T13869] usb 7-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 417.385796][ T152] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.399576][T13869] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.426477][T13869] usb 7-1: config 0 descriptor?? [ 417.616024][ T24] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 417.641149][T16215] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4893'. [ 417.695636][T13869] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.52/input/input52 [ 417.796004][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 417.832960][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 417.855611][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 417.893246][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.902413][T16219] SET target dimension over the limit! [ 417.910836][ T24] usb 3-1: Product: syz [ 417.917187][ T24] usb 3-1: Manufacturer: syz [ 417.921883][ T24] usb 3-1: SerialNumber: syz [ 417.927434][T13869] usb 7-1: USB disconnect, device number 6 [ 418.045483][T16221] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4896'. [ 418.403593][ T24] usb 3-1: cannot find UAC_HEADER [ 418.478052][ T24] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 418.509195][ T24] usb 3-1: USB disconnect, device number 110 [ 418.527134][T16238] ipip0: entered promiscuous mode [ 418.581374][T16028] udevd[16028]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 418.597545][T16238] ipip0: entered allmulticast mode [ 418.640264][T16240] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4905'. [ 419.169956][T16262] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 419.543663][ T981] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 419.672422][T16285] AppArmor: change_hat: Invalid input '' [ 419.713558][ T981] usb 3-1: Using ep0 maxpacket: 8 [ 419.764128][ T981] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 419.783508][ T981] usb 3-1: config 0 has no interface number 0 [ 419.789633][ T981] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 419.853400][ T981] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 419.883240][ T981] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 419.923501][ T981] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 419.953375][ T981] usb 3-1: New USB device found, idVendor=05da, idProduct=0099, bcdDevice=d5.82 [ 419.972734][ T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.993502][ T981] usb 3-1: Product: syz [ 419.997684][ T981] usb 3-1: Manufacturer: syz [ 420.002278][ T981] usb 3-1: SerialNumber: syz [ 420.038017][ T30] audit: type=1326 audit(1768380442.584:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16304 comm="syz.5.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513738f749 code=0x7ffc0000 [ 420.062647][ T981] usb 3-1: config 0 descriptor?? [ 420.125304][ T30] audit: type=1326 audit(1768380442.624:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16304 comm="syz.5.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513738f749 code=0x7ffc0000 [ 420.209682][ T30] audit: type=1326 audit(1768380442.624:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16304 comm="syz.5.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f513738f749 code=0x7ffc0000 [ 420.239673][T16309] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4939'. [ 420.272213][ T30] audit: type=1326 audit(1768380442.624:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16304 comm="syz.5.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513738f749 code=0x7ffc0000 [ 420.297296][ T981] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 2 is not bulk. [ 420.338200][ T981] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 6 is not bulk. [ 420.380019][ T30] audit: type=1326 audit(1768380442.624:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16304 comm="syz.5.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513738f749 code=0x7ffc0000 [ 420.389413][ T981] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 420.513039][ T981] usb 3-1: USB disconnect, device number 111 [ 420.589481][T16324] program syz.5.4947 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 421.713646][ T5947] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 421.913415][ T5947] usb 7-1: Using ep0 maxpacket: 8 [ 421.932014][ T5947] usb 7-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 421.958834][ T5947] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.972791][ T5947] usb 7-1: Product: syz [ 421.991786][ T5947] usb 7-1: Manufacturer: syz [ 422.008059][ T5947] usb 7-1: SerialNumber: syz [ 422.030044][ T5947] usb 7-1: config 0 descriptor?? [ 422.054567][ T5947] radio-usb-si4713 7-1:0.0: Si4713 development board discovered: (10C4:8244) [ 422.278560][ T5947] radio-usb-si4713 7-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 422.299250][ T5947] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 422.316903][ T5947] usb 7-1: USB disconnect, device number 7 [ 422.655105][T16414] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4991'. [ 423.821697][ T30] audit: type=1326 audit(1768380446.364:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16476 comm="syz.0.5024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2df8f749 code=0x7ffc0000 [ 423.910140][ T30] audit: type=1326 audit(1768380446.364:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16476 comm="syz.0.5024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2df8f749 code=0x7ffc0000 [ 424.015260][ T30] audit: type=1326 audit(1768380446.394:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16476 comm="syz.0.5024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fde2df8f749 code=0x7ffc0000 [ 424.075123][ T30] audit: type=1326 audit(1768380446.394:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16476 comm="syz.0.5024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2df8f749 code=0x7ffc0000 [ 424.162003][ T30] audit: type=1326 audit(1768380446.394:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16476 comm="syz.0.5024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2df8f749 code=0x7ffc0000 [ 424.378272][T16503] xt_TPROXY: Can be used only with -p tcp or -p udp [ 424.599516][T16515] netlink: 212 bytes leftover after parsing attributes in process `syz.1.5041'. [ 425.024071][T16538] SET target dimension over the limit! [ 425.054072][T16542] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 426.549023][T16620] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5092'. [ 426.603332][ T5830] Bluetooth: hci5: command 0x0406 tx timeout [ 427.257912][T16657] xt_socket: unknown flags 0x50 [ 427.425240][T16663] netlink: 'syz.0.5112': attribute type 27 has an invalid length. [ 427.433086][T16663] netlink: 'syz.0.5112': attribute type 3 has an invalid length. [ 427.493798][T16663] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5112'. [ 427.603406][T16674] netlink: 144 bytes leftover after parsing attributes in process `syz.5.5117'. [ 428.018849][T16696] delete_channel: no stack [ 428.056958][T16698] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5129'. [ 428.103383][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 428.285441][ T24] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 428.315898][ T24] usb 6-1: config 0 has no interface number 0 [ 428.343517][ T24] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 428.381303][ T24] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 428.442807][ T24] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 428.468756][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.484911][T16716] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5138'. [ 428.504411][ T24] usb 6-1: Product: syz [ 428.517039][ T24] usb 6-1: Manufacturer: syz [ 428.538573][ T24] usb 6-1: SerialNumber: syz [ 428.564217][ T24] usb 6-1: config 0 descriptor?? [ 428.584542][T16686] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 428.599701][ T24] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 428.654685][ T24] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 428.973345][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 429.072121][T16739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5147'. [ 429.083304][ T24] usb 6-1: USB disconnect, device number 14 [ 429.105231][ T24] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 429.137011][ T9] usb 7-1: config 0 has an invalid interface number: 58 but max is 0 [ 429.145775][ T24] cyberjack 6-1:0.69: device disconnected [ 429.163293][ T9] usb 7-1: config 0 has no interface number 0 [ 429.190307][ T9] usb 7-1: config 0 interface 58 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 429.234437][ T9] usb 7-1: config 0 interface 58 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 64 [ 429.275511][ T9] usb 7-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=7f.81 [ 429.293296][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.301303][ T9] usb 7-1: Product: syz [ 429.302621][T16747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 429.333844][ T9] usb 7-1: Manufacturer: syz [ 429.338459][ T9] usb 7-1: SerialNumber: syz [ 429.375760][ T9] usb 7-1: config 0 descriptor?? [ 429.384583][T16728] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 429.544725][T16755] mac80211_hwsim hwsim7 : renamed from wlan1 [ 429.659159][ T9] kaweth 7-1:0.58: Firmware present in device. [ 429.778038][T16763] netlink: 'syz.5.5159': attribute type 33 has an invalid length. [ 429.826200][ T9] kaweth 7-1:0.58: Error reading configuration (-71), no net device created [ 429.827007][T16763] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5159'. [ 429.845038][ T981] hid-generic 0081:0011:FFFFFF81.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 429.867145][ T9] kaweth 7-1:0.58: probe with driver kaweth failed with error -5 [ 429.929026][ T9] usb 7-1: USB disconnect, device number 8 [ 430.268847][T16771] fido_id[16771]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 430.554344][T13869] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 430.728825][T13869] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 430.779288][T13869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.811137][T13869] usb 6-1: config 0 descriptor?? [ 430.856643][T13869] cp210x 6-1:0.0: cp210x converter detected [ 431.063778][T13869] usb 6-1: cp210x converter now attached to ttyUSB0 [ 431.271110][T13869] usb 6-1: USB disconnect, device number 15 [ 431.330959][T13869] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 431.359537][T13869] cp210x 6-1:0.0: device disconnected [ 431.561282][T16828] ip6tnl1: entered promiscuous mode [ 431.693387][T16837] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5194'. [ 432.387059][T16876] process 'syz.0.5214' launched '/dev/fd/3' with NULL argv: empty string added [ 432.754643][T16894] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 432.804566][T16894] bond0: (slave lo): Error: Device can not be enslaved while up [ 432.975133][T16907] mmap: syz.6.5229 (16907): VmData 37478400 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 433.185988][T16912] openvswitch: netlink: Duplicate key (type 21). [ 433.643116][T16938] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 433.753826][T16945] x_tables: duplicate underflow at hook 4 [ 434.293292][ T981] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 434.368022][T16967] geneve3: entered promiscuous mode [ 434.496371][ T981] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 434.523432][T16973] SET target dimension over the limit! [ 434.541270][ T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.563663][ T981] usb 2-1: Product: syz [ 434.567847][ T981] usb 2-1: Manufacturer: syz [ 434.572437][ T981] usb 2-1: SerialNumber: syz [ 434.614939][ T981] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 434.668008][ T9] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 434.723082][T16981] netlink: 'syz.2.5265': attribute type 3 has an invalid length. [ 434.746673][T16981] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 434.767757][ T31] INFO: task syz.4.2425:11019 blocked for more than 143 seconds. [ 434.786488][ T31] Not tainted syzkaller #0 [ 434.791445][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 434.817753][ T31] task:syz.4.2425 state:D stack:28184 pid:11019 tgid:11016 ppid:5846 task_flags:0x400040 flags:0x00080002 [ 434.830260][ T31] Call Trace: [ 434.833804][ T31] [ 434.836749][ T31] __schedule+0x149b/0x4fd0 [ 434.841422][ T31] ? __pfx___schedule+0x10/0x10 [ 434.846605][ T31] ? schedule+0x91/0x360 [ 434.850861][ T31] schedule+0x165/0x360 [ 434.858494][T16985] tipc: Trying to set illegal importance in message [ 434.886940][ T31] schedule_preempt_disabled+0x13/0x30 [ 434.892425][ T31] __mutex_lock+0x7e6/0x1350 [ 434.953560][ T31] ? __mutex_lock+0x5bb/0x1350 [ 434.958387][ T31] ? usbdev_open+0x16e/0x760 [ 434.962997][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 435.009985][T16987] geneve3: entered promiscuous mode [ 435.033422][T16987] geneve3: entered allmulticast mode [ 435.038781][ T31] ? bus_find_device+0x273/0x2b0 [ 435.059414][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 435.086591][ T31] ? __pfx_kobject_get_unless_zero+0x10/0x10 [ 435.103230][ T31] ? usbdev_open+0xa7/0x760 [ 435.115255][ T31] usbdev_open+0x16e/0x760 [ 435.125215][ T31] ? do_raw_spin_lock+0x121/0x290 [ 435.133150][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 435.139672][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 435.146607][ T31] chrdev_open+0x4cc/0x5e0 [ 435.151102][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 435.158636][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 435.165460][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 435.170469][ T31] do_dentry_open+0x7ce/0x1420 [ 435.176446][ T31] vfs_open+0x3b/0x340 [ 435.180531][ T31] ? path_openat+0x33f3/0x3dd0 [ 435.185347][ T31] path_openat+0x340e/0x3dd0 [ 435.189954][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 435.195780][ T31] ? __pfx_filemap_map_pages+0x10/0x10 [ 435.201263][ T31] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 435.206938][ T31] ? getname_flags+0xb8/0x540 [ 435.211627][ T31] ? __pfx_path_openat+0x10/0x10 [ 435.216661][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 435.221622][ T31] do_filp_open+0x1fa/0x410 [ 435.227059][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 435.232111][ T31] ? _raw_spin_unlock+0x28/0x50 [ 435.239182][ T31] ? alloc_fd+0x64c/0x6c0 [ 435.243591][ T31] do_sys_openat2+0x121/0x200 [ 435.248377][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 435.255471][ T31] ? exc_page_fault+0x71/0xd0 [ 435.260202][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 435.267026][ T31] __x64_sys_openat+0x138/0x170 [ 435.271901][ T31] do_syscall_64+0xec/0xf80 [ 435.276723][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.283081][ T31] ? trace_irq_disable+0x37/0x100 [ 435.289146][ T31] ? clear_bhb_loop+0x60/0xb0 [ 435.293941][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.299854][ T31] RIP: 0033:0x7f4f4538df90 [ 435.304339][ T31] RSP: 002b:00007f4f462d2b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 435.312760][ T31] RAX: ffffffffffffffda RBX: 0000000000001501 RCX: 00007f4f4538df90 [ 435.320825][ T31] RDX: 0000000000001501 RSI: 00007f4f462d2c10 RDI: 00000000ffffff9c [ 435.328850][ T31] RBP: 00007f4f462d2c10 R08: 0000000000000000 R09: 0000000000000000 [ 435.337785][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 435.345804][ T31] R13: 00007f4f455e6038 R14: 00007f4f455e5fa0 R15: 00007f4f4570fa28 [ 435.354018][ T31] [ 435.412663][ T31] [ 435.412663][ T31] Showing all locks held in the system: [ 435.458502][ T31] 2 locks held by kworker/0:0/9: [ 435.473846][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 435.515814][ T31] #1: ffffc900000e7bc0 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 435.563240][ T31] 1 lock held by khungtaskd/31: [ 435.568131][ T31] #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 435.603240][ T31] 3 locks held by kworker/u8:6/152: [ 435.608458][ T31] #0: ffff88814d6f9148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 435.674387][ T31] #1: ffffc90002e57bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 435.733968][ T31] #2: ffffffff8f311e88 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 435.773306][ T31] 3 locks held by kworker/u8:12/3460: [ 435.778718][ T31] #0: ffff88814e768148 ((wq_completion)udp_tunnel_nic){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 435.853799][ T31] #1: ffffc9000c6d7bc0 ((work_completion)(&utn->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 435.903351][ T31] #2: ffffffff8f311e88 (rtnl_mutex){+.+.}-{4:4}, at: udp_tunnel_nic_device_sync_work+0x29/0xa10 [ 435.943303][ T31] 2 locks held by getty/5582: [ 435.948007][ T31] #0: ffff8880343d50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 435.954532][ T9] usb 2-1: Service connection timeout for: 256 [ 436.003409][ T9] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 436.014355][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 436.049302][ T31] 6 locks held by kworker/0:9/6489: [ 436.070638][ T31] 4 locks held by kworker/1:10/10570: [ 436.072576][ T9] ath9k_htc: Failed to initialize the device [ 436.082103][ T31] #0: ffff8880b873a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 436.102880][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 436.112943][ T31] #2: ffff88801c356a80 (&helper->lock){+.+.}-{4:4}, at: drm_fb_helper_damage_work+0x110/0x740 [ 436.117725][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 436.125592][ T31] #3: ffff888140bb8128 (&dev->master_mutex){+.+.}-{4:4}, at: drm_master_internal_acquire+0x20/0x80 [ 436.141037][ T31] 1 lock held by syz.4.2425/11019: [ 436.146345][ T31] #0: ffff888028646198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 436.158449][ T31] 1 lock held by syz.3.3338/12912: [ 436.163786][ T31] #0: ffff888028646198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 436.172788][ T31] 4 locks held by syz-executor/13463: [ 436.179689][ T31] #0: ffff8880343a0ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5b0 [ 436.190378][ T31] #1: ffff8880343a00c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x1100 [ 436.201076][ T31] #2: ffffffff8f483a48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 436.214839][ T31] #3: ffff888051d15338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5b0 [ 436.227035][ T31] 3 locks held by syz.1.5253/16956: [ 436.232240][ T31] #0: ffff88802ffa8ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5b0 [ 436.244003][ T31] #1: ffff88802ffa80c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x1100 [ 436.254289][ T31] #2: ffffffff8f483a48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 436.264519][ T31] 1 lock held by syz.5.5266/16984: [ 436.269632][ T31] #0: ffffffff8df475f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2b1/0x6e0 [ 436.283159][ T31] 3 locks held by syz.0.5267/16987: [ 436.290057][ T31] #0: ffffffff8f826670 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 436.299757][ T31] #1: ffffffff8f311e88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 [ 436.309664][ T31] #2: ffffffff8df475f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x36e/0x6e0 [ 436.322751][ T31] [ 436.355553][ T31] ============================================= [ 436.355553][ T31] [ 436.395746][ T31] NMI backtrace for cpu 1 [ 436.395768][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 436.395789][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 436.395800][ T31] Call Trace: [ 436.395814][ T31] [ 436.395823][ T31] dump_stack_lvl+0xe8/0x150 [ 436.395850][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 436.395874][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 436.395901][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 436.395927][ T31] sys_info+0x135/0x170 [ 436.395947][ T31] watchdog+0xf95/0xfe0 [ 436.395973][ T31] ? watchdog+0x20a/0xfe0 [ 436.396002][ T31] kthread+0x711/0x8a0 [ 436.396026][ T31] ? __pfx_watchdog+0x10/0x10 [ 436.396047][ T31] ? __pfx_kthread+0x10/0x10 [ 436.396071][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 436.396087][ T31] ? __pfx_kthread+0x10/0x10 [ 436.396107][ T31] ret_from_fork+0x510/0xa50 [ 436.396127][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 436.396142][ T31] ? __switch_to+0xc9e/0x1480 [ 436.396168][ T31] ? __pfx_kthread+0x10/0x10 [ 436.396190][ T31] ret_from_fork_asm+0x1a/0x30 [ 436.396226][ T31] [ 436.396234][ T31] Sending NMI from CPU 1 to CPUs 0: [ 436.516113][ C0] NMI backtrace for cpu 0 [ 436.516130][ C0] CPU: 0 UID: 0 PID: 12794 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT(full) [ 436.516148][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 436.516159][ C0] Workqueue: events_unbound toggle_allocation_gate [ 436.516181][ C0] RIP: 0010:__lock_acquire+0x5c0/0x2cf0 [ 436.516199][ C0] Code: ff ff ff 48 c7 c7 30 1d e1 8d 4c 89 fe e8 e8 00 29 03 e9 69 ff ff ff 41 83 be 14 0b 00 00 00 41 0f 94 c4 45 00 e4 41 80 c4 03 <49> 89 ed 41 3b 9e 28 0b 00 00 0f 8c 0b ff ff ff 44 89 e0 38 04 24 [ 436.516213][ C0] RSP: 0018:ffffc90005547490 EFLAGS: 00000006 [ 436.516226][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000000ffffffff [ 436.516236][ C0] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 436.516246][ C0] RBP: ffff888023e24920 R08: ffffffff8213415e R09: ffff88813ff24078 [ 436.516258][ C0] R10: dffffc0000000000 R11: fffff94000010e01 R12: ffffffffffffff05 [ 436.516269][ C0] R13: 0000000000000000 R14: ffff888023e23d00 R15: 0000000000000000 [ 436.516280][ C0] FS: 0000000000000000(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 436.516293][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 436.516304][ C0] CR2: 00005555915de000 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 436.516318][ C0] Call Trace: [ 436.516324][ C0] [ 436.516335][ C0] ? inat_get_escape_attribute+0x109/0x190 [ 436.516357][ C0] ? insn_get_opcode+0xb12/0x11b0 [ 436.516374][ C0] ? __pte_offset_map_lock+0x13e/0x210 [ 436.516393][ C0] lock_acquire+0x107/0x340 [ 436.516407][ C0] ? __pte_offset_map_lock+0x13e/0x210 [ 436.516428][ C0] ? rcu_is_watching+0x15/0xb0 [ 436.516446][ C0] _raw_spin_lock+0x2e/0x40 [ 436.516465][ C0] ? __pte_offset_map_lock+0x13e/0x210 [ 436.516484][ C0] __pte_offset_map_lock+0x13e/0x210 [ 436.516504][ C0] ? __kvmalloc_node_noprof+0x18e/0x920 [ 436.516520][ C0] __text_poke+0x2cf/0x990 [ 436.516539][ C0] ? __kmalloc_cache_node_noprof+0xa0/0x700 [ 436.516560][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 436.516576][ C0] ? rcu_is_watching+0x15/0xb0 [ 436.516592][ C0] ? __kvmalloc_node_noprof+0x18e/0x920 [ 436.516607][ C0] ? __pfx___text_poke+0x10/0x10 [ 436.516627][ C0] smp_text_poke_batch_finish+0x90a/0x1130 [ 436.516649][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 436.516668][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 436.516691][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 436.516710][ C0] static_key_disable_cpuslocked+0xc5/0x1a0 [ 436.516730][ C0] static_key_disable+0x1a/0x20 [ 436.516748][ C0] toggle_allocation_gate+0x1a1/0x240 [ 436.516764][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 436.516780][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 436.516798][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 436.516813][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 436.516828][ C0] process_scheduled_works+0xad1/0x1770 [ 436.516852][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 436.516866][ C0] ? do_raw_spin_lock+0x121/0x290 [ 436.516890][ C0] worker_thread+0x8a0/0xda0 [ 436.516909][ C0] ? __kthread_parkme+0x7b/0x200 [ 436.516928][ C0] kthread+0x711/0x8a0 [ 436.516946][ C0] ? __pfx_worker_thread+0x10/0x10 [ 436.516959][ C0] ? __pfx_kthread+0x10/0x10 [ 436.516977][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 436.516990][ C0] ? __pfx_kthread+0x10/0x10 [ 436.517007][ C0] ret_from_fork+0x510/0xa50 [ 436.517022][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 436.517035][ C0] ? __switch_to+0xc9e/0x1480 [ 436.517055][ C0] ? __pfx_kthread+0x10/0x10 [ 436.517072][ C0] ret_from_fork_asm+0x1a/0x30 [ 436.517096][ C0] [ 436.972417][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 436.979301][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 436.988413][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 436.998459][ T31] Call Trace: [ 437.001732][ T31] [ 437.004652][ T31] vpanic+0x1e0/0x670 [ 437.008631][ T31] panic+0xb9/0xc0 [ 437.012354][ T31] ? __pfx_panic+0x10/0x10 [ 437.016760][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 437.022124][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 437.028274][ T31] watchdog+0xfdf/0xfe0 [ 437.032427][ T31] ? watchdog+0x20a/0xfe0 [ 437.036754][ T31] kthread+0x711/0x8a0 [ 437.040817][ T31] ? __pfx_watchdog+0x10/0x10 [ 437.045486][ T31] ? __pfx_kthread+0x10/0x10 [ 437.050072][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 437.055255][ T31] ? __pfx_kthread+0x10/0x10 [ 437.059833][ T31] ret_from_fork+0x510/0xa50 [ 437.064415][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 437.069512][ T31] ? __switch_to+0xc9e/0x1480 [ 437.074183][ T31] ? __pfx_kthread+0x10/0x10 [ 437.078767][ T31] ret_from_fork_asm+0x1a/0x30 [ 437.083541][ T31] [ 437.086904][ T31] Kernel Offset: disabled [ 437.091209][ T31] Rebooting in 86400 seconds..