last executing test programs: 5.219934919s ago: executing program 0 (id=5156): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004b0000407e05092000000000000109022400010000000009040000fd0300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "7f73870c"}]}}, 0x0}, 0x0) 3.916689158s ago: executing program 4 (id=5171): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x9, 0x2}}}, 0x24}}, 0x0) 3.756120523s ago: executing program 4 (id=5175): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 3.518519744s ago: executing program 4 (id=5181): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000401c1b3e1b00000000000109026a00010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x4000) 2.357090513s ago: executing program 1 (id=5198): r0 = syz_io_uring_setup(0xc73, &(0x7f0000000140)={0x0, 0x7e1c, 0x0, 0x0, 0xffffffff}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.059942813s ago: executing program 0 (id=5200): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 2.059796125s ago: executing program 2 (id=5201): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000000)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) 1.806849373s ago: executing program 0 (id=5202): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0xd, &(0x7f0000000040)={r1}, 0x8) 1.764589067s ago: executing program 2 (id=5203): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x141042, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x7fff0018) 1.718516336s ago: executing program 1 (id=5204): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000100000000000001b11eb95"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='io_uring_cqring_wait\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x72c6, &(0x7f0000000140)={0x0, 0x0, 0x400, 0x0, 0x24e}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r1, 0x0, 0x45d0, 0x1, 0x0, 0x0) 1.682710724s ago: executing program 0 (id=5205): r0 = syz_io_uring_setup(0x2785, &(0x7f0000000680)={0x0, 0xf72b}, &(0x7f0000000300), &(0x7f0000000840)) r1 = io_uring_setup(0x2e1b, &(0x7f0000000040)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x1b, 0x2000f000, r2) 1.67733183s ago: executing program 4 (id=5206): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) close(r0) io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x3040}) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000002140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1.479292039s ago: executing program 4 (id=5207): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000d40), 0x208e24b) r1 = socket$inet(0x2, 0x2, 0x1) sendfile(r1, r0, &(0x7f0000000240)=0x100, 0x10001) 1.429605783s ago: executing program 0 (id=5208): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x8031, 0xffffffffffffffff, 0xffffc000) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000000c0)={'wlan0\x00', {0x2, 0x0, @dev}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000013c0)={'veth1\x00', {0x2, 0x4e20, @multicast2}}) 1.338551935s ago: executing program 2 (id=5210): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="85"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002030702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000110020850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x66, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.245954983s ago: executing program 3 (id=5211): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1.043856103s ago: executing program 2 (id=5212): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x55fb, &(0x7f0000000180)={0x0, 0x2fb3, 0xc6, 0x2, 0xe6}, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/kernel/notes', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f00000012c0)=""/112, 0x6c}], 0x2, 0x0, 0x0) 1.043681497s ago: executing program 3 (id=5213): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000000000000a00004000000100010000000000000000000000000000000000000000000000000000000000000001000040000000010000000048762331"]) 834.446073ms ago: executing program 2 (id=5214): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, &(0x7f0000000100)) 712.024574ms ago: executing program 3 (id=5215): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) 703.296095ms ago: executing program 1 (id=5216): bpf$OBJ_PIN_MAP(0x6, &(0x7f00000006c0)=@o_path={&(0x7f0000000040)='./file0\x00'}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x105042, 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 539.439642ms ago: executing program 3 (id=5217): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c9, &(0x7f0000000100)) 474.216072ms ago: executing program 1 (id=5218): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_io_uring_setup(0x24f8, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}) io_uring_enter(r1, 0x5b47, 0x0, 0x0, 0x0, 0x0) 347.937511ms ago: executing program 3 (id=5219): clock_adjtime(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) r0 = io_uring_setup(0x7bda, &(0x7f0000000080)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x18, 0x20000003, r1) 347.414352ms ago: executing program 4 (id=5220): r0 = socket$kcm(0xa, 0x2, 0x73) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001280)=[@ip_tos_int={{0x6b, 0x29, 0x2}}, @ip_retopts={{0x100007f00000000, 0x8, 0x7, {[@end, @generic={0x0, 0x0, "34366567f22197875664"}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @loopback}}}], 0x6b}, 0x0) 283.447101ms ago: executing program 1 (id=5221): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000080), 0xc) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000180)) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, 0x0) 258.694073ms ago: executing program 2 (id=5222): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xc0}}, 0x0) 163.977084ms ago: executing program 3 (id=5223): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r0, &(0x7f00000004c0)=@rc={0x1f, @none, 0x8}, 0x80) read(r0, &(0x7f0000000000)=""/63, 0x3f) shutdown(r0, 0x0) 66.051891ms ago: executing program 0 (id=5224): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0xa}], 0x1, 0x384) 0s ago: executing program 1 (id=5225): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001880)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x98, 0x130, 0x0, 0x98, 0x280, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'netpci0\x00', 'netpci0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@local, @local, 0x0, 0x0, 'vcan0\x00', 'netpci0\x00', {}, {}, 0x11, 0x0, 0x4c}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'team_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @TTL={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f2, 0x0) kernel console output (not intermixed with test programs): alNumber=3 [ 321.711167][ T5302] usb 1-1: config 0 descriptor?? [ 321.716490][ T5270] usb 4-1: Product: syz [ 321.721985][T12123] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 321.738037][ T5270] usb 4-1: Manufacturer: syz [ 321.744439][T12123] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 321.752303][ T5270] usb 4-1: SerialNumber: syz [ 321.769008][ T5270] usb 4-1: config 0 descriptor?? [ 321.790673][ T5270] usb 4-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF5) Rev (0XDFC2): Eagle I [ 321.830839][ T1847] usb 5-1: USB disconnect, device number 35 [ 321.959341][ T5270] usb 4-1: reset high-speed USB device number 31 using dummy_hcd [ 321.973846][T12123] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 321.989378][T12123] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 322.409867][ T5302] asix 1-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 322.438261][ T5302] asix 1-1:0.251: probe with driver asix failed with error -524 [ 322.639280][ T5270] usb 4-1: device descriptor read/64, error -71 [ 322.710182][ T5302] usb 1-1: USB disconnect, device number 28 [ 322.778304][ T5273] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 322.794677][T12164] IPVS: fo: FWM 4 0x00000004 - no destination available [ 322.878093][ T5270] usb 4-1: reset high-speed USB device number 31 using dummy_hcd [ 322.968288][ T5273] usb 2-1: Using ep0 maxpacket: 8 [ 322.976245][ T5273] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 322.986237][ T5273] usb 2-1: config 179 has no interface number 0 [ 322.993009][ T5273] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 323.005453][ T5273] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 323.018135][ T1847] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 323.022443][ T5273] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 323.038798][ T5273] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 323.050813][ T5273] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 323.085640][ T5273] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 323.095696][ T5273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.128923][T12151] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 323.184940][ T1847] usb 5-1: Using ep0 maxpacket: 32 [ 323.198369][ T1847] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 323.217489][ T1847] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 323.227473][ T1847] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 323.250225][ T1847] usb 5-1: config 1 has no interface number 0 [ 323.256491][ T1847] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 323.267835][ T1847] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 323.281624][ T1847] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 323.291504][ T1847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.325083][ T1847] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 323.415419][ T8] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input49 [ 323.454427][ T5270] usb 4-1: [UEAGLE-ATM] interface 1 not found [ 323.460806][ T5270] ueagle-atm 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 323.537719][ T5270] usb 4-1: USB disconnect, device number 31 [ 323.625921][ T8] usb 2-1: USB disconnect, device number 34 [ 323.631998][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 323.632052][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 323.656602][ T8] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 323.911129][ T1847] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 324.187788][ T8] usb 5-1: USB disconnect, device number 36 [ 324.208777][ T8] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 325.048090][ T8] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 325.228337][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 325.328224][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.339781][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.349663][ T8] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 325.358804][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.379005][ T8] usb 5-1: config 0 descriptor?? [ 325.438110][ T5305] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 325.621002][ T1847] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 325.640214][ T5305] usb 3-1: Using ep0 maxpacket: 8 [ 325.656425][ T5305] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.669608][ T5305] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1040, setting to 1024 [ 325.687088][ T5305] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 325.709768][ T5305] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 325.720176][ T5305] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 325.741327][ T5305] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 325.751560][ T5305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.774172][ T5305] usb 3-1: Product: syz [ 325.784686][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 325.784706][ T29] audit: type=1326 audit(1728069622.925:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12228 comm="syz.1.3095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a0f7dff9 code=0x7ffc0000 [ 325.785201][ T5305] usb 3-1: Manufacturer: syz [ 325.805164][ T29] audit: type=1326 audit(1728069622.945:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12228 comm="syz.1.3095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1a0f7dff9 code=0x7ffc0000 [ 325.829910][ T8] koneplus 0003:1E7D:2D51.0056: unknown main item tag 0x0 [ 325.875489][ T8] koneplus 0003:1E7D:2D51.0056: unknown main item tag 0x0 [ 325.878432][ T1847] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 325.887636][ T8] koneplus 0003:1E7D:2D51.0056: unknown main item tag 0x0 [ 325.902607][ T29] audit: type=1326 audit(1728069622.945:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12228 comm="syz.1.3095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a0f7dff9 code=0x7ffc0000 [ 325.938095][ T5305] usb 3-1: SerialNumber: syz [ 325.938136][ T1847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.950466][ T8] koneplus 0003:1E7D:2D51.0056: unknown main item tag 0x0 [ 325.976178][ T1847] usb 4-1: config 0 descriptor?? [ 325.981161][ T8] koneplus 0003:1E7D:2D51.0056: unknown main item tag 0x0 [ 326.000287][ T29] audit: type=1326 audit(1728069622.945:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12228 comm="syz.1.3095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a0f7dff9 code=0x7ffc0000 [ 326.007465][ T1847] usb 4-1: can't set config #0, error -71 [ 326.034358][ T8] koneplus 0003:1E7D:2D51.0056: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.4-1/input0 [ 326.062247][ T29] audit: type=1326 audit(1728069622.995:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12228 comm="syz.1.3095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1a0f7dff9 code=0x7ffc0000 [ 326.077870][ T1847] usb 4-1: USB disconnect, device number 32 [ 326.106561][ T29] audit: type=1326 audit(1728069622.995:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12228 comm="syz.1.3095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a0f7dff9 code=0x7ffc0000 [ 326.129097][ T29] audit: type=1326 audit(1728069622.995:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12228 comm="syz.1.3095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe1a0f74fa7 code=0x7ffc0000 [ 326.151362][ T29] audit: type=1326 audit(1728069622.995:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12228 comm="syz.1.3095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe1a0f19959 code=0x7ffc0000 [ 326.173922][ T29] audit: type=1326 audit(1728069622.995:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12228 comm="syz.1.3095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe1a0f74fa7 code=0x7ffc0000 [ 326.196842][ T29] audit: type=1326 audit(1728069622.995:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12228 comm="syz.1.3095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe1a0f19959 code=0x7ffc0000 [ 326.239633][ T5305] cdc_ncm 3-1:1.0: bind() failure [ 326.250105][ T5305] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 326.257094][ T5305] cdc_ncm 3-1:1.1: bind() failure [ 326.288035][ T5305] usb 3-1: USB disconnect, device number 23 [ 326.289140][ T5302] usb 5-1: USB disconnect, device number 37 [ 326.656157][T12236] sp0: Synchronizing with TNC [ 327.309462][T12261] sctp: [Deprecated]: syz.1.3109 (pid 12261) Use of struct sctp_assoc_value in delayed_ack socket option. [ 327.309462][T12261] Use struct sctp_sack_info instead [ 327.769722][T12272] netpci0: tun_chr_ioctl cmd 1074025677 [ 327.785806][T12272] netpci0: linktype set to 6 [ 328.416895][ T3014] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.641773][ T3014] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.864059][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 328.888258][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 328.911996][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 328.956052][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 329.011272][ T3014] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.034984][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 329.099127][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 329.112884][T12310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3134'. [ 329.123545][T12310] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3134'. [ 329.312221][ T3014] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.382414][T12317] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3137'. [ 329.772790][ T3014] bridge_slave_1: left allmulticast mode [ 329.805891][ T3014] bridge_slave_1: left promiscuous mode [ 329.818651][ T3014] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.889389][ T3014] bridge_slave_0: left allmulticast mode [ 329.901182][ T3014] bridge_slave_0: left promiscuous mode [ 329.915312][ T3014] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.030096][ T3014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.043956][ T3014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.056726][ T3014] bond0 (unregistering): Released all slaves [ 331.073058][ T3014] bond1 (unregistering): Released all slaves [ 331.228818][ T54] Bluetooth: hci4: command tx timeout [ 331.274679][T12343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3149'. [ 331.293829][ T3014] tipc: Disabling bearer [ 331.302646][ T3014] tipc: Left network mode [ 331.337689][T12348] netlink: 'syz.1.3151': attribute type 9 has an invalid length. [ 331.731980][T12298] chnl_net:caif_netlink_parms(): no params data found [ 332.419630][ T8] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 332.588489][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 332.601637][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 332.628047][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 332.658126][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 332.696304][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 332.709084][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 333.229422][ T8] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 333.267464][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.297985][ T8] usb 2-1: Product: syz [ 333.310526][ T8] usb 2-1: Manufacturer: syz [ 333.320692][ T54] Bluetooth: hci4: command tx timeout [ 333.328050][ T8] usb 2-1: SerialNumber: syz [ 333.381200][ T8] usb 2-1: config 0 descriptor?? [ 333.411487][ T8] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input50 [ 333.715115][ T8] usb 2-1: USB disconnect, device number 35 [ 334.220317][T12298] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.241934][T12298] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.262328][T12298] bridge_slave_0: entered allmulticast mode [ 334.284449][T12298] bridge_slave_0: entered promiscuous mode [ 334.312254][T12298] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.328375][T12298] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.355392][T12298] bridge_slave_1: entered allmulticast mode [ 334.372835][T12298] bridge_slave_1: entered promiscuous mode [ 334.502283][ T3014] hsr_slave_0: left promiscuous mode [ 334.509363][ T3014] hsr_slave_1: left promiscuous mode [ 334.528279][ T3014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.545083][ T3014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.566824][ T3014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.606633][ T3014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.667411][ T3014] veth1_macvtap: left promiscuous mode [ 334.673603][ T3014] veth0_macvtap: left promiscuous mode [ 334.680699][ T3014] veth1_vlan: left promiscuous mode [ 334.689937][ T3014] veth0_vlan: left promiscuous mode [ 335.388518][ T54] Bluetooth: hci4: command tx timeout [ 336.295165][ T3014] team0 (unregistering): Port device team_slave_1 removed [ 336.478684][ T3014] team0 (unregistering): Port device team_slave_0 removed [ 337.478826][ T54] Bluetooth: hci4: command tx timeout [ 337.547825][T12298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.574775][T12417] tipc: Started in network mode [ 337.585826][T12417] tipc: Node identity 4, cluster identity 4711 [ 337.594451][T12417] tipc: Node number set to 4 [ 337.614380][T12417] tipc: Cannot configure node identity twice [ 337.653123][T12298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.925781][T12298] team0: Port device team_slave_0 added [ 337.943924][T12298] team0: Port device team_slave_1 added [ 338.075966][T12298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.084250][T12298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.168501][T12298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.210015][T12298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.217037][T12298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.289344][T12298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.358385][T12298] hsr_slave_0: entered promiscuous mode [ 338.381369][T12298] hsr_slave_1: entered promiscuous mode [ 338.389992][T12298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 338.406764][T12298] Cannot create hsr debugfs directory [ 338.976929][T12437] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 339.425467][T12447] netlink: 'syz.4.3192': attribute type 1 has an invalid length. [ 339.444521][T12447] netlink: 'syz.4.3192': attribute type 2 has an invalid length. [ 339.921444][T12298] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 339.968865][ T5229] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 339.980616][ T5229] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 339.989687][ T5229] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 340.000211][ T5229] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 340.008654][ T5229] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 340.016119][ T5229] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 340.106302][T12298] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 340.206378][T12298] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 340.439289][T12298] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 340.867312][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.105107][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.300668][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.472382][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.551724][T12453] chnl_net:caif_netlink_parms(): no params data found [ 341.793244][T12298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.039480][T12453] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.047010][T12453] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.068297][T12453] bridge_slave_0: entered allmulticast mode [ 342.075588][T12453] bridge_slave_0: entered promiscuous mode [ 342.084282][T12453] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.091502][T12453] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.099037][T12453] bridge_slave_1: entered allmulticast mode [ 342.106029][T12453] bridge_slave_1: entered promiscuous mode [ 342.166359][ T11] bridge_slave_1: left allmulticast mode [ 342.182477][ T11] bridge_slave_1: left promiscuous mode [ 342.193254][ T5229] Bluetooth: hci6: command tx timeout [ 342.201048][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.246168][ T11] bridge_slave_0: left allmulticast mode [ 342.252299][ T11] bridge_slave_0: left promiscuous mode [ 342.260043][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.477532][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.503901][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.525027][ T11] bond0 (unregistering): Released all slaves [ 343.564645][T12453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.615442][T12453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.834128][T12526] program syz.0.3223 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 343.900190][T12528] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3226'. [ 343.912248][T12528] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3226'. [ 343.952192][T12298] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.071541][ T3600] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.078739][ T3600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.270301][ T3600] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.277815][ T3600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.289571][ T5229] Bluetooth: hci6: command tx timeout [ 344.394441][T12453] team0: Port device team_slave_0 added [ 344.403372][T12536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.412655][T12536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.440781][T12536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.546625][T12536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.656939][T12453] team0: Port device team_slave_1 added [ 345.028376][ T11] hsr_slave_0: left promiscuous mode [ 345.044418][ T11] hsr_slave_1: left promiscuous mode [ 345.060885][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.084152][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.102891][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.136921][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.263890][ T11] veth1_macvtap: left promiscuous mode [ 345.305269][ T11] veth0_macvtap: left promiscuous mode [ 345.355214][ T11] veth1_vlan: left promiscuous mode [ 345.367701][ T11] veth0_vlan: left promiscuous mode [ 346.348745][ T5229] Bluetooth: hci6: command tx timeout [ 346.610787][ T11] team0 (unregistering): Port device team_slave_1 removed [ 346.671434][ T11] team0 (unregistering): Port device team_slave_0 removed [ 347.219476][T12453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.226644][T12453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.255986][T12453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.301370][T12453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.317984][T12453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.346009][T12453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.399429][T12572] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3242'. [ 347.613348][T12298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 347.710136][T12453] hsr_slave_0: entered promiscuous mode [ 347.788536][T12453] hsr_slave_1: entered promiscuous mode [ 347.807642][T12453] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.836978][T12453] Cannot create hsr debugfs directory [ 348.337991][ T1847] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 348.342978][T12298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.428891][ T5229] Bluetooth: hci6: command tx timeout [ 348.526358][ T11] IPVS: stop unused estimator thread 0... [ 348.532903][ T1847] usb 2-1: Using ep0 maxpacket: 16 [ 348.578986][ T1847] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.624124][ T1847] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 348.648153][ T1847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.677983][ T1847] usb 2-1: Product: syz [ 348.684167][ T1847] usb 2-1: Manufacturer: syz [ 348.708018][ T1847] usb 2-1: SerialNumber: syz [ 348.715607][T12298] veth0_vlan: entered promiscuous mode [ 348.728924][ T1847] usb 2-1: config 0 descriptor?? [ 348.781280][T12298] veth1_vlan: entered promiscuous mode [ 348.924129][T12298] veth0_macvtap: entered promiscuous mode [ 348.953616][ T1847] usb 2-1: Not enough endpoints found in device, aborting! [ 349.001154][T12298] veth1_macvtap: entered promiscuous mode [ 349.081125][T12298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.092459][T12298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.103618][T12298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.114251][T12298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.124470][T12298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.135319][T12298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.147401][T12298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.155281][ T5302] usb 2-1: USB disconnect, device number 36 [ 349.158181][T12298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.172089][T12298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.182051][T12298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.193355][T12298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.203912][T12298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.214811][T12298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.226093][T12298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.249411][T12298] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.258313][T12298] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.267040][T12298] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.276153][T12298] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.332746][T12453] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 349.373761][T12453] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 349.399235][ T1847] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 349.401788][T12453] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 349.438870][T12453] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 349.570710][ T1847] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 349.594409][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.608242][ T1847] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 349.619994][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.641795][ T1847] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 349.668954][ T1847] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 349.690746][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.706249][ T1847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.718040][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.741518][T12604] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 349.777757][T12453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.798842][T12453] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.823323][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.830506][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.879299][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.886497][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.010935][T12453] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 350.603272][T12622] serio: Serial port ptm0 [ 350.609188][ T5302] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 350.683419][T12453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.793114][ T1847] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 350.800547][ T5302] usb 4-1: Using ep0 maxpacket: 16 [ 350.812730][ T5302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 350.823379][ T1847] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input53 [ 350.870821][ T5302] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 350.897860][T12453] veth0_vlan: entered promiscuous mode [ 350.911062][ T5302] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.924621][ T1847] usb 1-1: USB disconnect, device number 29 [ 350.930828][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 350.948452][ T5302] usb 4-1: Product: syz [ 350.959386][ T5302] usb 4-1: Manufacturer: syz [ 350.980441][ T5302] usb 4-1: SerialNumber: syz [ 351.000874][ T5302] usb 4-1: config 0 descriptor?? [ 351.060560][ T5302] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 351.130062][T12453] veth1_vlan: entered promiscuous mode [ 351.137432][ T5302] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 351.294718][T12453] veth0_macvtap: entered promiscuous mode [ 351.350581][T12453] veth1_macvtap: entered promiscuous mode [ 351.594239][T12453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.656896][T12453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.675025][ T5302] em28xx 4-1:0.0: chip ID is em2710/2820 [ 351.704071][T12453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.767623][T12453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.825247][T12453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.876193][T12453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.904355][T12453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.929611][T12640] program syz.0.3267 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 351.947222][ T5302] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 351.972011][T12453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.984575][ T5302] em28xx 4-1:0.0: board has no eeprom [ 352.005760][T12453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.088733][ T5302] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 352.120683][T12453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.138108][ T5302] em28xx 4-1:0.0: dvb set to bulk mode. [ 352.175080][ T1847] em28xx 4-1:0.0: Binding DVB extension [ 352.196748][ T5302] usb 4-1: USB disconnect, device number 33 [ 352.208538][T12453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.260150][ T5302] em28xx 4-1:0.0: Disconnecting em28xx [ 352.279781][T12453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.338513][T12453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.379316][T12453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.398987][ T1847] em28xx 4-1:0.0: Registering input extension [ 352.414182][ T5302] em28xx 4-1:0.0: Closing input extension [ 352.425217][T12453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.453002][T12647] program syz.1.3270 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 352.473936][T12453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.490912][ T5302] em28xx 4-1:0.0: Freeing device [ 352.510270][T12453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.581432][T12453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.683264][T12453] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.693346][T12453] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.705303][T12453] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.714241][T12453] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.224811][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.279632][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.424941][ T3600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.452506][ T3600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.626735][T12667] @: renamed from vlan0 (while UP) [ 354.728088][ T5302] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 355.100467][ T5302] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 355.109706][ T5302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.147115][ T5302] usb 5-1: config 0 descriptor?? [ 355.218756][ T5302] gspca_main: spca508-2.14.0 probing 8086:0110 [ 355.400924][ T5302] gspca_spca508: reg_read err -32 [ 355.610905][ T5302] gspca_spca508: reg_read err -71 [ 355.618679][ T5302] gspca_spca508: reg_read err -71 [ 355.626511][ T5275] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 355.642516][ T5302] gspca_spca508: reg_read err -71 [ 355.662752][ T5302] gspca_spca508: reg write: error -71 [ 355.669006][ T5302] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 355.683585][ T5302] usb 5-1: USB disconnect, device number 38 [ 355.831076][ T5275] usb 1-1: Using ep0 maxpacket: 8 [ 355.846024][ T5275] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 355.855972][ T5275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.866499][ T5275] usb 1-1: config 0 descriptor?? [ 356.702926][ T5275] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 356.721608][ T5275] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 356.768207][ T5275] asix 1-1:0.0: probe with driver asix failed with error -71 [ 356.797030][ T5275] usb 1-1: USB disconnect, device number 30 [ 357.170583][T12760] Process accounting resumed [ 357.188424][T12760] kernel write not supported for file /asound/timers (pid: 12760 comm: syz.1.3318) [ 357.458654][ T25] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 357.459165][T12772] netlink: 'syz.3.3324': attribute type 4 has an invalid length. [ 357.641697][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 357.668342][ T25] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 357.688568][ T25] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 357.728748][ T25] usb 5-1: config 135 has no interface number 0 [ 357.748137][ T25] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 357.786577][ T25] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 357.810787][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.845619][ T25] usb 5-1: Product: syz [ 357.858195][ T25] usb 5-1: Manufacturer: syz [ 357.874572][ T25] usb 5-1: SerialNumber: syz [ 358.112325][ T25] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 358.119380][ T25] usb 5-1: No valid video chain found. [ 358.135563][ T25] usb 5-1: USB disconnect, device number 39 [ 359.089932][T12814] netlink: 'syz.2.3340': attribute type 1 has an invalid length. [ 359.168852][T12814] netlink: 9332 bytes leftover after parsing attributes in process `syz.2.3340'. [ 359.205811][T12820] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3343'. [ 359.210616][T12814] netlink: 'syz.2.3340': attribute type 1 has an invalid length. [ 359.235283][T12820] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3343'. [ 359.629279][T12838] netlink: 'syz.2.3350': attribute type 6 has an invalid length. [ 360.956381][T12897] vlan2: entered allmulticast mode [ 361.419230][T12913] ptrace attach of "./syz-executor exec"[12918] was attempted by ""[12913] [ 361.528176][ T5275] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 361.698189][ T5275] usb 2-1: Using ep0 maxpacket: 8 [ 361.705628][ T5275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.748385][ T5275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.808679][ T5275] usb 2-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 361.856203][ T5275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.901105][ T5275] usb 2-1: config 0 descriptor?? [ 361.908360][ T8] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 362.178455][ T8] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 362.197341][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.257978][ T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.314875][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 362.361071][ T5275] hid-led 0003:04D8:F372.0057: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.1-1/input0 [ 362.402043][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.425444][ T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.459303][ T5275] hid-led 0003:04D8:F372.0057: Greynut Luxafor initialized [ 362.467830][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 362.548429][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.557492][ T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.618158][ T5305] usb 2-1: USB disconnect, device number 37 [ 362.625769][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 362.633886][ T5273] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 362.645649][ T5273] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 362.680785][ T5273] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 362.689311][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.708789][ T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.719859][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 362.739552][ T5273] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 362.768863][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.778438][ T5273] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 362.786932][ T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.807986][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 362.818212][ T5273] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 362.828430][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 362.828450][ T29] audit: type=1326 audit(1728069659.965:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12949 comm="syz.3.3406" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa59cd7dff9 code=0x0 [ 362.856369][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.866785][ T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.878086][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 362.885179][ T5273] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 362.894796][ T5274] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 362.906457][ T5273] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 362.915392][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.925461][ T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.936496][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 362.945416][ T5273] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 362.955056][ T5273] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 362.963478][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.972506][ T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.983895][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 362.993035][ T5273] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 363.007969][ T5274] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 363.034750][ T5274] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 363.045923][ T5274] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 363.055107][ T8] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 363.064849][ T8] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 363.074824][ T8] usb 3-1: Product: syz [ 363.079379][ T8] usb 3-1: Manufacturer: syz [ 363.084255][ T8] usb 3-1: SerialNumber: syz [ 363.145630][ T5274] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 363.174030][ T5274] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 363.183509][ T8] usb 3-1: config 0 descriptor?? [ 363.201082][ T5274] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 363.271436][ T8] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 363.740108][ T8] usb 3-1: USB disconnect, device number 24 [ 363.756579][ T8] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 364.703565][T13008] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3429'. [ 364.952247][T13014] netlink: 'syz.1.3434': attribute type 1 has an invalid length. [ 364.983278][T13014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3434'. [ 365.676359][T13044] netem: incorrect ge model size [ 365.694227][T13044] netem: change failed [ 366.707605][ T25] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 366.878900][ T25] usb 4-1: config 0 has no interfaces? [ 366.884765][ T25] usb 4-1: New USB device found, idVendor=046d, idProduct=1017, bcdDevice= 0.00 [ 366.894118][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.926982][ T25] usb 4-1: config 0 descriptor?? [ 367.149819][ T25] usb 4-1: USB disconnect, device number 34 [ 368.348741][T13120] option changes via remount are deprecated (pid=13118 comm=syz.2.3479) [ 368.844013][T13136] devtmpfs: Cannot change global quota limit on remount [ 369.002537][T13143] tap0: tun_chr_ioctl cmd 1074025677 [ 369.022647][T13143] tap0: linktype set to 65534 [ 369.473356][T13161] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3498'. [ 369.557354][T13164] netlink: 'syz.2.3497': attribute type 5 has an invalid length. [ 369.855779][T13145] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 369.889778][T13145] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 369.935365][T13145] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 369.967987][T13145] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 370.916996][T13145] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 370.927974][T13145] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 370.953977][T13218] netlink: 'syz.2.3512': attribute type 2 has an invalid length. [ 370.965080][T13215] block nbd3: NBD_DISCONNECT [ 371.307593][T13145] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 371.314893][T13145] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 371.333128][T13145] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 371.348530][T13145] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 371.593956][ T29] audit: type=1326 audit(1728069668.735:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13245 comm="syz.4.3521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff103d7dff9 code=0x7ffc0000 [ 371.644853][ T29] audit: type=1326 audit(1728069668.735:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13245 comm="syz.4.3521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff103d7dff9 code=0x7ffc0000 [ 371.737974][ T29] audit: type=1326 audit(1728069668.745:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13245 comm="syz.4.3521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff103d7dff9 code=0x7ffc0000 [ 371.825873][ T29] audit: type=1326 audit(1728069668.745:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13245 comm="syz.4.3521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff103d7dff9 code=0x7ffc0000 [ 371.878023][ T29] audit: type=1326 audit(1728069668.745:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13245 comm="syz.4.3521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff103d7dff9 code=0x7ffc0000 [ 371.952262][ T29] audit: type=1326 audit(1728069668.745:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13245 comm="syz.4.3521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff103d7dff9 code=0x7ffc0000 [ 372.045846][ T29] audit: type=1326 audit(1728069668.765:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13245 comm="syz.4.3521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff103d7dff9 code=0x7ffc0000 [ 372.116469][ T29] audit: type=1326 audit(1728069668.785:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13245 comm="syz.4.3521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff103d74fa7 code=0x7ffc0000 [ 372.138619][ T29] audit: type=1326 audit(1728069668.785:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13245 comm="syz.4.3521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff103d19959 code=0x7ffc0000 [ 372.160548][ T29] audit: type=1326 audit(1728069668.785:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13245 comm="syz.4.3521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff103d74fa7 code=0x7ffc0000 [ 373.038194][ T5275] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 373.192501][T13323] overlayfs: missing 'workdir' [ 373.230168][ T5275] usb 4-1: Using ep0 maxpacket: 32 [ 373.239749][ T5275] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 373.248345][ T5275] usb 4-1: config 0 has no interface number 0 [ 373.254619][ T5275] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 373.264988][ T5275] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 373.287977][ T5275] usb 4-1: config 0 interface 126 has no altsetting 0 [ 373.309939][ T5275] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 373.325326][ T5275] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.340069][ T5275] usb 4-1: Product: syz [ 373.347971][ T5275] usb 4-1: Manufacturer: syz [ 373.352619][ T5275] usb 4-1: SerialNumber: syz [ 373.374517][ T5275] usb 4-1: config 0 descriptor?? [ 373.394571][T13306] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 373.408202][T13306] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 373.448365][ T5274] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 373.618393][ T5274] usb 5-1: Using ep0 maxpacket: 16 [ 373.634209][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.673310][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.849832][ T5275] ir_usb 4-1:0.126: IR Dongle converter detected [ 373.860625][ T5274] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 373.894393][ T5274] usb 5-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 373.918579][ T5274] usb 5-1: Product: syz [ 373.922812][ T5274] usb 5-1: Manufacturer: syz [ 373.950759][ T5274] usb 5-1: config 0 descriptor?? [ 374.057639][ T5275] usb 4-1: IR Dongle converter now attached to ttyUSB0 [ 374.255706][ T5275] usb 4-1: USB disconnect, device number 35 [ 374.290509][ T5275] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 374.327494][ T5275] ir_usb 4-1:0.126: device disconnected [ 374.378018][ T5274] kovaplus 0003:1E7D:2D50.0058: unknown main item tag 0x0 [ 374.398345][ T5274] kovaplus 0003:1E7D:2D50.0058: unknown main item tag 0x0 [ 374.417355][ T5274] kovaplus 0003:1E7D:2D50.0058: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.4-1/input0 [ 374.436560][T13367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3557'. [ 374.587799][ T5274] kovaplus 0003:1E7D:2D50.0058: couldn't init struct kovaplus_device [ 374.597067][ T5274] kovaplus 0003:1E7D:2D50.0058: couldn't install mouse [ 374.628649][ T5274] kovaplus 0003:1E7D:2D50.0058: probe with driver kovaplus failed with error -71 [ 374.682105][ T5274] usb 5-1: USB disconnect, device number 40 [ 374.900851][T13388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3564'. [ 375.278127][ T5305] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 375.298370][T13405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3570'. [ 375.456633][ T5305] usb 1-1: Using ep0 maxpacket: 16 [ 375.468019][ T5305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.489244][ T5305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.515869][ T5305] usb 1-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 375.541304][ T5305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.564440][ T5305] usb 1-1: config 0 descriptor?? [ 375.597407][T13414] mkiss: ax0: crc mode is auto. [ 376.002753][ T5305] ntrig 0003:1B96:0008.0059: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.0-1/input0 [ 376.191361][T13430] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.200446][T13430] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.202737][ T5305] ntrig 0003:1B96:0008.0059: Firmware version: 2.13.12.1.7 (35a5 3780) [ 376.209478][T13430] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.209574][T13430] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.349398][T13436] netlink: 'syz.1.3587': attribute type 6 has an invalid length. [ 376.372463][T13438] netlink: 'syz.4.3588': attribute type 16 has an invalid length. [ 376.380836][T13436] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3587'. [ 376.398122][T13438] netlink: 'syz.4.3588': attribute type 3 has an invalid length. [ 376.408773][T13438] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.3588'. [ 376.444991][ T5273] usb 1-1: USB disconnect, device number 31 [ 376.818811][ T5305] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 376.998555][ T5305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 377.027154][ T5305] usb 2-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 377.053405][ T5305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.056636][T13465] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 377.081306][ T5305] usb 2-1: config 0 descriptor?? [ 377.492748][ T5305] hid (null): unknown global tag 0xe [ 377.511748][ T5305] elecom 0003:056E:00E6.005A: unknown main item tag 0x7 [ 377.523340][ T5305] elecom 0003:056E:00E6.005A: unknown global tag 0xe [ 377.535862][ T5305] elecom 0003:056E:00E6.005A: item 0 0 1 14 parsing failed [ 377.547693][ T5305] elecom 0003:056E:00E6.005A: probe with driver elecom failed with error -22 [ 377.705393][ T5305] usb 2-1: USB disconnect, device number 38 [ 377.792480][T13488] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3613'. [ 378.238140][ T5305] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 378.434685][ T5305] usb 1-1: Using ep0 maxpacket: 16 [ 378.456364][ T5305] usb 1-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=28.e0 [ 378.473222][ T5305] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.483454][ T5305] usb 1-1: Product: syz [ 378.495187][ T5305] usb 1-1: Manufacturer: syz [ 378.501423][ T5305] usb 1-1: SerialNumber: syz [ 378.509020][ T5305] usb 1-1: config 0 descriptor?? [ 378.527586][ T5305] ums-freecom 1-1:0.0: USB Mass Storage device detected [ 378.538007][ T8] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 378.702888][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 378.723294][ T8] usb 5-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 378.739785][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.752069][ T5302] usb 1-1: USB disconnect, device number 32 [ 378.759192][ T8] usb 5-1: Product: syz [ 378.766847][ T8] usb 5-1: Manufacturer: syz [ 378.775368][ T8] usb 5-1: SerialNumber: syz [ 378.790915][ T8] usb 5-1: config 0 descriptor?? [ 378.810871][ T8] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 378.927750][T13529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3631'. [ 378.958041][T13529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3631'. [ 379.034383][ T8] gspca_sn9c2028: read1 error -32 [ 379.049518][ T8] gspca_sn9c2028: read1 error -32 [ 379.069107][ T1847] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 379.239659][ T1847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.261012][ T1847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.276667][ T8] usb 5-1: USB disconnect, device number 41 [ 379.296879][ T1847] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 379.338101][ T1847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.358964][ T1847] usb 2-1: config 0 descriptor?? [ 379.794673][ T1847] hid-thrustmaster 0003:044F:B65D.005B: unbalanced collection at end of report description [ 379.813090][ T1847] hid-thrustmaster 0003:044F:B65D.005B: parse failed with error -22 [ 379.837231][ T1847] hid-thrustmaster 0003:044F:B65D.005B: probe with driver hid-thrustmaster failed with error -22 [ 379.863454][T13557] team_slave_0: entered promiscuous mode [ 379.869283][T13557] team_slave_1: entered promiscuous mode [ 380.002850][T13559] futex_wake_op: syz.4.3645 tries to shift op by 32; fix this program [ 380.017773][ T1847] usb 2-1: USB disconnect, device number 39 [ 380.729372][T13592] vivid-007: disconnect [ 380.769262][T13591] vivid-007: reconnect [ 380.815226][T13590] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3658'. [ 380.993097][T13601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3664'. [ 381.349077][T13617] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3669'. [ 381.380648][T13617] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 381.461685][T13622] mkiss: ax0: crc mode is auto. [ 381.694973][T13632] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 381.984188][T13643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3681'. [ 382.035158][T13645] netlink: 'syz.4.3683': attribute type 1 has an invalid length. [ 382.418123][ T5274] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 382.658205][ T5274] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 382.674614][ T5274] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 382.683790][ T5274] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 382.683833][ T5274] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 382.683873][ T5274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 8293, setting to 8 [ 382.683903][ T5274] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 382.686778][ T5274] usb 4-1: string descriptor 0 read error: -22 [ 382.686873][ T5274] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 382.686900][ T5274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.690487][ T5274] usb 4-1: config 0 descriptor?? [ 382.771081][T13649] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 382.772076][ T5274] hub 4-1:0.0: bad descriptor, ignoring hub [ 382.772115][ T5274] hub 4-1:0.0: probe with driver hub failed with error -5 [ 382.774844][ T5274] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input56 [ 382.969733][T13679] macvlan2: entered allmulticast mode [ 382.970128][T13679] mac80211_hwsim hwsim20 wlan0: entered allmulticast mode [ 382.983642][T13679] team0: Port device macvlan2 added [ 383.101696][ T5275] usb 4-1: USB disconnect, device number 36 [ 383.587286][T13696] netlink: 'syz.4.3708': attribute type 11 has an invalid length. [ 383.717042][T13702] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3711'. [ 384.055322][T13715] syz.0.3716 (13715): /proc/13715/oom_adj is deprecated, please use /proc/13715/oom_score_adj instead. [ 384.441410][T13728] lo: entered promiscuous mode [ 384.534524][T13733] sch_fq: defrate 9 ignored. [ 384.648346][ T5275] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 384.676336][T13739] input: syz0 as /devices/virtual/input/input57 [ 384.812055][ T5275] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 384.821990][ T5275] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.850167][ T5275] usb 5-1: config 0 descriptor?? [ 384.979514][T13748] binder: 13747:13748 ioctl c0306201 20000480 returned -22 [ 385.285321][ T5275] [drm:udl_init] *ERROR* Selecting channel failed [ 385.332719][ T5275] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 385.348686][ T5275] [drm] Initialized udl on minor 2 [ 385.374146][ T5275] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 385.398697][ T5275] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 385.416649][ T1847] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 385.437120][ T5275] usb 5-1: USB disconnect, device number 42 [ 385.465580][ T1847] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 385.908678][T13780] program syz.0.3744 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 386.082069][T13790] netlink: 'syz.0.3749': attribute type 5 has an invalid length. [ 386.432010][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 386.432032][ T29] audit: type=1326 audit(1728069683.575:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13798 comm="syz.4.3753" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff103d7dff9 code=0x0 [ 386.459713][ C0] vkms_vblank_simulate: vblank timer overrun [ 386.916121][T13818] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 387.118815][T13819] netlink: 'syz.1.3759': attribute type 10 has an invalid length. [ 387.127089][T13819] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3759'. [ 387.195797][T13821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3762'. [ 387.446557][T13828] netlink: 'syz.4.3765': attribute type 8 has an invalid length. [ 387.828036][T13840] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3771'. [ 388.362243][T13864] netlink: 'syz.0.3780': attribute type 7 has an invalid length. [ 388.488500][T13870] mac80211_hwsim hwsim20 wlan0: Device is already in use. [ 389.488120][ T5275] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 389.640614][ T5275] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 389.650075][ T5275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.669230][ T5275] usb 1-1: config 0 descriptor?? [ 389.683983][ T5275] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 390.132123][ T1847] IPVS: starting estimator thread 0... [ 390.248479][T13926] IPVS: using max 16 ests per chain, 38400 per kthread [ 390.493340][ T5275] gspca_cpia1: usb_control_msg 02, error -71 [ 390.500027][ T5275] gspca_cpia1: usb_control_msg 05, error -71 [ 390.527998][ T5275] gspca_cpia1: usb_control_msg 04, error -71 [ 390.534426][ T5275] cpia1 1-1:0.0: probe with driver cpia1 failed with error -71 [ 390.559290][ T5275] usb 1-1: USB disconnect, device number 33 [ 390.848838][T13947] loop6: detected capacity change from 0 to 524288000 [ 393.835746][T14059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3864'. [ 394.204803][T14071] loop4: detected capacity change from 0 to 7 [ 394.219856][T14071] Buffer I/O error on dev loop4, logical block 0, async page read [ 394.236735][T14071] Buffer I/O error on dev loop4, logical block 0, async page read [ 394.263167][T14071] Buffer I/O error on dev loop4, logical block 0, async page read [ 394.286140][T14071] Buffer I/O error on dev loop4, logical block 0, async page read [ 394.303242][T14071] Buffer I/O error on dev loop4, logical block 0, async page read [ 394.314044][T14071] Buffer I/O error on dev loop4, logical block 0, async page read [ 394.327737][T14071] Buffer I/O error on dev loop4, logical block 0, async page read [ 394.338528][T14071] ldm_validate_partition_table(): Disk read failed. [ 394.345403][T14071] Buffer I/O error on dev loop4, logical block 0, async page read [ 394.386201][T14071] Buffer I/O error on dev loop4, logical block 0, async page read [ 394.408589][T14071] Buffer I/O error on dev loop4, logical block 0, async page read [ 394.438367][T14071] Dev loop4: unable to read RDB block 0 [ 394.444246][T14071] loop4: unable to read partition table [ 394.478236][T14071] loop4: partition table beyond EOD, truncated [ 394.498567][T14071] loop_reread_partitions: partition scan of loop4 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 394.498567][T14071] ) failed (rc=-5) [ 398.049876][T14166] sctp: [Deprecated]: syz.3.3910 (pid 14166) Use of struct sctp_assoc_value in delayed_ack socket option. [ 398.049876][T14166] Use struct sctp_sack_info instead [ 399.646207][T14196] netlink: 'syz.4.3923': attribute type 1 has an invalid length. [ 399.702755][T14196] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.3923'. [ 400.381174][T14206] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3927'. [ 400.492407][T14210] netlink: 'syz.1.3929': attribute type 1 has an invalid length. [ 400.992218][T14224] xt_bpf: check failed: parse error [ 401.478791][T14234] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 401.518469][T14234] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 401.640460][T14234] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 401.746977][T14234] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 401.756706][T14234] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 401.764697][T14234] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 401.786913][ T5229] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 401.797646][ T5229] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 401.805285][ T5229] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 401.877583][ T5229] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 401.885960][ T5229] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 401.894806][ T5229] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 402.350120][T14257] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3947'. [ 402.360521][T14257] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 403.077342][T14269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3952'. [ 403.339666][T14274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3954'. [ 403.883501][T14233] chnl_net:caif_netlink_parms(): no params data found [ 404.016605][T14292] syz.1.3962 uses obsolete (PF_INET,SOCK_PACKET) [ 404.032623][ T5229] Bluetooth: hci5: command tx timeout [ 404.598768][T14233] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.621188][T14233] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.638726][T14233] bridge_slave_0: entered allmulticast mode [ 404.653269][T14233] bridge_slave_0: entered promiscuous mode [ 404.718883][T14233] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.746651][T14233] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.775141][T14233] bridge_slave_1: entered allmulticast mode [ 404.793066][T14233] bridge_slave_1: entered promiscuous mode [ 404.914800][T14233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.919483][T14315] Falling back ldisc for ttyS3. [ 404.965409][T14233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.065720][T14323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3972'. [ 405.213883][T14233] team0: Port device team_slave_0 added [ 405.258383][T14233] team0: Port device team_slave_1 added [ 405.432376][T14233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.461077][T14233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.568303][T14233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.627354][T14233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.648689][T14233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.742712][T14233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.900805][T14233] hsr_slave_0: entered promiscuous mode [ 405.924531][T14233] hsr_slave_1: entered promiscuous mode [ 405.968163][T14233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 405.980248][T14233] Cannot create hsr debugfs directory [ 406.119018][ T5229] Bluetooth: hci5: command tx timeout [ 406.207342][T14367] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.214958][T14367] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.248526][T14367] bridge0: entered promiscuous mode [ 406.460105][T14378] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 406.769625][ T29] audit: type=1326 audit(1728069703.915:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14385 comm="syz.3.4000" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa59cd7dff9 code=0x0 [ 407.279409][T14390] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4002'. [ 407.477804][T14233] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.508367][T14398] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4005'. [ 407.542113][T14398] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4005'. [ 407.967677][T14233] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.188172][ T5229] Bluetooth: hci5: command tx timeout [ 408.271639][T14233] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.420849][T14422] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4015'. [ 408.475905][T14422] unsupported nlmsg_type 40 [ 408.735574][T14431] netlink: 105108 bytes leftover after parsing attributes in process `syz.0.4019'. [ 408.777507][T14431] netlink: 'syz.0.4019': attribute type 1 has an invalid length. [ 408.802421][T14431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4019'. [ 408.990946][T14436] netlink: 'syz.3.4020': attribute type 1 has an invalid length. [ 409.020778][T14436] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4020'. [ 409.470785][T14233] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.640500][ T8] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 409.707345][ T3600] bridge_slave_1: left allmulticast mode [ 409.727917][ T3600] bridge_slave_1: left promiscuous mode [ 409.733746][ T3600] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.793320][ T3600] bridge_slave_0: left allmulticast mode [ 409.811205][ T3600] bridge_slave_0: left promiscuous mode [ 409.817009][ T3600] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.829083][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 409.837031][ T8] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 409.846086][ T8] usb 4-1: config 179 has no interface number 0 [ 409.857214][ T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 409.885318][ T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 409.928429][ T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 409.965893][ T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 409.989269][ T8] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 410.016736][ T8] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 410.036404][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.059708][T14440] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 410.298063][ T5229] Bluetooth: hci5: command tx timeout [ 410.346310][ T5305] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input58 [ 410.600592][ T5302] usb 4-1: USB disconnect, device number 37 [ 410.600688][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 410.615098][ T5302] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 410.752058][ T3600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.768432][ T3600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.781261][ T3600] bond0 (unregistering): Released all slaves [ 410.804438][T14454] hsr0: entered promiscuous mode [ 411.395502][ T3600] mac80211_hwsim hwsim20 wlan0 (unregistering): left allmulticast mode [ 411.603463][ T3600] team0: Port device macvlan2 removed [ 411.730547][T14233] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 411.866062][ T3600] hsr_slave_0: left promiscuous mode [ 411.913172][ T3600] hsr_slave_1: left promiscuous mode [ 411.937422][ T3600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.986026][ T3600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.032690][ T3600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.078432][ T3600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.221170][ T3600] veth1_macvtap: left promiscuous mode [ 412.247279][ T3600] veth0_macvtap: left promiscuous mode [ 412.263426][ T3600] veth1_vlan: left promiscuous mode [ 412.284529][ T3600] veth0_vlan: left promiscuous mode [ 414.984365][ T3600] team0 (unregistering): Port device team_slave_1 removed [ 415.092473][ T3600] team0 (unregistering): Port device team_slave_0 removed [ 416.134941][T14233] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 416.178733][T14488] netlink: 'syz.4.4042': attribute type 10 has an invalid length. [ 416.226241][T14488] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 416.248584][T14497] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 416.280088][T14233] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 416.377283][T14233] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 416.754317][T14233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.870245][T14233] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.935257][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.942512][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.006723][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.013974][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.062158][T14536] hsr0: entered promiscuous mode [ 417.132725][T14536] hsr0: left promiscuous mode [ 417.838742][T14233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.005821][T14233] veth0_vlan: entered promiscuous mode [ 418.061686][T14233] veth1_vlan: entered promiscuous mode [ 418.093867][T14558] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 418.111303][T14558] dvmrp1: linktype set to 512 [ 418.271934][T14233] veth0_macvtap: entered promiscuous mode [ 418.311514][T14233] veth1_macvtap: entered promiscuous mode [ 418.355085][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.425492][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.486789][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.539710][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.588442][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.630263][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.691514][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.752278][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.815785][T14233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.876310][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.928254][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.958378][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.969988][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.982209][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.993077][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.003283][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.014016][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.025680][T14233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.135868][T14233] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.185014][T14233] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.259425][T14233] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.297459][T14233] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.709753][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.710942][ T3600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.717605][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.725948][ T3600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.123396][T14590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4083'. [ 420.318993][T14597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4085'. [ 420.437891][T14597] bridge0: port 1(team0) entered disabled state [ 420.455747][T14599] Sensor A: ================= START STATUS ================= [ 420.468519][T14597] netlink: 160 bytes leftover after parsing attributes in process `syz.4.4085'. [ 420.488125][T14599] Sensor A: Test Pattern: 75% Colorbar [ 420.676208][T14599] Sensor A: Show Information: All [ 420.687146][T14599] Sensor A: Vertical Flip: false [ 420.692311][T14599] Sensor A: Horizontal Flip: false [ 420.697503][T14599] Sensor A: Brightness: 128 [ 420.702652][T14599] Sensor A: Contrast: 128 [ 420.707055][T14599] Sensor A: Hue: 0 [ 420.711385][T14599] Sensor A: Saturation: 128 [ 420.715961][T14599] Sensor A: ================== END STATUS ================== [ 421.003686][ T937] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 421.132478][T14624] netlink: 4056 bytes leftover after parsing attributes in process `syz.3.4097'. [ 421.162385][T14624] openvswitch: netlink: Actions may not be safe on all matching packets [ 421.199646][T14626] netlink: 'syz.4.4099': attribute type 29 has an invalid length. [ 421.300188][ T937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 421.313339][ T937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.343138][ T937] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 421.364117][ T937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.380500][ T937] usb 2-1: config 0 descriptor?? [ 421.739741][T14650] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 421.829135][ T937] hid-steam 0003:28DE:1102.005C: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 421.918433][ T937] hid-steam 0003:28DE:1102.005C: Steam Controller 'XXXXXXXXXX' connected [ 421.940481][ T937] input: Steam Controller as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1102.005C/input/input60 [ 421.991512][ T937] hid-steam 0003:28DE:1102.005D: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 422.014152][T14662] netlink: 'syz.3.4114': attribute type 1 has an invalid length. [ 422.066939][ T937] usb 2-1: USB disconnect, device number 40 [ 422.098598][ T937] hid-steam 0003:28DE:1102.005C: Steam Controller 'XXXXXXXXXX' disconnected [ 422.173768][ T5302] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 422.372298][ T5302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 422.398273][ T5302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.423544][ T5302] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 422.445771][ T5302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.465707][ T5302] usb 3-1: config 0 descriptor?? [ 422.493076][ T5302] hub 3-1:0.0: USB hub found [ 422.499427][T14670] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 422.755809][ T5302] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 422.859770][T14681] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 422.970068][ T5302] usbhid 3-1:0.0: can't add hid device: -71 [ 422.976200][ T5302] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 423.008812][ T5302] usb 3-1: USB disconnect, device number 25 [ 423.734767][T14709] netlink: 'syz.2.4135': attribute type 1 has an invalid length. [ 423.769147][T14709] netlink: 9328 bytes leftover after parsing attributes in process `syz.2.4135'. [ 423.808071][T14709] netlink: 'syz.2.4135': attribute type 2 has an invalid length. [ 423.855070][T14709] netlink: 'syz.2.4135': attribute type 1 has an invalid length. [ 424.485901][T14739] overlayfs: missing 'workdir' [ 424.912666][T14754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4155'. [ 424.928606][T14754] ipvlan2: entered allmulticast mode [ 424.934415][T14754] veth0_vlan: entered allmulticast mode [ 425.765598][ T5305] kernel write not supported for file /media0 (pid: 5305 comm: kworker/0:7) [ 426.299373][ T5274] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 426.463516][ T5274] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 426.485562][ T5274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.517275][ T5274] usb 4-1: config 0 descriptor?? [ 426.544373][ T5274] cp210x 4-1:0.0: cp210x converter detected [ 426.944696][ T5274] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 426.957323][ T5274] usb 4-1: cp210x converter now attached to ttyUSB0 [ 427.165770][ T5274] usb 4-1: USB disconnect, device number 38 [ 427.188439][ T5274] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 427.289203][ T5274] cp210x 4-1:0.0: device disconnected [ 428.065409][T14840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4190'. [ 428.715899][T14872] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 428.799777][T14880] netlink: 'syz.4.4205': attribute type 10 has an invalid length. [ 428.848636][T14880] syz_tun: entered promiscuous mode [ 428.895224][T14880] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 428.940168][T14883] netlink: 'syz.4.4205': attribute type 10 has an invalid length. [ 429.018470][ T5305] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 429.036562][T14883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.063967][T14883] bond0: entered promiscuous mode [ 429.077064][T14883] batadv_slave_0: entered promiscuous mode [ 429.090988][T14883] bond0: entered allmulticast mode [ 429.103492][T14883] batadv_slave_0: entered allmulticast mode [ 429.116722][T14883] syz_tun: entered allmulticast mode [ 429.134834][T14883] team0: Port device bond0 added [ 429.178584][ T5305] usb 3-1: Using ep0 maxpacket: 8 [ 429.185883][ T5305] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 429.217353][ T5305] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 429.247325][ T5305] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 429.293699][ T5305] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 429.338068][ T5305] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 429.409945][ T5305] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 429.450161][ T5305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.497816][ T5305] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 429.739191][ T5274] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 429.909936][ T5274] usb 2-1: config 0 has no interfaces? [ 429.915823][ T5274] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 429.958616][ T5274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.987581][ T5274] usb 2-1: config 0 descriptor?? [ 430.041421][T14909] netlink: 'syz.3.4219': attribute type 10 has an invalid length. [ 430.114908][T14909] team0: Port device netdevsim0 added [ 430.121220][T14910] netlink: 'syz.3.4219': attribute type 10 has an invalid length. [ 430.185618][T14910] team0: Port device netdevsim0 removed [ 430.197182][T14910] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 430.324722][ T5274] usb 2-1: USB disconnect, device number 41 [ 430.644325][T14926] program syz.0.4225 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 431.847801][ T5305] usb 3-1: USB disconnect, device number 26 [ 431.987398][T14960] input: syz0 as /devices/virtual/input/input61 [ 432.678223][T14993] netlink: 372 bytes leftover after parsing attributes in process `syz.0.4255'. [ 432.868826][T14997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4257'. [ 432.879375][T15000] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4258'. [ 432.882999][T14997] macsec0: entered promiscuous mode [ 432.914001][T15000] openvswitch: netlink: VXLAN extension message has 5 unknown bytes. [ 433.138075][T15008] mkiss: ax0: crc mode is auto. [ 433.264981][T15015] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 433.526806][T15024] netlink: 340 bytes leftover after parsing attributes in process `syz.3.4270'. [ 434.038023][ T937] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 434.223205][ T937] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 434.243793][ T937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 434.271249][ T937] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 434.316079][ T937] usb 1-1: string descriptor 0 read error: -22 [ 434.327802][ T937] usb 1-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 434.350151][ T937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.367419][ T937] usb 1-1: config 0 descriptor?? [ 434.376438][ T937] em28xx 1-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 434.394558][ T937] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 434.669527][ T937] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 434.683783][ T937] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 434.711874][ T937] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 434.728138][ T937] em28xx 1-1:0.0: No AC97 audio processor [ 434.741268][ T937] usb 1-1: USB disconnect, device number 34 [ 434.752166][ T937] em28xx 1-1:0.0: Disconnecting em28xx [ 434.774638][ T937] em28xx 1-1:0.0: Freeing device [ 434.973844][T15086] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4299'. [ 434.993417][T15086] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 435.280487][T15088] atomic_op ffff88805fd5f198 conn xmit_atomic 0000000000000000 [ 437.021680][T15164] program syz.1.4335 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 437.338174][T15171] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 437.359852][T15169] IPVS: stopping master sync thread 15171 ... [ 437.579853][T15175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4339'. [ 438.017688][T15189] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4346'. [ 438.911618][T15220] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 439.077565][T15227] input: syz1 as /devices/virtual/input/input62 [ 439.352271][T15242] input: syz0 as /devices/virtual/input/input63 [ 439.539964][T15250] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4372'. [ 439.587974][T15250] netlink: 'syz.3.4372': attribute type 1 has an invalid length. [ 439.608854][T15250] netlink: 'syz.3.4372': attribute type 2 has an invalid length. [ 439.641031][T15250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4372'. [ 440.269275][T14234] Bluetooth: hci6: command 0x1003 tx timeout [ 440.278063][ T5229] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 440.427204][T15268] tap0: tun_chr_ioctl cmd 1074025677 [ 440.477741][T15268] tap0: linktype set to 0 [ 441.508607][ T937] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 441.691471][ T937] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 441.718536][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.738589][ T937] usb 4-1: config 0 descriptor?? [ 442.377273][ T937] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 442.613150][T15364] xt_hashlimit: max too large, truncated to 1048576 [ 442.768508][ T937] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 442.778989][ T937] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 442.837561][ T937] usb 4-1: USB disconnect, device number 39 [ 442.882278][T15375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4427'. [ 443.337765][T15395] netlink: 'syz.0.4436': attribute type 10 has an invalid length. [ 443.346974][T15395] syz_tun: entered promiscuous mode [ 443.443928][T15395] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 443.454815][T15397] netlink: 'syz.0.4436': attribute type 10 has an invalid length. [ 443.573586][T15397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.600304][T15397] bond_slave_0: entered promiscuous mode [ 443.606664][T15397] bond_slave_1: entered promiscuous mode [ 443.647417][T15397] team0: Port device bond0 added [ 444.842135][T15450] vlan0: entered promiscuous mode [ 444.868275][T15450] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 444.886167][T15450] vlan0: entered allmulticast mode [ 444.892092][T15450] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 444.923536][T15450] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 444.965521][T15450] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 445.198024][ T5302] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 445.371560][ T5302] usb 3-1: Using ep0 maxpacket: 8 [ 445.386260][ T5302] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 445.417301][ T5302] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 445.447625][ T5302] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 445.470054][ T5302] usb 3-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 445.491574][ T5302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 445.528535][ T5302] usb 3-1: SerialNumber: syz [ 445.556047][T15458] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 445.600016][ T5302] hub 3-1:1.0: bad descriptor, ignoring hub [ 445.628159][ T5302] hub 3-1:1.0: probe with driver hub failed with error -5 [ 445.825719][T15458] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 446.115971][T15482] netlink: 9352 bytes leftover after parsing attributes in process `syz.3.4471'. [ 446.135726][T15482] netlink: 'syz.3.4471': attribute type 1 has an invalid length. [ 446.153837][T15482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4471'. [ 446.404901][ T5302] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 446.741483][ T5274] usb 3-1: USB disconnect, device number 27 [ 446.769777][ T5274] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 448.766638][T15573] netlink: 'syz.3.4509': attribute type 49 has an invalid length. [ 450.090696][T15612] lo speed is unknown, defaulting to 1000 [ 450.096936][T15612] lo speed is unknown, defaulting to 1000 [ 450.134699][T15612] lo speed is unknown, defaulting to 1000 [ 450.203611][ T5305] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 450.240067][T15612] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 450.278825][T15622] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4530'. [ 450.300751][T15622] bridge_slave_0: entered allmulticast mode [ 450.328343][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 450.338681][T15612] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 450.387968][ T5305] usb 4-1: Using ep0 maxpacket: 16 [ 450.411631][ T5305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.444321][ T5305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.469687][T15612] lo speed is unknown, defaulting to 1000 [ 450.475027][ T5305] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 450.508971][T15612] lo speed is unknown, defaulting to 1000 [ 450.521788][ T5305] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 450.525600][T15612] lo speed is unknown, defaulting to 1000 [ 450.539231][ T5305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.563947][T15612] lo speed is unknown, defaulting to 1000 [ 450.572526][ T5305] usb 4-1: config 0 descriptor?? [ 450.589400][T15612] lo speed is unknown, defaulting to 1000 [ 450.609341][T15612] lo speed is unknown, defaulting to 1000 [ 450.621851][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 450.654782][T15612] lo speed is unknown, defaulting to 1000 [ 450.671577][ T937] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 450.676561][T15612] lo speed is unknown, defaulting to 1000 [ 450.868628][ T937] usb 3-1: Using ep0 maxpacket: 8 [ 450.921438][ T937] usb 3-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 450.948003][ T937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.966403][ T937] usb 3-1: Product: syz [ 450.976586][ T937] usb 3-1: Manufacturer: syz [ 450.992680][ T5305] microsoft 0003:045E:07DA.005E: unknown main item tag 0x0 [ 451.020862][ T937] usb 3-1: SerialNumber: syz [ 451.035145][ T5305] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.005E/input/input66 [ 451.059003][ T937] usb 3-1: config 0 descriptor?? [ 451.066708][ T937] option 3-1:0.0: GSM modem (1-port) converter detected [ 451.090681][ T5305] microsoft 0003:045E:07DA.005E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 451.227382][ T937] usb 4-1: USB disconnect, device number 40 [ 451.340948][ T5305] usb 3-1: USB disconnect, device number 28 [ 451.347558][ T5305] option 3-1:0.0: device disconnected [ 451.731489][T15641] sg_write: process 756 (syz.1.4539) changed security contexts after opening file descriptor, this is not allowed. [ 451.756889][T15641] program syz.1.4539 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 451.938646][T15648] option changes via remount are deprecated (pid=15646 comm=syz.1.4541) [ 452.278115][T15663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4549'. [ 452.665999][T15680] macsec2: entered promiscuous mode [ 452.692751][T15680] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode [ 452.749211][T15680] mac80211_hwsim hwsim18 wlan0: left promiscuous mode [ 452.962811][T15697] input: syz1 as /devices/virtual/input/input67 [ 453.199383][T15710] ip6gretap0: entered promiscuous mode [ 453.235772][T15710] ip6gretap0: left promiscuous mode [ 453.258294][ T29] audit: type=1326 audit(1728069750.395:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15708 comm="syz.2.4571" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a2217dff9 code=0x0 [ 453.423101][T15717] netlink: 4608 bytes leftover after parsing attributes in process `syz.1.4573'. [ 454.468497][ T8] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 454.504066][T15762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4593'. [ 454.629959][ T8] usb 1-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 454.664797][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.702495][ T8] usb 1-1: config 0 descriptor?? [ 454.725058][ T8] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 454.940887][ T8] gspca_sn9c2028: read1 error -32 [ 455.159507][ T8] gspca_sn9c2028: read1 error -71 [ 455.165372][ T8] sn9c2028 1-1:0.0: probe with driver sn9c2028 failed with error -71 [ 455.198626][ T8] usb 1-1: USB disconnect, device number 35 [ 455.368056][ T29] audit: type=1326 audit(1728069752.495:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15781 comm="syz.2.4603" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a2217dff9 code=0x0 [ 455.568173][ T25] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 455.739881][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 455.756090][ T25] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 455.766859][ T25] usb 5-1: config 0 has no interface number 0 [ 455.773419][ T25] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.784772][ T25] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.795770][ T25] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 455.805631][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.826906][ T25] usb 5-1: config 0 descriptor?? [ 456.466554][ T25] uclogic 0003:28BD:0094.005F: pen parameters not found [ 456.493482][ T25] uclogic 0003:28BD:0094.005F: interface is invalid, ignoring [ 456.548959][T15803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4612'. [ 456.598444][T15804] tap0: tun_chr_ioctl cmd 1074025694 [ 456.693582][ T25] usb 5-1: USB disconnect, device number 43 [ 457.329293][T15826] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 457.968052][ T25] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 458.128044][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 458.145035][ T25] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 458.158098][ T5275] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 458.168220][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 458.198163][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 458.213434][ T25] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 458.226662][ T25] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 458.238146][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.299736][T15871] trusted_key: syz.0.4644 sent an empty control message without MSG_MORE. [ 458.360079][ T5275] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 458.370777][ T5275] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 458.381928][ T5275] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 458.391370][ T5275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 458.400155][ T5275] usb 2-1: SerialNumber: syz [ 458.463468][ T25] usb 5-1: GET_CAPABILITIES returned 0 [ 458.469174][ T25] usbtmc 5-1:16.0: can't read capabilities [ 458.548311][ T5270] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 458.620830][ T5275] usb 2-1: 0:2 : does not exist [ 458.670494][ T5305] usb 5-1: USB disconnect, device number 44 [ 458.678191][ T5275] usb 2-1: USB disconnect, device number 42 [ 458.751170][ T5270] usb 4-1: config 0 has an invalid interface number: 104 but max is 0 [ 458.760251][ T5270] usb 4-1: config 0 has no interface number 0 [ 458.766560][ T5270] usb 4-1: config 0 interface 104 has no altsetting 0 [ 458.801371][ T5270] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 458.811270][ T5270] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.828771][ T5270] usb 4-1: Product: syz [ 458.833241][ T5270] usb 4-1: Manufacturer: syz [ 458.841879][ T5270] usb 4-1: SerialNumber: syz [ 458.849974][ T5270] usb 4-1: config 0 descriptor?? [ 458.861847][ T5270] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 459.065310][ T5270] gspca_vc032x: reg_r err -71 [ 459.072746][ T5270] gspca_vc032x: I2c Bus Busy Wait 00 [ 459.083558][ T5270] gspca_vc032x: I2c Bus Busy Wait 00 [ 459.091942][ T5270] gspca_vc032x: I2c Bus Busy Wait 00 [ 459.097581][ T5270] gspca_vc032x: I2c Bus Busy Wait 00 [ 459.114420][ T5270] gspca_vc032x: I2c Bus Busy Wait 00 [ 459.121380][ T5270] gspca_vc032x: I2c Bus Busy Wait 00 [ 459.127036][ T5270] gspca_vc032x: I2c Bus Busy Wait 00 [ 459.133175][ T5270] gspca_vc032x: I2c Bus Busy Wait 00 [ 459.138928][ T5270] gspca_vc032x: I2c Bus Busy Wait 00 [ 459.144850][ T5270] gspca_vc032x: I2c Bus Busy Wait 00 [ 459.150738][ T5270] gspca_vc032x: I2c Bus Busy Wait 00 [ 459.186853][ T5270] gspca_vc032x: I2c Bus Busy Wait 00 [ 459.203648][ T5270] gspca_vc032x: I2c Bus Busy Wait 00 [ 459.233238][ T5270] gspca_vc032x: I2c Bus Busy Wait 00 [ 459.258062][ T5270] gspca_vc032x: I2c Bus Busy Wait 00 [ 459.263437][ T5270] gspca_vc032x: I2c Bus Busy Wait 00 [ 459.293995][ T5270] gspca_vc032x: I2c Bus Busy Wait 00 [ 459.303160][ T5270] gspca_vc032x: I2c Bus Busy Wait 00 [ 459.322960][ T5270] gspca_vc032x: Unknown sensor... [ 459.348498][ T5270] vc032x 4-1:0.104: probe with driver vc032x failed with error -22 [ 459.373947][ T5270] usb 4-1: USB disconnect, device number 41 [ 459.849578][T15923] gfs2: gfs2 mount does not exist [ 460.080839][T15937] ALSA: mixer_oss: invalid OSS volume 'OAIN' [ 460.097995][T15937] ALSA: mixer_oss: invalid index 70000 [ 460.498277][ T5305] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 460.655244][ T5305] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 460.663155][ T8] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 460.672079][ T5275] IPVS: starting estimator thread 0... [ 460.679206][T15953] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 460.700176][ T5305] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 460.735767][ T5305] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 460.760850][ T5305] usb 5-1: config 0 interface 0 has no altsetting 0 [ 460.779198][ T5305] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 460.797967][ T5305] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 460.799462][T15954] IPVS: using max 17 ests per chain, 40800 per kthread [ 460.815414][ T5305] usb 5-1: config 0 interface 0 has no altsetting 0 [ 460.829256][ T5305] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 460.838904][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 460.850505][ T8] usb 4-1: config 0 has no interfaces? [ 460.860764][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 460.878572][ T5305] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 460.890554][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.910725][ T8] usb 4-1: Product: syz [ 460.916282][ T5305] usb 5-1: config 0 interface 0 has no altsetting 0 [ 460.928358][ T8] usb 4-1: Manufacturer: syz [ 460.935524][ T8] usb 4-1: SerialNumber: syz [ 460.940742][ T5305] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 460.957387][ T5305] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 460.971159][ T8] usb 4-1: config 0 descriptor?? [ 460.988165][ T5305] usb 5-1: config 0 interface 0 has no altsetting 0 [ 461.006572][ T5305] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 461.017075][ T5305] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 461.047971][ T5305] usb 5-1: config 0 interface 0 has no altsetting 0 [ 461.056220][ T5305] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 461.066016][ T5305] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 461.097736][ T5305] usb 5-1: config 0 interface 0 has no altsetting 0 [ 461.121135][ T5305] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 461.138017][ T5305] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 461.167996][ T5305] usb 5-1: config 0 interface 0 has no altsetting 0 [ 461.205971][ T5305] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 461.217672][ T8] usb 4-1: USB disconnect, device number 42 [ 461.224931][ T5305] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 461.256635][ T5305] usb 5-1: config 0 interface 0 has no altsetting 0 [ 461.269972][ T5305] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 461.279476][ T5305] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 461.298288][ T5305] usb 5-1: Product: syz [ 461.308537][ T5305] usb 5-1: Manufacturer: syz [ 461.313459][ T5305] usb 5-1: SerialNumber: syz [ 461.334976][ T5305] usb 5-1: config 0 descriptor?? [ 461.354792][ T5305] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 461.669359][ T5305] usb 5-1: USB disconnect, device number 45 [ 461.681997][ T5305] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 461.954164][T15977] input: syz1 as /devices/virtual/input/input68 [ 462.182486][T15986] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4694'. [ 462.320832][T15990] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 462.519796][T15999] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 0 [ 462.537729][T16002] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 1 [ 462.557779][T16004] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 3 [ 462.558596][T16003] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 2 [ 462.951407][T16020] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 463.589887][T16029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4713'. [ 464.844423][T16067] vxcan1: tx address claim with dlc 1 [ 464.890889][T16069] program syz.3.4729 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 465.558349][T16093] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4742'. [ 465.841489][ T29] audit: type=1326 audit(1728069762.985:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16098 comm="syz.2.4743" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a2217dff9 code=0x0 [ 465.896111][ T29] audit: type=1326 audit(1728069763.005:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16098 comm="syz.2.4743" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a2217dff9 code=0x0 [ 466.470025][T16129] lo speed is unknown, defaulting to 1000 [ 466.537328][T16130] lo speed is unknown, defaulting to 1000 [ 466.610602][T16130] lo speed is unknown, defaulting to 1000 [ 466.664835][T16130] lo speed is unknown, defaulting to 1000 [ 466.826591][T16130] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 467.044237][T16130] lo speed is unknown, defaulting to 1000 [ 467.103860][T16130] lo speed is unknown, defaulting to 1000 [ 467.127190][T16130] lo speed is unknown, defaulting to 1000 [ 467.152117][T16130] lo speed is unknown, defaulting to 1000 [ 467.180231][T16130] lo speed is unknown, defaulting to 1000 [ 467.187138][T16130] lo speed is unknown, defaulting to 1000 [ 467.197203][T16130] lo speed is unknown, defaulting to 1000 [ 467.232797][T16130] lo speed is unknown, defaulting to 1000 [ 467.535068][T16163] tun0: tun_chr_ioctl cmd 1074025677 [ 467.557191][T16163] tun0: linktype set to 776 [ 467.771907][ T29] audit: type=1804 audit(1728069764.915:194): pid=16183 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.4777" name="/" dev="pidfs" ino=16477 res=1 errno=0 [ 467.948393][ T937] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 468.027673][T16192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4785'. [ 468.067052][T16192] ip6tnl2: entered promiscuous mode [ 468.098170][T16192] ip6tnl2: entered allmulticast mode [ 468.118025][ T937] usb 5-1: Using ep0 maxpacket: 16 [ 468.131721][ T937] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 468.152555][ T937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.176721][ T937] usb 5-1: Product: syz [ 468.202009][ T937] usb 5-1: Manufacturer: syz [ 468.206698][ T937] usb 5-1: SerialNumber: syz [ 468.490857][ T29] audit: type=1400 audit(1728069765.635:195): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=wx pid=16205 comm="syz.0.4790" name="540" dev="tmpfs" ino=2744 [ 468.500913][ T937] usb 5-1: config 0 descriptor?? [ 468.529972][ T937] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 468.541893][ T937] usb 5-1: Detected FT232H [ 468.662273][T16216] ax25_connect(): syz.3.4796 uses autobind, please contact jreuter@yaina.de [ 468.869151][ T937] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 469.079780][ T937] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 469.088365][ T937] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 469.108875][ T937] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 469.128256][ T937] usb 5-1: USB disconnect, device number 46 [ 469.151632][ T937] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 469.172326][ T937] ftdi_sio 5-1:0.0: device disconnected [ 469.356159][T16239] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4805'. [ 469.412619][T16242] program syz.3.4807 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 470.108968][T16266] vlan3: entered promiscuous mode [ 470.122175][T16266] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode [ 470.133903][T16266] mac80211_hwsim hwsim22 wlan0: left promiscuous mode [ 470.716312][T16299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4832'. [ 471.221563][T16311] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 471.267631][ T29] audit: type=1326 audit(1728069768.405:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16285 comm="syz.2.4828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2217dff9 code=0x7fc00000 [ 472.249309][T16353] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4853'. [ 473.162760][T16371] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 473.318005][ T937] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 473.497000][ T937] usb 2-1: Using ep0 maxpacket: 16 [ 473.517482][ T937] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 473.536517][ T937] usb 2-1: config 0 has no interface number 0 [ 473.554088][ T937] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 473.591714][ T937] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 473.608493][ T937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.624116][T16389] @: renamed from vlan0 (while UP) [ 473.638366][ T937] usb 2-1: Product: syz [ 473.649158][ T937] usb 2-1: Manufacturer: syz [ 473.661129][T16390] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4867'. [ 473.667926][ T937] usb 2-1: SerialNumber: syz [ 473.696482][ T937] usb 2-1: config 0 descriptor?? [ 473.941681][T16401] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4877'. [ 474.048425][T16403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4875'. [ 474.430947][ T937] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.214/input/input69 [ 474.633632][ T937] usb 2-1: USB disconnect, device number 43 [ 476.763673][T16492] netlink: 'syz.0.4917': attribute type 10 has an invalid length. [ 476.922623][T16492] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 478.648075][ T5270] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 478.928078][ T5270] usb 5-1: config 0 interface 0 has no altsetting 0 [ 478.934989][ T5270] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 478.944220][ T5270] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.954479][ T5270] usb 5-1: config 0 descriptor?? [ 479.138660][ T8] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 479.259934][T16554] No buffer was provided with the request [ 479.298538][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 479.327779][ T8] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 479.366911][ T8] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 479.397896][ T8] usb 3-1: config 0 has no interface number 0 [ 479.404164][ T8] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 48, changing to 9 [ 479.445987][ T8] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24624, setting to 1024 [ 479.498148][ T8] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 479.528063][ T8] usb 3-1: config 0 interface 52 has no altsetting 0 [ 479.557946][ T8] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 479.587770][ T8] usb 3-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 479.596650][ T8] usb 3-1: Product: syz [ 479.622159][ T8] usb 3-1: Manufacturer: syz [ 479.632281][ T8] usb 3-1: SerialNumber: syz [ 479.648518][ T8] usb 3-1: config 0 descriptor?? [ 479.776845][ T5270] video4linux radio32: keene_cmd_main failed (-71) [ 479.784655][ T5270] radio-keene 5-1:0.0: V4L2 device registered as radio32 [ 479.819317][ T5270] usb 5-1: USB disconnect, device number 47 [ 479.983033][ T8] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input70 [ 480.285939][ T8] usb 3-1: USB disconnect, device number 29 [ 480.292065][ C0] synaptics_usb 3-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 480.525344][ T5305] IPVS: starting estimator thread 0... [ 480.648341][T16590] IPVS: using max 16 ests per chain, 38400 per kthread [ 481.015047][T16602] netlink: 'syz.0.4966': attribute type 1 has an invalid length. [ 481.074031][T16602] netlink: 9352 bytes leftover after parsing attributes in process `syz.0.4966'. [ 481.087604][T16602] netlink: 'syz.0.4966': attribute type 1 has an invalid length. [ 481.121436][T16602] netlink: 'syz.0.4966': attribute type 2 has an invalid length. [ 481.378276][ T5305] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 481.553058][ T5305] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.588757][ T5305] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 481.621222][ T5305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.650662][ T5305] usb 3-1: config 0 descriptor?? [ 481.706996][T16587] syz.4.4959 (16587): drop_caches: 1 [ 481.913023][ T5305] usb 3-1: USB disconnect, device number 30 [ 482.313914][T16634] vivid-002: disconnect [ 482.354993][T16633] vivid-002: reconnect [ 482.748402][ T5270] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 482.808070][ T5305] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 482.910542][ T5270] usb 4-1: Using ep0 maxpacket: 8 [ 482.927524][ T5270] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 482.945666][ T5270] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.961064][ T5305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 482.964626][ T5270] usb 4-1: Product: syz [ 482.972753][ T5305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.996168][ T5270] usb 4-1: Manufacturer: syz [ 483.006855][ T5270] usb 4-1: SerialNumber: syz [ 483.021443][ T5305] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 483.033333][ T5270] usb 4-1: config 0 descriptor?? [ 483.048370][ T5305] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.051691][ T5270] gspca_main: sq930x-2.14.0 probing 2770:930c [ 483.099549][ T5305] usb 5-1: config 0 descriptor?? [ 483.120683][ T5305] hub 5-1:0.0: USB hub found [ 483.332571][ T5305] hub 5-1:0.0: 1 port detected [ 483.538908][ T5305] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 483.546154][ T5305] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 483.583258][ T5305] usbhid 5-1:0.0: can't add hid device: -71 [ 483.604461][ T5305] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 483.638968][ T5305] usb 5-1: USB disconnect, device number 48 [ 483.900698][ T5270] gspca_sq930x: ucbus_write failed -71 [ 483.906408][ T5270] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 483.946563][ T5270] usb 4-1: USB disconnect, device number 43 [ 484.798463][ T937] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 485.143590][ T937] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 485.166390][ T937] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 485.186131][ T937] usb 5-1: config 1 has no interface number 0 [ 485.206129][ T937] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.248564][ T937] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 485.288485][ T937] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 485.297791][ T937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.316467][ T937] usb 5-1: Product: syz [ 485.344171][ T937] usb 5-1: Manufacturer: syz [ 485.365034][ T937] usb 5-1: SerialNumber: syz [ 485.838493][ T25] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 486.099081][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.110826][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.121271][ T25] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 486.131420][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.149485][ T25] usb 3-1: config 0 descriptor?? [ 486.229246][ T937] cdc_ncm 5-1:1.1: failed GET_NTB_PARAMETERS [ 486.237723][ T937] cdc_ncm 5-1:1.1: bind() failure [ 486.267523][ T937] usb 5-1: USB disconnect, device number 49 [ 486.585536][ T25] hid-steam 0003:28DE:1142.0060: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 486.661231][ T25] hid-steam 0003:28DE:1142.0060: Steam wireless receiver connected [ 486.678647][ T25] hid-steam 0003:28DE:1142.0061: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 486.831505][ T25] usb 3-1: USB disconnect, device number 31 [ 486.875162][ T25] hid-steam 0003:28DE:1142.0060: Steam wireless receiver disconnected [ 486.992980][T16763] netlink: 'syz.1.5037': attribute type 1 has an invalid length. [ 487.002126][T16763] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5037'. [ 487.014454][T16763] netlink: 'syz.1.5037': attribute type 2 has an invalid length. [ 487.036394][T16763] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5037'. [ 487.692607][T16794] netlink: 'syz.4.5052': attribute type 11 has an invalid length. [ 487.848462][ T5305] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 488.020047][ T5305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.031395][ T5305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.064214][ T5305] usb 4-1: New USB device found, idVendor=056a, idProduct=0101, bcdDevice= 0.00 [ 488.078249][ T5305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.100222][ T5305] usb 4-1: config 0 descriptor?? [ 488.543752][ T5305] wacom 0003:056A:0101.0062: unknown main item tag 0x0 [ 488.564707][ T5305] wacom 0003:056A:0101.0062: hidraw0: USB HID v0.00 Device [HID 056a:0101] on usb-dummy_hcd.3-1/input0 [ 488.631500][T16823] lo speed is unknown, defaulting to 1000 [ 488.641881][T16823] lo speed is unknown, defaulting to 1000 [ 488.779429][ T5305] usb 4-1: USB disconnect, device number 44 [ 489.589388][T16853] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.5077'. [ 489.638328][T16853] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.5077'. [ 490.996406][T16897] futex_wake_op: syz.2.5098 tries to shift op by -1; fix this program [ 492.873692][T16952] dvmrp1: entered allmulticast mode [ 492.962422][T16952] dvmrp5: entered allmulticast mode [ 493.021197][T16957] dvmrp1: left allmulticast mode [ 493.026614][T16957] dvmrp5: left allmulticast mode [ 495.158801][ T5270] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 495.319097][ T5270] usb 2-1: Using ep0 maxpacket: 16 [ 495.345675][ T5270] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 495.374332][ T5270] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 495.396359][ T5270] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 495.406545][ T5270] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.417605][ T5270] usb 2-1: Product: syz [ 495.422525][ T5270] usb 2-1: Manufacturer: syz [ 495.427162][ T5270] usb 2-1: SerialNumber: syz [ 495.434875][ T5270] usb 2-1: config 0 descriptor?? [ 495.446120][ T5270] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 495.466324][ T5270] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 495.635923][ T29] audit: type=1326 audit(1728069792.775:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17034 comm="syz.4.5157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff103d7dff9 code=0x7ffc0000 [ 495.671598][ T29] audit: type=1326 audit(1728069792.805:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17034 comm="syz.4.5157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff103d7dff9 code=0x7ffc0000 [ 495.727765][ T29] audit: type=1326 audit(1728069792.805:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17034 comm="syz.4.5157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7ff103d7dff9 code=0x7ffc0000 [ 495.769271][ T29] audit: type=1326 audit(1728069792.805:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17034 comm="syz.4.5157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff103d7dff9 code=0x7ffc0000 [ 496.100154][ T5270] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 496.303220][ T5270] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 496.314746][ T5270] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 496.326556][ T5270] em28xx 2-1:0.0: No AC97 audio processor [ 496.383503][ T5270] usb 2-1: USB disconnect, device number 44 [ 496.391376][ T5270] em28xx 2-1:0.0: Disconnecting em28xx [ 496.401052][ T5270] em28xx 2-1:0.0: Freeing device [ 496.934393][T17067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5171'. [ 497.548200][ T5305] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 497.723940][ T5305] usb 5-1: config index 0 descriptor too short (expected 106, got 36) [ 497.748050][ T5305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.759424][ T5305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.770006][ T5305] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 497.779619][ T5305] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.798637][ T5305] usb 5-1: config 0 descriptor?? [ 498.078567][ T8] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 498.213805][ T5305] corsair 0003:1B1C:1B3E.0063: unknown main item tag 0x0 [ 498.221914][ T5305] corsair 0003:1B1C:1B3E.0063: unknown main item tag 0x0 [ 498.230447][ T5305] corsair 0003:1B1C:1B3E.0063: unknown main item tag 0x0 [ 498.238154][ T5305] corsair 0003:1B1C:1B3E.0063: unknown main item tag 0x0 [ 498.245303][ T5305] corsair 0003:1B1C:1B3E.0063: unknown main item tag 0x0 [ 498.270245][ T8] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 498.280174][ T5305] corsair 0003:1B1C:1B3E.0063: failed to start in urb: -90 [ 498.288453][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.309080][ T5305] corsair 0003:1B1C:1B3E.0063: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.4-1/input0 [ 498.321919][ T8] usb 4-1: config 0 descriptor?? [ 498.462378][ T5305] usb 5-1: USB disconnect, device number 50 [ 498.556801][ T8] [drm] vendor descriptor length:c3 data:c3 00 b7 aa f9 11 f3 d6 00 27 99 [ 498.565758][ T8] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 498.808541][ T8] [drm:udl_init] *ERROR* Selecting channel failed [ 498.852403][ T8] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 498.860275][ T8] [drm] Initialized udl on minor 2 [ 498.867776][ T8] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 498.876001][ T8] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 498.901404][ T5305] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 498.911933][ T5305] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 498.920666][ T5305] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 498.938015][ T8] usb 4-1: USB disconnect, device number 45 [ 500.785319][T17191] [ 500.787707][T17191] ====================================================== [ 500.794765][T17191] WARNING: possible circular locking dependency detected [ 500.800440][T17193] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 500.801796][T17191] 6.12.0-rc1-syzkaller-00165-g360c1f1f24c6 #0 Not tainted [ 500.820389][T17191] ------------------------------------------------------ [ 500.827432][T17191] syz.3.5223/17191 is trying to acquire lock: [ 500.833528][T17191] ffff88802e0e9258 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: rfcomm_sk_state_change+0x5b/0x310 [ 500.845091][T17191] [ 500.845091][T17191] but task is already holding lock: [ 500.852489][T17191] ffff88802e06d128 (&d->lock){+.+.}-{3:3}, at: __rfcomm_dlc_close+0x226/0x6a0 [ 500.861438][T17191] [ 500.861438][T17191] which lock already depends on the new lock. [ 500.861438][T17191] [ 500.871876][T17191] [ 500.871876][T17191] the existing dependency chain (in reverse order) is: [ 500.880922][T17191] [ 500.880922][T17191] -> #2 (&d->lock){+.+.}-{3:3}: [ 500.888015][T17191] lock_acquire+0x1ed/0x550 [ 500.893095][T17191] __mutex_lock+0x136/0xd70 [ 500.898151][T17191] rfcomm_dev_ioctl+0x1461/0x2220 [ 500.903743][T17191] rfcomm_sock_ioctl+0x86/0xd0 [ 500.909102][T17191] sock_do_ioctl+0x158/0x460 [ 500.914254][T17191] sock_ioctl+0x626/0x8e0 [ 500.919133][T17191] __se_sys_ioctl+0xf9/0x170 [ 500.924276][T17191] do_syscall_64+0xf3/0x230 [ 500.929323][T17191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.935861][T17191] [ 500.935861][T17191] -> #1 (rfcomm_dev_lock){+.+.}-{3:3}: [ 500.943554][T17191] lock_acquire+0x1ed/0x550 [ 500.948631][T17191] __mutex_lock+0x136/0xd70 [ 500.953690][T17191] rfcomm_dev_ioctl+0x574/0x2220 [ 500.959192][T17191] rfcomm_sock_ioctl+0x86/0xd0 [ 500.964512][T17191] sock_do_ioctl+0x158/0x460 [ 500.969708][T17191] sock_ioctl+0x626/0x8e0 [ 500.974590][T17191] __se_sys_ioctl+0xf9/0x170 [ 500.979736][T17191] do_syscall_64+0xf3/0x230 [ 500.984792][T17191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.991245][T17191] [ 500.991245][T17191] -> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}: [ 501.000671][T17191] validate_chain+0x18ef/0x5920 [ 501.006081][T17191] __lock_acquire+0x1384/0x2050 [ 501.011660][T17191] lock_acquire+0x1ed/0x550 [ 501.016729][T17191] lock_sock_nested+0x48/0x100 [ 501.022049][T17191] rfcomm_sk_state_change+0x5b/0x310 [ 501.027888][T17191] __rfcomm_dlc_close+0x26f/0x6a0 [ 501.033460][T17191] rfcomm_dlc_close+0xf1/0x190 [ 501.038775][T17191] __rfcomm_sock_close+0x121/0x250 [ 501.044444][T17191] rfcomm_sock_shutdown+0xb8/0x240 [ 501.050115][T17191] __se_sys_shutdown+0x144/0x1b0 [ 501.055605][T17191] do_syscall_64+0xf3/0x230 [ 501.060657][T17191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.067197][T17191] [ 501.067197][T17191] other info that might help us debug this: [ 501.067197][T17191] [ 501.077445][T17191] Chain exists of: [ 501.077445][T17191] sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM --> rfcomm_dev_lock --> &d->lock [ 501.077445][T17191] [ 501.091667][T17191] Possible unsafe locking scenario: [ 501.091667][T17191] [ 501.099144][T17191] CPU0 CPU1 [ 501.104798][T17191] ---- ---- [ 501.110183][T17191] lock(&d->lock); [ 501.114023][T17191] lock(rfcomm_dev_lock); [ 501.120990][T17191] lock(&d->lock); [ 501.127354][T17191] lock(sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM); [ 501.133540][T17191] [ 501.133540][T17191] *** DEADLOCK *** [ 501.133540][T17191] [ 501.141719][T17191] 2 locks held by syz.3.5223/17191: [ 501.146936][T17191] #0: ffffffff8fe4d548 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_close+0x3b/0x190 [ 501.156405][T17191] #1: ffff88802e06d128 (&d->lock){+.+.}-{3:3}, at: __rfcomm_dlc_close+0x226/0x6a0 [ 501.165784][T17191] [ 501.165784][T17191] stack backtrace: [ 501.171713][T17191] CPU: 1 UID: 0 PID: 17191 Comm: syz.3.5223 Not tainted 6.12.0-rc1-syzkaller-00165-g360c1f1f24c6 #0 [ 501.182603][T17191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 501.192698][T17191] Call Trace: [ 501.196004][T17191] [ 501.198957][T17191] dump_stack_lvl+0x241/0x360 [ 501.203676][T17191] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.208912][T17191] ? __pfx__printk+0x10/0x10 [ 501.213549][T17191] print_circular_bug+0x13a/0x1b0 [ 501.218621][T17191] check_noncircular+0x36a/0x4a0 [ 501.223768][T17191] ? add_lock_to_list+0x1e8/0x2f0 [ 501.228915][T17191] ? __pfx_check_noncircular+0x10/0x10 [ 501.234408][T17191] ? lockdep_lock+0x123/0x2b0 [ 501.239133][T17191] validate_chain+0x18ef/0x5920 [ 501.244152][T17191] ? __pfx_validate_chain+0x10/0x10 [ 501.249405][T17191] ? register_lock_class+0x102/0x980 [ 501.254751][T17191] ? __pfx_register_lock_class+0x10/0x10 [ 501.260441][T17191] ? mark_lock+0x9a/0x360 [ 501.264824][T17191] ? __lock_acquire+0x1384/0x2050 [ 501.269911][T17191] ? mark_lock+0x9a/0x360 [ 501.274450][T17191] __lock_acquire+0x1384/0x2050 [ 501.279351][T17191] lock_acquire+0x1ed/0x550 [ 501.283986][T17191] ? rfcomm_sk_state_change+0x5b/0x310 [ 501.289490][T17191] ? __pfx_lock_acquire+0x10/0x10 [ 501.294564][T17191] ? trace_contention_end+0x3c/0x120 [ 501.299881][T17191] ? __mutex_lock+0x2ef/0xd70 [ 501.304600][T17191] ? detach_timer+0x16c/0x320 [ 501.309347][T17191] ? __timer_delete+0x2e0/0x380 [ 501.314230][T17191] ? __rfcomm_dlc_close+0x226/0x6a0 [ 501.319459][T17191] ? __pfx___mutex_lock+0x10/0x10 [ 501.324512][T17191] lock_sock_nested+0x48/0x100 [ 501.329316][T17191] ? rfcomm_sk_state_change+0x5b/0x310 [ 501.334809][T17191] rfcomm_sk_state_change+0x5b/0x310 [ 501.340139][T17191] __rfcomm_dlc_close+0x26f/0x6a0 [ 501.345202][T17191] rfcomm_dlc_close+0xf1/0x190 [ 501.350000][T17191] __rfcomm_sock_close+0x121/0x250 [ 501.355152][T17191] rfcomm_sock_shutdown+0xb8/0x240 [ 501.360306][T17191] __se_sys_shutdown+0x144/0x1b0 [ 501.365277][T17191] do_syscall_64+0xf3/0x230 [ 501.369811][T17191] ? clear_bhb_loop+0x35/0x90 [ 501.374516][T17191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.380473][T17191] RIP: 0033:0x7fa59cd7dff9 [ 501.384921][T17191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.404654][T17191] RSP: 002b:00007fa59db8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 501.413124][T17191] RAX: ffffffffffffffda RBX: 00007fa59cf36130 RCX: 00007fa59cd7dff9 [ 501.421129][T17191] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 501.429127][T17191] RBP: 00007fa59cdf0296 R08: 0000000000000000 R09: 0000000000000000 [ 501.437132][T17191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 501.445141][T17191] R13: 0000000000000001 R14: 00007fa59cf36130 R15: 00007ffc243bfd48 [ 501.453185][T17191] [ 501.456324][ C1] vkms_vblank_simulate: vblank timer overrun [ 502.668009][T14234] Bluetooth: hci5: command 0x0405 tx timeout