last executing test programs: 21.55966s ago: executing program 0 (id=5981): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0x2, 0x100, 0x2, {0x0, 0x0, 0x1000, 0x2}}) 21.372953222s ago: executing program 0 (id=5984): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000240)={'wlan0\x00', {0x2, 0x0, @loopback}}) 21.209576737s ago: executing program 0 (id=5987): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CHANGE_FD(r0, 0x40081271, 0xffffffffffffffff) 20.98675594s ago: executing program 0 (id=5990): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 20.766788093s ago: executing program 0 (id=5995): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) 20.579032047s ago: executing program 0 (id=5999): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0x7000000) 4.440950883s ago: executing program 32 (id=5999): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0x7000000) 2.324571252s ago: executing program 2 (id=6332): r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x1) 2.164768883s ago: executing program 2 (id=6336): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10, 0x0}, 0x0) 1.983788142s ago: executing program 2 (id=6341): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142408000700e000030a08000a00", @ANYRES32], 0x48}}, 0x0) 1.950839976s ago: executing program 4 (id=6342): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) 1.80374472s ago: executing program 4 (id=6345): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a009000000000000140003006e657464657673696d3000000000000008002800babc00005c0016805800018054000c80140001"], 0x98}, 0x1, 0x0, 0x0, 0x24040854}, 0x40000) 1.417643697s ago: executing program 1 (id=6351): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x3, 0x3, 0x8, 0x1, 0x30}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.299089012s ago: executing program 1 (id=6353): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000100)=@ethtool_perm_addr={0x16}}) 1.141835293s ago: executing program 3 (id=6356): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000002c0)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) 1.059691809s ago: executing program 3 (id=6357): keyctl$restrict_keyring(0x5, 0xfffffffffffffffe, 0x0, 0x0) request_key(&(0x7f0000000300)='logon\x00', &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0) 812.143687ms ago: executing program 1 (id=6358): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x949902, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f00000000c0)={{0x4, 0xac}, {0x8000000000000000, 0xfffffffc}, 0x80000005, 0x2}) 768.356485ms ago: executing program 3 (id=6359): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0xfd, 0x7fff0008}]}) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) 727.482487ms ago: executing program 4 (id=6360): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, 0x1, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010101}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) 716.948397ms ago: executing program 2 (id=6361): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'batadv0\x00', 0x1003}) 617.706214ms ago: executing program 3 (id=6362): r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x2710, 0x0, &(0x7f00000000c0)) 617.003026ms ago: executing program 1 (id=6363): r0 = syz_io_uring_setup(0x239, &(0x7f0000000440), &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000280)={0x80000000, 0xf1, '\x00', 0x1000000}, 0x1) 493.565587ms ago: executing program 2 (id=6364): sync() sync() 449.17477ms ago: executing program 4 (id=6365): r0 = syz_open_dev$vbi(&(0x7f0000003cc0), 0x1, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000400)={0x3, [0x9, 0x43, 0xfff8, 0xe9, 0x8, 0x0, 0xb, 0x59, 0x8, 0x3, 0x4, 0x2, 0x6, 0x8000, 0xfff9, 0x9, 0x100, 0xfeff, 0x800, 0x4, 0x0, 0x4, 0xf82, 0x80, 0x7f, 0x401, 0x5, 0xff, 0x5, 0x434, 0x8, 0x2f, 0x2, 0x0, 0xfffc, 0x8, 0xffff, 0x0, 0x2, 0xfffd, 0x9, 0x7ff, 0x5, 0x6, 0xadd, 0x3, 0x4, 0x2], 0xd}) 411.106337ms ago: executing program 1 (id=6366): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030069087a300000000060000000060a010400000000000000000500400008000b400000000038000480340001800b00010074756e6e656c0000240002800800034000000000080001400000000908000340000000f5080002400000000c0900010073797a30"], 0xd4}}, 0x0) 375.730583ms ago: executing program 3 (id=6367): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x70bd29, 0x4, {0x2}, [@NDA_FDB_EXT_ATTRS={0x4}, @NDA_DST_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x28}}, 0x20000080) 252.59084ms ago: executing program 4 (id=6368): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000001c0)="8f00000014006b05c84e21000ab16d8b230675f802000000040002005817530461bc24eeb556a705251e6182149a36c23d3b48dfd8cd81bf9367b098fa51f60a64c9f4080000000000b6c0504bb9189d9193e9bd1c1b7376dc5214168eab57c736b13ae90298536c3aa6b230606b45823c8f8e9616afbb519374c3e3875b0f3252fc5dfbc28369efcd300a95fcfcda", 0x8f}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8094) 196.662045ms ago: executing program 1 (id=6369): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0xa000, 0x5, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0xc, 0x0, 0x29, 0x0, @loopback, @rand_addr=0x64010101}}}}) 136.137664ms ago: executing program 2 (id=6370): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014, 0xa2041}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xfffffff8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 77.177463ms ago: executing program 3 (id=6371): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x80, 0x20, 0xffffff80, 0x0, {{0x5, 0x4, 0x2, 0x1, 0x14, 0x66, 0x0, 0xa, 0x2f, 0x0, @multicast2, @broadcast}}}}) 0s ago: executing program 4 (id=6372): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000002580), 0xa0100, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) kernel console output (not intermixed with test programs): ][ T5976] usb 1-1: Manufacturer: syz [ 375.844469][ T5976] usb 1-1: SerialNumber: syz [ 375.861454][ T5974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 375.885770][ T5974] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 375.910369][ T5974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 375.930702][ T5974] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 375.940515][ T5974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.948601][ T5974] usb 2-1: Product: syz [ 375.965291][ T5974] usb 2-1: Manufacturer: syz [ 375.970052][ T5974] usb 2-1: SerialNumber: syz [ 375.986403][ T5974] usb 2-1: config 0 descriptor?? [ 376.015450][T14222] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 376.022862][T14222] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 376.039760][ T5974] usb 2-1: ucan: probing device on interface #0 [ 376.136990][ T5976] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 376.161279][ T5976] usb 1-1: USB disconnect, device number 119 [ 376.249887][T14262] netlink: 'syz.3.4018': attribute type 41 has an invalid length. [ 376.477947][ T5974] usb 2-1: ucan: failed to retrieve device info [ 376.485681][ T5974] usb 2-1: ucan: probe failed; try to update the device firmware [ 376.522264][ T5974] usb 2-1: USB disconnect, device number 125 [ 376.594519][ T981] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 376.704679][T14274] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 376.727513][T14274] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 376.779278][ T981] usb 5-1: unable to get BOS descriptor or descriptor too short [ 376.802220][ T981] usb 5-1: not running at top speed; connect to a high speed hub [ 376.826894][ T981] usb 5-1: config 17 has an invalid interface number: 8 but max is 1 [ 376.847012][ T981] usb 5-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 376.876653][ T981] usb 5-1: config 17 has no interface number 0 [ 376.908196][ T981] usb 5-1: config 17 interface 8 altsetting 6 has an endpoint descriptor with address 0x61, changing to 0x1 [ 376.931378][ T981] usb 5-1: config 17 interface 8 altsetting 6 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 376.949039][ T981] usb 5-1: config 17 interface 8 has no altsetting 0 [ 376.981942][ T981] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 376.999855][ T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.017429][ T981] usb 5-1: Product: syz [ 377.025014][ T981] usb 5-1: Manufacturer: syz [ 377.029707][ T981] usb 5-1: SerialNumber: syz [ 377.348532][ T981] usb 5-1: selecting invalid altsetting 0 [ 377.374594][T14286] __nla_validate_parse: 1 callbacks suppressed [ 377.374615][T14286] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4031'. [ 377.389886][ T981] usb 5-1: 8:6 : no UAC_FORMAT_TYPE desc [ 377.389915][ T981] usb 5-1: selecting invalid altsetting 0 [ 377.459061][ T981] usb 5-1: USB disconnect, device number 92 [ 377.519307][ T5897] udevd[5897]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 378.055024][T14312] netlink: 'syz.4.4043': attribute type 1 has an invalid length. [ 378.076480][T14312] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4043'. [ 378.398998][T14328] IPv6: NLM_F_CREATE should be specified when creating new route [ 378.957354][T14359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4066'. [ 379.018555][ T5964] usb 3-1: new full-speed USB device number 123 using dummy_hcd [ 379.103390][T14365] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4070'. [ 379.112608][T14367] tmpfs: Bad value for 'mpol' [ 379.146924][ T10] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 379.214039][ T5964] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 379.239010][ T5964] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 379.256045][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.292609][ T5964] usb 3-1: Product: syz [ 379.297660][ T5964] usb 3-1: Manufacturer: syz [ 379.315822][ T5964] usb 3-1: SerialNumber: syz [ 379.322344][ T10] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 379.339372][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.348405][ T10] usb 1-1: Product: syz [ 379.362349][ T5964] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 379.375407][ T10] usb 1-1: Manufacturer: syz [ 379.380085][ T10] usb 1-1: SerialNumber: syz [ 379.390789][ T10] usb 1-1: config 0 descriptor?? [ 379.628687][ T10] hso 1-1:0.0: Can't find BULK IN endpoint [ 379.640994][ T10] usb-storage 1-1:0.0: USB Mass Storage device detected [ 379.811023][ T5964] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 379.851758][ T10] usb 1-1: USB disconnect, device number 120 [ 379.887924][ T5964] usb 3-1: USB disconnect, device number 123 [ 380.157615][ T30] audit: type=1107 audit(2000002991.852:43): pid=14406 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 380.247082][T14413] Non-string source [ 380.256480][T14414] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 380.624839][T14429] netlink: 'syz.1.4100': attribute type 11 has an invalid length. [ 380.744236][ T10] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 380.933108][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 380.972273][ T10] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 380.987677][ T10] usb 5-1: config 179 has no interface number 0 [ 380.999628][ T10] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 381.022632][ T10] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 381.034401][ T10] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 381.046785][ T10] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 381.064151][ T10] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 381.078822][ T10] usb 5-1: config 179 interface 65 has no altsetting 0 [ 381.086467][ T10] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 381.096153][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.208484][ T10] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input48 [ 381.252222][T14448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4108'. [ 381.328247][ T5194] input input48: unable to receive magic message: -110 [ 381.428936][ T5194] input input48: unable to receive magic message: -32 [ 381.438536][T14448] bridge_slave_1: left allmulticast mode [ 381.444360][T14448] bridge_slave_1: left promiscuous mode [ 381.450847][T14448] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.483417][T14455] cgroup: Unknown subsys name 'noxattr' [ 381.495176][ T5194] input input48: unable to receive magic message: -32 [ 381.515533][T14448] bridge_slave_0: left allmulticast mode [ 381.528349][ T5194] input input48: unable to receive magic message: -32 [ 381.534761][T14448] bridge_slave_0: left promiscuous mode [ 381.555901][T14448] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.614642][ T10] usb 5-1: USB disconnect, device number 93 [ 381.620714][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 382.022468][T14473] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 382.032926][ T978] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 382.203911][ T978] usb 3-1: Using ep0 maxpacket: 32 [ 382.251626][ T978] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 382.278907][ T978] usb 3-1: config 0 has no interface number 0 [ 382.316997][T14483] gfs2: Unexpected value for 'acl' [ 382.321253][ T978] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 382.335825][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.358680][T14485] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 382.363283][ T978] usb 3-1: Product: syz [ 382.365548][T14485] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 382.388275][T14485] vhci_hcd vhci_hcd.0: Device attached [ 382.389589][ T978] usb 3-1: Manufacturer: syz [ 382.399125][ T978] usb 3-1: SerialNumber: syz [ 382.410577][T14492] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 382.416065][ T978] usb 3-1: config 0 descriptor?? [ 382.417681][T14492] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 382.436644][T14492] vhci_hcd vhci_hcd.0: Device attached [ 382.458888][T14493] vhci_hcd: connection closed [ 382.475908][T14486] vhci_hcd: connection closed [ 382.481319][ T3477] vhci_hcd: stop threads [ 382.492895][ T978] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 382.500491][ T978] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 382.510397][ T3477] vhci_hcd: release socket [ 382.527666][ T3477] vhci_hcd: disconnect device [ 382.533101][ T3477] vhci_hcd: stop threads [ 382.539402][ T3477] vhci_hcd: release socket [ 382.545243][ T3477] vhci_hcd: disconnect device [ 382.589332][ T981] vhci_hcd: vhci_device speed not set [ 382.693401][ T978] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 382.711088][ T978] usbhid 3-1:0.35: couldn't find an input interrupt endpoint [ 382.939196][ T978] usb 3-1: USB disconnect, device number 124 [ 383.099239][T14523] netlink: 'syz.3.4144': attribute type 11 has an invalid length. [ 383.254025][ T5904] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 383.434334][ T5904] usb 5-1: Using ep0 maxpacket: 8 [ 383.441945][ T5904] usb 5-1: unable to get BOS descriptor or descriptor too short [ 383.467930][ T5904] usb 5-1: config 4 interface 0 has no altsetting 0 [ 383.482029][ T5904] usb 5-1: string descriptor 0 read error: -22 [ 383.499482][ T5904] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 383.505535][T14541] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.540119][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.569183][ T5904] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 383.616459][ T5904] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 383.650712][ T5904] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 383.685360][ T5904] usb 5-1: media controller created [ 383.750359][ T5904] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 384.046214][T14559] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 384.126579][ T5853] Bluetooth: hci3: unexpected event for opcode 0x2019 [ 384.129511][ T6010] usb 5-1: USB disconnect, device number 94 [ 384.427738][T14576] netlink: 'syz.1.4166': attribute type 2 has an invalid length. [ 384.473150][T14576] netlink: 'syz.1.4166': attribute type 11 has an invalid length. [ 384.484008][T14576] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4166'. [ 384.885959][T14597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4175'. [ 385.115668][T14605] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4179'. [ 385.175577][T14609] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.577866][T14632] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4193'. [ 385.767070][T14642] netlink: 'syz.1.4198': attribute type 27 has an invalid length. [ 387.826436][ T6010] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 388.016413][T14761] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4257'. [ 388.017291][ T6010] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 388.059325][ T6010] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 388.081856][ T6010] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 388.096414][ T6010] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.118447][T14739] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 388.141037][ T6010] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 388.310508][ T981] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 388.356121][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.362839][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.391159][T14771] xt_CT: No such helper "pptp" [ 388.495653][ T981] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.514313][ T981] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 388.549447][ T981] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 388.558941][ T981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.566228][ T6010] usb 5-1: USB disconnect, device number 95 [ 388.575985][ T981] usb 1-1: config 0 descriptor?? [ 388.675388][T14785] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4268'. [ 388.685654][T14785] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4268'. [ 388.699459][T14785] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4268'. [ 388.748217][T14788] Smack: duplicate mount options [ 388.767233][T14789] binder: 14786:14789 ioctl c00c6211 ffffffffffffffff returned -14 [ 388.969674][T14793] Cannot find del_set index 286 as target [ 389.039235][ T981] Bluetooth: Can't get state to change to load configuration err [ 389.058023][ T981] Bluetooth: Loading sysconfig file failed [ 389.070192][ T981] ath3k 1-1:0.0: probe with driver ath3k failed with error -16 [ 389.105639][ T981] usb 1-1: USB disconnect, device number 121 [ 389.142755][T14806] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 389.399634][T14819] netlink: 'syz.2.4283': attribute type 32 has an invalid length. [ 389.533895][T14825] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 389.544148][T14825] overlayfs: missing 'lowerdir' [ 389.658193][T14831] netlink: 'syz.1.4288': attribute type 3 has an invalid length. [ 389.676800][T14831] netlink: 'syz.1.4288': attribute type 2 has an invalid length. [ 390.039761][T14850] bond0: Error: Cannot enslave bond to itself. [ 390.604953][T14878] syz.0.4313 uses old SIOCAX25GETINFO [ 391.899059][ T5976] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 392.097888][ T5976] usb 1-1: unable to get BOS descriptor or descriptor too short [ 392.108893][ T5976] usb 1-1: config 2 has an invalid interface number: 99 but max is 0 [ 392.121086][ T30] audit: type=1326 audit(2000003003.040:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14945 comm="syz.4.4345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a6d8ebe9 code=0x7ffc0000 [ 392.166733][ T5976] usb 1-1: config 2 has no interface number 0 [ 392.172931][ T5976] usb 1-1: config 2 interface 99 has no altsetting 0 [ 392.190175][ T5976] usb 1-1: New USB device found, idVendor=0840, idProduct=0082, bcdDevice= 0.01 [ 392.203418][ T5976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.210183][ T30] audit: type=1326 audit(2000003003.069:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14945 comm="syz.4.4345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fd9a6d8ebe9 code=0x7ffc0000 [ 392.212233][ T5976] usb 1-1: Product: syz [ 392.262478][ T5976] usb 1-1: Manufacturer: syz [ 392.267160][ T5976] usb 1-1: SerialNumber: syz [ 392.267841][ T30] audit: type=1326 audit(2000003003.069:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14945 comm="syz.4.4345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a6d8ebe9 code=0x7ffc0000 [ 392.336378][ T30] audit: type=1326 audit(2000003003.069:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14945 comm="syz.4.4345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a6d8ebe9 code=0x7ffc0000 [ 392.579676][T14968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4353'. [ 392.630940][T14970] cifs: Unknown parameter 'no'aN[Gzob,er;%j [ 392.630940][T14970] z,@qJ#"h/.W1ȱnNC"C<+`#k' [ 392.750874][ T5976] usb-storage 1-1:2.99: USB Mass Storage device detected [ 392.772862][ T5976] usb-storage 1-1:2.99: Quirks match for vid 0840 pid 0082: 10 [ 392.851098][ T5976] usb 1-1: USB disconnect, device number 122 [ 393.175689][T14999] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4369'. [ 393.189285][T14995] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 393.196656][ T978] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 393.206216][T14995] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 393.237627][T14999] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 393.403277][ T978] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 393.412792][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.434257][ T978] usb 4-1: Product: syz [ 393.443233][ T978] usb 4-1: Manufacturer: syz [ 393.450667][ T978] usb 4-1: SerialNumber: syz [ 393.515057][ T978] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 393.669327][ T5964] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 394.209599][ T6010] usb 4-1: USB disconnect, device number 123 [ 394.706108][T15038] virt_wifi0 speed is unknown, defaulting to 1000 [ 394.727448][T15038] virt_wifi0 speed is unknown, defaulting to 1000 [ 394.756193][T15038] virt_wifi0 speed is unknown, defaulting to 1000 [ 394.792223][T15038] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 394.850659][ T5964] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 394.864530][T15038] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 394.879538][ T5964] ath9k_htc: Failed to initialize the device [ 394.902304][ T6010] usb 4-1: ath9k_htc: USB layer deinitialized [ 394.989620][T15038] virt_wifi0 speed is unknown, defaulting to 1000 [ 395.014094][T15038] virt_wifi0 speed is unknown, defaulting to 1000 [ 395.059104][T15038] virt_wifi0 speed is unknown, defaulting to 1000 [ 395.109124][T15038] virt_wifi0 speed is unknown, defaulting to 1000 [ 395.147782][T15038] virt_wifi0 speed is unknown, defaulting to 1000 [ 395.429303][T15065] process 'syz.3.4401' launched './file0' with NULL argv: empty string added [ 395.576224][ T43] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 395.747225][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 395.763812][ T43] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 395.779405][ T43] usb 3-1: too many endpoints for config 0 interface 0 altsetting 5: 69, using maximum allowed: 30 [ 395.811303][ T43] usb 3-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 69 [ 395.825162][ T43] usb 3-1: config 0 interface 0 has no altsetting 1 [ 395.833190][ T43] usb 3-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 395.842282][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 395.878455][ T43] usb 3-1: SerialNumber: syz [ 395.894870][ T43] usb 3-1: config 0 descriptor?? [ 395.910269][ T43] usb-storage 3-1:0.0: USB Mass Storage device detected [ 395.952091][ T43] usb-storage 3-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 396.145790][ T6010] usb 3-1: USB disconnect, device number 125 [ 396.811202][T15125] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4431'. [ 396.854802][T15129] netlink: 'syz.4.4434': attribute type 1 has an invalid length. [ 396.877735][T15129] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4434'. [ 396.880404][ T43] usb 1-1: new full-speed USB device number 123 using dummy_hcd [ 396.919357][T15131] xt_socket: unknown flags 0x8 [ 397.087079][ T43] usb 1-1: config 150 has an invalid interface number: 204 but max is 1 [ 397.110371][ T43] usb 1-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 397.147841][ T43] usb 1-1: config 150 has 1 interface, different from the descriptor's value: 2 [ 397.156973][ T43] usb 1-1: config 150 has no interface number 0 [ 397.187780][ T43] usb 1-1: config 150 interface 204 has no altsetting 0 [ 397.217513][ T43] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 397.236860][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.246778][ T43] usb 1-1: Product: syz [ 397.267803][T15149] netlink: 'syz.1.4444': attribute type 10 has an invalid length. [ 397.294717][T15149] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 397.307915][ T43] usb 1-1: Manufacturer: syz [ 397.312569][ T43] usb 1-1: SerialNumber: syz [ 397.475068][T15158] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4449'. [ 397.498692][T15158] bond_slave_0: entered promiscuous mode [ 397.504813][T15158] bond_slave_1: entered promiscuous mode [ 397.584118][ T43] xr_serial 1-1:150.204: skipping garbage [ 397.621797][ T43] usb 1-1: USB disconnect, device number 123 [ 397.868737][ T30] audit: type=1326 audit(2000003008.420:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15175 comm="syz.2.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b2b8ebe9 code=0x7ffc0000 [ 397.926740][ T30] audit: type=1326 audit(2000003008.438:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15175 comm="syz.2.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b2b8ebe9 code=0x7ffc0000 [ 397.960272][T15179] delete_channel: no stack [ 397.966532][ T30] audit: type=1326 audit(2000003008.448:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15175 comm="syz.2.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f38b2b8ebe9 code=0x7ffc0000 [ 398.032920][ T30] audit: type=1326 audit(2000003008.448:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15175 comm="syz.2.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b2b8ebe9 code=0x7ffc0000 [ 398.057869][ T30] audit: type=1326 audit(2000003008.448:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15175 comm="syz.2.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b2b8ebe9 code=0x7ffc0000 [ 398.805873][T15225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4481'. [ 398.806301][T15222] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 398.906056][ T6010] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 398.944759][ T5964] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 398.964201][T15228] kernel profiling enabled (shift: 9) [ 398.977091][T15232] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4485'. [ 399.093516][ T6010] usb 5-1: Using ep0 maxpacket: 16 [ 399.104063][ T6010] usb 5-1: too many configurations: 29, using maximum allowed: 8 [ 399.125359][ T5964] usb 3-1: Using ep0 maxpacket: 8 [ 399.152069][ T5964] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 399.167315][ T6010] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 399.176791][ T5964] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.187043][ T6010] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.199380][ T6010] usb 5-1: Product: syz [ 399.203949][ T5964] usb 3-1: config 0 has no interface number 0 [ 399.210122][ T5964] usb 3-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 399.225939][ T6010] usb 5-1: Manufacturer: syz [ 399.230602][ T6010] usb 5-1: SerialNumber: syz [ 399.271882][ T6010] r8152-cfgselector 5-1: Unknown version 0x0000 [ 399.279728][ T5964] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 399.298915][ T6010] r8152-cfgselector 5-1: config 0 descriptor?? [ 399.315331][ T5964] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 399.324686][T15242] Invalid source name [ 399.354140][T15242] UBIFS error (pid: 15242): cannot open "./file0", error -22 [ 399.361251][ T5964] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 399.391602][ T5964] usb 3-1: config 0 interface 52 has no altsetting 0 [ 399.398986][ T5964] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 399.411991][ T5964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.443412][ T5964] usb 3-1: config 0 descriptor?? [ 399.561411][ T6010] r8152-cfgselector 5-1: USB disconnect, device number 96 [ 399.749395][ T5964] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input49 [ 400.012906][ T5976] usb 3-1: USB disconnect, device number 126 [ 400.019046][ C1] synaptics_usb 3-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 400.045773][ T5194] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 400.579003][ T6010] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 400.672040][T15288] (unnamed net_device) (uninitialized): option lp_interval: invalid value (18446744073709551487) [ 400.683567][T15288] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 400.771086][ T6010] usb 5-1: Using ep0 maxpacket: 32 [ 400.778316][ T6010] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 400.805768][ T6010] usb 5-1: config 4 has no interface number 0 [ 400.831418][T15297] Cannot find add_set index 0 as target [ 400.835274][ T6010] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.867258][ T6010] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.907189][ T6010] usb 5-1: New USB device found, idVendor=016d, idProduct=c314, bcdDevice= 0.00 [ 400.920276][ T6010] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.974408][ T6010] hub 5-1:4.128: USB hub found [ 401.180915][ T6010] hub 5-1:4.128: 2 ports detected [ 401.204833][ T6010] hub 5-1:4.128: Using single TT (err -22) [ 401.211482][T15311] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 401.396325][ T6010] hub 5-1:4.128: hub_hub_status failed (err = -71) [ 401.416425][ T6010] hub 5-1:4.128: config failed, can't get hub status (err -71) [ 401.444846][ T5964] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 401.479899][ T6010] usb 5-1: USB disconnect, device number 97 [ 401.605114][ T5964] usb 2-1: Using ep0 maxpacket: 8 [ 401.623210][ T5964] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 45, changing to 9 [ 401.655947][ T5964] usb 2-1: config 1 interface 0 has no altsetting 0 [ 401.671221][ T5964] usb 2-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 401.688679][ T5964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.705195][ T5964] usb 2-1: Product: syz [ 401.709599][ T5964] usb 2-1: Manufacturer: syz [ 401.725796][ T5964] usb 2-1: SerialNumber: syz [ 401.803832][ T30] audit: type=1326 audit(2000003012.096:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15332 comm="syz.0.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f842778ebe9 code=0x7ffc0000 [ 401.847488][ T30] audit: type=1326 audit(2000003012.124:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15332 comm="syz.0.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f842778ebe9 code=0x7ffc0000 [ 401.882956][ T30] audit: type=1326 audit(2000003012.124:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15332 comm="syz.0.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f842778ebe9 code=0x7ffc0000 [ 401.952927][ T30] audit: type=1326 audit(2000003012.124:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15332 comm="syz.0.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f842778ebe9 code=0x7ffc0000 [ 402.004885][ T30] audit: type=1326 audit(2000003012.124:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15332 comm="syz.0.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f842778ebe9 code=0x7ffc0000 [ 402.202149][ T5964] usbhid 2-1:1.0: can't add hid device: -71 [ 402.214210][ T5964] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 402.243878][ T5964] usb 2-1: USB disconnect, device number 126 [ 402.428898][T15356] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4539'. [ 403.094254][T15390] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 403.304808][T15387] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 403.319066][T15387] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 403.388011][T15387] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 403.398835][T15387] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 403.537880][T15412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4567'. [ 404.021002][T15436] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4578'. [ 404.041413][T15440] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 404.051527][T15436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4578'. [ 404.197288][T15444] ubi0: attaching mtd0 [ 404.237250][T15444] ubi0: scanning is finished [ 404.242016][T15444] ubi0: empty MTD device detected [ 404.489597][T15444] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 404.497341][T15444] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 404.504777][T15444] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 404.511778][T15444] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 404.520235][T15456] 8021q: adding VLAN 0 to HW filter on device bond3 [ 404.520827][T15444] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 404.535527][T15444] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 404.543555][T15444] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 754197915 [ 404.553609][T15444] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 404.574480][T15459] ubi0: background thread "ubi_bgt0d" started, PID 15459 [ 404.772278][T15466] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4593'. [ 404.812331][T15466] tc_dump_action: action bad kind [ 405.373215][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 405.445970][T15497] xt_TCPMSS: Only works on TCP SYN packets [ 405.463721][ T5976] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 405.518156][ T30] audit: type=1326 audit(2000003015.576:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15501 comm="syz.3.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787878ebe9 code=0x7ffc0000 [ 405.549607][ T5853] Bluetooth: hci3: command 0x0406 tx timeout [ 405.591980][ T30] audit: type=1326 audit(2000003015.604:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15501 comm="syz.3.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f787878ebe9 code=0x7ffc0000 [ 405.656733][ T5976] usb 1-1: Using ep0 maxpacket: 16 [ 405.676733][ T5976] usb 1-1: config 0 has an invalid interface number: 148 but max is 0 [ 405.687589][ T30] audit: type=1326 audit(2000003015.670:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15501 comm="syz.3.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787878ebe9 code=0x7ffc0000 [ 405.709525][ T5976] usb 1-1: config 0 has no interface number 0 [ 405.715707][ T5976] usb 1-1: config 0 interface 148 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 32 [ 405.726213][ T5976] usb 1-1: New USB device found, idVendor=0499, idProduct=8206, bcdDevice=f4.55 [ 405.736632][ T30] audit: type=1326 audit(2000003015.670:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15501 comm="syz.3.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787878ebe9 code=0x7ffc0000 [ 405.758275][ T5976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.776569][T15510] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4615'. [ 405.786864][ T5976] usb 1-1: config 0 descriptor?? [ 405.795653][T15482] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 406.078577][ T6010] usb 1-1: USB disconnect, device number 124 [ 406.190659][ T5976] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 406.250256][T15532] netlink: 'syz.4.4626': attribute type 11 has an invalid length. [ 406.376279][ T5976] usb 2-1: config 0 has an invalid interface number: 138 but max is 0 [ 406.398727][ T5976] usb 2-1: config 0 has no interface number 0 [ 406.420335][ T5976] usb 2-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 406.444746][ T5976] usb 2-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x97, changing to 0x87 [ 406.472672][ T5976] usb 2-1: config 0 interface 138 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 4 [ 406.500558][ T5976] usb 2-1: config 0 interface 138 altsetting 0 endpoint 0x87 has invalid maxpacket 1152, setting to 1023 [ 406.533299][ T5976] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= f.66 [ 406.550093][ T5976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.573653][ T5976] usb 2-1: config 0 descriptor?? [ 406.582749][T15548] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4634'. [ 406.827791][ T5976] usb 2-1: string descriptor 0 read error: -71 [ 406.838414][ T5976] usbtest 2-1:0.138: Linux gadget zero [ 406.874756][ T5976] usbtest 2-1:0.138: full-speed {control in/out bulk-out iso-in} tests (+alt) [ 406.894783][ T5976] usb 2-1: USB disconnect, device number 127 [ 407.130645][T15568] 8021q: adding VLAN 0 to HW filter on device bond1 [ 407.433836][T15590] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 407.500973][T15590] CIFS mount error: No usable UNC path provided in device string! [ 407.500973][T15590] [ 407.546096][T15590] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 407.593416][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 407.762117][ T5853] Bluetooth: hci3: command 0x0406 tx timeout [ 408.014774][T15618] netlink: 292 bytes leftover after parsing attributes in process `syz.2.4670'. [ 408.212331][T15627] Process accounting resumed [ 408.256047][ T5964] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 408.330584][ T6010] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 408.428996][T15643] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4681'. [ 408.439877][ T5964] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 408.458539][ T5964] usb 1-1: config 0 has no interface number 0 [ 408.478243][ T5964] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 408.518546][ T6010] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 408.528540][ T5964] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 408.542180][ T6010] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.556547][ T6010] usb 5-1: Product: syz [ 408.560776][ T6010] usb 5-1: Manufacturer: syz [ 408.569304][ T6010] usb 5-1: SerialNumber: syz [ 408.575926][ T5964] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 408.588735][ T6010] usb 5-1: config 0 descriptor?? [ 408.593968][ T5964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.611555][ T5964] usb 1-1: Product: syz [ 408.615943][ T5964] usb 1-1: Manufacturer: syz [ 408.621243][ T5964] usb 1-1: SerialNumber: syz [ 408.648745][ T5964] usb 1-1: config 0 descriptor?? [ 408.663467][T15619] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 408.665370][T15651] SET target dimension over the limit! [ 408.675409][ T5964] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 408.708887][ T5964] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 408.825930][ T6010] usb-storage 5-1:0.0: USB Mass Storage device detected [ 408.923299][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 408.974106][T15663] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.982904][ T5904] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 409.061816][ T6010] usb 5-1: USB disconnect, device number 98 [ 409.146370][ T5976] usb 1-1: USB disconnect, device number 125 [ 409.152779][ T5904] usb 4-1: Using ep0 maxpacket: 16 [ 409.189991][ T5904] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 409.200492][ T5976] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 409.222076][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.238479][ T5976] cyberjack 1-1:0.69: device disconnected [ 409.251928][ T5904] usb 4-1: Product: syz [ 409.260356][ T5904] usb 4-1: Manufacturer: syz [ 409.265026][ T5904] usb 4-1: SerialNumber: syz [ 409.302859][ T5904] r8152-cfgselector 4-1: Unknown version 0x0000 [ 409.312131][ T5904] r8152-cfgselector 4-1: config 0 descriptor?? [ 409.771760][ T43] r8152-cfgselector 4-1: USB disconnect, device number 124 [ 409.832402][T15691] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4702'. [ 409.870121][T15691] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 410.423972][ T5964] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 410.529768][ T30] audit: type=1326 audit(2000003020.254:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15726 comm="syz.0.4721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f842778ebe9 code=0x7ffc0000 [ 410.588490][ T30] audit: type=1326 audit(2000003020.291:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15726 comm="syz.0.4721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f842778ebe9 code=0x7ffc0000 [ 410.615665][ T30] audit: type=1326 audit(2000003020.291:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15726 comm="syz.0.4721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f842778ebe9 code=0x7ffc0000 [ 410.626109][ T5964] usb 2-1: Using ep0 maxpacket: 32 [ 410.647352][ T30] audit: type=1326 audit(2000003020.291:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15726 comm="syz.0.4721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f842778ebe9 code=0x7ffc0000 [ 410.677684][ T5964] usb 2-1: unable to get BOS descriptor or descriptor too short [ 410.691235][ T5964] usb 2-1: config 7 has an invalid interface number: 187 but max is 0 [ 410.701568][ T6010] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 410.709857][ T5964] usb 2-1: config 7 has no interface number 0 [ 410.733980][ T5964] usb 2-1: config 7 interface 187 has no altsetting 0 [ 410.744911][T15733] binder: 15732:15733 unknown command 1074553622 [ 410.754172][ T5964] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 410.772336][ T5964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.776765][T15733] binder: 15732:15733 ioctl c0306201 200000000300 returned -22 [ 410.792597][ T5964] usb 2-1: Product: syz [ 410.796850][ T5964] usb 2-1: Manufacturer: syz [ 410.813605][ T5964] usb 2-1: SerialNumber: syz [ 410.893789][ T6010] usb 4-1: Using ep0 maxpacket: 32 [ 410.903091][ T6010] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 410.914695][ T6010] usb 4-1: config 0 has no interface number 0 [ 410.927106][ T6010] usb 4-1: config 0 interface 88 altsetting 0 has an endpoint descriptor with address 0x1A, changing to 0xA [ 410.950295][ T6010] usb 4-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.12 [ 410.993000][ T6010] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.011283][ T6010] usb 4-1: Product: syz [ 411.015987][ T6010] usb 4-1: Manufacturer: syz [ 411.021311][ T6010] usb 4-1: SerialNumber: syz [ 411.038099][ T6010] usb 4-1: config 0 descriptor?? [ 411.050129][ T5964] usb 2-1: Cannot retrieve CPort count: -71 [ 411.062591][ T5964] usb 2-1: Cannot retrieve CPort count: -71 [ 411.076302][ T5964] es2_ap_driver 2-1:7.187: probe with driver es2_ap_driver failed with error -71 [ 411.119576][ T5964] usb 2-1: USB disconnect, device number 2 [ 411.471302][ T5976] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 411.507237][T15759] netlink: 'syz.4.4737': attribute type 11 has an invalid length. [ 411.566830][ T43] usb 4-1: USB disconnect, device number 125 [ 411.590015][ T43] f81534a_ctrl 4-1:0.88: failed to set register 0x116: -19 [ 411.615303][ T43] f81534a_ctrl 4-1:0.88: failed to enable ports: -19 [ 411.650515][ T5976] usb 3-1: Using ep0 maxpacket: 32 [ 411.682929][ T5976] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 411.710647][ T5976] usb 3-1: config 0 has no interface number 0 [ 411.729499][ T5976] usb 3-1: config 0 interface 184 has no altsetting 0 [ 411.744575][ T5976] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 411.759959][ T5976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.779374][ T5976] usb 3-1: Product: syz [ 411.787704][ T5976] usb 3-1: Manufacturer: syz [ 411.815676][ T5976] usb 3-1: SerialNumber: syz [ 411.836826][ T5976] usb 3-1: config 0 descriptor?? [ 411.863784][ T5976] smsc75xx v1.0.0 [ 412.075325][T15779] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.097035][ T5976] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 412.120648][ T5976] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 412.145076][ T5976] usb 3-1: USB disconnect, device number 127 [ 412.263050][T15785] netlink: 'syz.3.4750': attribute type 3 has an invalid length. [ 412.751555][T15809] qrtr: Invalid version 43 [ 413.176607][T15834] CIFS mount error: No usable UNC path provided in device string! [ 413.176607][T15834] [ 413.196359][T15834] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 413.386401][T15845] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.4779'. [ 413.854331][ T43] IPVS: starting estimator thread 0... [ 413.983773][T15864] IPVS: using max 27 ests per chain, 64800 per kthread [ 414.378679][T15887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4800'. [ 414.796457][ T5853] Bluetooth: hci2: unexpected event for opcode 0x2029 [ 414.836748][T15910] netlink: 'syz.0.4812': attribute type 30 has an invalid length. [ 415.285072][T15933] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 415.362075][T15933] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 415.533308][ T6010] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 415.708892][ T6010] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 415.727127][ T6010] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 415.758661][ T6010] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.769354][ T6010] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 415.786005][ T6010] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 415.806803][ T6010] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.823971][ T6010] usb 2-1: Product: syz [ 415.832986][ T6010] usb 2-1: Manufacturer: syz [ 415.844843][ T6010] usb 2-1: SerialNumber: syz [ 415.863083][ T6010] usb 2-1: config 0 descriptor?? [ 415.889194][ T6010] usb-storage 2-1:0.0: USB Mass Storage device detected [ 415.910187][ T6010] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 416.037471][T15972] netlink: 'syz.3.4841': attribute type 4 has an invalid length. [ 416.058332][T15972] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4841'. [ 416.133760][ T6010] usb 2-1: USB disconnect, device number 3 [ 416.263595][T15981] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4845'. [ 416.277161][T15982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4846'. [ 416.302909][T15982] openvswitch: netlink: EtherType 0 is less than min 600 [ 416.486738][T15990] netlink: 'syz.2.4850': attribute type 21 has an invalid length. [ 416.494667][T15990] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4850'. [ 416.528299][T15990] netlink: 'syz.2.4850': attribute type 5 has an invalid length. [ 416.536207][T15990] netlink: 'syz.2.4850': attribute type 6 has an invalid length. [ 416.548864][T15990] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4850'. [ 416.563555][T15994] netlink: 'syz.4.4852': attribute type 1 has an invalid length. [ 416.573592][T15994] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4852'. [ 416.698347][ T6010] usb 1-1: new full-speed USB device number 126 using dummy_hcd [ 416.832817][T16006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4858'. [ 416.872317][ T6010] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 416.898068][T16010] xt_l2tp: missing protocol rule (udp|l2tpip) [ 416.899335][ T6010] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 416.965336][ T6010] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 417.027009][ T6010] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 417.053492][ T6010] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.074214][ T6010] usb 1-1: Product: syz [ 417.078688][ T6010] usb 1-1: Manufacturer: syz [ 417.093867][ T6010] usb 1-1: SerialNumber: syz [ 417.122348][ T6010] cdc_ncm 1-1:1.0: invalid descriptor buffer length [ 417.148455][ T6010] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 417.183701][ T6010] cdc_ncm 1-1:1.0: bind() failure [ 417.346583][ T43] usb 1-1: USB disconnect, device number 126 [ 417.406667][T16030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4868'. [ 417.918662][T16056] netlink: 'syz.2.4878': attribute type 11 has an invalid length. [ 418.857447][ T6010] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 419.049969][ T6010] usb 1-1: Using ep0 maxpacket: 32 [ 419.057719][ T6010] usb 1-1: unable to get BOS descriptor or descriptor too short [ 419.083214][ T6010] usb 1-1: config 0 has an invalid interface number: 251 but max is 1 [ 419.119906][ T6010] usb 1-1: config 0 has an invalid interface number: 2 but max is 1 [ 419.135533][ T5853] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 419.144975][ T5853] Bluetooth: hci2: Injecting HCI hardware error event [ 419.153482][ T5860] Bluetooth: hci2: hardware error 0x00 [ 419.196156][ T6010] usb 1-1: config 0 has no interface number 0 [ 419.237189][ T6010] usb 1-1: config 0 has no interface number 1 [ 419.254542][ T6010] usb 1-1: config 0 interface 251 has no altsetting 0 [ 419.317898][ T6010] usb 1-1: config 0 interface 2 has no altsetting 0 [ 419.360132][ T6010] usb 1-1: New USB device found, idVendor=413c, idProduct=81a4, bcdDevice=ae.9f [ 419.377228][ T6010] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.396781][ T6010] usb 1-1: Product: syz [ 419.401035][ T6010] usb 1-1: Manufacturer: syz [ 419.435324][ T6010] usb 1-1: SerialNumber: syz [ 419.460368][ T6010] usb 1-1: config 0 descriptor?? [ 419.596512][T16133] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 419.720792][ T6010] usb 1-1: selecting invalid altsetting 0 [ 419.738689][ T6010] usb 1-1: Could not set interface, error -22 [ 419.771976][ T6010] usb 1-1: USB disconnect, device number 127 [ 419.820394][T16145] netlink: 'syz.1.4913': attribute type 12 has an invalid length. [ 419.858938][T16145] __nla_validate_parse: 1 callbacks suppressed [ 419.858961][T16145] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4913'. [ 419.913510][T16151] : renamed from batadv_slave_1 (while UP) [ 420.368335][T16171] netlink: 'syz.3.4925': attribute type 27 has an invalid length. [ 420.443519][T16176] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4926'. [ 420.453098][T16175] xt_hashlimit: invalid interval [ 420.663102][T16176] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4926'. [ 420.945184][T16198] openvswitch: netlink: IP tunnel dst address not specified [ 421.359308][ T5860] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 421.711588][ T5964] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 421.893215][ T5964] usb 3-1: Using ep0 maxpacket: 16 [ 421.908804][ T5964] usb 3-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 0.03 [ 421.918834][ T5964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 421.941831][ T5964] usb 3-1: SerialNumber: syz [ 421.956958][ T5964] usb 3-1: config 0 descriptor?? [ 422.167382][T16248] netlink: 'syz.4.4960': attribute type 3 has an invalid length. [ 422.200718][ T5964] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 422.233865][ T5964] usb 3-1: Detected SIO [ 422.251873][ T5964] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 422.264799][ T5964] usb 3-1: USB disconnect, device number 2 [ 422.280092][ T5964] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 422.299809][ T5964] ftdi_sio 3-1:0.0: device disconnected [ 422.802583][T16277] veth0_to_bond: entered allmulticast mode [ 422.843087][T16277] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 423.267213][T16302] netlink: 400 bytes leftover after parsing attributes in process `syz.2.4988'. [ 423.854594][T16330] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5002'. [ 423.885614][T16330] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5002'. [ 423.907822][T16330] netlink: 81 bytes leftover after parsing attributes in process `syz.4.5002'. [ 424.191264][ T5964] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 424.365010][ T5964] usb 3-1: Using ep0 maxpacket: 16 [ 424.401520][ T5964] usb 3-1: config index 0 descriptor too short (expected 1828, got 36) [ 424.420783][ T5964] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 424.438005][ T5964] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 424.458513][ T5964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 424.482386][ T5964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 424.511532][ T5964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 424.552015][ T5964] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 424.568617][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.600646][ T5964] usb 3-1: Product: syz [ 424.624174][ T5964] usb 3-1: Manufacturer: syz [ 424.629094][ T5964] usb 3-1: SerialNumber: syz [ 424.646059][ T5964] usb 3-1: config 0 descriptor?? [ 424.672891][ T5964] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 424.681234][ T5964] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87 [ 424.719287][ T5964] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 424.742724][ T5964] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 424.790320][ T5964] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 424.811428][ T5964] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 424.819186][ T5964] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 424.848487][ T5964] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 424.860073][ T5964] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 424.913056][ T5964] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 424.933537][ T5964] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 424.956302][ T5964] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 424.976042][ T5964] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 425.001700][ T5964] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 425.042800][ T5964] usb 3-1: USB disconnect, device number 3 [ 425.058369][ T5964] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 425.138337][ T5964] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 425.165828][ T5964] keyspan 3-1:0.0: device disconnected [ 425.612987][T16400] netlink: 'syz.2.5036': attribute type 2 has an invalid length. [ 426.182591][T16422] netlink: 'syz.4.5047': attribute type 21 has an invalid length. [ 426.229359][T16422] netlink: 'syz.4.5047': attribute type 6 has an invalid length. [ 426.254400][T16422] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5047'. [ 426.649951][ T5964] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 426.825960][ T5964] usb 3-1: Using ep0 maxpacket: 16 [ 426.844722][ T5964] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 426.852173][ T5964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 426.871027][ T5964] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 426.912310][ T5964] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 426.948683][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.958304][ T5964] usb 3-1: Product: syz [ 426.966683][ T5964] usb 3-1: Manufacturer: syz [ 426.972130][ T5964] usb 3-1: SerialNumber: syz [ 426.996480][ T5964] usb 3-1: config 0 descriptor?? [ 427.002313][T16430] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 427.030337][T16460] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5064'. [ 427.043784][T16460] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5064'. [ 427.068148][ T5976] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 427.074663][ C0] mcba_usb 3-1:0.0 can0: Tx URB aborted (-71) [ 427.096795][ T5964] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected [ 427.104378][ C0] mcba_usb 3-1:0.0 can0: Tx URB aborted (-71) [ 427.283664][ T5976] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 427.309359][ T5964] usb 3-1: USB disconnect, device number 4 [ 427.309907][ T5976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.349647][ T5964] mcba_usb 3-1:0.0 can0: device disconnected [ 427.365165][ T5976] usb 1-1: config 0 descriptor?? [ 427.395217][ T5976] cp210x 1-1:0.0: cp210x converter detected [ 427.834869][ T5976] cp210x 1-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 427.859807][ T5976] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 427.895652][ T5976] usb 1-1: cp210x converter now attached to ttyUSB0 [ 427.961437][ T5976] usb 1-1: USB disconnect, device number 2 [ 427.990188][ T5976] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 428.030865][ T5976] cp210x 1-1:0.0: device disconnected [ 428.893262][T16526] gretap1: entered allmulticast mode [ 429.568746][ T43] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 429.766967][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 429.811197][ T43] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 429.824440][ T43] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 429.864928][ T43] usb 5-1: Product: syz [ 429.889652][ T43] usb 5-1: Manufacturer: syz [ 429.899757][ T43] usb 5-1: SerialNumber: syz [ 429.923349][ T43] usb 5-1: config 0 descriptor?? [ 429.961666][ T43] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 430.164040][ T43] gspca_zc3xx: reg_w_i err -71 [ 430.179530][ T43] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 430.223045][ T43] usb 5-1: USB disconnect, device number 99 [ 431.080945][T16591] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5116'. [ 431.277483][T16597] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 432.401307][ T43] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 432.540095][T16652] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5140'. [ 432.604100][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 432.618896][ T43] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 432.641591][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.679390][ T43] usb 5-1: Product: syz [ 432.689216][ T43] usb 5-1: Manufacturer: syz [ 432.693900][ T43] usb 5-1: SerialNumber: syz [ 432.740317][ T43] usb 5-1: config 0 descriptor?? [ 432.750130][T16660] dummy0: entered promiscuous mode [ 432.784380][ T43] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 432.862275][T16662] cgroup: noprefix used incorrectly [ 433.084237][ T43] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 433.098113][ T43] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 433.135307][ T43] usb 5-1: USB disconnect, device number 100 [ 433.753828][T16696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5159'. [ 434.850235][T16751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.843917][T16806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5202'. [ 436.355628][ T6010] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 436.433683][T16834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5214'. [ 436.508672][T16838] netlink: 'syz.3.5215': attribute type 10 has an invalid length. [ 436.575040][ T6010] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.618129][T16838] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5215'. [ 436.627784][ T6010] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 436.649026][ T6010] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 436.688494][T16838] bond0: entered promiscuous mode [ 436.693679][ T6010] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.698340][T16838] bond_slave_0: entered promiscuous mode [ 436.726678][T16838] bond_slave_1: entered promiscuous mode [ 436.731270][ T6010] usb 5-1: config 0 descriptor?? [ 436.756171][T16838] bond0: entered allmulticast mode [ 436.783364][T16838] bond_slave_0: entered allmulticast mode [ 436.810969][T16838] bond_slave_1: entered allmulticast mode [ 436.826453][T16838] bridge0: port 3(bond0) entered blocking state [ 436.851359][T16838] bridge0: port 3(bond0) entered disabled state [ 436.876324][T16838] bridge0: port 3(bond0) entered blocking state [ 436.882938][T16838] bridge0: port 3(bond0) entered forwarding state [ 437.114687][ T981] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 437.189911][ T6010] Bluetooth: Can't get version to change to load ram patch err [ 437.219667][ T6010] Bluetooth: Loading patch file failed [ 437.244817][ T6010] ath3k 5-1:0.0: probe with driver ath3k failed with error -71 [ 437.273477][ T6010] usb 5-1: USB disconnect, device number 101 [ 437.320090][ T981] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 437.345036][ T981] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.361350][ T981] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 437.375467][ T981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.403515][T16873] netlink: 'syz.1.5228': attribute type 1 has an invalid length. [ 437.412352][T16873] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5228'. [ 437.420109][ T981] hub 1-1:4.0: USB hub found [ 437.647289][ T30] audit: type=1326 audit(2000003045.625:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16880 comm="syz.2.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b2b8ebe9 code=0x7ffc0000 [ 437.679331][ T981] hub 1-1:4.0: 2 ports detected [ 437.690461][ T981] usb 1-1: selecting invalid altsetting 1 [ 437.700468][ T981] hub 1-1:4.0: Using single TT (err -22) [ 437.716129][ T30] audit: type=1326 audit(2000003045.625:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16880 comm="syz.2.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b2b8ebe9 code=0x7ffc0000 [ 437.745327][ T30] audit: type=1326 audit(2000003045.625:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16880 comm="syz.2.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f38b2b8ebe9 code=0x7ffc0000 [ 437.807600][T16886] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5234'. [ 437.839351][ T30] audit: type=1326 audit(2000003045.625:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16880 comm="syz.2.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b2b8ebe9 code=0x7ffc0000 [ 437.884431][ T30] audit: type=1326 audit(2000003045.625:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16880 comm="syz.2.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b2b8ebe9 code=0x7ffc0000 [ 437.911423][ T981] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 437.921656][ T981] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 437.954892][ T981] usb 1-1: USB disconnect, device number 3 [ 438.058759][T16894] netlink: 'syz.2.5238': attribute type 2 has an invalid length. [ 438.531575][T16923] netlink: 'syz.2.5248': attribute type 3 has an invalid length. [ 438.531625][T16923] netlink: 'syz.2.5248': attribute type 1 has an invalid length. [ 438.531642][T16923] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5248'. [ 439.186607][T16949] binder: BC_ATTEMPT_ACQUIRE not supported [ 439.192696][T16949] binder: 16948:16949 ioctl c0306201 2000000001c0 returned -22 [ 439.394357][T16961] comedi: No check for data length of config insn id 7 is implemented [ 439.434269][T16961] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 439.443632][T16961] comedi: Assuming n=15 is correct [ 440.237106][T17006] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5284'. [ 440.477297][T17016] Unsupported ieee802154 address type: 0 [ 440.597773][T17021] ip6gre1: entered allmulticast mode [ 440.635933][T17023] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5291'. [ 440.668327][T17023] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5291'. [ 440.703382][T17023] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5291'. [ 440.736315][T17023] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5291'. [ 440.747904][T17023] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5291'. [ 441.188208][ T5976] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 441.365639][ T5976] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 441.398560][ T5976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.521735][ T5976] usb 5-1: config 0 descriptor?? [ 441.553083][T17019] infiniband syz1: set active [ 441.579048][T17019] infiniband syz1: added bond_slave_0 [ 441.597473][T17019] syz1: rxe_create_cq: returned err = -12 [ 441.612594][T17019] infiniband syz1: Couldn't create ib_mad CQ [ 441.634604][T17019] infiniband syz1: Couldn't open port 1 [ 441.696477][T17019] RDS/IB: syz1: added [ 441.710956][T17019] smc: adding ib device syz1 with port count 1 [ 441.727173][T17019] smc: ib device syz1 port 1 has pnetid [ 441.751145][ T5976] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 441.969028][ T5976] [drm:udl_init] *ERROR* Selecting channel failed [ 442.005954][ T5976] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 442.021278][ T5976] [drm] Initialized udl on minor 2 [ 442.040748][ T5976] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 442.060581][ T5976] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 442.092077][ T43] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 442.101616][ T43] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 442.115555][ T5976] usb 5-1: USB disconnect, device number 102 [ 442.245533][ T6010] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 442.429299][T17069] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5312'. [ 442.430434][ T6010] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 442.469098][ T6010] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.482758][ T6010] usb 3-1: Product: syz [ 442.486995][ T6010] usb 3-1: Manufacturer: syz [ 442.510614][ T6010] usb 3-1: SerialNumber: syz [ 442.535481][ T6010] usb 3-1: config 0 descriptor?? [ 442.560582][ T6010] usb 3-1: selecting invalid altsetting 1 [ 442.595167][ T6010] technisat-usb2: could not set alternate setting to 0 [ 442.780442][ T6010] technisat-usb2: firmware version: 0.0 [ 442.786121][ T6010] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 442.820025][T17083] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 442.848296][T17084] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 442.855974][T17084] IPv6: NLM_F_CREATE should be set when creating new route [ 442.863270][T17084] IPv6: NLM_F_CREATE should be set when creating new route [ 443.028480][ T6010] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 443.060309][ T6010] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19) [ 443.101256][ T6010] usb 3-1: USB disconnect, device number 5 [ 443.135615][T17092] comedi comedi0: comedi_config --init_data is deprecated [ 443.267930][T17095] netlink: 'syz.3.5324': attribute type 10 has an invalid length. [ 443.290731][T17095] veth1_vlan: entered allmulticast mode [ 443.314127][T17095] team0: Device veth1_vlan failed to register rx_handler [ 443.726801][T17110] netlink: 'syz.3.5332': attribute type 1 has an invalid length. [ 443.745854][T17110] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5332'. [ 443.974558][T17124] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5339'. [ 444.031133][T17124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5339'. [ 444.055150][T17124] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5339'. [ 444.755306][T17162] netlink: 'syz.1.5357': attribute type 21 has an invalid length. [ 444.779198][T17162] IPv6: NLM_F_CREATE should be specified when creating new route [ 444.813658][T17162] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 444.820956][T17162] IPv6: NLM_F_CREATE should be set when creating new route [ 444.828350][T17162] IPv6: NLM_F_CREATE should be set when creating new route [ 444.835655][T17162] IPv6: NLM_F_CREATE should be set when creating new route [ 444.952603][ T5964] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 445.110352][T17180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5365'. [ 445.132374][ T5964] usb 1-1: Using ep0 maxpacket: 8 [ 445.135224][T17181] netlink: 'syz.4.5366': attribute type 10 has an invalid length. [ 445.167147][ T5964] usb 1-1: config 0 has an invalid interface number: 150 but max is 0 [ 445.181473][ T5964] usb 1-1: config 0 has an invalid interface number: 112 but max is 0 [ 445.201863][ T5964] usb 1-1: config 0 has an invalid interface number: 3 but max is 0 [ 445.230695][ T5964] usb 1-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 445.255387][ T5964] usb 1-1: config 0 has no interface number 0 [ 445.265613][ T5964] usb 1-1: config 0 has no interface number 1 [ 445.275836][ T5964] usb 1-1: config 0 has no interface number 2 [ 445.282471][ T5964] usb 1-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 445.309276][ T5964] usb 1-1: too many endpoints for config 0 interface 112 altsetting 233: 104, using maximum allowed: 30 [ 445.338903][ T5964] usb 1-1: config 0 interface 112 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 104 [ 445.366345][ T5964] usb 1-1: config 0 interface 150 has no altsetting 0 [ 445.378633][ T5964] usb 1-1: config 0 interface 112 has no altsetting 0 [ 445.385520][ T5964] usb 1-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 445.410076][ T5964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.433905][ T5964] usb 1-1: config 0 descriptor?? [ 445.740839][ T5964] usb 1-1: string descriptor 0 read error: -71 [ 445.773296][ T5964] usb 1-1: USB disconnect, device number 4 [ 445.933333][ T5976] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 446.036298][T17219] batadv1: entered promiscuous mode [ 446.106813][ T5976] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 446.115407][ T5976] usb 3-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 446.127062][ T5976] usb 3-1: config 0 has no interface number 0 [ 446.133299][ T5976] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 12592, setting to 64 [ 446.145220][ T5976] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 446.158977][ T5976] usb 3-1: config 0 interface 52 has no altsetting 0 [ 446.169542][ T5976] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 446.179067][ T5976] usb 3-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 446.187654][ T5976] usb 3-1: Product: syz [ 446.192672][ T5976] usb 3-1: Manufacturer: syz [ 446.197425][ T5976] usb 3-1: SerialNumber: syz [ 446.209683][ T5976] usb 3-1: config 0 descriptor?? [ 446.318170][ T5964] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 446.465486][ T5976] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input50 [ 446.504483][ T5964] usb 5-1: Using ep0 maxpacket: 8 [ 446.522413][ T5964] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 446.547305][ T5964] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 446.591637][ T5964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 446.634031][ T5964] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 446.692218][T17235] nbd: must specify an index to disconnect [ 446.718447][ T5964] usb 5-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 446.747323][ T5964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.756817][ T6010] usb 3-1: USB disconnect, device number 6 [ 446.756834][ C1] synaptics_usb 3-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 446.775610][ T5964] usb 5-1: Product: syz [ 446.786440][ T5964] usb 5-1: Manufacturer: syz [ 446.793069][ T5964] usb 5-1: SerialNumber: syz [ 446.852254][ T5964] usb 5-1: config 0 descriptor?? [ 446.920607][ T5964] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input51 [ 447.111640][T17221] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 447.118272][T17221] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 447.127073][T17221] vhci_hcd vhci_hcd.0: Device attached [ 447.136240][T17245] vhci_hcd: connection closed [ 447.138918][ T5964] imon:send_packet: packet tx failed (-71) [ 447.155085][ T13] vhci_hcd: stop threads [ 447.159396][ T13] vhci_hcd: release socket [ 447.175599][ T5964] imon 5-1:0.0: panel buttons/knobs setup failed [ 447.188148][ T13] vhci_hcd: disconnect device [ 447.359415][ T5964] rc_core: IR keymap rc-imon-pad not found [ 447.405872][ T5964] Registered IR keymap rc-empty [ 447.451248][ T5964] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 447.491729][ T5964] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 447.535642][ T5964] imon:send_packet: packet tx failed (-71) [ 447.568986][ T5964] imon 5-1:0.0: remote input dev register failed [ 447.590209][ T5964] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 447.653236][ T5964] imon 5-1:0.0: unable to initialize intf0, err 0 [ 447.654282][ T43] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 447.673087][ T5964] imon:imon_probe: failed to initialize context! [ 447.697735][ T5964] imon 5-1:0.0: unable to register, err -19 [ 447.721957][ T5964] usb 5-1: USB disconnect, device number 103 [ 447.768061][ T30] audit: type=1326 audit(2000003055.102:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17270 comm="syz.2.5410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b2b8ebe9 code=0x7ffc0000 [ 447.821503][ T30] audit: type=1326 audit(2000003055.102:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17270 comm="syz.2.5410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b2b8ebe9 code=0x7ffc0000 [ 447.885344][ T30] audit: type=1326 audit(2000003055.130:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17270 comm="syz.2.5410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f38b2b8ebe9 code=0x7ffc0000 [ 447.928445][ T43] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 447.943331][ T43] usb 4-1: config 0 has no interface number 0 [ 447.949492][ T43] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 447.984049][ T30] audit: type=1326 audit(2000003055.130:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17270 comm="syz.2.5410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b2b8ebe9 code=0x7ffc0000 [ 448.026484][T17279] netlink: 'syz.4.5414': attribute type 8 has an invalid length. [ 448.034887][ T43] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 448.068071][ T43] usb 4-1: config 0 interface 255 has no altsetting 0 [ 448.075034][ T30] audit: type=1326 audit(2000003055.130:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17270 comm="syz.2.5410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b2b8ebe9 code=0x7ffc0000 [ 448.115011][ T43] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 448.124140][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.141187][ T43] usb 4-1: Product: syz [ 448.145435][ T43] usb 4-1: Manufacturer: syz [ 448.150211][ T43] usb 4-1: SerialNumber: syz [ 448.161832][T17282] netlink: 372 bytes leftover after parsing attributes in process `syz.1.5415'. [ 448.173318][ T43] usb 4-1: config 0 descriptor?? [ 448.252853][ T5964] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 448.386470][T17291] mkiss: ax0: crc mode is auto. [ 448.423357][ T978] usb 4-1: USB disconnect, device number 126 [ 448.434055][ T5964] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 448.459192][ T5964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 65535, setting to 1024 [ 448.470845][ T5964] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 448.482499][ T5964] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 448.493503][ T5964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.514166][ T5964] usb 1-1: config 0 descriptor?? [ 448.542936][T17275] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 448.553951][ T5964] gspca_main: spca561-2.14.0 probing abcd:cdee [ 448.616317][ T43] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 448.781338][ T5964] spca561 1-1:0.0: probe with driver spca561 failed with error -22 [ 448.796335][ T5964] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 448.800869][ T43] usb 3-1: New USB device found, idVendor=040a, idProduct=0002, bcdDevice=b1.c4 [ 448.805800][ T5964] usb 1-1: MIDIStreaming interface descriptor not found [ 448.819262][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.835542][ T43] usb 3-1: config 0 descriptor?? [ 448.874797][ T43] gspca_main: spca501-2.14.0 probing 040a:0002 [ 448.920446][ T5964] usb 1-1: USB disconnect, device number 5 [ 448.927372][T17310] netlink: 'syz.1.5428': attribute type 30 has an invalid length. [ 449.306911][ T43] gspca_spca501: reg write: error -71 [ 449.332519][ T43] spca501 3-1:0.0: Reg write failed for 0x00,0x02,0x01 [ 449.332635][ T43] spca501 3-1:0.0: probe with driver spca501 failed with error -22 [ 449.348046][ T43] usb 3-1: USB disconnect, device number 7 [ 450.064355][ T5974] IPVS: starting estimator thread 0... [ 450.177409][T17359] IPVS: using max 24 ests per chain, 57600 per kthread [ 450.549019][ T30] audit: type=1107 audit(2000003057.693:76): pid=17386 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 450.722736][ T5974] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 450.927323][ T5974] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 450.952169][ T5974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.963959][T17409] Invalid option length (0) for dns_resolver key [ 450.974672][ T5974] usb 3-1: Product: syz [ 450.985451][ T5974] usb 3-1: Manufacturer: syz [ 450.996255][ T5974] usb 3-1: SerialNumber: syz [ 451.011789][ T5974] usb 3-1: config 0 descriptor?? [ 451.033002][ T5974] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 451.165789][T17417] netlink: 'syz.0.5479': attribute type 3 has an invalid length. [ 451.233919][T17417] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5479'. [ 451.469458][ T5974] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 451.502088][ T5974] sq905c 3-1:0.0: Reading version command failed [ 451.516690][ T5974] sq905c 3-1:0.0: probe with driver sq905c failed with error -71 [ 451.546895][T17433] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5488'. [ 451.566722][ T5974] usb 3-1: USB disconnect, device number 8 [ 451.697361][ T5976] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 451.866985][ T5976] usb 5-1: Using ep0 maxpacket: 8 [ 451.874176][ T5976] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 451.890785][ T5976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.920935][ T5976] pvrusb2: Hardware description: Terratec Grabster AV400 [ 451.941351][ T5976] pvrusb2: ********** [ 451.945406][ T5976] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 451.992967][ T5976] pvrusb2: Important functionality might not be entirely working. [ 452.013618][ T5976] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 452.031058][ T5976] pvrusb2: ********** [ 452.150885][T17456] netlink: 'syz.3.5501': attribute type 1 has an invalid length. [ 452.161892][ T2343] pvrusb2: Invalid write control endpoint [ 452.201197][T17460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5500'. [ 452.250588][T17460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5500'. [ 452.352071][ T2343] pvrusb2: Invalid write control endpoint [ 452.379219][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 452.385459][ T5976] usb 5-1: USB disconnect, device number 104 [ 452.391997][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 452.408916][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 452.442483][ T2343] pvrusb2: Device being rendered inoperable [ 452.473378][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 452.492976][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 452.494347][T17469] netlink: 'syz.0.5505': attribute type 30 has an invalid length. [ 452.526505][ T2343] pvrusb2: Attached sub-driver cx25840 [ 452.538980][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 452.564869][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 452.568167][T17469] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5505'. [ 452.664572][T17469] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 452.710170][T17469] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 452.839996][T17483] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 453.030436][T17490] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5514'. [ 453.693573][ T30] audit: type=1400 audit(2000003060.640:77): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=17527 comm="syz.1.5529" daddr=::ffff:100.1.1.2 dest=20001 [ 454.005978][T17543] netlink: 'syz.0.5534': attribute type 10 has an invalid length. [ 454.030179][T17543] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5534'. [ 454.030339][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 454.048298][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 454.089764][T17543] batadv0: entered promiscuous mode [ 454.112993][T17543] batadv0: entered allmulticast mode [ 454.133506][T17543] bridge0: port 3(batadv0) entered blocking state [ 454.155680][T17543] bridge0: port 3(batadv0) entered disabled state [ 454.165398][T17549] netlink: 'syz.4.5535': attribute type 1 has an invalid length. [ 454.180808][T17549] netlink: 'syz.4.5535': attribute type 3 has an invalid length. [ 454.187064][T17543] bridge0: port 3(batadv0) entered blocking state [ 454.196254][T17543] bridge0: port 3(batadv0) entered forwarding state [ 454.235713][T17549] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5535'. [ 454.403778][ T49] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 454.413498][ T49] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 454.464982][T17560] ieee802154 phy0 wpan0: encryption failed: -90 [ 454.528575][T17565] netlink: 'syz.1.5542': attribute type 12 has an invalid length. [ 454.707558][T17572] syz.0.5545: attempt to access beyond end of device [ 454.707558][T17572] nbd0: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 454.730617][T17572] gfs2: error -5 reading superblock [ 454.760149][T17575] netlink: 'syz.3.5547': attribute type 1 has an invalid length. [ 454.775424][T17575] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5547'. [ 455.259847][ T978] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 455.447700][ T978] usb 3-1: Using ep0 maxpacket: 32 [ 455.476736][ T978] usb 3-1: config 0 has an invalid interface number: 78 but max is 0 [ 455.509078][ T978] usb 3-1: config 0 has no interface number 0 [ 455.530190][ T978] usb 3-1: config 0 interface 78 has no altsetting 0 [ 455.552204][T17619] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 455.555961][ T978] usb 3-1: New USB device found, idVendor=0e41, idProduct=4250, bcdDevice=60.11 [ 455.579498][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.584929][T17622] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (4) [ 455.598567][ T978] usb 3-1: Product: syz [ 455.609389][ T978] usb 3-1: Manufacturer: syz [ 455.624941][ T978] usb 3-1: SerialNumber: syz [ 455.649050][ T978] usb 3-1: config 0 descriptor?? [ 455.685570][ T978] snd_usb_pod 3-1:0.78: Line 6 BassPODxt found [ 455.900832][ T978] snd_usb_pod 3-1:0.78: endpoint not available, using fallback values [ 455.932050][ T978] snd_usb_pod 3-1:0.78: invalid control EP [ 455.937963][ T978] snd_usb_pod 3-1:0.78: cannot start listening: -22 [ 455.970686][ T978] snd_usb_pod 3-1:0.78: Line 6 BassPODxt now disconnected [ 455.985423][ T978] snd_usb_pod 3-1:0.78: probe with driver snd_usb_pod failed with error -22 [ 456.147423][ T5976] usb 3-1: USB disconnect, device number 9 [ 456.542999][T17679] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5583'. [ 456.556105][T17679] netlink: 'syz.3.5583': attribute type 1 has an invalid length. [ 456.766326][T17692] siw: device registration error -23 [ 456.854173][T17701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5592'. [ 456.903529][T17701] netlink: 'syz.2.5592': attribute type 1 has an invalid length. [ 457.573267][T17739] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5610'. [ 457.583199][T17739] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5610'. [ 457.607596][T17739] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5610'. [ 457.918848][ T30] audit: type=1400 audit(2000003064.598:78): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=17753 comm="syz.4.5617" [ 458.054203][T17754] bond2: entered promiscuous mode [ 458.077951][T17754] bond2: entered allmulticast mode [ 458.083731][T17754] 8021q: adding VLAN 0 to HW filter on device bond2 [ 458.568327][ T43] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 458.654033][ T5976] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 458.700528][T17829] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5631'. [ 458.726317][T17829] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5631'. [ 458.765420][ T43] usb 5-1: config 6 has an invalid interface number: 57 but max is 0 [ 458.785177][ T43] usb 5-1: config 6 has no interface number 0 [ 458.802202][ T43] usb 5-1: config 6 interface 57 has no altsetting 0 [ 458.818334][ T43] usb 5-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 0.00 [ 458.834908][ T5976] usb 3-1: Using ep0 maxpacket: 16 [ 458.846036][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.854839][ T43] usb 5-1: Product: syz [ 458.860934][ T43] usb 5-1: Manufacturer: syz [ 458.870781][ T5976] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 458.880898][ T43] usb 5-1: SerialNumber: syz [ 458.890814][ T5976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.904856][ T5976] usb 3-1: Product: syz [ 458.909105][ T5976] usb 3-1: Manufacturer: syz [ 458.920579][ T5976] usb 3-1: SerialNumber: syz [ 458.995773][ T5964] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 459.029037][T17848] xt_CT: You must specify a L4 protocol and not use inversions on it [ 459.128207][ T43] usb-storage 5-1:6.57: USB Mass Storage device detected [ 459.166496][ T5964] usb 2-1: Using ep0 maxpacket: 32 [ 459.178590][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 459.190745][ T5964] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 459.195804][ T5976] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 459.220443][ T43] usb 5-1: USB disconnect, device number 105 [ 459.228502][ T5964] usb 2-1: config 0 has no interface number 0 [ 459.243895][ T5964] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 459.285146][ T5964] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 459.301007][ T5964] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 459.312948][ T5964] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 459.331064][ T5976] snd-usb-audio 3-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 459.333630][ T5964] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 459.361370][ T5976] usb 3-1: USB disconnect, device number 10 [ 459.391447][ T5964] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 459.408534][ T5897] udevd[5897]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 459.413513][ T5964] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 459.466405][T17886] 9pnet_fd: p9_fd_create_unix (17886): problem connecting socket: ./file0: -111 [ 459.480856][ T5964] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 459.516589][ T5964] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 459.529839][ T5964] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 459.550684][ T5964] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 459.574662][ T5964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.587435][ T5964] usb 2-1: Product: syz [ 459.591724][ T5964] usb 2-1: Manufacturer: syz [ 459.596646][ T5964] usb 2-1: SerialNumber: syz [ 459.606204][ T5964] usb 2-1: config 0 descriptor?? [ 459.613627][T17832] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 459.628750][T17832] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 459.638723][ T5964] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 459.649054][ T5964] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 459.673384][ T5964] scsi host1: microtekX6 [ 459.950734][ T5964] usb 2-1: USB disconnect, device number 4 [ 460.545389][ T5976] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 460.696463][ T43] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 460.739585][ T5976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 460.763730][ T5976] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 460.773021][ T5976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.792751][ T5976] usb 4-1: config 0 descriptor?? [ 460.905507][ T43] usb 1-1: config 0 has an invalid interface number: 114 but max is 0 [ 460.928226][ T43] usb 1-1: config 0 has no interface number 0 [ 460.946619][ T43] usb 1-1: too many endpoints for config 0 interface 114 altsetting 111: 97, using maximum allowed: 30 [ 461.007474][ T43] usb 1-1: config 0 interface 114 altsetting 111 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 461.044883][ T43] usb 1-1: config 0 interface 114 has no altsetting 0 [ 461.053440][T17988] xt_cgroup: path and classid specified [ 461.067241][ T43] usb 1-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 461.078583][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.106405][ T43] usb 1-1: config 0 descriptor?? [ 461.249554][ T5976] ath6kl: Failed to read usb control message: -71 [ 461.277258][ T5976] ath6kl: Unable to read the bmi data from the device: -71 [ 461.299827][ T5976] ath6kl: Unable to recv target info: -71 [ 461.317849][ T5976] ath6kl: Failed to init ath6kl core: -71 [ 461.344270][ T43] usb 1-1: string descriptor 0 read error: -71 [ 461.358611][T18004] sock: sock_timestamping_bind_phc: sock not bind to device [ 461.361796][ T5976] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 461.442272][ T5976] usb 4-1: USB disconnect, device number 127 [ 461.454481][ T43] usb 1-1: USB disconnect, device number 6 [ 462.021341][T18059] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 462.090546][T18059] bond2: entered promiscuous mode [ 462.099087][T18059] bond2: entered allmulticast mode [ 462.104934][T18059] 8021q: adding VLAN 0 to HW filter on device bond2 [ 462.177505][T18098] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5702'. [ 462.187206][ T6010] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 462.335437][T18107] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5704'. [ 462.394602][ T6010] usb 5-1: Using ep0 maxpacket: 8 [ 462.403071][ T6010] usb 5-1: config 6 has an invalid interface number: 51 but max is 1 [ 462.403104][ T6010] usb 5-1: config 6 has no interface number 1 [ 462.403154][ T6010] usb 5-1: config 6 interface 0 has no altsetting 0 [ 462.403175][ T6010] usb 5-1: config 6 interface 51 has no altsetting 0 [ 462.414621][ T6010] usb 5-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 462.414656][ T6010] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.414680][ T6010] usb 5-1: Product: syz [ 462.414698][ T6010] usb 5-1: Manufacturer: syz [ 462.414716][ T6010] usb 5-1: SerialNumber: syz [ 462.564131][T18119] xt_socket: unknown flags 0xc [ 462.657118][ T6010] xr_serial 5-1:6.51: xr_serial converter detected [ 462.668572][ T6010] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 462.668633][ T6010] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 462.679278][ T6010] usb 5-1: USB disconnect, device number 106 [ 462.681343][ T6010] xr_serial 5-1:6.0: device disconnected [ 462.812021][T18143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5713'. [ 462.915426][T18147] netlink: 'syz.1.5714': attribute type 1 has an invalid length. [ 462.941237][T18147] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5714'. [ 462.984682][T18151] netlink: 'syz.0.5716': attribute type 5 has an invalid length. [ 463.002959][T18151] ip6erspan0: entered promiscuous mode [ 463.220107][ T43] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 463.437397][T18181] netlink: 'syz.1.5726': attribute type 1 has an invalid length. [ 463.438925][ T43] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 463.469256][ T43] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 463.490883][ T43] usb 4-1: config 220 has an invalid interface number: 36 but max is 2 [ 463.491858][T18181] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5726'. [ 463.511085][ T43] usb 4-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 463.541545][ T43] usb 4-1: config 220 has 4 interfaces, different from the descriptor's value: 3 [ 463.586078][ T43] usb 4-1: config 220 has no interface number 2 [ 463.606239][ T43] usb 4-1: config 220 has no interface number 3 [ 463.612716][ T43] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 463.645381][ T43] usb 4-1: config 220 interface 36 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 463.677408][ T43] usb 4-1: config 220 interface 0 has no altsetting 0 [ 463.684266][ T43] usb 4-1: config 220 interface 76 has no altsetting 0 [ 463.709412][ T43] usb 4-1: config 220 interface 1 has no altsetting 0 [ 463.716264][ T43] usb 4-1: config 220 interface 36 has no altsetting 0 [ 463.762833][ T43] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 463.794917][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.807539][ T43] usb 4-1: Product: syz [ 463.811779][ T43] usb 4-1: Manufacturer: syz [ 463.829523][ T43] usb 4-1: SerialNumber: syz [ 463.872290][T18198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5734'. [ 464.102656][ T43] usb 4-1: selecting invalid altsetting 0 [ 464.126762][ T43] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 464.133290][ T43] usb 4-1: No valid video chain found. [ 464.193673][ T43] usb 4-1: selecting invalid altsetting 0 [ 464.199492][ T43] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 464.251085][ T43] usb 4-1: USB disconnect, device number 2 [ 464.735817][ T5964] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 464.812583][T18268] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5756'. [ 464.840722][T18268] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5756'. [ 464.924422][T18274] xt_CT: You must specify a L4 protocol and not use inversions on it [ 464.942473][ T5964] usb 2-1: Using ep0 maxpacket: 16 [ 464.979884][ T5964] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 464.993001][ T5964] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.017819][ T5964] usb 2-1: config 0 has no interface number 0 [ 465.035256][ T978] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 465.044228][ T5964] usb 2-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 465.054048][ T5964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.073361][ T5964] usb 2-1: Product: syz [ 465.081742][ T5964] usb 2-1: Manufacturer: syz [ 465.086408][ T5964] usb 2-1: SerialNumber: syz [ 465.132693][ T5964] usb 2-1: config 0 descriptor?? [ 465.224184][ T978] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 465.251269][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.270122][ T978] usb 3-1: Product: syz [ 465.280942][ T978] usb 3-1: Manufacturer: syz [ 465.291593][ T978] usb 3-1: SerialNumber: syz [ 465.319125][ T978] usb 3-1: config 0 descriptor?? [ 465.349221][ T978] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 465.401699][ T5964] usb 2-1: Found UVC 0.00 device syz (046c:14e8) [ 465.419673][ T5964] usb 2-1: No valid video chain found. [ 465.649810][ T5964] usb 2-1: USB disconnect, device number 5 [ 465.651028][T18304] netlink: 'syz.0.5769': attribute type 10 has an invalid length. [ 465.685583][T18304] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 465.717895][T18312] netlink: 'syz.4.5768': attribute type 21 has an invalid length. [ 465.737836][T18304] team0: Port device wlan1 added [ 465.787536][ T978] gspca_sunplus: reg_r err -71 [ 465.792467][ T978] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 465.834611][ T978] usb 3-1: USB disconnect, device number 11 [ 466.749842][T18373] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.5791'. [ 466.835407][T18377] netlink: 'syz.1.5794': attribute type 5 has an invalid length. [ 466.868687][T18377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5794'. [ 468.015932][T18436] netlink: 'syz.4.5819': attribute type 1 has an invalid length. [ 468.744692][T18483] netlink: 'syz.0.5838': attribute type 1 has an invalid length. [ 468.774441][T18483] netlink: 'syz.0.5838': attribute type 2 has an invalid length. [ 468.797171][T18483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5838'. [ 468.797574][ T5974] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 469.004915][ T5974] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 469.022386][ T5974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.052145][ T5974] usb 5-1: config 0 descriptor?? [ 469.184492][T18511] Zero length message leads to an empty skb [ 469.507488][ T5974] ath6kl: Failed to submit usb control message: -71 [ 469.523163][ T5974] ath6kl: unable to send the bmi data to the device: -71 [ 469.533925][ T5974] ath6kl: Unable to send get target info: -71 [ 469.547555][ T5974] ath6kl: Failed to init ath6kl core: -71 [ 469.554743][ T5974] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 469.623042][ T5974] usb 5-1: USB disconnect, device number 107 [ 470.134660][T18566] overlayfs: conflicting options: userxattr,redirect_dir=on [ 470.500761][T18589] SET target dimension over the limit! [ 470.593316][ T978] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 470.717990][T18602] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5884'. [ 470.760960][T18602] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5884'. [ 470.782413][ T978] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 470.798440][ T978] usb 2-1: config 0 interface 0 has no altsetting 0 [ 470.813029][T18602] ip6gretap1: entered allmulticast mode [ 470.835390][ T978] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 470.857809][ T978] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 470.880794][ T978] usb 2-1: Product: syz [ 470.890857][ T978] usb 2-1: Manufacturer: syz [ 470.900443][ T978] usb 2-1: SerialNumber: syz [ 470.930120][ T978] usb 2-1: config 0 descriptor?? [ 470.966694][ T978] usb 2-1: selecting invalid altsetting 0 [ 471.028110][T18618] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5890'. [ 471.199495][ T9] usb 2-1: USB disconnect, device number 6 [ 472.309610][T18709] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5921'. [ 472.621325][T18728] x_tables: duplicate underflow at hook 4 [ 472.805980][ T5976] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 472.987817][ T5976] usb 2-1: Using ep0 maxpacket: 16 [ 473.000750][ T5976] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 473.009260][ T5976] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 473.016523][ T5976] usb 2-1: config 0 has no interface number 0 [ 473.042561][ T5976] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 473.054977][ T5976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.077301][ T5976] usb 2-1: Product: syz [ 473.081561][ T5976] usb 2-1: Manufacturer: syz [ 473.086431][ T5974] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 473.103459][ T5976] usb 2-1: SerialNumber: syz [ 473.113343][ T5976] usb 2-1: config 0 descriptor?? [ 473.273682][ T5974] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 473.304252][ T5974] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 473.304320][ T5974] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 473.304346][ T5974] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 473.305679][ T5974] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 473.305706][ T5974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 473.305742][ T5974] usb 4-1: SerialNumber: syz [ 473.343419][ T5976] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 473.343492][ T5976] usb 2-1: No valid video chain found. [ 473.367073][ T5976] usb 2-1: USB disconnect, device number 7 [ 473.383304][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 473.538723][ T5974] usb 4-1: 0:2 : does not exist [ 473.559520][ T5974] usb 4-1: unit 5 not found! [ 473.572813][ T9] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 473.601012][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.621650][ T9] usb 3-1: Product: syz [ 473.638966][ T5974] usb 4-1: USB disconnect, device number 3 [ 473.641745][ T9] usb 3-1: Manufacturer: syz [ 473.676929][ T9] usb 3-1: SerialNumber: syz [ 473.688694][T18792] can: request_module (can-proto-4) failed. [ 473.707439][ T9] usb 3-1: config 0 descriptor?? [ 473.755193][ T5897] udevd[5897]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 473.950489][ T9] hso 3-1:0.0: Failed to find BULK IN ep [ 474.154988][ T5964] usb 3-1: USB disconnect, device number 12 [ 474.193151][T18838] overlay: Bad value for 'workdir' [ 474.880259][T18874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5968'. [ 475.060275][T18891] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5973'. [ 475.083916][T18891] netlink: zone id is out of range [ 475.089144][T18891] netlink: zone id is out of range [ 475.144431][T18891] netlink: zone id is out of range [ 475.150191][T18891] netlink: zone id is out of range [ 475.159271][ T5976] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 475.167788][T18891] netlink: zone id is out of range [ 475.173334][T18896] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5976'. [ 475.186699][T18891] netlink: zone id is out of range [ 475.195595][T18891] netlink: zone id is out of range [ 475.202482][T18898] netlink: 'syz.2.5975': attribute type 13 has an invalid length. [ 475.211683][T18891] netlink: zone id is out of range [ 475.216950][T18891] netlink: zone id is out of range [ 475.223241][T18891] netlink: zone id is out of range [ 475.243136][ T5974] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 475.352516][ T5976] usb 2-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 475.371405][ T5976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.379470][ T5976] usb 2-1: Product: syz [ 475.394500][ T5976] usb 2-1: Manufacturer: syz [ 475.399170][ T5976] usb 2-1: SerialNumber: syz [ 475.411941][ T5976] usb 2-1: config 0 descriptor?? [ 475.431513][ T5974] usb 4-1: config 0 has an invalid interface number: 130 but max is 0 [ 475.440541][ T5974] usb 4-1: config 0 has no interface number 0 [ 475.462338][ T5974] usb 4-1: config 0 interface 130 altsetting 0 endpoint 0x8B has an invalid bInterval 68, changing to 10 [ 475.475351][ T5974] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e2.ca [ 475.485190][ T5974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.506701][ T5974] usb 4-1: config 0 descriptor?? [ 475.525033][ T5974] usb 4-1: Found UVC 0.00 device (8086:0b5b) [ 475.563922][ T5974] usb 4-1: No valid video chain found. [ 475.669262][ T5976] usb 2-1: ignoring: not an USB2CAN converter [ 475.759619][ T5964] usb 4-1: USB disconnect, device number 4 [ 475.933397][ T978] usb 2-1: USB disconnect, device number 8 [ 476.278018][T18958] xt_CT: No such helper "snmp_trap" [ 476.362947][ T30] audit: type=1326 audit(2000003081.849:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18965 comm="syz.4.5998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a6d8ebe9 code=0x7ffc0000 [ 476.429258][ T30] audit: type=1326 audit(2000003081.877:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18965 comm="syz.4.5998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a6d8ebe9 code=0x7ffc0000 [ 476.493775][ T30] audit: type=1326 audit(2000003081.877:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18965 comm="syz.4.5998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fd9a6d8ebe9 code=0x7ffc0000 [ 476.544652][ T30] audit: type=1326 audit(2000003081.877:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18965 comm="syz.4.5998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a6d8ebe9 code=0x7ffc0000 [ 476.574365][ T30] audit: type=1326 audit(2000003081.877:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18965 comm="syz.4.5998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a6d8ebe9 code=0x7ffc0000 [ 476.665352][ T30] audit: type=1326 audit(2000003082.139:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18978 comm="syz.3.6004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787878ebe9 code=0x7ffc0000 [ 476.743710][ T30] audit: type=1326 audit(2000003082.167:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18978 comm="syz.3.6004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f787878ebe9 code=0x7ffc0000 [ 476.829217][ T30] audit: type=1326 audit(2000003082.167:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18978 comm="syz.3.6004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787878ebe9 code=0x7ffc0000 [ 476.868460][ T30] audit: type=1326 audit(2000003082.167:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18978 comm="syz.3.6004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787878ebe9 code=0x7ffc0000 [ 476.970523][T18989] ipt_ECN: cannot use operation on non-tcp rule [ 477.047323][T18993] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6010'. [ 477.077535][T18993] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6010'. [ 477.139051][T18996] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6013'. [ 477.243164][T19001] xt_l2tp: unknown flags: 17 [ 478.226371][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 478.255416][T19048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6037'. [ 478.423161][T19055] xt_limit: Overflow, try lower: 33/0 [ 478.429152][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 478.443466][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 478.467367][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 478.487175][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.506683][ T9] usb 4-1: Product: syz [ 478.510940][ T9] usb 4-1: Manufacturer: syz [ 478.527781][ T9] usb 4-1: SerialNumber: syz [ 478.553035][ T9] usb 4-1: bad CDC descriptors [ 478.750794][T19068] netlink: 'syz.4.6045': attribute type 1 has an invalid length. [ 478.784879][ T9] usb 4-1: USB disconnect, device number 5 [ 478.819233][T19070] IPv6: Can't replace route, no match found [ 479.858954][T19121] netlink: 512 bytes leftover after parsing attributes in process `syz.1.6068'. [ 479.975780][T19127] netlink: 'syz.4.6071': attribute type 1 has an invalid length. [ 481.296756][T19194] netlink: 'syz.3.6102': attribute type 21 has an invalid length. [ 481.315093][T19194] netlink: 'syz.3.6102': attribute type 1 has an invalid length. [ 481.331130][T19194] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6102'. [ 481.764036][T19210] binder: 19208:19210 ioctl c0306201 200000000a00 returned -14 [ 481.971581][T19220] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6115'. [ 482.645651][T19251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6130'. [ 482.875751][T19260] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 482.918210][T19260] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 482.939636][T19260] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 482.970535][T19260] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 483.010182][T19260] geneve3: entered promiscuous mode [ 483.020867][T19260] geneve3: entered allmulticast mode [ 483.263811][T19279] netlink: 'syz.4.6143': attribute type 5 has an invalid length. [ 483.741426][T19299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6152'. [ 484.810517][T19339] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.6171'. [ 485.828646][T19380] net_ratelimit: 75 callbacks suppressed [ 485.828668][T19380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 486.100768][ T43] vxcan1 speed is unknown, defaulting to 1000 [ 486.348707][T19407] netlink: 'syz.4.6201': attribute type 5 has an invalid length. [ 486.563054][ T978] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 486.613870][T19416] netlink: 'syz.1.6205': attribute type 21 has an invalid length. [ 486.749363][ T978] usb 4-1: Using ep0 maxpacket: 8 [ 486.784485][ T978] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 486.807276][ T978] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 486.838618][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 486.854306][T19424] netlink: 'syz.4.6209': attribute type 1 has an invalid length. [ 486.871687][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 486.880028][T19424] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6209'. [ 486.915829][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 486.950497][ T978] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 486.976620][ T978] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 486.986788][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.008651][ T978] usb 4-1: Product: syz [ 487.023216][ T978] usb 4-1: Manufacturer: syz [ 487.027881][ T978] usb 4-1: SerialNumber: syz [ 487.066266][ T978] usb 4-1: config 0 descriptor?? [ 487.089398][T19401] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 487.228984][T19434] SET target dimension over the limit! [ 488.104906][T19509] netlink: 'syz.4.6230': attribute type 11 has an invalid length. [ 488.137853][T19512] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6231'. [ 488.161811][T19514] xt_TPROXY: Can be used only with -p tcp or -p udp [ 488.474494][T19529] netlink: 'syz.4.6237': attribute type 1 has an invalid length. [ 488.497922][T19529] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6237'. [ 488.562359][ T43] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 488.615373][ T978] rc_core: IR keymap rc-snapstream-firefly not found [ 488.622143][ T978] Registered IR keymap rc-empty [ 488.649559][ T978] rc rc0: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 488.676709][ T978] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input57 [ 488.723917][ T978] input: syz syz mouse as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input58 [ 488.743087][ T43] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 488.779542][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.789145][ T978] usb 4-1: USB disconnect, device number 6 [ 488.795069][ C0] ati_remote 4-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 488.808933][ T43] usb 2-1: Product: syz [ 488.834385][ T43] usb 2-1: Manufacturer: syz [ 488.864219][ T43] usb 2-1: SerialNumber: syz [ 488.897108][ T43] usb 2-1: config 0 descriptor?? [ 488.932948][ T43] ch341 2-1:0.0: ch341-uart converter detected [ 488.993432][T19560] random: crng reseeded on system resumption [ 489.310536][ T978] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 489.346876][ T43] usb 2-1: failed to send control message: -71 [ 489.368276][ T43] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 489.405384][ T43] usb 2-1: USB disconnect, device number 9 [ 489.441465][ T43] ch341 2-1:0.0: device disconnected [ 489.497542][ T978] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 489.546637][ T978] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 489.574536][ T978] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 489.600419][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.624361][T19504] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 489.645607][ T978] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 489.796487][T19602] program syz.4.6251 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 489.848419][ T30] audit: type=1326 audit(2000003094.469:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19603 comm="syz.2.6252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b2b8ebe9 code=0x7ffc0000 [ 489.929600][ T30] audit: type=1326 audit(2000003094.469:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19603 comm="syz.2.6252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f38b2b8ebe9 code=0x7ffc0000 [ 489.929853][ T978] usb 4-1: USB disconnect, device number 7 [ 490.022439][ T30] audit: type=1326 audit(2000003094.469:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19603 comm="syz.2.6252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b2b8ebe9 code=0x7ffc0000 [ 490.087279][ T30] audit: type=1326 audit(2000003094.469:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19603 comm="syz.2.6252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b2b8ebe9 code=0x7ffc0000 [ 490.126997][T19621] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614) [ 490.207101][T19625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6254'. [ 490.257970][T19632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6257'. [ 490.268999][T19632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6257'. [ 490.486927][ T43] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 490.657111][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 490.666663][ T43] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 490.685016][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 490.711961][ T43] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 490.741391][ T43] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 490.761474][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.807323][ T43] usb 5-1: Product: syz [ 490.811555][ T43] usb 5-1: Manufacturer: syz [ 490.821935][ T43] usb 5-1: SerialNumber: syz [ 490.838272][ T43] usb 5-1: config 0 descriptor?? [ 490.860905][T19627] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 490.875761][ T43] mceusb 5-1:0.0: mceusb_dev_probe: device setup failed! [ 490.886217][ T43] mceusb 5-1:0.0: probe with driver mceusb failed with error -12 [ 491.129480][ T5974] usb 5-1: USB disconnect, device number 108 [ 491.559706][T19722] Smack: duplicate mount options [ 491.613017][T19725] 9pnet_fd: Insufficient options for proto=fd [ 491.745227][T19729] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 491.775100][T19729] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 491.814330][T19731] batadv0: entered promiscuous mode [ 491.972870][T19741] xt_CT: You must specify a L4 protocol and not use inversions on it [ 492.132165][ T43] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 492.331079][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 492.356093][ T30] audit: type=1326 audit(2000003096.798:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19754 comm="syz.3.6296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787878ebe9 code=0x7ffc0000 [ 492.379918][ T43] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 492.414636][ T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 492.431459][ T30] audit: type=1326 audit(2000003096.798:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19754 comm="syz.3.6296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787878ebe9 code=0x7ffc0000 [ 492.469103][ T43] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 492.495684][ T43] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 492.523759][ T30] audit: type=1326 audit(2000003096.836:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19754 comm="syz.3.6296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f787878ebe9 code=0x7ffc0000 [ 492.549103][ T43] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 492.602516][ T43] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 492.609070][ T30] audit: type=1326 audit(2000003096.836:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19754 comm="syz.3.6296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787878ebe9 code=0x7ffc0000 [ 492.611605][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.687952][ T30] audit: type=1326 audit(2000003096.836:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19754 comm="syz.3.6296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787878ebe9 code=0x7ffc0000 [ 492.709505][T19766] netlink: 'syz.1.6302': attribute type 10 has an invalid length. [ 492.709708][T19766] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 492.765709][T19734] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 492.795723][T19766] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 492.813256][ T43] hub 5-1:1.0: bad descriptor, ignoring hub [ 492.834561][ T43] hub 5-1:1.0: probe with driver hub failed with error -5 [ 492.867904][ T43] cdc_wdm 5-1:1.0: skipping garbage [ 492.884354][ T43] cdc_wdm 5-1:1.0: skipping garbage [ 492.923206][ T43] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 492.936744][ T43] cdc_wdm 5-1:1.0: Unknown control protocol [ 493.216502][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 493.223393][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 493.230486][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 493.237147][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 493.243515][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 493.250151][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 493.357723][T19790] netlink: 'syz.3.6308': attribute type 5 has an invalid length. [ 493.421849][ T43] usb 5-1: USB disconnect, device number 109 [ 493.563937][ T3449] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.578980][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 493.601795][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 493.625627][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 493.635399][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 493.652963][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 493.745034][ T3449] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.857805][ T3449] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.922761][T19806] vxcan1 speed is unknown, defaulting to 1000 [ 494.031514][ T3449] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.486428][ T3449] bridge0: port 3(batadv0) entered disabled state [ 494.606422][ T3449] bridge_slave_1: left allmulticast mode [ 494.626750][ T3449] bridge_slave_1: left promiscuous mode [ 494.632733][ T3449] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.733933][ T3449] bridge_slave_0: left allmulticast mode [ 494.739670][ T3449] bridge_slave_0: left promiscuous mode [ 494.769964][ T3449] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.079819][T19886] xt_hashlimit: max too large, truncated to 1048576 [ 495.109363][T19890] binder: 19888:19890 ioctl c00c620f 0 returned -14 [ 495.604663][T19908] binfmt_misc: register: failed to install interpreter file ./file0 [ 495.636440][ T3449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.663473][ T3449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.697799][ T3449] bond0 (unregistering): Released all slaves [ 495.843182][ T5853] Bluetooth: hci1: command tx timeout [ 495.869626][ T3449] bond1 (unregistering): Released all slaves [ 496.023561][T19894] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 496.062411][T19894] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 496.097189][ T5904] syz1: Port: 1 Link DOWN [ 496.113350][ T3449] _Z`Ԁ@: left promiscuous mode [ 496.873648][T19973] netlink: 'syz.4.6368': attribute type 2 has an invalid length. [ 496.973745][ T3449] [ 496.976152][ T3449] ====================================================== [ 496.983197][ T3449] WARNING: possible circular locking dependency detected [ 496.990253][ T3449] 6.16.0-syzkaller #0 Not tainted [ 496.995281][ T3449] ------------------------------------------------------ [ 497.002303][ T3449] kworker/u8:7/3449 is trying to acquire lock: [ 497.008459][ T3449] ffff888059944e00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0 [ 497.018131][ T3449] [ 497.018131][ T3449] but task is already holding lock: [ 497.025501][ T3449] ffff8880273e8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 497.035907][ T3449] [ 497.035907][ T3449] which lock already depends on the new lock. [ 497.035907][ T3449] [ 497.046316][ T3449] [ 497.046316][ T3449] the existing dependency chain (in reverse order) is: [ 497.055351][ T3449] [ 497.055351][ T3449] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 497.063115][ T3449] lock_acquire+0x120/0x360 [ 497.068150][ T3449] __mutex_lock+0x182/0xe80 [ 497.073183][ T3449] ieee80211_open+0xed/0x1f0 [ 497.078321][ T3449] __dev_open+0x470/0x880 [ 497.083184][ T3449] netif_open+0xaa/0x170 [ 497.087963][ T3449] dev_open+0x125/0x260 [ 497.092652][ T3449] team_add_slave+0xb36/0x2840 [ 497.097944][ T3449] do_set_master+0x530/0x6d0 [ 497.103068][ T3449] do_setlink+0xcf0/0x41c0 [ 497.108035][ T3449] rtnl_newlink+0x160b/0x1c70 [ 497.113248][ T3449] rtnetlink_rcv_msg+0x7cc/0xb70 [ 497.118722][ T3449] netlink_rcv_skb+0x205/0x470 [ 497.124017][ T3449] netlink_unicast+0x75c/0x8e0 [ 497.129308][ T3449] netlink_sendmsg+0x805/0xb30 [ 497.134635][ T3449] __sock_sendmsg+0x21c/0x270 [ 497.139852][ T3449] ____sys_sendmsg+0x505/0x830 [ 497.145155][ T3449] ___sys_sendmsg+0x21f/0x2a0 [ 497.150365][ T3449] __x64_sys_sendmsg+0x19b/0x260 [ 497.155864][ T3449] do_syscall_64+0xfa/0x3b0 [ 497.160897][ T3449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.167341][ T3449] [ 497.167341][ T3449] -> #0 (team->team_lock_key#2){+.+.}-{4:4}: [ 497.175531][ T3449] validate_chain+0xb9b/0x2140 [ 497.180846][ T3449] __lock_acquire+0xab9/0xd20 [ 497.186048][ T3449] lock_acquire+0x120/0x360 [ 497.191088][ T3449] __mutex_lock+0x182/0xe80 [ 497.196125][ T3449] team_del_slave+0x32/0x1c0 [ 497.201269][ T3449] team_device_event+0x285/0xa20 [ 497.206733][ T3449] notifier_call_chain+0x1b3/0x3e0 [ 497.212377][ T3449] unregister_netdevice_many_notify+0x15d8/0x2320 [ 497.219323][ T3449] unregister_netdevice_queue+0x33c/0x380 [ 497.225569][ T3449] _cfg80211_unregister_wdev+0x165/0x590 [ 497.231735][ T3449] ieee80211_remove_interfaces+0x49a/0x6d0 [ 497.238072][ T3449] ieee80211_unregister_hw+0x5d/0x2c0 [ 497.243983][ T3449] mac80211_hwsim_del_radio+0x275/0x460 [ 497.250063][ T3449] hwsim_exit_net+0x584/0x640 [ 497.255278][ T3449] ops_undo_list+0x497/0x990 [ 497.260397][ T3449] cleanup_net+0x4c5/0x800 [ 497.265348][ T3449] process_scheduled_works+0xade/0x17b0 [ 497.271421][ T3449] worker_thread+0x8a0/0xda0 [ 497.276544][ T3449] kthread+0x70e/0x8a0 [ 497.281143][ T3449] ret_from_fork+0x3fc/0x770 [ 497.286259][ T3449] ret_from_fork_asm+0x1a/0x30 [ 497.291553][ T3449] [ 497.291553][ T3449] other info that might help us debug this: [ 497.291553][ T3449] [ 497.301810][ T3449] Possible unsafe locking scenario: [ 497.301810][ T3449] [ 497.309265][ T3449] CPU0 CPU1 [ 497.314628][ T3449] ---- ---- [ 497.319997][ T3449] lock(&rdev->wiphy.mtx); [ 497.324512][ T3449] lock(team->team_lock_key#2); [ 497.331984][ T3449] lock(&rdev->wiphy.mtx); [ 497.339019][ T3449] lock(team->team_lock_key#2); [ 497.343978][ T3449] [ 497.343978][ T3449] *** DEADLOCK *** [ 497.343978][ T3449] [ 497.352125][ T3449] 5 locks held by kworker/u8:7/3449: [ 497.357412][ T3449] #0: ffff88801b2fb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 497.368302][ T3449] #1: ffffc9000b8d7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 497.378850][ T3449] #2: ffffffff8f4fd310 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 497.388178][ T3449] #3: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 497.398035][ T3449] #4: ffff8880273e8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 497.408851][ T3449] [ 497.408851][ T3449] stack backtrace: [ 497.414757][ T3449] CPU: 1 UID: 0 PID: 3449 Comm: kworker/u8:7 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 497.414778][ T3449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 497.414791][ T3449] Workqueue: netns cleanup_net [ 497.414822][ T3449] Call Trace: [ 497.414834][ T3449] [ 497.414843][ T3449] dump_stack_lvl+0x189/0x250 [ 497.414865][ T3449] ? __pfx_dump_stack_lvl+0x10/0x10 [ 497.414883][ T3449] ? __pfx__printk+0x10/0x10 [ 497.414906][ T3449] ? print_lock_name+0xde/0x100 [ 497.414927][ T3449] print_circular_bug+0x2ee/0x310 [ 497.414949][ T3449] check_noncircular+0x134/0x160 [ 497.414972][ T3449] validate_chain+0xb9b/0x2140 [ 497.414995][ T3449] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.415017][ T3449] __lock_acquire+0xab9/0xd20 [ 497.415035][ T3449] ? team_del_slave+0x32/0x1c0 [ 497.415057][ T3449] lock_acquire+0x120/0x360 [ 497.415076][ T3449] ? team_del_slave+0x32/0x1c0 [ 497.415100][ T3449] ? __mutex_trylock_common+0x153/0x260 [ 497.415122][ T3449] __mutex_lock+0x182/0xe80 [ 497.415141][ T3449] ? team_del_slave+0x32/0x1c0 [ 497.415163][ T3449] ? rcu_is_watching+0x15/0xb0 [ 497.415184][ T3449] ? team_del_slave+0x32/0x1c0 [ 497.415218][ T3449] ? __pfx___mutex_lock+0x10/0x10 [ 497.415235][ T3449] ? bond_netdev_event+0xd9/0xe80 [ 497.415259][ T3449] ? __pfx___mutex_lock+0x10/0x10 [ 497.415276][ T3449] ? __pfx_bond_netdev_event+0x10/0x10 [ 497.415302][ T3449] team_del_slave+0x32/0x1c0 [ 497.415325][ T3449] team_device_event+0x285/0xa20 [ 497.415341][ T3449] notifier_call_chain+0x1b3/0x3e0 [ 497.415362][ T3449] unregister_netdevice_many_notify+0x15d8/0x2320 [ 497.415387][ T3449] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 497.415406][ T3449] ? __lock_acquire+0xab9/0xd20 [ 497.415428][ T3449] unregister_netdevice_queue+0x33c/0x380 [ 497.415446][ T3449] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 497.415467][ T3449] _cfg80211_unregister_wdev+0x165/0x590 [ 497.415491][ T3449] ieee80211_remove_interfaces+0x49a/0x6d0 [ 497.415510][ T3449] ? __pfx_synchronize_rcu+0x10/0x10 [ 497.415529][ T3449] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 497.415548][ T3449] ? rcu_is_watching+0x15/0xb0 [ 497.415567][ T3449] ieee80211_unregister_hw+0x5d/0x2c0 [ 497.415593][ T3449] mac80211_hwsim_del_radio+0x275/0x460 [ 497.415619][ T3449] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 497.415646][ T3449] hwsim_exit_net+0x584/0x640 [ 497.415667][ T3449] ? __pfx_hwsim_exit_net+0x10/0x10 [ 497.415688][ T3449] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 497.415712][ T3449] ops_undo_list+0x497/0x990 [ 497.415735][ T3449] ? __pfx_ops_undo_list+0x10/0x10 [ 497.415760][ T3449] cleanup_net+0x4c5/0x800 [ 497.415782][ T3449] ? __pfx_cleanup_net+0x10/0x10 [ 497.415804][ T3449] ? _raw_spin_unlock_irq+0x23/0x50 [ 497.415818][ T3449] ? process_scheduled_works+0x9ef/0x17b0 [ 497.415834][ T3449] ? process_scheduled_works+0x9ef/0x17b0 [ 497.415851][ T3449] process_scheduled_works+0xade/0x17b0 [ 497.415878][ T3449] ? __pfx_process_scheduled_works+0x10/0x10 [ 497.415900][ T3449] worker_thread+0x8a0/0xda0 [ 497.415927][ T3449] kthread+0x70e/0x8a0 [ 497.415948][ T3449] ? __pfx_worker_thread+0x10/0x10 [ 497.415964][ T3449] ? __pfx_kthread+0x10/0x10 [ 497.415984][ T3449] ? _raw_spin_unlock_irq+0x23/0x50 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 497.415998][ T3449] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.416013][ T3449] ? __pfx_kthread+0x10/0x10 [ 497.416033][ T3449] ret_from_fork+0x3fc/0x770 [ 497.416049][ T3449] ? __pfx_ret_from_fork+0x10/0x10 [ 497.416070][ T3449] ? __switch_to_asm+0x39/0x70 [ 497.416089][ T3449] ? __switch_to_asm+0x33/0x70 [ 497.416107][ T3449] ? __pfx_kthread+0x10/0x10 [ 497.416127][ T3449] ret_from_fork_asm+0x1a/0x30 [ 497.416152][ T3449] [ 497.905600][ T3449] team0: Port device wlan1 removed [ 497.947203][T19977] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551608) [ 497.957617][T19977] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 498.068682][ T5853] Bluetooth: hci1: command tx timeout [ 498.838838][ T3449] hsr_slave_0: left promiscuous mode [ 498.893664][ T3449] hsr_slave_1: left promiscuous mode [ 498.902859][ T3449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.924772][ T3449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.944154][ T3449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.952008][ T3449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.972880][ T3449] veth1_macvtap: left promiscuous mode [ 498.982459][ T3449] veth0_macvtap: left promiscuous mode [ 498.997435][ T3449] veth1_vlan: left promiscuous mode [ 499.002781][ T3449] veth0_vlan: left promiscuous mode [ 499.243746][ T3449] team0 (unregistering): Port device team_slave_1 removed [ 499.259044][ T3449] team0 (unregistering): Port device team_slave_0 removed [ 499.322976][ T3507] smc: removing ib device syz1 [ 499.886712][ T3449] IPVS: stop unused estimator thread 0... [ 499.965568][ T3449] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.017017][ T3449] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.057571][ T3449] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.102448][ T3449] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.226494][ T3449] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.240373][ T3449] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 500.282872][ T3449] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.293519][ T3449] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 500.360087][ T3449] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.370617][ T3449] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 500.411160][ T3449] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.423200][ T3449] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 500.532214][ T3449] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.605894][ T3449] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.668360][ T3449] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.722548][ T3449] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.821538][ T3449] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.871963][ T3449] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.926675][ T3449] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.975467][ T3449] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.093515][ T3449] bridge0: port 3(bond0) entered disabled state [ 501.106762][ T3449] bridge_slave_1: left allmulticast mode [ 501.113651][ T3449] bridge_slave_1: left promiscuous mode [ 501.119401][ T3449] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.128831][ T3449] bridge_slave_0: left allmulticast mode [ 501.137788][ T3449] bridge_slave_0: left promiscuous mode [ 501.148844][ T3449] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.161216][ T3449] bridge_slave_1: left allmulticast mode [ 501.167407][ T3449] bridge_slave_1: left promiscuous mode [ 501.173181][ T3449] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.183927][ T3449] bridge_slave_0: left allmulticast mode [ 501.189769][ T3449] bridge_slave_0: left promiscuous mode [ 501.195479][ T3449] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.211719][ T3449] bridge_slave_1: left allmulticast mode [ 501.217415][ T3449] bridge_slave_1: left promiscuous mode [ 501.223347][ T3449] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.232154][ T3449] bridge_slave_0: left allmulticast mode [ 501.237819][ T3449] bridge_slave_0: left promiscuous mode [ 501.243832][ T3449] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.259950][ T3449] bond_slave_0: left promiscuous mode [ 501.265579][ T3449] bond_slave_1: left promiscuous mode [ 501.427874][ T3449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.437542][ T3449] bond_slave_0: left promiscuous mode [ 501.443109][ T3449] bond_slave_0: left allmulticast mode [ 501.450335][ T3449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.459794][ T3449] bond_slave_1: left promiscuous mode [ 501.465533][ T3449] bond_slave_1: left allmulticast mode [ 501.472011][ T3449] bond0 (unregistering): Released all slaves [ 501.481772][ T3449] bond1 (unregistering): Released all slaves [ 501.565968][ T3449] bond2 (unregistering): Released all slaves [ 501.706507][ T3449] team0: Port device bond0 removed [ 501.713231][ T3449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.723470][ T3449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.734140][ T3449] bond0 (unregistering): Released all slaves [ 501.743957][ T3449] bond1 (unregistering): Released all slaves [ 501.824920][ T3449] bond2 (unregistering): Released all slaves [ 502.144218][ T3449] team0: Port device bond0 removed [ 502.151394][ T3449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.161600][ T3449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.171774][ T3449] bond0 (unregistering): Released all slaves [ 502.314554][ T3449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.324936][ T3449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.334797][ T3449] bond0 (unregistering): Released all slaves [ 502.345325][ T3449] bond1 (unregistering): Released all slaves [ 502.355498][ T3449] bond2 (unregistering): Released all slaves [ 502.437247][ T3449] bond3 (unregistering): Released all slaves [ 502.446997][ T3449] bond4 (unregistering): Released all slaves [ 502.456951][ T3449] bond5 (unregistering): Released all slaves [ 504.006449][ T3449] hsr_slave_0: left promiscuous mode [ 504.012405][ T3449] hsr_slave_1: left promiscuous mode [ 504.018195][ T3449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.031633][ T3449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.039393][ T3449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.047468][ T3449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.058295][ T3449] : left promiscuous mode [ 504.063611][ T3449] hsr_slave_1: left promiscuous mode [ 504.069378][ T3449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.078170][ T3449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.086156][ T3449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.094309][ T3449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.105699][ T3449] hsr_slave_0: left promiscuous mode [ 504.111421][ T3449] hsr_slave_1: left promiscuous mode [ 504.117244][ T3449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.124645][ T3449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.132434][ T3449] batman_adv: batadv0: Interface deactivated: 26 [ 504.139255][ T3449] batman_adv: batadv0: Removing interface: 26 [ 504.150141][ T3449] hsr_slave_0: left promiscuous mode [ 504.155878][ T3449] hsr_slave_1: left promiscuous mode [ 504.161862][ T3449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.169478][ T3449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.177071][ T3449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.184523][ T3449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.201664][ T3449] veth1_macvtap: left promiscuous mode [ 504.207176][ T3449] veth0_macvtap: left promiscuous mode [ 504.213161][ T3449] veth0_vlan: left promiscuous mode [ 504.219103][ T3449] veth1_macvtap: left promiscuous mode [ 504.224701][ T3449] veth0_macvtap: left promiscuous mode [ 504.230229][ T3449] veth1_vlan: left promiscuous mode [ 504.236249][ T3449] veth0_vlan: left promiscuous mode [ 504.242227][ T3449] veth1_macvtap: left promiscuous mode [ 504.247799][ T3449] veth0_macvtap: left promiscuous mode [ 504.253342][ T3449] veth1_vlan: left promiscuous mode [ 504.258664][ T3449] veth0_vlan: left promiscuous mode [ 504.266080][ T3449] veth1_macvtap: left promiscuous mode [ 504.271610][ T3449] veth0_macvtap: left promiscuous mode [ 504.277848][ T3449] veth1_vlan: left promiscuous mode [ 504.283135][ T3449] veth0_vlan: left promiscuous mode [ 504.589113][ T3449] team0 (unregistering): Port device team_slave_1 removed [ 504.612969][ T3449] team0 (unregistering): Port device team_slave_0 removed [ 504.824110][ T3449] team0 (unregistering): Port device team_slave_1 removed [ 504.847689][ T3449] team0 (unregistering): Port device team_slave_0 removed [ 505.035391][ T3449] team0 (unregistering): Port device team_slave_1 removed [ 505.058999][ T3449] team0 (unregistering): Port device team_slave_0 removed [ 505.110423][ T3507] smc: removing ib device syz2 [ 505.307625][ T3449] team0 (unregistering): Port device team_slave_1 removed [ 505.331906][ T3449] team0 (unregistering): Port device team_slave_0 removed [ 505.433800][ T5976] vxcan1 speed is unknown, defaulting to 1000 [ 505.440023][ T5976] syz2: Port: 1 Link DOWN [ 506.417304][ T3449] IPVS: stop unused estimator thread 0...