last executing test programs: 2.533290011s ago: executing program 4 (id=17907): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000003c0)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x13}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0) 2.292197368s ago: executing program 1 (id=17912): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x65, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) 2.172332509s ago: executing program 1 (id=17914): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, &(0x7f00000003c0), 0x40000000, &(0x7f0000000400)) 1.914066333s ago: executing program 3 (id=17919): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b0f, &(0x7f0000000040)) 1.837164102s ago: executing program 3 (id=17920): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f00000003c0)=0x40008, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x6dcc0000, 0x4) 1.765774433s ago: executing program 1 (id=17921): r0 = syz_io_uring_setup(0x178b, &(0x7f0000000180)={0x0, 0x0, 0x13291, 0x4000002, 0x3d}, &(0x7f0000000100), &(0x7f000001fa00)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 1.698089669s ago: executing program 3 (id=17923): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) 1.609711959s ago: executing program 3 (id=17924): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x20000000, 0x0) 1.52168832s ago: executing program 4 (id=17926): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth0_to_hsr\x00', &(0x7f0000002fc0)=@ethtool_stats}) 1.425312196s ago: executing program 4 (id=17928): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='sessionid\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) 1.294041438s ago: executing program 3 (id=17930): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) 1.192843958s ago: executing program 3 (id=17932): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103", @ANYRESHEX], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, 0x0) 1.04326686s ago: executing program 0 (id=17935): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2c, r1, 0x1, 0x70bd2b, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 924.08161ms ago: executing program 2 (id=17937): unshare(0x4000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@map=r0, 0xffffffffffffffff, 0x2c, 0x0, 0x0, @void, @value}, 0x20) 918.838406ms ago: executing program 0 (id=17938): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 807.074827ms ago: executing program 1 (id=17939): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x80000000, 0x4) sendto$unix(r0, 0x0, 0xfffffffffffffe38, 0x0, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) 779.828987ms ago: executing program 2 (id=17940): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 738.334339ms ago: executing program 0 (id=17941): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 671.121902ms ago: executing program 1 (id=17942): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80046601, 0x0) 654.665488ms ago: executing program 2 (id=17943): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) 495.393993ms ago: executing program 4 (id=17944): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCFLSH(r0, 0x540b, 0x0) 486.576768ms ago: executing program 0 (id=17945): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/config', 0x210000, 0x1) fchdir(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc01c2, 0x1fe) 448.286508ms ago: executing program 2 (id=17946): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000080)=0x401, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x23aa, @remote, 0x6}, 0x1c) 359.517811ms ago: executing program 1 (id=17947): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687", 0x2c}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) 285.117566ms ago: executing program 0 (id=17948): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000008240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x9}, @NFTA_LOG_PREFIX={0x9, 0x2, 0x1, 0x0, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 284.557167ms ago: executing program 4 (id=17949): r0 = socket$inet(0xa, 0x801, 0x84) r1 = io_uring_setup(0x3b84, &(0x7f0000000140)={0x0, 0x1ab5, 0x100, 0x3, 0x131}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[r0], 0x1) 274.252035ms ago: executing program 2 (id=17950): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000000053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 95.587348ms ago: executing program 4 (id=17951): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x5c, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0xfffffffffffffedb, 0x2, {0x7f, 0x4}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x12, 0x400, 0x1, 0x200}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 84.127984ms ago: executing program 0 (id=17952): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) 0s ago: executing program 2 (id=17953): r0 = request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='].\x00', 0xffffffffffffffff) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0xff64cd1d00000000, 0x0, 0x0, 0x0, 0x41, 0x2, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}) request_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, r0) kernel console output (not intermixed with test programs): 828.816250][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.837894][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.859789][ T5881] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 828.874334][ T5907] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15497'. [ 828.880869][ T5881] usb 2-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 828.901507][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.920698][ T5881] usb 2-1: config 0 descriptor?? [ 829.259014][ T5924] atomic_op ffff88807d22a998 conn xmit_atomic 0000000000000000 [ 829.364690][ T5881] waltop 0003:172F:0501.0053: hidraw0: USB HID v0.00 Device [HID 172f:0501] on usb-dummy_hcd.1-1/input0 [ 829.377111][ T977] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 829.523263][ T24] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 829.543798][ T977] usb 4-1: Using ep0 maxpacket: 32 [ 829.559523][ T977] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 829.571205][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.588153][ T47] usb 2-1: USB disconnect, device number 79 [ 829.588490][ T977] usb 4-1: Product: syz [ 829.602448][ T977] usb 4-1: Manufacturer: syz [ 829.632626][ T977] usb 4-1: SerialNumber: syz [ 829.662212][ T977] usb 4-1: config 0 descriptor?? [ 829.672874][ T977] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 829.714181][ T24] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 829.726864][ T24] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 829.738353][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 829.759315][ T24] usb 3-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 829.775699][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.804989][ T24] usb 3-1: config 0 descriptor?? [ 829.820019][ T5925] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 829.887753][ T977] gspca_ov534_9: reg_w failed -71 [ 830.085290][ T5955] netlink: 'syz.0.15520': attribute type 4 has an invalid length. [ 830.097884][ T5955] netlink: 'syz.0.15520': attribute type 2 has an invalid length. [ 830.273711][ T24] hid-retrode 0003:0403:97C1.0054: unbalanced collection at end of report description [ 830.293976][ T977] gspca_ov534_9: Unknown sensor 0000 [ 830.294073][ T977] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 830.302579][ T24] hid-retrode 0003:0403:97C1.0054: probe with driver hid-retrode failed with error -22 [ 830.341766][ T977] usb 4-1: USB disconnect, device number 93 [ 830.507362][ T5881] usb 3-1: USB disconnect, device number 97 [ 830.752653][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 830.752672][ T30] audit: type=1400 audit(1747866350.226:676): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5986 comm="syz.3.15535" [ 830.777904][ C1] vkms_vblank_simulate: vblank timer overrun [ 830.861439][ T5990] tipc: Enabled bearer , priority 0 [ 831.421146][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15545'. [ 831.436702][ T6012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15545'. [ 831.447171][ T6012] netlink: 'syz.2.15545': attribute type 19 has an invalid length. [ 832.193381][ T24] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 832.385825][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 832.395143][ T24] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 832.423876][ T24] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 832.459719][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 832.470427][ T24] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 832.480985][ T24] usb 3-1: Product: syz [ 832.485880][ T24] usb 3-1: Manufacturer: syz [ 832.498412][ T6050] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15563'. [ 832.510075][ T24] hub 3-1:4.0: USB hub found [ 832.587814][ T6052] netlink: 72 bytes leftover after parsing attributes in process `syz.1.15565'. [ 832.711285][ T24] hub 3-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 832.868872][ T30] audit: type=1326 audit(1747866352.346:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.1.15572" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 832.913460][ T30] audit: type=1326 audit(1747866352.346:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.1.15572" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 832.957361][ T30] audit: type=1326 audit(1747866352.376:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.1.15572" exe="/root/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 832.979399][ C1] vkms_vblank_simulate: vblank timer overrun [ 832.986645][ T30] audit: type=1326 audit(1747866352.376:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.1.15572" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 833.017113][ T30] audit: type=1326 audit(1747866352.376:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.1.15572" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 833.053598][ T977] usb 3-1: USB disconnect, device number 98 [ 833.079884][ T30] audit: type=1326 audit(1747866352.376:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.1.15572" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 833.104321][ T30] audit: type=1326 audit(1747866352.376:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.1.15572" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 834.153792][ T977] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 834.314075][ T977] usb 2-1: Using ep0 maxpacket: 32 [ 834.325452][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.343556][ T977] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 834.352639][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.393904][ T977] usb 2-1: config 0 descriptor?? [ 834.415583][ T977] hub 2-1:0.0: bad descriptor, ignoring hub [ 834.421555][ T977] hub 2-1:0.0: probe with driver hub failed with error -5 [ 834.449897][ T977] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 834.896704][ T977] usb 2-1: reset high-speed USB device number 80 using dummy_hcd [ 835.450308][ T6151] netlink: 161716 bytes leftover after parsing attributes in process `syz.3.15612'. [ 835.483831][ T977] usb 2-1: USB disconnect, device number 80 [ 836.419817][ T6187] netlink: 64 bytes leftover after parsing attributes in process `syz.0.15629'. [ 836.463694][ T977] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 836.626324][ T977] usb 2-1: Using ep0 maxpacket: 16 [ 836.640312][ T977] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.661921][ T977] usb 2-1: config 0 interface 0 has no altsetting 0 [ 836.676501][ T977] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 836.686295][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.704516][ T977] usb 2-1: config 0 descriptor?? [ 836.843311][ T6208] netlink: 'syz.0.15639': attribute type 4 has an invalid length. [ 836.851295][ T6208] netlink: 17 bytes leftover after parsing attributes in process `syz.0.15639'. [ 837.147517][ T977] bigben 0003:146B:0902.0055: unexpected rdesc, please submit for review [ 837.172035][ T977] bigben 0003:146B:0902.0055: unknown main item tag 0x0 [ 837.188260][ T977] bigben 0003:146B:0902.0055: unknown main item tag 0x0 [ 837.199139][ T977] bigben 0003:146B:0902.0055: unknown main item tag 0x0 [ 837.209763][ T977] bigben 0003:146B:0902.0055: unknown main item tag 0x0 [ 837.219428][ T977] bigben 0003:146B:0902.0055: unknown main item tag 0x0 [ 837.238662][ T977] bigben 0003:146B:0902.0055: hidraw0: USB HID v0.05 Device [HID 146b:0902] on usb-dummy_hcd.1-1/input0 [ 837.254572][ T977] bigben 0003:146B:0902.0055: missing HID_OUTPUT_REPORT 0 [ 837.261853][ T977] bigben 0003:146B:0902.0055: no output report found [ 837.390191][ T977] usb 2-1: USB disconnect, device number 81 [ 838.084612][ T47] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 838.166340][ T24] hid-generic 0003:8000:0002.0056: item fetching failed at offset 0/1 [ 838.189374][ T24] hid-generic 0003:8000:0002.0056: probe with driver hid-generic failed with error -22 [ 838.245548][ T47] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 838.273151][ T47] usb 4-1: config 0 has no interface number 0 [ 838.279351][ T47] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 838.310740][ T47] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 838.336898][ T6256] [U] ¹ÉMÙ­ÕÁQ&’Ù Kœ4 [ 838.344499][ T47] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 838.353907][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.361962][ T47] usb 4-1: Product: syz [ 838.386674][ T47] usb 4-1: Manufacturer: syz [ 838.391356][ T47] usb 4-1: SerialNumber: syz [ 838.416078][ T47] usb 4-1: config 0 descriptor?? [ 838.432095][ T6243] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 838.446346][ T47] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 838.658184][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15666'. [ 838.673499][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15666'. [ 839.373285][ T47] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 839.518181][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15672'. [ 839.528005][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.556280][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 839.579560][ T47] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 839.580037][ T47] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 839.580155][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.614942][ T47] usb 3-1: config 0 descriptor?? [ 839.928578][ T6286] sctp: [Deprecated]: syz.1.15676 (pid 6286) Use of int in maxseg socket option. [ 839.928578][ T6286] Use struct sctp_assoc_value instead [ 840.055327][ T47] dragonrise 0003:0079:0011.0057: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.2-1/input0 [ 840.296413][ T47] usb 3-1: USB disconnect, device number 99 [ 840.494117][ T6304] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 840.703921][ C1] usb 4-1: yurex_control_callback - control failed: -2 [ 840.714761][ T977] usb 4-1: USB disconnect, device number 94 [ 840.729997][ T977] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 840.862907][ T6317] tipc: Started in network mode [ 840.876601][ T6317] tipc: Node identity f2f01863b11, cluster identity 4711 [ 840.887259][ T6317] tipc: Enabled bearer , priority 10 [ 841.326843][ T30] audit: type=1326 audit(1747866360.796:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6338 comm="syz.0.15701" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 841.383934][ T30] audit: type=1326 audit(1747866360.806:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6338 comm="syz.0.15701" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 841.433242][ T30] audit: type=1326 audit(1747866360.806:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6338 comm="syz.0.15701" exe="/root/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 841.490812][ T30] audit: type=1326 audit(1747866360.806:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6338 comm="syz.0.15701" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 841.522690][ T30] audit: type=1326 audit(1747866360.806:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6338 comm="syz.0.15701" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 841.546729][ T30] audit: type=1326 audit(1747866360.806:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6338 comm="syz.0.15701" exe="/root/syz-executor" sig=0 arch=40000003 syscall=145 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 841.601335][ T30] audit: type=1326 audit(1747866360.806:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6338 comm="syz.0.15701" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 841.657205][ T6354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15707'. [ 841.720004][ T6354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15707'. [ 841.732855][ T6354] netlink: 'syz.1.15707': attribute type 14 has an invalid length. [ 841.823146][ C1] syz_tun: tun_net_xmit 118 [ 841.856181][ T6361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 842.003374][ T47] tipc: Node number set to 1138759779 [ 842.387995][ T6394] netlink: 192 bytes leftover after parsing attributes in process `syz.2.15726'. [ 842.465981][ T47] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 842.482132][ T6397] netlink: 48 bytes leftover after parsing attributes in process `syz.1.15729'. [ 842.623237][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 842.637582][ T47] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 842.653326][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.667922][ T47] usb 4-1: config 0 descriptor?? [ 842.689912][ T47] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 842.863188][ C1] syz_tun: tun_net_xmit 118 [ 843.317634][ T5883] usb 4-1: USB disconnect, device number 95 [ 843.513328][ T47] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 843.633142][ T977] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 843.673301][ T47] usb 2-1: Using ep0 maxpacket: 32 [ 843.681199][ T47] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 843.693098][ T47] usb 2-1: config 0 has no interface number 0 [ 843.701764][ T47] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 843.711273][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.719482][ T47] usb 2-1: Product: syz [ 843.723741][ T47] usb 2-1: Manufacturer: syz [ 843.728403][ T47] usb 2-1: SerialNumber: syz [ 843.737476][ T47] usb 2-1: config 0 descriptor?? [ 843.747289][ T47] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 843.788027][ T977] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 843.797560][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.806557][ T977] usb 3-1: Product: syz [ 843.810784][ T977] usb 3-1: Manufacturer: syz [ 843.815487][ T977] usb 3-1: SerialNumber: syz [ 843.822731][ T977] usb 3-1: config 0 descriptor?? [ 843.845911][ T977] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 843.913048][ C1] syz_tun: tun_net_xmit 118 [ 843.970290][ T47] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 843.995410][ T47] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 844.152382][ T6444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 844.225725][ T30] audit: type=1326 audit(1747866363.696:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.3.15752" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 844.253476][ T30] audit: type=1326 audit(1747866363.706:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.3.15752" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 844.276786][ T30] audit: type=1326 audit(1747866363.706:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.3.15752" exe="/root/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 844.394590][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 844.398370][ T9] usb 2-1: USB disconnect, device number 82 [ 844.452350][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 844.482661][ T977] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 844.502707][ T977] sq905c 3-1:0.0: probe with driver sq905c failed with error -71 [ 844.526832][ T977] usb 3-1: USB disconnect, device number 100 [ 844.550084][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 844.591480][ T9] quatech2 2-1:0.51: device disconnected [ 844.834080][ T6466] tipc: Enabling of bearer rejected, failed to enable media [ 844.943052][ C1] syz_tun: tun_net_xmit 118 [ 845.463849][ T6496] tipc: Bearer : already 2 bearers with priority 10 [ 845.491435][ T6496] tipc: Bearer : trying with adjusted priority [ 845.516706][ T6496] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 845.993261][ C1] syz_tun: tun_net_xmit 118 [ 846.883296][ T5883] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 847.023373][ C1] syz_tun: tun_net_xmit 118 [ 847.053818][ T5883] usb 4-1: Using ep0 maxpacket: 8 [ 847.075008][ T5883] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 847.103651][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.125363][ T5883] usb 4-1: Product: syz [ 847.152276][ T5883] usb 4-1: Manufacturer: syz [ 847.162640][ T5883] usb 4-1: SerialNumber: syz [ 847.179828][ T5883] usb 4-1: config 0 descriptor?? [ 847.202597][ T5883] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 847.243159][ T5883] usb 4-1: setting power ON [ 847.247777][ T5883] dvb-usb: bulk message failed: -22 (2/0) [ 847.271968][ T5883] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 847.308284][ T5883] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 847.325662][ T5883] usb 4-1: media controller created [ 847.366592][ T5883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 847.379570][ T6599] netlink: 'syz.1.15826': attribute type 28 has an invalid length. [ 847.439322][ T5883] usb 4-1: selecting invalid altsetting 6 [ 847.447556][ T5883] usb 4-1: digital interface selection failed (-22) [ 847.473210][ T5883] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 847.489021][ T5883] usb 4-1: setting power OFF [ 847.494298][ T5883] dvb-usb: bulk message failed: -22 (2/0) [ 847.501217][ T5883] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 847.516332][ T5883] (NULL device *): no alternate interface [ 847.585742][ T5883] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 847.644543][ T5883] usb 4-1: USB disconnect, device number 96 [ 847.877865][ T6619] tipc: Enabling of bearer rejected, failed to enable media [ 847.901003][ T6621] tipc: Enabled bearer , priority 10 [ 848.063090][ C1] syz_tun: tun_net_xmit 118 [ 848.156790][ T6634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15843'. [ 848.173275][ T6634] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15843'. [ 848.389324][ T6644] netlink: 72 bytes leftover after parsing attributes in process `syz.4.15850'. [ 848.434525][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 848.434544][ T30] audit: type=1326 audit(1747866367.906:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.1.15848" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 848.507061][ T30] audit: type=1326 audit(1747866367.906:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.1.15848" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 848.573144][ T30] audit: type=1326 audit(1747866367.946:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.1.15848" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 848.635506][ T30] audit: type=1326 audit(1747866367.946:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.1.15848" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 848.680566][ T30] audit: type=1326 audit(1747866367.946:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.1.15848" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 848.774950][ T30] audit: type=1326 audit(1747866367.946:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.1.15848" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 848.816763][ T30] audit: type=1326 audit(1747866367.946:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.1.15848" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 848.856171][ T6663] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 848.893345][ T47] tipc: Node number set to 4227989504 [ 849.103247][ C1] syz_tun: tun_net_xmit 118 [ 849.389708][ T6687] pim6reg: entered allmulticast mode [ 849.419599][ T6687] pim6reg: left allmulticast mode [ 849.983226][ T5881] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 849.989706][ T6708] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15876'. [ 849.989744][ T6708] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15876'. [ 850.143244][ C1] syz_tun: tun_net_xmit 118 [ 850.152785][ T5881] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 850.152820][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.152852][ T5881] usb 3-1: Product: syz [ 850.152869][ T5881] usb 3-1: Manufacturer: syz [ 850.152886][ T5881] usb 3-1: SerialNumber: syz [ 850.157656][ T5881] usb 3-1: config 0 descriptor?? [ 850.221933][ T5881] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 850.260728][T29550] udevd[29550]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 850.392792][ T47] usb 3-1: USB disconnect, device number 101 [ 850.551445][ T6724] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15884'. [ 850.682100][ T6730] netlink: 'syz.0.15888': attribute type 10 has an invalid length. [ 850.687531][ T6730] 8021q: adding VLAN 0 to HW filter on device team0 [ 850.694575][ T6730] team0: entered promiscuous mode [ 850.712011][ T6730] bond0: (slave team0): Enslaving as an active interface with an up link [ 850.718209][ T6730] netlink: 'syz.0.15888': attribute type 10 has an invalid length. [ 850.722008][ T6730] bond0: (slave team0): Releasing backup interface [ 850.745659][ T6730] team0: left promiscuous mode [ 851.111140][ T6745] tipc: Resetting bearer [ 851.129121][ T6745] tipc: Resetting bearer [ 851.155040][ T6745] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.183174][ C1] syz_tun: tun_net_xmit 118 [ 851.240059][ T6746] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.247333][ T6746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 851.287775][ T6746] macvlan0: left allmulticast mode [ 851.304431][ T6746] veth1_vlan: left allmulticast mode [ 851.332633][ T6746] bond5: left promiscuous mode [ 851.339064][ T6746] bond5: left allmulticast mode [ 851.477925][ T6754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15899'. [ 851.772654][ T6768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15906'. [ 852.084298][ T6786] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 852.095155][ T6786] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 852.233127][ C1] syz_tun: tun_net_xmit 118 [ 852.448395][ T6807] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 852.460379][ T6807] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 852.582265][ T6806] "syz.1.15925" (6806) uses obsolete ecb(arc4) skcipher [ 852.803201][ T5883] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 852.944497][ T6831] netlink: 'syz.1.15935': attribute type 16 has an invalid length. [ 852.973521][ T5883] usb 3-1: Using ep0 maxpacket: 8 [ 852.985553][ T5883] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 853.006555][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.019358][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 853.029694][ T5883] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 853.063222][ T5883] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 853.076382][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.091331][ T5883] usb 3-1: config 0 descriptor?? [ 853.128293][ T6839] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15938'. [ 853.139726][ T6837] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15938'. [ 853.231827][ T6844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15941'. [ 853.244942][ T6844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15941'. [ 853.263107][ C1] syz_tun: tun_net_xmit 118 [ 853.519447][ T5883] redragon 0003:0C45:760B.0058: unknown main item tag 0x6 [ 853.542083][ T5883] redragon 0003:0C45:760B.0058: item fetching failed at offset 7/133 [ 853.557758][ T5883] redragon 0003:0C45:760B.0058: probe with driver redragon failed with error -22 [ 853.751229][ T5881] usb 3-1: USB disconnect, device number 102 [ 854.303136][ C1] syz_tun: tun_net_xmit 118 [ 855.343351][ C1] syz_tun: tun_net_xmit 118 [ 855.352205][ T6921] tipc: Resetting bearer [ 855.372864][ T6921] tipc: Resetting bearer [ 855.491505][ T1103] tipc: Resetting bearer [ 855.542477][ T6924] sit0: left promiscuous mode [ 855.683913][ T6924] macsec0: left promiscuous mode [ 855.689114][ T6924] macsec0: left allmulticast mode [ 855.697861][ T6924] veth1_macvtap: left allmulticast mode [ 855.708015][ T6924] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 855.721701][ T6924] ip6gre1: left allmulticast mode [ 855.729125][ T6924] bond2: left allmulticast mode [ 855.736893][ T6924] gretap2: left promiscuous mode [ 855.744838][ T6924] gtp0: left promiscuous mode [ 855.754053][ T6924] bond5: left promiscuous mode [ 855.759421][ T6924] bond5: left allmulticast mode [ 855.766147][ T6924] ip6tnl1: left promiscuous mode [ 856.303274][ T5881] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 856.383133][ C1] syz_tun: tun_net_xmit 118 [ 856.463333][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 856.470486][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.493266][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8422, setting to 1024 [ 856.523039][ T5881] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 856.544217][ T5881] usb 2-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 856.563033][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.574380][ T5881] usb 2-1: config 0 descriptor?? [ 857.012754][ T5881] elecom 0003:056E:00FD.0059: report_id 0 is invalid [ 857.029575][ T5881] elecom 0003:056E:00FD.0059: item 0 1 1 8 parsing failed [ 857.042562][ T5881] elecom 0003:056E:00FD.0059: probe with driver elecom failed with error -22 [ 857.270663][ T5881] usb 2-1: USB disconnect, device number 83 [ 857.433171][ C1] syz_tun: tun_net_xmit 118 [ 857.942467][ T7011] netlink: 91 bytes leftover after parsing attributes in process `syz.2.16020'. [ 858.012184][ T7011] netlink: 91 bytes leftover after parsing attributes in process `syz.2.16020'. [ 858.473147][ C1] syz_tun: tun_net_xmit 118 [ 859.241418][ T7058] netlink: 'syz.2.16043': attribute type 3 has an invalid length. [ 860.052335][ T7101] binder: BINDER_SET_CONTEXT_MGR already set [ 860.065567][ T7101] binder: 7100:7101 ioctl 40046207 0 returned -16 [ 860.721007][ T7127] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 861.453127][ T5881] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 861.553982][ T7158] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 861.553982][ T7158] program syz.0.16090 not setting count and/or reply_len properly [ 861.603153][ T5881] usb 3-1: Using ep0 maxpacket: 16 [ 861.617805][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.643759][ T7160] netlink: 'syz.3.16092': attribute type 322 has an invalid length. [ 861.644989][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.682139][ T5881] usb 3-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 861.706213][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.729085][ T5881] usb 3-1: config 0 descriptor?? [ 862.116530][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16101'. [ 862.143119][ T7178] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16101'. [ 862.160903][ T7178] netlink: 'syz.4.16101': attribute type 18 has an invalid length. [ 862.193680][ T5881] apple 0003:05AC:027C.005A: hidraw0: USB HID v0.00 Device [HID 05ac:027c] on usb-dummy_hcd.2-1/input0 [ 862.195185][ T47] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 862.365707][ T7187] binder: 7186:7187 ioctl c018620b 80000000 returned -14 [ 862.397998][ T47] usb 4-1: config 4 has an invalid interface number: 231 but max is 0 [ 862.405923][ T5881] usb 3-1: USB disconnect, device number 103 [ 862.418668][ T47] usb 4-1: config 4 has no interface number 0 [ 862.436247][ T47] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 862.492758][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.513680][ T47] usb 4-1: Product: syz [ 862.518455][ T47] usb 4-1: Manufacturer: syz [ 862.532815][ T47] usb 4-1: SerialNumber: syz [ 862.575368][ T47] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 862.602338][ T7195] sctp: [Deprecated]: syz.1.16107 (pid 7195) Use of int in maxseg socket option. [ 862.602338][ T7195] Use struct sctp_assoc_value instead [ 862.956216][ T47] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 862.985392][ T47] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 863.186371][ T5883] usb 4-1: USB disconnect, device number 97 [ 863.439178][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16127'. [ 863.473422][ T9] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 863.633146][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 863.646764][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.694941][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 863.705797][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.744358][ T9] usb 2-1: config 0 descriptor?? [ 864.059290][ T7257] loop2: detected capacity change from 0 to 7 [ 864.099169][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 864.108407][ C1] buffer_io_error: 6 callbacks suppressed [ 864.108422][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 864.133260][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 864.142470][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 864.152611][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 864.161839][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 864.170361][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 864.179631][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 864.192763][ T9] apple 0003:05AC:024B.005B: item fetching failed at offset 2/69 [ 864.201013][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 864.210255][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 864.223896][ T9] apple 0003:05AC:024B.005B: parse failed [ 864.232191][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 864.241479][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 864.251814][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 864.257954][ T9] apple 0003:05AC:024B.005B: probe with driver apple failed with error -22 [ 864.261010][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 864.261138][ T7257] ldm_validate_partition_table(): Disk read failed. [ 864.326828][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 864.336129][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 864.353079][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 864.362407][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 864.373963][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 864.383211][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 864.391811][ T7257] Dev loop2: unable to read RDB block 0 [ 864.399629][ T7257] loop2: unable to read partition table [ 864.430855][ T5881] usb 2-1: USB disconnect, device number 84 [ 864.469654][ T7257] loop2: partition table beyond EOD, truncated [ 864.483606][ T7257] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 864.746987][ T30] audit: type=1326 audit(1747866384.226:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7270 comm="syz.2.16143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 864.803377][ T30] audit: type=1326 audit(1747866384.226:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7270 comm="syz.2.16143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 864.877929][ T30] audit: type=1326 audit(1747866384.226:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7270 comm="syz.2.16143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=42 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 864.936601][ T30] audit: type=1326 audit(1747866384.226:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7270 comm="syz.2.16143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 864.970392][ T30] audit: type=1326 audit(1747866384.226:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7270 comm="syz.2.16143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 865.077771][ T30] audit: type=1326 audit(1747866384.256:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7270 comm="syz.2.16143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=316 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 865.115499][ T30] audit: type=1326 audit(1747866384.256:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7270 comm="syz.2.16143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 866.124717][ T7322] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.16167'. [ 866.142108][ T7320] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.16167'. [ 866.269811][ T30] audit: type=1326 audit(1747866385.746:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7296 comm="syz.4.16156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7fc00000 [ 866.291874][ C1] vkms_vblank_simulate: vblank timer overrun [ 867.821316][ T7396] binder: 7395:7396 ioctl 400c620e 80000140 returned -22 [ 867.966462][ T9] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 868.123978][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 868.135270][ T9] usb 4-1: config 4 has an invalid interface number: 128 but max is 0 [ 868.157353][ T9] usb 4-1: config 4 has no interface number 0 [ 868.166894][ T9] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.195059][ T9] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.206163][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 868.216350][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.237723][ T9] hub 4-1:4.128: USB hub found [ 868.424046][ T5881] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 868.454367][ T9] hub 4-1:4.128: config failed, hub doesn't have any ports! (err -19) [ 868.583774][ T5881] usb 2-1: Using ep0 maxpacket: 32 [ 868.590811][ T5881] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 868.601332][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.632748][ T5881] usb 2-1: config 0 descriptor?? [ 868.773994][ T9] usb 4-1: USB disconnect, device number 98 [ 869.051906][ T5881] uclogic 0003:28BD:0071.005C: interface is invalid, ignoring [ 869.293811][ T47] usb 2-1: USB disconnect, device number 85 [ 869.493603][ T5881] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 869.645343][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 869.657243][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 869.667815][ T5881] usb 4-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 869.677565][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.689372][ T5881] usb 4-1: config 0 descriptor?? [ 869.889023][ T7441] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16225'. [ 870.068751][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.076017][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.154597][ T5881] asus 0003:0B05:18C6.005D: hidraw0: USB HID v0.00 Device [HID 0b05:18c6] on usb-dummy_hcd.3-1/input0 [ 870.182591][ T5881] asus 0003:0B05:18C6.005D: Asus input not registered [ 870.206114][ T5881] asus 0003:0B05:18C6.005D: probe with driver asus failed with error -12 [ 870.414002][ T5881] usb 4-1: USB disconnect, device number 99 [ 871.076144][ T7488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16247'. [ 871.101497][ T7488] tipc: Enabling of bearer rejected, failed to enable media [ 872.840163][ T7555] netlink: 'syz.2.16279': attribute type 2 has an invalid length. [ 873.073565][ T5881] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 873.190498][ T7565] ALSA: mixer_oss: invalid OSS volume 'u' [ 873.233196][ T5881] usb 2-1: Using ep0 maxpacket: 32 [ 873.249239][ T5881] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 873.277330][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.293959][ T5881] usb 2-1: Product: syz [ 873.298214][ T5881] usb 2-1: Manufacturer: syz [ 873.302924][ T5881] usb 2-1: SerialNumber: syz [ 873.328549][ T5881] usb 2-1: config 0 descriptor?? [ 873.366810][ T5881] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 873.563474][ T7573] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16288'. [ 873.572592][ T7573] netlink: 35 bytes leftover after parsing attributes in process `syz.2.16288'. [ 873.581131][ T5881] gspca_topro: reg_w err -71 [ 873.624309][ T5881] gspca_topro: Sensor soi763a [ 873.650547][ T5881] usb 2-1: USB disconnect, device number 86 [ 874.194180][ T7588] netlink: 72 bytes leftover after parsing attributes in process `syz.2.16295'. [ 874.489848][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16300'. [ 874.509423][ T7597] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16300'. [ 875.213735][ T7620] netlink: 'syz.2.16310': attribute type 46 has an invalid length. [ 875.329720][ T30] audit: type=1326 audit(1747866394.806:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.0.16312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 875.365813][ T30] audit: type=1326 audit(1747866394.806:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.0.16312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 875.398291][ T30] audit: type=1326 audit(1747866394.826:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.0.16312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 875.474401][ T30] audit: type=1326 audit(1747866394.826:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.0.16312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 875.496423][ C1] vkms_vblank_simulate: vblank timer overrun [ 875.584894][ T30] audit: type=1326 audit(1747866394.826:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.0.16312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 875.664470][ T30] audit: type=1326 audit(1747866394.826:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.0.16312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=238 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 875.716548][ T30] audit: type=1326 audit(1747866394.826:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.0.16312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 875.910043][ T7646] binder: 7645:7646 ioctl 4018620d 0 returned -22 [ 876.219157][ T7660] netlink: zone id is out of range [ 876.233895][ T7660] netlink: zone id is out of range [ 876.245026][ T7660] netlink: zone id is out of range [ 876.273941][ T7660] netlink: zone id is out of range [ 876.289640][ T7660] netlink: zone id is out of range [ 876.303896][ T7660] netlink: zone id is out of range [ 876.314873][ T7660] netlink: zone id is out of range [ 876.334080][ T7660] netlink: zone id is out of range [ 876.339774][ T7660] netlink: zone id is out of range [ 876.365514][ T7660] netlink: zone id is out of range [ 877.038066][ T7692] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 877.044739][ T7692] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 877.080604][ T7692] vhci_hcd vhci_hcd.0: Device attached [ 877.183818][ T977] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 877.333450][ T5883] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 877.359975][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 877.396618][ T7709] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16351'. [ 877.400496][ T977] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 877.426745][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 877.433347][ T7709] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16351'. [ 877.439134][ T977] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 877.457118][ T977] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 877.467307][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.481194][ T977] usb 2-1: config 0 descriptor?? [ 877.705837][ T977] hdpvr 2-1:0.0: firmware version 0xf4 dated êÐœ~¯ÏLµj¶uU$«[-Må¿/h&ÉçûXgÁÞ†<|’ [ 877.736938][ T977] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 878.174241][ T977] hdpvr 2-1:0.0: Could not setup controls [ 878.198516][ T977] hdpvr 2-1:0.0: registering videodev failed [ 878.268633][ T977] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -71 [ 878.299138][ T977] usb 2-1: USB disconnect, device number 87 [ 878.381724][ T7733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16362'. [ 878.400240][ T7733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16362'. [ 878.453232][ T7733] netlink: 'syz.3.16362': attribute type 14 has an invalid length. [ 878.461239][ T7733] netlink: 'syz.3.16362': attribute type 13 has an invalid length. [ 878.576902][ T7741] usb usb8: usbfs: process 7741 (syz.3.16366) did not claim interface 12 before use [ 878.667244][ T7745] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16368'. [ 879.988000][ T7800] support for cryptoloop has been removed. Use dm-crypt instead. [ 880.099165][ T7693] vhci_hcd: connection reset by peer [ 880.111810][ T53] vhci_hcd: stop threads [ 880.119574][ T53] vhci_hcd: release socket [ 880.128195][ T53] vhci_hcd: disconnect device [ 880.211572][ T30] audit: type=1326 audit(1747866399.686:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.2.16397" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7fc00000 [ 880.273051][ T30] audit: type=1326 audit(1747866399.686:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.2.16397" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f71539 code=0x7fc00000 [ 880.295071][ C1] vkms_vblank_simulate: vblank timer overrun [ 880.352910][ T30] audit: type=1326 audit(1747866399.686:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.2.16397" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7fc00000 [ 880.375358][ C1] vkms_vblank_simulate: vblank timer overrun [ 880.395518][ T30] audit: type=1326 audit(1747866399.686:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.2.16397" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7fc00000 [ 880.424893][ T30] audit: type=1326 audit(1747866399.686:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.2.16397" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7fc00000 [ 880.478655][ T30] audit: type=1326 audit(1747866399.686:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.2.16397" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7fc00000 [ 880.511102][ T30] audit: type=1326 audit(1747866399.686:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.2.16397" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7fc00000 [ 880.756250][ T977] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 880.893620][ T24] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 880.915545][ T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 880.927735][ T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 880.939306][ T977] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 880.949898][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.973622][ T977] usb 3-1: config 0 descriptor?? [ 881.072835][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 881.098762][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 881.116850][ T24] usb 2-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 881.133035][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.155064][ T24] usb 2-1: config 0 descriptor?? [ 881.162389][ T7828] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 881.408434][ T977] cypress 0003:04B4:DE61.005E: unknown main item tag 0x0 [ 881.422176][ T977] cypress 0003:04B4:DE61.005E: unknown main item tag 0x0 [ 881.444929][ T977] cypress 0003:04B4:DE61.005E: unknown main item tag 0x0 [ 881.452140][ T977] cypress 0003:04B4:DE61.005E: unknown main item tag 0x0 [ 881.467014][ T977] cypress 0003:04B4:DE61.005E: unknown main item tag 0x0 [ 881.476622][ T977] cypress 0003:04B4:DE61.005E: unknown main item tag 0x0 [ 881.490213][ T977] cypress 0003:04B4:DE61.005E: unknown main item tag 0x0 [ 881.508834][ T977] cypress 0003:04B4:DE61.005E: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.2-1/input0 [ 881.645056][ T24] glorious 0003:22D4:1503.005F: hidraw1: USB HID v0.00 Device [Glorious Model I] on usb-dummy_hcd.1-1/input0 [ 881.691336][ T47] usb 3-1: USB disconnect, device number 104 [ 881.859425][ T24] usb 2-1: USB disconnect, device number 88 [ 882.459652][ T5883] vhci_hcd: vhci_device speed not set [ 884.093104][ T5883] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 884.273077][ T5883] usb 4-1: Using ep0 maxpacket: 8 [ 884.280410][ T5883] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 884.293036][ T5883] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 884.330604][ T5883] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 884.350276][ T5883] usb 4-1: config 250 has no interface number 0 [ 884.370276][ T5883] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 884.402115][ T5883] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 884.432486][ T5883] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 884.448105][ T5883] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 884.492213][ T5883] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 884.524777][ T5883] usb 4-1: config 250 interface 228 has no altsetting 0 [ 884.534263][ T5883] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 884.557468][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 884.581310][ T5883] usb 4-1: Product: syz [ 884.606301][ T5883] usb 4-1: SerialNumber: syz [ 884.654926][ T5883] hub 4-1:250.228: bad descriptor, ignoring hub [ 884.661286][ T5883] hub 4-1:250.228: probe with driver hub failed with error -5 [ 884.893418][ T5883] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 100 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 885.223570][ T47] usb 4-1: USB disconnect, device number 100 [ 885.239462][ T47] usblp0: removed [ 885.645649][ T8001] hsr0: entered promiscuous mode [ 886.000442][ T8008] netlink: 56 bytes leftover after parsing attributes in process `syz.3.16491'. [ 886.000589][ T8008] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16491'. [ 886.230176][ T8015] net_ratelimit: 11 callbacks suppressed [ 886.230199][ T8015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 886.231975][ T5881] IPVS: starting estimator thread 0... [ 886.313675][ T8018] IPVS: using max 26 ests per chain, 62400 per kthread [ 887.076056][ T47] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 887.251110][ T47] usb 2-1: Using ep0 maxpacket: 8 [ 887.275292][ T8059] 8021q: adding VLAN 0 to HW filter on device bond9 [ 887.294015][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.323076][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.333230][ T47] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 887.342347][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.439833][ T47] usb 2-1: config 0 descriptor?? [ 887.642463][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16524'. [ 887.652523][ T8075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16524'. [ 887.852321][ T8083] sg_write: process 6713 (syz.4.16528) changed security contexts after opening file descriptor, this is not allowed. [ 887.889897][ T47] aureal 0003:0755:2626.0060: unknown main item tag 0x0 [ 887.923827][ T47] aureal 0003:0755:2626.0060: unknown main item tag 0x0 [ 887.930856][ T47] aureal 0003:0755:2626.0060: unknown main item tag 0x0 [ 887.944601][ T47] aureal 0003:0755:2626.0060: unknown main item tag 0x0 [ 887.951739][ T47] aureal 0003:0755:2626.0060: unknown main item tag 0x0 [ 887.966232][ T47] aureal 0003:0755:2626.0060: unknown main item tag 0x0 [ 888.002011][ T47] aureal 0003:0755:2626.0060: unknown main item tag 0x0 [ 888.018288][ T47] aureal 0003:0755:2626.0060: unknown main item tag 0x0 [ 888.038659][ T47] aureal 0003:0755:2626.0060: unknown main item tag 0x0 [ 888.046924][ T47] aureal 0003:0755:2626.0060: unknown main item tag 0x0 [ 888.070969][ T47] aureal 0003:0755:2626.0060: unknown main item tag 0x0 [ 888.100820][ T47] aureal 0003:0755:2626.0060: hidraw0: USB HID v0.00 Device [HID 0755:2626] on usb-dummy_hcd.1-1/input0 [ 888.127866][ T47] usb 2-1: USB disconnect, device number 89 [ 888.280474][ T8091] fido_id[8091]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 888.574138][ T8102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16536'. [ 889.227305][ T8128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16548'. [ 889.275526][ T8128] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16548'. [ 889.653079][ T47] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 889.850369][ T47] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 889.873952][ T47] usb 4-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 889.894374][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.915414][ T47] usb 4-1: config 0 descriptor?? [ 890.538749][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16572'. [ 890.570310][ T8179] openvswitch: netlink: nsh attribute has 65520 unknown bytes. [ 890.582259][ T47] usb 4-1: USB disconnect, device number 101 [ 890.602556][ T8179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 890.622578][ T8184] random: crng reseeded on system resumption [ 891.399114][ T30] audit: type=1326 audit(1747866410.876:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8215 comm="syz.3.16587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 891.437357][ T30] audit: type=1326 audit(1747866410.876:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8215 comm="syz.3.16587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 891.459402][ C1] vkms_vblank_simulate: vblank timer overrun [ 891.469835][ T30] audit: type=1326 audit(1747866410.916:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8215 comm="syz.3.16587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 891.491876][ C1] vkms_vblank_simulate: vblank timer overrun [ 891.542262][ T30] audit: type=1326 audit(1747866410.916:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8215 comm="syz.3.16587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 891.602731][ T30] audit: type=1326 audit(1747866410.916:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8215 comm="syz.3.16587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 891.624772][ C1] vkms_vblank_simulate: vblank timer overrun [ 891.657692][ T30] audit: type=1326 audit(1747866410.916:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8215 comm="syz.3.16587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=94 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 891.703198][ T30] audit: type=1326 audit(1747866410.916:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8215 comm="syz.3.16587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 891.725326][ C1] vkms_vblank_simulate: vblank timer overrun [ 892.263156][ T47] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 892.441562][ T47] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 892.471691][ T8256] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 892.477446][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 892.478256][ T8256] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 892.508648][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 892.516729][ T8256] vhci_hcd vhci_hcd.0: Device attached [ 892.564941][ T47] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 892.575354][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.599785][ T47] usb 3-1: Product: syz [ 892.610256][ T47] usb 3-1: Manufacturer: syz [ 892.618002][ T47] usb 3-1: SerialNumber: syz [ 892.637914][ T47] usb 3-1: config 0 descriptor?? [ 892.648881][ T8236] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 892.693396][ T977] vhci_hcd: vhci_device speed not set [ 892.713086][ T5883] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 892.763856][ T5881] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 892.771728][ T977] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 892.873435][ T47] powermate: unknown product id 0240 [ 892.878813][ T47] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 892.886543][ T5883] usb 4-1: Using ep0 maxpacket: 16 [ 892.906742][ T5883] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 892.921768][ T47] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input71 [ 892.933364][ T5883] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 892.943764][ T5881] usb 2-1: Using ep0 maxpacket: 8 [ 892.957038][ T5883] usb 4-1: config 0 interface 0 has no altsetting 0 [ 892.959548][ T5881] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 892.968118][ T5883] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 893.003148][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.008146][ T5881] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 893.041570][ T5881] usb 2-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 893.057477][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.063884][ T5883] usb 4-1: config 0 descriptor?? [ 893.067687][ T5881] usb 2-1: Product: syz [ 893.088712][ T5881] usb 2-1: Manufacturer: syz [ 893.095132][ T5881] usb 2-1: SerialNumber: syz [ 893.121440][ T5881] usb 2-1: config 0 descriptor?? [ 893.297194][ C1] powermate: config urb returned -71 [ 893.297622][ T5881] usb 3-1: USB disconnect, device number 105 [ 893.302525][ C1] powermate: usb_submit_urb(config) failed [ 893.308969][ C1] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 893.323600][ C1] vkms_vblank_simulate: vblank timer overrun [ 893.360067][ T8280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16617'. [ 893.379199][ T8280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 893.425058][ T8257] usbip_core: unknown command [ 893.429810][ T8257] vhci_hcd: unknown pdu 0 [ 893.439743][ T8257] usbip_core: unknown command [ 893.451144][ T13] vhci_hcd: stop threads [ 893.460476][ T24] usb 2-1: USB disconnect, device number 90 [ 893.460607][ T13] vhci_hcd: release socket [ 893.485284][ T13] vhci_hcd: disconnect device [ 893.503775][ T977] vhci_hcd: vhci_device speed not set [ 893.557874][ T5883] mcp2200 0003:04D8:00DF.0062: item fetching failed at offset 5/7 [ 893.571355][ T5883] mcp2200 0003:04D8:00DF.0062: can't parse reports [ 893.578315][ T5883] mcp2200 0003:04D8:00DF.0062: probe with driver mcp2200 failed with error -22 [ 893.711733][ T8290] IPVS: Unknown mcast interface: dvmrp0 [ 893.790254][ T9] usb 4-1: USB disconnect, device number 102 [ 896.838868][ T8408] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 897.233196][ T24] usb 4-1: new low-speed USB device number 103 using dummy_hcd [ 897.243753][ T8426] syz.2.16676 (8426): drop_caches: 2 [ 897.406182][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 897.423020][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 897.443447][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.00 [ 897.464059][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.516084][ T24] usb 4-1: config 0 descriptor?? [ 897.948744][ T24] logitech-hidpp-device 0003:046D:C090.0063: collection stack underflow [ 897.970513][ T24] logitech-hidpp-device 0003:046D:C090.0063: item 0 1 0 12 parsing failed [ 897.980923][ T24] logitech-hidpp-device 0003:046D:C090.0063: hidpp_probe:parse failed [ 897.990267][ T24] logitech-hidpp-device 0003:046D:C090.0063: probe with driver logitech-hidpp-device failed with error -22 [ 898.168339][ T24] usb 4-1: USB disconnect, device number 103 [ 899.083214][ T24] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 899.263461][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 899.289286][ T24] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 899.309626][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.319594][ T24] usb 2-1: Product: syz [ 899.319961][ T8501] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 899.319961][ T8501] program syz.2.16710 not setting count and/or reply_len properly [ 899.324337][ T24] usb 2-1: Manufacturer: syz [ 899.324358][ T24] usb 2-1: SerialNumber: syz [ 899.327584][ T24] usb 2-1: config 0 descriptor?? [ 899.344344][ T9] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 899.358992][ T24] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 899.523799][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 899.534536][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 899.549957][ T9] usb 4-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 899.567269][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.591404][ T9] usb 4-1: config 0 descriptor?? [ 899.648812][ T8507] vlan0: entered promiscuous mode [ 899.662010][ T8507] bridge0: entered promiscuous mode [ 899.781258][ T24] usb 2-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 900.006428][ T24] usb 2-1: USB disconnect, device number 91 [ 900.016317][ T9] uclogic 0003:2179:0077.0064: interface is invalid, ignoring [ 900.030635][ T24] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 900.050654][ T24] visor 2-1:0.0: device disconnected [ 900.215448][ T47] usb 4-1: USB disconnect, device number 104 [ 900.448961][ T8513] syz.4.16716 (8513): drop_caches: 2 [ 901.073694][ T47] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 901.099496][ T8546] syz.3.16731 (8546): drop_caches: 2 [ 901.194595][ T30] audit: type=1326 audit(1747866420.676:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8548 comm="syz.2.16732" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x0 [ 901.228946][ T8551] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 901.244957][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.263180][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 901.283203][ T47] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 901.292426][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.311553][ T47] usb 2-1: config 0 descriptor?? [ 901.610296][ T8565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16739'. [ 901.756631][ T47] kone 0003:1E7D:2CED.0065: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.1-1/input0 [ 901.968991][ T47] usb 2-1: USB disconnect, device number 92 [ 902.830601][ T8608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16759'. [ 902.873353][ T8608] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 902.913113][ T8608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 903.253673][ T977] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 903.427319][ T977] usb 2-1: Using ep0 maxpacket: 16 [ 903.445743][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.464133][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 903.475837][ T977] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 903.511997][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.560541][ T977] usb 2-1: config 0 descriptor?? [ 904.019143][ T977] elo 0003:04E7:0009.0066: invalid report_count -1576081973 [ 904.048078][ T977] elo 0003:04E7:0009.0066: item 0 4 1 9 parsing failed [ 904.066773][ T977] elo 0003:04E7:0009.0066: parse failed [ 904.085531][ T977] elo 0003:04E7:0009.0066: probe with driver elo failed with error -22 [ 904.164526][ T8652] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16780'. [ 904.212937][ T47] usb 2-1: USB disconnect, device number 93 [ 904.411000][ T8663] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16785'. [ 904.433100][ T24] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 904.443849][ T8663] gretap0: entered promiscuous mode [ 904.451018][ T8663] gretap0: left promiscuous mode [ 904.616570][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 904.635321][ T24] usb 3-1: config 0 has no interfaces? [ 904.640912][ T24] usb 3-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 904.655627][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.681986][ T24] usb 3-1: config 0 descriptor?? [ 904.825286][ T8678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16792'. [ 904.846128][ T8678] netlink: 104 bytes leftover after parsing attributes in process `syz.1.16792'. [ 904.856795][ T8678] netlink: 104 bytes leftover after parsing attributes in process `syz.1.16792'. [ 904.932734][ T24] usb 3-1: USB disconnect, device number 106 [ 905.030235][ T8686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16796'. [ 905.049031][ T8686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16796'. [ 905.096618][ T8690] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16798'. [ 906.741674][ T8763] vivid-004: disconnect [ 906.854704][ T24] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 907.019080][ T24] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 907.033063][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.041105][ T24] usb 4-1: Product: syz [ 907.052998][ T24] usb 4-1: Manufacturer: syz [ 907.062616][ T24] usb 4-1: SerialNumber: syz [ 907.081083][ T24] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 907.108125][ T47] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 907.520219][ T8758] vivid-004: reconnect [ 907.713214][ T24] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 907.727607][ T9] usb 4-1: USB disconnect, device number 105 [ 907.847326][ T5883] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 907.895292][ T24] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 907.903820][ T24] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 907.912710][ T24] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 907.923119][ T24] usb 2-1: config 220 has no interface number 2 [ 907.929916][ T24] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 907.943297][ T24] usb 2-1: config 220 interface 0 has no altsetting 0 [ 907.950101][ T24] usb 2-1: config 220 interface 76 has no altsetting 0 [ 907.957253][ T24] usb 2-1: config 220 interface 1 has no altsetting 0 [ 907.969367][ T24] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 907.978624][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.987375][ T24] usb 2-1: Product: syz [ 907.991589][ T24] usb 2-1: Manufacturer: syz [ 907.996481][ T24] usb 2-1: SerialNumber: syz [ 908.003036][ T5883] usb 3-1: Using ep0 maxpacket: 16 [ 908.011371][ T5883] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.022686][ T5883] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 908.036123][ T5883] usb 3-1: config 0 interface 0 has no altsetting 0 [ 908.042811][ T5883] usb 3-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 908.051940][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.069685][ T5883] usb 3-1: config 0 descriptor?? [ 908.143108][ T47] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 908.150334][ T47] ath9k_htc: Failed to initialize the device [ 908.157272][ T9] usb 4-1: ath9k_htc: USB layer deinitialized [ 908.237661][ T24] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 908.244380][ T24] usb 2-1: No valid video chain found. [ 908.250071][ T24] usb 2-1: selecting invalid altsetting 0 [ 908.274258][ T24] usb 2-1: selecting invalid altsetting 0 [ 908.280278][ T24] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 908.300981][ T24] usb 2-1: USB disconnect, device number 94 [ 908.509013][ T5883] microsoft 0003:045E:00F9.0067: unknown main item tag 0x2 [ 908.522217][ T5883] microsoft 0003:045E:00F9.0067: hidraw0: USB HID v0.00 Device [HID 045e:00f9] on usb-dummy_hcd.2-1/input0 [ 908.541588][ T5883] microsoft 0003:045E:00F9.0067: no inputs found [ 908.553482][ T5883] microsoft 0003:045E:00F9.0067: could not initialize ff, continuing anyway [ 908.716082][ T8808] netlink: 'syz.3.16855': attribute type 3 has an invalid length. [ 908.725743][ T9] usb 3-1: USB disconnect, device number 107 [ 909.133481][ T977] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 909.286337][ T977] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 909.313626][ T977] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 909.333559][ T977] usb 4-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 909.355514][ T977] usb 4-1: config 220 has no interface number 2 [ 909.368503][ T977] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 909.399356][ T977] usb 4-1: config 220 interface 0 has no altsetting 0 [ 909.414913][ T977] usb 4-1: config 220 interface 76 has no altsetting 0 [ 909.437175][ T977] usb 4-1: config 220 interface 1 has no altsetting 0 [ 909.456551][ T977] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 909.474675][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.491853][ T977] usb 4-1: Product: syz [ 909.503453][ T977] usb 4-1: Manufacturer: syz [ 909.512681][ T977] usb 4-1: SerialNumber: syz [ 909.776768][ T977] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 909.788936][ T977] usb 4-1: No valid video chain found. [ 909.797645][ T977] usb 4-1: selecting invalid altsetting 0 [ 909.822476][ T977] usb 4-1: selecting invalid altsetting 0 [ 909.842401][ T977] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 909.878489][ T977] usb 4-1: USB disconnect, device number 106 [ 910.104613][ T8842] tipc: Enabling of bearer rejected, already enabled [ 910.248481][ T8847] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16874'. [ 910.271805][ T8847] gretap0: entered promiscuous mode [ 910.280146][ T8847] gretap0: left promiscuous mode [ 910.764931][ T30] audit: type=1326 audit(1747866430.246:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8867 comm="syz.2.16884" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x0 [ 911.040864][ T8883] syz.4.16891 (8883) used obsolete PPPIOCDETACH ioctl [ 911.593499][ T9] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 911.757681][ T8902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16900'. [ 911.769478][ T9] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 911.782046][ T8902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16900'. [ 911.792219][ T9] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 911.804541][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 911.812793][ T9] usb 4-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 911.823307][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.835109][ T9] usb 4-1: config 0 descriptor?? [ 911.914515][ T977] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 912.001504][ T30] audit: type=1326 audit(1747866431.476:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8888 comm="syz.4.16894" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7fc00000 [ 912.023576][ C1] vkms_vblank_simulate: vblank timer overrun [ 912.110084][ T977] usb 3-1: string descriptor 0 read error: -71 [ 912.120193][ T977] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 912.133524][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.152057][ T977] usb 3-1: can't set config #1, error -71 [ 912.164408][ T977] usb 3-1: USB disconnect, device number 108 [ 912.479826][ T9] usb 4-1: string descriptor 0 read error: -71 [ 912.480310][ T9] uclogic 0003:5543:3031.0068: failed retrieving string descriptor #200: -71 [ 912.480376][ T9] uclogic 0003:5543:3031.0068: failed retrieving pen parameters: -71 [ 912.480395][ T9] uclogic 0003:5543:3031.0068: failed probing pen v2 parameters: -71 [ 912.480450][ T9] uclogic 0003:5543:3031.0068: failed probing parameters: -71 [ 912.480552][ T9] uclogic 0003:5543:3031.0068: probe with driver uclogic failed with error -71 [ 912.491627][ T9] usb 4-1: USB disconnect, device number 107 [ 913.003078][ T977] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 913.153645][ T977] usb 3-1: Using ep0 maxpacket: 8 [ 913.155953][ T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 913.155990][ T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 913.156043][ T977] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 913.156067][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.158920][ T977] usb 3-1: config 0 descriptor?? [ 913.301594][ T8935] netlink: 76 bytes leftover after parsing attributes in process `syz.3.16916'. [ 913.408611][ T977] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 913.512372][ T8943] [U] #! ./file0 [ 913.518622][ T8942] [U] ¥ [ 913.631924][ T8922] iowarrior 3-1:0.0: Error -90 while submitting URB [ 913.665632][ T24] usb 3-1: USB disconnect, device number 109 [ 913.916466][ T8965] netlink: 32 bytes leftover after parsing attributes in process `syz.1.16928'. [ 913.941717][ T8963] netlink: 56 bytes leftover after parsing attributes in process `syz.4.16929'. [ 915.233260][ T24] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 915.256662][ T30] audit: type=1326 audit(1747866434.726:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="syz.0.16957" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707e539 code=0x0 [ 915.314290][ T9025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16958'. [ 915.443263][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 915.451519][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.468412][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 915.488842][ T24] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 915.514762][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.541180][ T24] usb 2-1: config 0 descriptor?? [ 915.999652][ T24] hid-u2fzero 0003:10C4:8ACF.0069: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.1-1/input0 [ 916.011323][ T977] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 916.073810][ T24] hid-u2fzero 0003:10C4:8ACF.0069: U2F Zero LED initialised [ 916.103891][ T24] hid-u2fzero 0003:10C4:8ACF.0069: U2F Zero RNG initialised [ 916.208771][ T977] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 916.218550][ T977] usb 3-1: config 0 has no interface number 0 [ 916.219430][ T24] usb 2-1: USB disconnect, device number 95 [ 916.241327][ T977] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 916.292829][ T977] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 916.309604][ T977] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 916.333532][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.356262][ T977] usb 3-1: config 0 descriptor?? [ 916.801050][ T977] hid (null): global environment stack underflow [ 916.812713][ T977] uclogic 0003:5543:0522.006A: global environment stack underflow [ 916.853930][ T977] uclogic 0003:5543:0522.006A: item 0 1 1 11 parsing failed [ 916.882251][ T977] uclogic 0003:5543:0522.006A: parse failed [ 916.913697][ T977] uclogic 0003:5543:0522.006A: probe with driver uclogic failed with error -22 [ 917.021180][ T977] usb 3-1: USB disconnect, device number 110 [ 917.207650][ T9060] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16974'. [ 917.393088][ T9066] netlink: 'syz.0.16977': attribute type 3 has an invalid length. [ 917.404041][ T9065] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16976'. [ 918.471446][ T9114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17001'. [ 918.616955][ T9120] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 919.293697][ T5882] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 919.459379][ T5882] usb 3-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 919.477377][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.498981][ T5882] usb 3-1: config 0 descriptor?? [ 919.748565][ T9165] netlink: 72 bytes leftover after parsing attributes in process `syz.1.17024'. [ 919.822180][ T9167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17025'. [ 919.844354][ T9167] netlink: 2 bytes leftover after parsing attributes in process `syz.3.17025'. [ 919.931303][ T5882] chicony 0003:04F2:1236.006B: unknown main item tag 0x4 [ 919.963469][ T5882] chicony 0003:04F2:1236.006B: item fetching failed at offset 4/5 [ 919.972347][ T5882] chicony 0003:04F2:1236.006B: Chicony hid parse failed: -22 [ 919.988748][ T5882] chicony 0003:04F2:1236.006B: probe with driver chicony failed with error -22 [ 920.149180][ T24] usb 3-1: USB disconnect, device number 111 [ 920.424055][ T5882] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 920.588286][ T5882] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 920.599046][ T5882] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 920.610067][ T5882] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 920.620666][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 920.630124][ T5882] usb 2-1: SerialNumber: syz [ 920.868357][ T5882] usb 2-1: 0:2 : does not exist [ 920.889933][ T5882] usb 2-1: unit 255 not found! [ 920.935456][ T5882] usb 2-1: USB disconnect, device number 96 [ 921.019498][T29550] udevd[29550]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 921.041201][ T9214] netlink: 'syz.2.17048': attribute type 2 has an invalid length. [ 921.420958][ T9226] netlink: 52 bytes leftover after parsing attributes in process `syz.2.17054'. [ 921.463540][ T5882] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 921.650498][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 921.671351][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 921.681937][ T5882] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 921.700920][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.721351][ T5882] usb 4-1: config 0 descriptor?? [ 921.758326][ T9239] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 922.170457][ T5882] razer 0003:1532:010E.006C: unknown main item tag 0x2 [ 922.189001][ T5882] razer 0003:1532:010E.006C: ignoring exceeding usage max [ 922.358098][ T5882] razer 0003:1532:010E.006C: failed to enable macro keys: -71 [ 922.379801][ T5882] razer 0003:1532:010E.006C: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.3-1/input0 [ 922.406142][ T5882] usb 4-1: USB disconnect, device number 108 [ 922.446348][ T9252] fido_id[9252]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 922.472285][ T24] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 922.655896][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 922.666197][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 922.678235][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 922.688050][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 922.702283][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 922.711490][ T24] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 922.719922][ T24] usb 3-1: Manufacturer: syz [ 922.728362][ T24] usb 3-1: config 0 descriptor?? [ 922.784024][ T977] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 922.953657][ T977] usb 2-1: Using ep0 maxpacket: 32 [ 922.988570][ T977] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 923.005351][ T977] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 923.030806][ T977] usb 2-1: config 0 interface 0 has no altsetting 0 [ 923.038419][ T977] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 923.049622][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.075193][ T977] usb 2-1: config 0 descriptor?? [ 923.151398][ T24] rc_core: IR keymap rc-hauppauge not found [ 923.173156][ T24] Registered IR keymap rc-empty [ 923.178324][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 923.226903][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 923.258561][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 923.279932][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input75 [ 923.308297][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 923.363189][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 923.383593][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 923.403242][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 923.424540][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 923.460467][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 923.483259][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 923.504123][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 923.524939][ T977] hid (null): unknown global tag 0xc [ 923.530321][ T977] hid (null): global environment stack underflow [ 923.543204][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 923.564144][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 923.588983][ T977] corsair-cpro 0003:1B1C:0C10.006D: unknown global tag 0xc [ 923.602052][ T977] corsair-cpro 0003:1B1C:0C10.006D: item 0 1 1 12 parsing failed [ 923.612293][ T977] corsair-cpro 0003:1B1C:0C10.006D: probe with driver corsair-cpro failed with error -22 [ 923.619132][ T24] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 923.649070][ T24] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 923.666605][ T24] usb 3-1: USB disconnect, device number 112 [ 923.780027][ T977] usb 2-1: USB disconnect, device number 97 [ 923.921151][ T9280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17079'. [ 923.960171][ T9284] netlink: 10 bytes leftover after parsing attributes in process `syz.3.17081'. [ 924.054286][ T24] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 924.093377][ T24] hid-generic 0000:0000:0000.006E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 924.269769][ T9291] fido_id[9291]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 924.969235][ T9328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17100'. [ 925.280680][ T30] audit: type=1326 audit(1747866444.756:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9333 comm="syz.2.17104" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f71539 code=0x0 [ 925.312067][ T9338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17106'. [ 925.328078][ T9338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17106'. [ 925.786588][ T9357] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17114'. [ 925.859393][ T9362] vivid-001: disconnect [ 925.868671][ T9361] vivid-001: reconnect [ 926.245319][ T9379] sctp: [Deprecated]: syz.2.17123 (pid 9379) Use of struct sctp_assoc_value in delayed_ack socket option. [ 926.245319][ T9379] Use struct sctp_sack_info instead [ 927.014062][ T9414] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17141'. [ 927.975219][ T30] audit: type=1326 audit(1747866447.456:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9449 comm="syz.3.17156" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f05539 code=0x0 [ 928.173909][ T977] usb 3-1: new low-speed USB device number 113 using dummy_hcd [ 928.192838][ T9461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 928.351803][ T977] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 928.381004][ T977] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 928.399127][ T977] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x2 has invalid maxpacket 1024, setting to 8 [ 928.411797][ T977] usb 3-1: config 0 interface 0 has no altsetting 0 [ 928.426757][ T977] usb 3-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 928.438257][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.465596][ T977] usb 3-1: config 0 descriptor?? [ 928.474076][ T9447] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 928.734568][ T9480] netlink: 48 bytes leftover after parsing attributes in process `syz.1.17170'. [ 928.756817][ T9480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17170'. [ 928.792011][ T9480] netlink: 48 bytes leftover after parsing attributes in process `syz.1.17170'. [ 928.935091][ T977] lenovo 0003:17EF:60B5.006F: ignoring exceeding usage max [ 928.981884][ T977] lenovo 0003:17EF:60B5.006F: hidraw0: USB HID v0.00 Device [HID 17ef:60b5] on usb-dummy_hcd.2-1/input0 [ 929.143491][ T5883] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 929.214770][ T9498] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17178'. [ 929.221936][ T977] usb 3-1: USB disconnect, device number 113 [ 929.335141][ T5883] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 929.350226][ T5883] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 929.371178][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.402632][ T5883] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 929.870245][ T9523] netlink: 'syz.2.17190': attribute type 1 has an invalid length. [ 930.235575][ T9541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17198'. [ 930.466266][ T5883] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 930.505421][ T5883] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 930.522788][ T5883] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 930.738393][ T9] usb 4-1: USB disconnect, device number 109 [ 930.947268][ T30] audit: type=1326 audit(1747866450.426:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9566 comm="syz.2.17209" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 931.013963][ T30] audit: type=1326 audit(1747866450.426:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9566 comm="syz.2.17209" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 931.082648][ T30] audit: type=1326 audit(1747866450.426:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9566 comm="syz.2.17209" exe="/root/syz-executor" sig=0 arch=40000003 syscall=196 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 931.149857][ T30] audit: type=1326 audit(1747866450.426:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9566 comm="syz.2.17209" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 931.171949][ C1] vkms_vblank_simulate: vblank timer overrun [ 931.353662][ T9585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17219'. [ 931.388662][ T9585] netlink: 36 bytes leftover after parsing attributes in process `syz.2.17219'. [ 931.427479][ T9585] vlan2: entered allmulticast mode [ 931.432773][ T9585] macvtap0: entered allmulticast mode [ 931.439353][ T9585] veth0_macvtap: entered allmulticast mode [ 931.514649][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.521016][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.860648][ T9607] netlink: 'syz.4.17228': attribute type 7 has an invalid length. [ 931.907988][ T9607] netlink: 'syz.4.17228': attribute type 8 has an invalid length. [ 932.082886][ T30] audit: type=1326 audit(1747866451.556:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9614 comm="syz.4.17232" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 932.105431][ C1] vkms_vblank_simulate: vblank timer overrun [ 932.161230][ T30] audit: type=1326 audit(1747866451.556:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9614 comm="syz.4.17232" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 932.243721][ T30] audit: type=1326 audit(1747866451.606:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9614 comm="syz.4.17232" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 932.286479][ T30] audit: type=1326 audit(1747866451.606:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9614 comm="syz.4.17232" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 932.308585][ C1] vkms_vblank_simulate: vblank timer overrun [ 932.321860][ T30] audit: type=1326 audit(1747866451.606:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9614 comm="syz.4.17232" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 932.366114][ T9625] random: crng reseeded on system resumption [ 932.436510][ T30] audit: type=1326 audit(1747866451.606:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9614 comm="syz.4.17232" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 932.458541][ C1] vkms_vblank_simulate: vblank timer overrun [ 933.148319][ T9658] : entered promiscuous mode [ 933.162838][ T9662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17255'. [ 933.590739][ T9680] netlink: 666 bytes leftover after parsing attributes in process `syz.4.17265'. [ 934.773568][ T9722] netlink: 'syz.3.17283': attribute type 7 has an invalid length. [ 934.791778][ T9722] netlink: 'syz.3.17283': attribute type 8 has an invalid length. [ 934.805536][ T9724] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17284'. [ 935.174781][ T5883] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 935.329550][ T9742] netlink: 172 bytes leftover after parsing attributes in process `syz.1.17293'. [ 935.358865][ T5883] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 935.380132][ T5883] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 935.387520][ T9744] netlink: 1 bytes leftover after parsing attributes in process `syz.4.17294'. [ 935.399903][ T9744] netlink: 1 bytes leftover after parsing attributes in process `syz.4.17294'. [ 935.418738][ T5883] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 935.420479][ T9744] netlink: 56 bytes leftover after parsing attributes in process `syz.4.17294'. [ 935.442129][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 935.463187][ T5883] usb 3-1: SerialNumber: syz [ 935.688997][ T5883] usb 3-1: 0:2 : does not exist [ 935.708623][ T5883] usb 3-1: unit 255 not found! [ 935.741780][ T5883] usb 3-1: USB disconnect, device number 114 [ 935.819654][T29550] udevd[29550]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 936.390677][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 936.390697][ T30] audit: type=1326 audit(1747866455.866:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.2.17315" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 936.479678][ T30] audit: type=1326 audit(1747866455.896:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.2.17315" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 936.563671][ T30] audit: type=1326 audit(1747866455.906:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.2.17315" exe="/root/syz-executor" sig=0 arch=40000003 syscall=435 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 936.624070][ T30] audit: type=1326 audit(1747866455.916:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9788 comm="syz.2.17315" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 936.689552][ T30] audit: type=1326 audit(1747866455.916:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.2.17315" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 936.746168][ T30] audit: type=1326 audit(1747866455.916:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.2.17315" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 936.774608][ T30] audit: type=1326 audit(1747866455.926:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.2.17315" exe="/root/syz-executor" sig=0 arch=40000003 syscall=270 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 936.885520][ T30] audit: type=1326 audit(1747866455.926:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.2.17315" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 936.973624][ T30] audit: type=1326 audit(1747866455.926:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.2.17315" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 937.053908][ T30] audit: type=1326 audit(1747866456.046:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9790 comm="syz.4.17318" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 938.563573][ T9] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 938.713797][ T5883] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 938.731901][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 938.750549][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 938.764354][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 938.779746][ T9] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 938.791293][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.821866][ T9] usb 3-1: config 0 descriptor?? [ 938.913562][ T5883] usb 4-1: Using ep0 maxpacket: 8 [ 938.935991][ T5883] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 938.959364][ T5883] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 939.003047][ T5883] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 939.033048][ T5883] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 939.088387][ T5883] usb 4-1: config 0 interface 0 has no altsetting 0 [ 939.095161][ T5883] usb 4-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 939.123112][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.152277][ T5883] usb 4-1: config 0 descriptor?? [ 939.462267][ T9] usb 3-1: string descriptor 0 read error: -71 [ 939.513656][ T9] usb 3-1: Max retries (5) exceeded reading string descriptor 200 [ 939.538546][ T9] letsketch 0003:6161:4D15.0070: probe with driver letsketch failed with error -32 [ 939.581485][ T9] usb 3-1: USB disconnect, device number 115 [ 939.619537][ T5883] asus 0003:0B05:1822.0071: item fetching failed at offset 6/7 [ 939.657001][ T5883] asus 0003:0B05:1822.0071: Asus hid parse failed: -22 [ 939.677701][ T5883] asus 0003:0B05:1822.0071: probe with driver asus failed with error -22 [ 939.846627][ T9922] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 939.867359][ T5883] usb 4-1: USB disconnect, device number 110 [ 940.136114][ T9934] netlink: 72 bytes leftover after parsing attributes in process `syz.4.17387'. [ 941.256243][ T977] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 941.435709][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 941.473562][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 941.496858][ T9999] netlink: 'syz.1.17417': attribute type 1 has an invalid length. [ 941.521296][ T977] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 941.536338][ T9999] netlink: 'syz.1.17417': attribute type 2 has an invalid length. [ 941.546815][ T9999] netlink: 1172 bytes leftover after parsing attributes in process `syz.1.17417'. [ 941.557993][ T977] usb 4-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 941.573617][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.595086][ T977] usb 4-1: config 0 descriptor?? [ 941.619406][ T9979] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 941.926929][T10011] trusted_key: encrypted_key: key trusted:syz not found [ 941.997177][T10013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17425'. [ 942.020281][T10013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17425'. [ 942.086976][ T977] aureal 0003:0755:2626.0072: unknown main item tag 0x6 [ 942.099602][ T977] aureal 0003:0755:2626.0072: report_id 29495 is invalid [ 942.110934][ T977] aureal 0003:0755:2626.0072: item 0 2 1 8 parsing failed [ 942.137227][ T977] aureal 0003:0755:2626.0072: probe with driver aureal failed with error -22 [ 942.314612][ T5883] usb 4-1: USB disconnect, device number 111 [ 942.686490][T10041] netlink: 72 bytes leftover after parsing attributes in process `syz.1.17438'. [ 942.707740][T10043] random: crng reseeded on system resumption [ 944.099335][T10106] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17469'. [ 944.911759][T10146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17488'. [ 944.911905][T10146] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17488'. [ 945.604107][ T977] usb 2-1: new low-speed USB device number 98 using dummy_hcd [ 945.693496][ T24] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 945.765578][ T977] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 945.780817][ T977] usb 2-1: config 0 has no interface number 0 [ 945.797558][ T977] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 945.815424][ T977] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 945.815485][T10186] usb usb8: usbfs: process 10186 (syz.3.17508) did not claim interface 0 before use [ 945.840010][ T977] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 945.850234][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.873379][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 945.885225][ T977] usb 2-1: config 0 descriptor?? [ 945.894167][T10167] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 945.895726][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 945.934802][ T977] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 945.945213][ T24] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 945.945246][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.968313][ T24] usb 3-1: config 0 descriptor?? [ 946.185053][ T977] usb 2-1: USB disconnect, device number 98 [ 946.422691][ T24] hkems 0003:2006:0118.0073: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.2-1/input0 [ 946.451796][ T24] hkems 0003:2006:0118.0073: no inputs found [ 946.472241][ T24] hkems 0003:2006:0118.0073: force feedback init failed [ 946.616293][ T24] usb 3-1: USB disconnect, device number 116 [ 946.647355][T10213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 946.832122][T10217] loop2: detected capacity change from 0 to 7 [ 946.908809][T10217] Dev loop2: unable to read RDB block 7 [ 946.923572][T10217] loop2: unable to read partition table [ 946.942331][T10217] loop2: partition table beyond EOD, truncated [ 946.979372][T10217] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 948.117184][T10250] program syz.2.17539 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 948.203348][T10251] program syz.2.17539 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 949.233820][T10275] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17551'. [ 949.254095][T10275] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17551'. [ 951.605576][T10372] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17594'. [ 951.613199][T10369] netlink: 'syz.3.17595': attribute type 25 has an invalid length. [ 952.353163][ T24] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 952.525530][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 952.527848][T10419] binder: 10417:10419 ioctl c0306201 800001c0 returned -22 [ 952.540560][ T24] usb 2-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 952.573091][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.599727][ T24] usb 2-1: config 0 descriptor?? [ 952.679440][T10421] netlink: 'syz.4.17618': attribute type 5 has an invalid length. [ 953.087436][ T24] input: HID 28bd:0909 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0909.0074/input/input76 [ 953.230064][ T24] uclogic 0003:28BD:0909.0074: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.1-1/input0 [ 953.278849][ T24] usb 2-1: USB disconnect, device number 99 [ 953.367483][T10443] fido_id[10443]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 953.842171][T10465] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17638'. [ 953.885495][T10465] vxcan3: entered promiscuous mode [ 954.013786][ T977] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 954.173597][ T977] usb 4-1: Using ep0 maxpacket: 16 [ 954.181103][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 954.202204][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 954.223738][ T977] usb 4-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 954.241617][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.262105][ T977] usb 4-1: config 0 descriptor?? [ 954.694163][ T977] macally 0003:060B:0001.0075: item fetching failed at offset 2/69 [ 954.718559][ T977] macally 0003:060B:0001.0075: probe with driver macally failed with error -22 [ 954.728329][T10501] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 954.881945][ T24] usb 4-1: USB disconnect, device number 112 [ 955.093715][ T977] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 955.255493][ T977] usb 2-1: unable to get BOS descriptor or descriptor too short [ 955.269429][ T977] usb 2-1: config 6 has an invalid interface number: 200 but max is 0 [ 955.278196][ T977] usb 2-1: config 6 has no interface number 0 [ 955.285206][ T977] usb 2-1: config 6 interface 200 has no altsetting 0 [ 955.295088][ T977] usb 2-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 955.304620][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.312604][ T977] usb 2-1: Product: syz [ 955.317986][ T977] usb 2-1: Manufacturer: syz [ 955.322693][ T977] usb 2-1: SerialNumber: syz [ 955.339790][ T5883] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 955.504037][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 955.523494][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 955.553483][ T5883] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 955.573326][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.595262][ T5883] usb 3-1: config 0 descriptor?? [ 956.025054][ T5883] cp2112 0003:10C4:EA90.0076: unknown main item tag 0x0 [ 956.055152][ T5883] cp2112 0003:10C4:EA90.0076: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 956.222517][ T5883] cp2112 0003:10C4:EA90.0076: error requesting version [ 956.246215][ T5883] cp2112 0003:10C4:EA90.0076: probe with driver cp2112 failed with error -71 [ 956.271466][ T5883] usb 3-1: USB disconnect, device number 117 [ 957.209047][T10552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17677'. [ 957.218833][T10552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17677'. [ 957.593104][ T5883] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 957.755725][ T5883] usb 4-1: Using ep0 maxpacket: 16 [ 957.768447][ T5883] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 957.786170][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.802266][ T5883] usb 4-1: Product: syz [ 957.807054][ T5883] usb 4-1: Manufacturer: syz [ 957.811693][ T5883] usb 4-1: SerialNumber: syz [ 957.836837][ T5883] r8152-cfgselector 4-1: Unknown version 0x0000 [ 957.853388][ T5883] r8152-cfgselector 4-1: config 0 descriptor?? [ 957.925564][ T977] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 957.975737][ T977] dvb-usb: bulk message failed: -71 (3/0) [ 957.994517][ T977] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 958.054219][ T977] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 958.062175][ T977] usb 2-1: media controller created [ 958.113386][ T5883] r8152-cfgselector 4-1: Needed 1 retries to read version [ 958.146500][ T977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 958.148295][ T5883] r8152-cfgselector 4-1: Unknown version 0x0000 [ 958.189932][ T5883] r8152-cfgselector 4-1: bad CDC descriptors [ 958.238919][ T977] dvb-usb: bulk message failed: -71 (6/0) [ 958.286727][ T977] dvb-usb: bulk message failed: -71 (6/0) [ 958.292639][ T977] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 958.327951][ T977] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input77 [ 958.368652][ T977] dvb-usb: schedule remote query interval to 150 msecs. [ 958.368680][ T977] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 958.385775][ T977] usb 2-1: USB disconnect, device number 100 [ 958.403010][ T5883] r8152-cfgselector 4-1: USB disconnect, device number 113 [ 958.534280][ T977] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 959.764115][T10642] netlink: 64 bytes leftover after parsing attributes in process `syz.4.17720'. [ 960.423212][ T5883] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 960.583437][ T5883] usb 3-1: Using ep0 maxpacket: 32 [ 960.591355][ T5883] usb 3-1: config 0 has an invalid interface number: 219 but max is 0 [ 960.613360][ T5883] usb 3-1: config 0 has no interface number 0 [ 960.619686][ T5883] usb 3-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 960.653353][ T5883] usb 3-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 960.687024][ T5883] usb 3-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 960.697892][ T5883] usb 3-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 960.709600][ T5883] usb 3-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 960.731955][ T5883] usb 3-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 960.748210][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.771247][ T5883] usb 3-1: Product: syz [ 960.778275][ T5883] usb 3-1: Manufacturer: syz [ 960.790865][ T5883] usb 3-1: SerialNumber: syz [ 960.801509][ T5883] usb 3-1: config 0 descriptor?? [ 960.818783][T10664] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 960.868809][T10694] ucma_write: process 6427 (syz.0.17745) changed security contexts after opening file descriptor, this is not allowed. [ 961.048919][ T5883] etas_es58x 3-1:0.219: Starting syz syz (Serial Number syz) [ 961.249229][ T5883] etas_es58x 3-1:0.219: could not parse product info: '424242424242' [ 961.433620][ T9] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 961.528629][ T977] usb 3-1: USB disconnect, device number 118 [ 961.530622][ T977] etas_es58x 3-1:0.219: Disconnecting syz syz [ 961.584590][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 961.588902][ T9] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 961.588948][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.588968][ T9] usb 4-1: Product: syz [ 961.588983][ T9] usb 4-1: Manufacturer: syz [ 961.588998][ T9] usb 4-1: SerialNumber: syz [ 961.592044][ T9] usb 4-1: config 0 descriptor?? [ 961.610963][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 962.229671][ T9] gspca_ov534_9: reg_w failed -71 [ 962.523111][ T9] gspca_ov534_9: Unknown sensor 0000 [ 962.523210][ T9] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 962.550837][ T9] usb 4-1: USB disconnect, device number 114 [ 962.713249][ T5883] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 962.874833][ T5883] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 962.910737][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 962.952359][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 962.984789][ T5883] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 963.022509][ T5883] usb 3-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 963.048089][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.085051][ T5883] usb 3-1: config 0 descriptor?? [ 963.732675][ T5883] usb 3-1: string descriptor 0 read error: -71 [ 963.741346][ T5883] uclogic 0003:5543:0045.0077: failed retrieving string descriptor #200: -71 [ 963.772761][T10798] netlink: 'syz.3.17783': attribute type 1 has an invalid length. [ 963.786337][T10798] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 963.790315][ T5883] uclogic 0003:5543:0045.0077: failed retrieving pen parameters: -71 [ 963.833348][ T5883] uclogic 0003:5543:0045.0077: failed probing pen v2 parameters: -71 [ 963.851632][ T5883] uclogic 0003:5543:0045.0077: failed probing parameters: -71 [ 963.870448][ T5883] uclogic 0003:5543:0045.0077: probe with driver uclogic failed with error -71 [ 963.904387][ T5883] usb 3-1: USB disconnect, device number 119 [ 964.031944][T10806] sock: sock_set_timeout: `syz.3.17786' (pid 10806) tries to set negative timeout [ 964.113928][T10812] netlink: 'syz.1.17789': attribute type 3 has an invalid length. [ 964.132108][T10812] netlink: 152 bytes leftover after parsing attributes in process `syz.1.17789'. [ 964.162648][T10812] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 964.290640][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 964.290658][ T30] audit: type=1326 audit(1747866483.766:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10816 comm="syz.3.17791" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f05539 code=0x0 [ 964.318879][ C1] vkms_vblank_simulate: vblank timer overrun [ 965.923244][ T9] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 966.085851][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 966.092737][ T9] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 966.104421][ T9] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 966.121084][ T9] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 966.132863][ T9] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 966.180251][ T9] usb 4-1: config 7 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 966.201654][ T9] usb 4-1: config 7 interface 0 has no altsetting 0 [ 966.209728][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 966.226326][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.747086][ T9] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.0/0003:0458:5010.0078/input/input78 [ 966.863367][T10713] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 966.894469][ T9] kye 0003:0458:5010.0078: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 966.968025][ T9] usb 4-1: USB disconnect, device number 115 [ 967.040190][T10713] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 967.058116][T10924] fido_id[10924]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 967.073245][T10713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.092354][T10713] usb 2-1: config 0 descriptor?? [ 967.117401][T10713] cp210x 2-1:0.0: cp210x converter detected [ 967.539474][T10713] usb 2-1: cp210x converter now attached to ttyUSB0 [ 967.756888][T10713] usb 2-1: USB disconnect, device number 101 [ 967.761714][T10713] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 967.766252][T10713] cp210x 2-1:0.0: device disconnected [ 968.005430][T10959] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 968.235111][T10973] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17864'. [ 968.341408][ T5883] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 968.503162][ T5883] usb 4-1: Using ep0 maxpacket: 8 [ 968.518711][ T5883] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 968.537544][ T5883] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 968.571171][ T5883] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 968.603478][ T5883] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 968.651148][ T5883] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 968.674242][ T5883] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 968.681718][ T5883] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 968.708189][ T5883] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 968.726564][ T5883] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 968.741570][ T5883] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 968.773952][ T5883] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 968.781802][ T5883] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 968.811610][ T5883] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 968.837365][ T5883] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 968.860177][ T5883] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 968.883020][ T5883] usb 4-1: string descriptor 0 read error: -22 [ 968.889583][ T5883] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 968.908728][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.928051][ T5883] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 969.212371][ T5883] usb 4-1: USB disconnect, device number 116 [ 969.498727][T11027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17888'. [ 969.881869][T11042] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17897'. [ 969.934331][T11042] netlink: 35 bytes leftover after parsing attributes in process `syz.0.17897'. [ 970.154056][ T5883] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 970.358318][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 86, changing to 10 [ 970.383248][ T5883] usb 3-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00 [ 970.407021][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.437865][ T5883] usb 3-1: config 0 descriptor?? [ 970.866757][ T5883] hid (null): usage index exceeded [ 970.895068][ T5883] wacom 0003:056A:0333.0079: ignoring exceeding usage max [ 970.927148][ T5883] wacom 0003:056A:0333.0079: ignoring exceeding usage max [ 970.938853][ T5883] wacom 0003:056A:0333.0079: usage index exceeded [ 970.957203][ T5883] wacom 0003:056A:0333.0079: item 0 0 2 2 parsing failed [ 970.967803][ T5883] wacom 0003:056A:0333.0079: parse failed [ 970.976913][ T5883] wacom 0003:056A:0333.0079: probe with driver wacom failed with error -22 [ 971.078502][T11098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17923'. [ 971.147623][ T5883] usb 3-1: USB disconnect, device number 120 [ 971.347656][ T30] audit: type=1326 audit(1747866490.826:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11109 comm="syz.4.17928" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70be539 code=0x0 [ 971.369247][ C1] vkms_vblank_simulate: vblank timer overrun [ 971.803209][ T5883] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 972.003046][ T5883] usb 4-1: Using ep0 maxpacket: 32 [ 972.016007][ T5883] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 972.039851][ T5883] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 972.076786][ T5883] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 972.124926][ T5883] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 972.139977][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 972.155698][ T5883] usb 4-1: Product: syz [ 972.159982][ T5883] usb 4-1: Manufacturer: syz [ 972.176551][ T5883] usb 4-1: SerialNumber: syz [ 972.222156][ T5883] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input80 [ 972.498103][T10713] usb 4-1: USB disconnect, device number 117 [ 972.498140][ C1] appletouch 4-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 972.544287][T11149] netlink: 'syz.1.17947': attribute type 10 has an invalid length. [ 972.561866][T11149] netlink: 2 bytes leftover after parsing attributes in process `syz.1.17947'. [ 972.577328][T10713] appletouch 4-1:1.0: input: appletouch disconnected [ 972.595162][T11155] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.17950'. [ 972.610457][T11149] team0: entered promiscuous mode [ 972.649243][T11149] bond0: entered promiscuous mode [ 972.673395][T11149] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:578 [ 972.702998][T11149] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 11149, name: syz.1.17947 [ 972.733632][T11149] preempt_count: 0, expected: 0 [ 972.738919][T11149] RCU nest depth: 1, expected: 0 [ 972.745023][T11149] 2 locks held by syz.1.17947/11149: [ 972.750350][T11149] #0: ffffffff8f2fa848 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 972.770771][T11149] #1: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: team_change_rx_flags+0x29/0x330 [ 972.781768][T11149] CPU: 1 UID: 0 PID: 11149 Comm: syz.1.17947 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 972.781800][T11149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 972.781819][T11149] Call Trace: [ 972.781832][T11149] [ 972.781842][T11149] dump_stack_lvl+0x189/0x250 [ 972.781881][T11149] ? __pfx_dump_stack_lvl+0x10/0x10 [ 972.781914][T11149] ? llist_add_batch+0x108/0x1e0 [ 972.781940][T11149] ? print_lock_name+0xde/0x100 [ 972.781978][T11149] __might_resched+0x495/0x610 [ 972.782004][T11149] ? __wake_up_klogd+0x1c/0x110 [ 972.782030][T11149] ? __pfx___might_resched+0x10/0x10 [ 972.782056][T11149] ? vprintk_emit+0x63e/0x7a0 [ 972.782087][T11149] __mutex_lock+0x106/0xe80 [ 972.782121][T11149] ? __irq_work_queue_local+0x13a/0x3e0 [ 972.782152][T11149] ? dev_set_promiscuity+0x10e/0x260 [ 972.782183][T11149] ? __pfx___mutex_lock+0x10/0x10 [ 972.782235][T11149] ? __netdev_printk+0x365/0x4d0 [ 972.782258][T11149] dev_set_promiscuity+0x10e/0x260 [ 972.782305][T11149] bond_change_rx_flags+0x219/0x690 [ 972.782340][T11149] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 972.782386][T11149] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 972.782414][T11149] __dev_set_promiscuity+0x3f5/0x590 [ 972.782449][T11149] netif_set_promiscuity+0x50/0xe0 [ 972.782480][T11149] dev_set_promiscuity+0x126/0x260 [ 972.782511][T11149] team_change_rx_flags+0x1b3/0x330 [ 972.782544][T11149] ? team_change_rx_flags+0x29/0x330 [ 972.782589][T11149] ? __pfx_team_change_rx_flags+0x10/0x10 [ 972.782618][T11149] __dev_set_promiscuity+0x3f5/0x590 [ 972.782652][T11149] __dev_change_flags+0x41b/0x6d0 [ 972.782684][T11149] ? __pfx___dev_change_flags+0x10/0x10 [ 972.782706][T11149] ? vprintk_emit+0x63e/0x7a0 [ 972.782727][T11149] ? __pfx_vprintk_emit+0x10/0x10 [ 972.782743][T11149] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 972.782770][T11149] ? lockdep_hardirqs_on+0x9c/0x150 [ 972.782790][T11149] netif_change_flags+0x88/0x1a0 [ 972.782813][T11149] do_setlink+0xcb9/0x40d0 [ 972.782842][T11149] ? __pfx_do_setlink+0x10/0x10 [ 972.782863][T11149] ? __lock_acquire+0xaac/0xd20 [ 972.782888][T11149] ? __mutex_trylock_common+0x153/0x260 [ 972.782912][T11149] ? __pfx___mutex_trylock_common+0x10/0x10 [ 972.782936][T11149] ? rcu_is_watching+0x15/0xb0 [ 972.782954][T11149] ? trace_contention_end+0x39/0x120 [ 972.782975][T11149] ? __mutex_lock+0x330/0xe80 [ 972.783001][T11149] ? __pfx_aa_get_newest_label+0x10/0x10 [ 972.783028][T11149] ? rtnl_newlink+0x8db/0x1c70 [ 972.783048][T11149] ? rcu_is_watching+0x15/0xb0 [ 972.783074][T11149] ? __pfx___mutex_lock+0x10/0x10 [ 972.783109][T11149] ? ns_capable+0x8a/0xf0 [ 972.783128][T11149] ? rtnl_link_get_net_capable+0x16a/0x350 [ 972.783157][T11149] rtnl_newlink+0x160b/0x1c70 [ 972.783178][T11149] ? kasan_save_track+0x3e/0x80 [ 972.783212][T11149] ? __pfx_rtnl_newlink+0x10/0x10 [ 972.783262][T11149] ? kasan_quarantine_put+0xdd/0x220 [ 972.783283][T11149] ? lockdep_hardirqs_on+0x9c/0x150 [ 972.783312][T11149] ? nlmon_xmit+0xb0/0x100 [ 972.783336][T11149] ? kmem_cache_free+0x192/0x3f0 [ 972.783366][T11149] ? __local_bh_enable_ip+0x12d/0x1c0 [ 972.783384][T11149] ? lockdep_hardirqs_on+0x9c/0x150 [ 972.783408][T11149] ? __local_bh_enable_ip+0x12d/0x1c0 [ 972.783426][T11149] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 972.783451][T11149] ? aa_get_newest_label+0xf7/0x5d0 [ 972.783477][T11149] ? __lock_acquire+0xaac/0xd20 [ 972.783523][T11149] ? __pfx_rtnl_newlink+0x10/0x10 [ 972.783539][T11149] rtnetlink_rcv_msg+0x7cf/0xb70 [ 972.783558][T11149] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 972.783574][T11149] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 972.783593][T11149] ? ref_tracker_free+0x63a/0x7d0 [ 972.783608][T11149] ? __copy_skb_header+0xa7/0x550 [ 972.783643][T11149] netlink_rcv_skb+0x21c/0x490 [ 972.783668][T11149] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 972.783693][T11149] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 972.783737][T11149] ? netlink_deliver_tap+0x2e/0x1b0 [ 972.783770][T11149] ? netlink_deliver_tap+0x2e/0x1b0 [ 972.783813][T11149] netlink_unicast+0x758/0x8d0 [ 972.783837][T11149] netlink_sendmsg+0x805/0xb30 [ 972.783863][T11149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 972.783883][T11149] ? __import_iovec+0x5d4/0x7f0 [ 972.783904][T11149] ? aa_sock_msg_perm+0x94/0x160 [ 972.783922][T11149] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 972.783940][T11149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 972.783959][T11149] __sock_sendmsg+0x219/0x270 [ 972.783978][T11149] ____sys_sendmsg+0x505/0x830 [ 972.784004][T11149] ? __pfx_____sys_sendmsg+0x10/0x10 [ 972.784031][T11149] ? __pfx___futex_wait+0x10/0x10 [ 972.784056][T11149] ___sys_sendmsg+0x21f/0x2a0 [ 972.784079][T11149] ? __pfx____sys_sendmsg+0x10/0x10 [ 972.784128][T11149] ? __fget_files+0x2a/0x420 [ 972.784148][T11149] ? __fget_files+0x3a0/0x420 [ 972.784175][T11149] __sys_sendmsg+0x164/0x220 [ 972.784199][T11149] ? __pfx___sys_sendmsg+0x10/0x10 [ 972.784233][T11149] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 972.784255][T11149] ? lockdep_hardirqs_on+0x9c/0x150 [ 972.784276][T11149] __do_fast_syscall_32+0xb4/0x110 [ 972.784297][T11149] ? lockdep_hardirqs_on+0x9c/0x150 [ 972.784319][T11149] do_fast_syscall_32+0x34/0x80 [ 972.784339][T11149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 972.784376][T11149] RIP: 0023:0xf702e539 [ 972.784399][T11149] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 972.784412][T11149] RSP: 002b:00000000f501e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 972.784430][T11149] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 972.784442][T11149] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 972.784451][T11149] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 972.784460][T11149] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 972.784469][T11149] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 972.784491][T11149] [ 973.357390][ C1] vkms_vblank_simulate: vblank timer overrun [ 973.383314][T11149] [ 973.385696][T11149] ============================= [ 973.390562][T11149] [ BUG: Invalid wait context ] [ 973.395427][T11149] 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 Tainted: G W [ 973.404196][T11149] ----------------------------- [ 973.409165][T11149] syz.1.17947/11149 is trying to lock: [ 973.414636][T11149] ffff888032358d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_set_promiscuity+0x10e/0x260 [ 973.425008][T11149] other info that might help us debug this: [ 973.430891][T11149] context-{5:5} [ 973.434346][T11149] 2 locks held by syz.1.17947/11149: [ 973.439628][T11149] #0: ffffffff8f2fa848 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 973.448709][T11149] #1: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: team_change_rx_flags+0x29/0x330 [ 973.458591][T11149] stack backtrace: [ 973.462310][T11149] CPU: 0 UID: 0 PID: 11149 Comm: syz.1.17947 Tainted: G W 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 973.462333][T11149] Tainted: [W]=WARN [ 973.462339][T11149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 973.462349][T11149] Call Trace: [ 973.462356][T11149] [ 973.462363][T11149] dump_stack_lvl+0x189/0x250 [ 973.462390][T11149] ? __pfx_dump_stack_lvl+0x10/0x10 [ 973.462412][T11149] ? __pfx__printk+0x10/0x10 [ 973.462425][T11149] ? llist_add_batch+0x108/0x1e0 [ 973.462441][T11149] ? print_lock_name+0xde/0x100 [ 973.462467][T11149] __lock_acquire+0xbcf/0xd20 [ 973.462490][T11149] ? dev_set_promiscuity+0x10e/0x260 [ 973.462509][T11149] lock_acquire+0x120/0x360 [ 973.462529][T11149] ? dev_set_promiscuity+0x10e/0x260 [ 973.462550][T11149] ? vprintk_emit+0x63e/0x7a0 [ 973.462567][T11149] __mutex_lock+0x182/0xe80 [ 973.462587][T11149] ? dev_set_promiscuity+0x10e/0x260 [ 973.462607][T11149] ? __irq_work_queue_local+0x13a/0x3e0 [ 973.462629][T11149] ? dev_set_promiscuity+0x10e/0x260 [ 973.462649][T11149] ? __pfx___mutex_lock+0x10/0x10 [ 973.462673][T11149] ? __netdev_printk+0x365/0x4d0 [ 973.462690][T11149] dev_set_promiscuity+0x10e/0x260 [ 973.462710][T11149] bond_change_rx_flags+0x219/0x690 [ 973.462736][T11149] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 973.462764][T11149] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 973.462787][T11149] __dev_set_promiscuity+0x3f5/0x590 [ 973.462809][T11149] netif_set_promiscuity+0x50/0xe0 [ 973.462830][T11149] dev_set_promiscuity+0x126/0x260 [ 973.462851][T11149] team_change_rx_flags+0x1b3/0x330 [ 973.462875][T11149] ? team_change_rx_flags+0x29/0x330 [ 973.462898][T11149] ? __pfx_team_change_rx_flags+0x10/0x10 [ 973.462927][T11149] __dev_set_promiscuity+0x3f5/0x590 [ 973.462965][T11149] __dev_change_flags+0x41b/0x6d0 [ 973.462987][T11149] ? __pfx___dev_change_flags+0x10/0x10 [ 973.463007][T11149] ? vprintk_emit+0x63e/0x7a0 [ 973.463022][T11149] ? __pfx_vprintk_emit+0x10/0x10 [ 973.463035][T11149] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 973.463053][T11149] ? lockdep_hardirqs_on+0x9c/0x150 [ 973.463072][T11149] netif_change_flags+0x88/0x1a0 [ 973.463094][T11149] do_setlink+0xcb9/0x40d0 [ 973.463119][T11149] ? __pfx_do_setlink+0x10/0x10 [ 973.463139][T11149] ? __lock_acquire+0xaac/0xd20 [ 973.463162][T11149] ? __mutex_trylock_common+0x153/0x260 [ 973.463179][T11149] ? __pfx___mutex_trylock_common+0x10/0x10 [ 973.463196][T11149] ? rcu_is_watching+0x15/0xb0 [ 973.463210][T11149] ? trace_contention_end+0x39/0x120 [ 973.463228][T11149] ? __mutex_lock+0x330/0xe80 [ 973.463255][T11149] ? __pfx_aa_get_newest_label+0x10/0x10 [ 973.463281][T11149] ? rtnl_newlink+0x8db/0x1c70 [ 973.463306][T11149] ? rcu_is_watching+0x15/0xb0 [ 973.463324][T11149] ? __pfx___mutex_lock+0x10/0x10 [ 973.463346][T11149] ? ns_capable+0x8a/0xf0 [ 973.463360][T11149] ? rtnl_link_get_net_capable+0x16a/0x350 [ 973.463381][T11149] rtnl_newlink+0x160b/0x1c70 [ 973.463397][T11149] ? kasan_save_track+0x3e/0x80 [ 973.463419][T11149] ? __pfx_rtnl_newlink+0x10/0x10 [ 973.463446][T11149] ? kasan_quarantine_put+0xdd/0x220 [ 973.463463][T11149] ? lockdep_hardirqs_on+0x9c/0x150 [ 973.463484][T11149] ? nlmon_xmit+0xb0/0x100 [ 973.463505][T11149] ? kmem_cache_free+0x192/0x3f0 [ 973.463527][T11149] ? __local_bh_enable_ip+0x12d/0x1c0 [ 973.463541][T11149] ? lockdep_hardirqs_on+0x9c/0x150 [ 973.463560][T11149] ? __local_bh_enable_ip+0x12d/0x1c0 [ 973.463574][T11149] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 973.463591][T11149] ? aa_get_newest_label+0xf7/0x5d0 [ 973.463608][T11149] ? __lock_acquire+0xaac/0xd20 [ 973.463637][T11149] ? __pfx_rtnl_newlink+0x10/0x10 [ 973.463654][T11149] rtnetlink_rcv_msg+0x7cf/0xb70 [ 973.463672][T11149] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 973.463690][T11149] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 973.463709][T11149] ? ref_tracker_free+0x63a/0x7d0 [ 973.463725][T11149] ? __copy_skb_header+0xa7/0x550 [ 973.463750][T11149] netlink_rcv_skb+0x21c/0x490 [ 973.463767][T11149] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 973.463785][T11149] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 973.463809][T11149] ? netlink_deliver_tap+0x2e/0x1b0 [ 973.463826][T11149] ? netlink_deliver_tap+0x2e/0x1b0 [ 973.463845][T11149] netlink_unicast+0x758/0x8d0 [ 973.463864][T11149] netlink_sendmsg+0x805/0xb30 [ 973.463886][T11149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 973.463905][T11149] ? __import_iovec+0x5d4/0x7f0 [ 973.463925][T11149] ? aa_sock_msg_perm+0x94/0x160 [ 973.463951][T11149] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 973.463969][T11149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 973.463987][T11149] __sock_sendmsg+0x219/0x270 [ 973.464004][T11149] ____sys_sendmsg+0x505/0x830 [ 973.464027][T11149] ? __pfx_____sys_sendmsg+0x10/0x10 [ 973.464050][T11149] ? __pfx___futex_wait+0x10/0x10 [ 973.464073][T11149] ___sys_sendmsg+0x21f/0x2a0 [ 973.464095][T11149] ? __pfx____sys_sendmsg+0x10/0x10 [ 973.464128][T11149] ? __fget_files+0x2a/0x420 [ 973.464147][T11149] ? __fget_files+0x3a0/0x420 [ 973.464171][T11149] __sys_sendmsg+0x164/0x220 [ 973.464192][T11149] ? __pfx___sys_sendmsg+0x10/0x10 [ 973.464218][T11149] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 973.464239][T11149] ? lockdep_hardirqs_on+0x9c/0x150 [ 973.464258][T11149] __do_fast_syscall_32+0xb4/0x110 [ 973.464279][T11149] ? lockdep_hardirqs_on+0x9c/0x150 [ 973.464299][T11149] do_fast_syscall_32+0x34/0x80 [ 973.464319][T11149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 973.464339][T11149] RIP: 0023:0xf702e539 [ 973.464355][T11149] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 973.464373][T11149] RSP: 002b:00000000f501e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 973.464397][T11149] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 973.464412][T11149] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 973.464426][T11149] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 973.464438][T11149] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 973.464448][T11149] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 973.464463][T11149] [ 974.078358][T11149] dummy0: entered promiscuous mode [ 974.083724][T11149] syz_tun: entered promiscuous mode [ 974.089341][T11149] bridge0: port 1(team0) entered blocking state [ 974.097558][T11149] bridge0: port 1(team0) entered disabled state [ 974.104938][T11149] team0: entered allmulticast mode [ 974.110089][T11149] bond0: entered allmulticast mode [ 974.116748][T11149] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:578 [ 974.126262][T11149] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 11149, name: syz.1.17947 [ 974.135898][T11149] preempt_count: 0, expected: 0 [ 974.140762][T11149] RCU nest depth: 1, expected: 0 [ 974.145874][T11149] INFO: lockdep is turned off. [ 974.150668][T11149] CPU: 1 UID: 0 PID: 11149 Comm: syz.1.17947 Tainted: G W 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 974.150690][T11149] Tainted: [W]=WARN [ 974.150696][T11149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 974.150707][T11149] Call Trace: [ 974.150714][T11149] [ 974.150723][T11149] dump_stack_lvl+0x189/0x250 [ 974.150760][T11149] ? __pfx_dump_stack_lvl+0x10/0x10 [ 974.150789][T11149] ? __pfx__printk+0x10/0x10 [ 974.150802][T11149] ? llist_add_batch+0x108/0x1e0 [ 974.150818][T11149] ? __pfx_llist_add_batch+0x10/0x10 [ 974.150831][T11149] ? preempt_schedule_common+0x83/0xd0 [ 974.150849][T11149] ? preempt_schedule+0xae/0xc0 [ 974.150866][T11149] __might_resched+0x495/0x610 [ 974.150882][T11149] ? __wake_up_klogd+0x1c/0x110 [ 974.150904][T11149] ? __pfx___might_resched+0x10/0x10 [ 974.150919][T11149] ? vprintk_emit+0x63e/0x7a0 [ 974.150937][T11149] __mutex_lock+0x106/0xe80 [ 974.150957][T11149] ? irq_work_queue+0xbc/0x140 [ 974.150978][T11149] ? dev_set_allmulti+0x10e/0x260 [ 974.150999][T11149] ? __pfx___mutex_lock+0x10/0x10 [ 974.151023][T11149] ? __netdev_printk+0x365/0x4d0 [ 974.151038][T11149] dev_set_allmulti+0x10e/0x260 [ 974.151058][T11149] bond_change_rx_flags+0x4cd/0x690 [ 974.151083][T11149] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 974.151107][T11149] ? __netdev_printk+0x365/0x4d0 [ 974.151123][T11149] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 974.151146][T11149] netif_set_allmulti+0x212/0x380 [ 974.151167][T11149] dev_set_allmulti+0x12b/0x260 [ 974.151187][T11149] team_change_rx_flags+0x20f/0x330 [ 974.151211][T11149] ? team_change_rx_flags+0x29/0x330 [ 974.151233][T11149] ? __pfx_team_change_rx_flags+0x10/0x10 [ 974.151256][T11149] netif_set_allmulti+0x212/0x380 [ 974.151277][T11149] dev_set_allmulti+0x12b/0x260 [ 974.151297][T11149] br_add_if+0x313/0xec0 [ 974.151313][T11149] ? __pfx___dev_change_flags+0x10/0x10 [ 974.151335][T11149] do_set_master+0x533/0x6d0 [ 974.151357][T11149] do_setlink+0xd47/0x40d0 [ 974.151381][T11149] ? __pfx_do_setlink+0x10/0x10 [ 974.151400][T11149] ? __lock_acquire+0xaac/0xd20 [ 974.151424][T11149] ? __mutex_trylock_common+0x153/0x260 [ 974.151440][T11149] ? __pfx___mutex_trylock_common+0x10/0x10 [ 974.151458][T11149] ? rcu_is_watching+0x15/0xb0 [ 974.151471][T11149] ? trace_contention_end+0x39/0x120 [ 974.151486][T11149] ? __mutex_lock+0x330/0xe80 [ 974.151506][T11149] ? __pfx_aa_get_newest_label+0x10/0x10 [ 974.151524][T11149] ? rtnl_newlink+0x8db/0x1c70 [ 974.151540][T11149] ? rcu_is_watching+0x15/0xb0 [ 974.151557][T11149] ? __pfx___mutex_lock+0x10/0x10 [ 974.151580][T11149] ? ns_capable+0x8a/0xf0 [ 974.151594][T11149] ? rtnl_link_get_net_capable+0x16a/0x350 [ 974.151614][T11149] rtnl_newlink+0x160b/0x1c70 [ 974.151631][T11149] ? kasan_save_track+0x3e/0x80 [ 974.151653][T11149] ? __pfx_rtnl_newlink+0x10/0x10 [ 974.151680][T11149] ? kasan_quarantine_put+0xdd/0x220 [ 974.151697][T11149] ? lockdep_hardirqs_on+0x9c/0x150 [ 974.151718][T11149] ? nlmon_xmit+0xb0/0x100 [ 974.151739][T11149] ? kmem_cache_free+0x192/0x3f0 [ 974.151760][T11149] ? __local_bh_enable_ip+0x12d/0x1c0 [ 974.151775][T11149] ? lockdep_hardirqs_on+0x9c/0x150 [ 974.151793][T11149] ? __local_bh_enable_ip+0x12d/0x1c0 [ 974.151807][T11149] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 974.151828][T11149] ? aa_get_newest_label+0xf7/0x5d0 [ 974.151854][T11149] ? __lock_acquire+0xaac/0xd20 [ 974.151914][T11149] ? __pfx_rtnl_newlink+0x10/0x10 [ 974.151932][T11149] rtnetlink_rcv_msg+0x7cf/0xb70 [ 974.151950][T11149] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 974.151967][T11149] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 974.151986][T11149] ? ref_tracker_free+0x63a/0x7d0 [ 974.152003][T11149] ? __copy_skb_header+0xa7/0x550 [ 974.152028][T11149] netlink_rcv_skb+0x21c/0x490 [ 974.152047][T11149] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 974.152065][T11149] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 974.152089][T11149] ? netlink_deliver_tap+0x2e/0x1b0 [ 974.152107][T11149] ? netlink_deliver_tap+0x2e/0x1b0 [ 974.152126][T11149] netlink_unicast+0x758/0x8d0 [ 974.152146][T11149] netlink_sendmsg+0x805/0xb30 [ 974.152167][T11149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 974.152186][T11149] ? __import_iovec+0x5d4/0x7f0 [ 974.152207][T11149] ? aa_sock_msg_perm+0x94/0x160 [ 974.152225][T11149] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 974.152243][T11149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 974.152261][T11149] __sock_sendmsg+0x219/0x270 [ 974.152278][T11149] ____sys_sendmsg+0x505/0x830 [ 974.152301][T11149] ? __pfx_____sys_sendmsg+0x10/0x10 [ 974.152324][T11149] ? __pfx___futex_wait+0x10/0x10 [ 974.152348][T11149] ___sys_sendmsg+0x21f/0x2a0 [ 974.152370][T11149] ? __pfx____sys_sendmsg+0x10/0x10 [ 974.152403][T11149] ? __fget_files+0x2a/0x420 [ 974.152424][T11149] ? __fget_files+0x3a0/0x420 [ 974.152448][T11149] __sys_sendmsg+0x164/0x220 [ 974.152469][T11149] ? __pfx___sys_sendmsg+0x10/0x10 [ 974.152495][T11149] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 974.152516][T11149] ? lockdep_hardirqs_on+0x9c/0x150 [ 974.152536][T11149] __do_fast_syscall_32+0xb4/0x110 [ 974.152557][T11149] ? lockdep_hardirqs_on+0x9c/0x150 [ 974.152577][T11149] do_fast_syscall_32+0x34/0x80 [ 974.152598][T11149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 974.152617][T11149] RIP: 0023:0xf702e539 [ 974.152630][T11149] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 974.152645][T11149] RSP: 002b:00000000f501e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 974.152662][T11149] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 974.152673][T11149] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 974.152682][T11149] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 974.152691][T11149] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 974.152700][T11149] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 974.152715][T11149] [ 974.152740][T11149] dummy0: entered allmulticast mode [ 974.740794][T11149] syz_tun: entered allmulticast mode [ 974.749259][T11149] bridge0: port 1(team0) entered blocking state [ 974.755643][T11149] bridge0: port 1(team0) entered forwarding state [ 974.763133][T11158] netlink: 44 bytes leftover after parsing attributes in process `syz.4.17951'.