last executing test programs: 2m43.841710532s ago: executing program 2 (id=3803): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000140)={0x2, @raw_data="5a391ed8930ce8cb0d8501269ed420fa9e6b511fe9cb7fddc4fea1183257990c6a8106da4e722266b87f9fb0246658de1013c623232315b260059aa29633ae438eaec234faaec4fa77f473dd8784cb5c1832d4cc2079cf928c3b1331dbbfd57812d91562333ebe8b56bb164d91bd570d76a326d60abed367d39b291d0456de9ce3c6dff2caffca06b46cdd9eafe62720435552f4cfe1a616bcd55c971153a4a4c46e9cc3d7614e421780a2de7d29fa15ad71aed80216abae0c77106671309774bd0a3a00"}) 2m43.531495414s ago: executing program 2 (id=3811): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) umount2(&(0x7f0000000040)='.\x00', 0x2) 2m43.324975138s ago: executing program 2 (id=3816): r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/pids.max\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f00000025c0)={0x2020}, 0x2020) 2m43.166879689s ago: executing program 2 (id=3821): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x80, 0x80, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 2m42.958261118s ago: executing program 2 (id=3826): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000000c0)=0x4, 0x4) 2m42.750924644s ago: executing program 2 (id=3831): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x103381) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0xffffffff) 2m27.668890625s ago: executing program 32 (id=3831): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x103381) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0xffffffff) 2.50453752s ago: executing program 4 (id=6876): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x4, 0x448, 0xffffffff, 0x1a8, 0xc8, 0x1a8, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x180, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x90000, 0x9, 0x3, 0x146dd345, 0x3, 0x43a, 0x6}}, @common=@srh1={{0x90}, {0x0, 0x7f, 0xb, 0x9, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, @dev={0xfe, 0x80, '\x00', 0x32}, [0xff0000ff, 0xff000000, 0xffffff00, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], [0xff000000, 0xffffff00, 0xff, 0xffffffff], 0x801, 0x21}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0x4695338a4f0a80fe, 0xffffffff, 0xff, 0xff000000], 'ip6erspan0\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0xfc, 0x3}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@mh={{0x28}, {"25c9", 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4, 0x5, 0x4}, {0x4, 0x3, 0x6}, 0x5, 0xb8cc}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) 2.342283842s ago: executing program 4 (id=6879): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b49, &(0x7f0000000740)=""/4121) 2.17927168s ago: executing program 4 (id=6882): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xc, 0x42, 0x40, 0x46}, 0x50) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109022200010000000009040000000e010000082403010002100708240201000400"], 0x0) 2.0722376s ago: executing program 3 (id=6884): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0x0, 0x9, {0xffffffffffffffff}, {0xffffffffffffffff}, 0xbd, 0x6}) 1.936608397s ago: executing program 3 (id=6886): symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') 1.834937041s ago: executing program 3 (id=6888): r0 = semget$private(0x0, 0xa, 0xc0) semop(r0, &(0x7f0000000000)=[{0x2, 0x5, 0x1800}, {0x3, 0x6, 0x1000}, {0x2, 0x7fff, 0x1800}], 0x3) 1.70557906s ago: executing program 3 (id=6889): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b40000001800090000000000000000001c140000fe0000010000000005001a0008"], 0xb4}}, 0x4040814) 1.546497995s ago: executing program 3 (id=6892): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYRES16=r0], 0x0) 1.154065339s ago: executing program 1 (id=6897): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x2c, 0x0, &(0x7f0000000240)=0xf) 1.152826375s ago: executing program 0 (id=6898): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x401, 0x4, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40f20}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x8}]}}}]}, 0x44}}, 0x0) 1.00010675s ago: executing program 1 (id=6900): unshare(0x4020400) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x67, 0x0) 957.506262ms ago: executing program 0 (id=6902): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x128, 0x5802, 0x294, 0x0, 0x294, 0x288, 0x378, 0x378, 0x288, 0x378, 0x3, 0x0, {[{{@uncond, 0xf202, 0x108, 0x128, 0x52020000, {0x0, 0x600}, [@common=@frag={{0x30}}, @common=@srh={{0x30}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @private0, [], [], 'team_slave_1\x00', 'erspan0\x00', {}, {}, 0x87}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@mh={{0x28}, {"123a"}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 783.496937ms ago: executing program 5 (id=6903): r0 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) move_mount(r0, 0x0, r0, 0x0, 0x276) 782.166884ms ago: executing program 1 (id=6904): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000dc0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x700000000000000, &(0x7f0000000500)="e4"}) 735.118813ms ago: executing program 0 (id=6905): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="d800000019008111e0020f060d8107040a600200640f040b067c55a12a00090008000699e3ffffff14000500fe8081780c000567b8b7b940020000090a0016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a290457f0189b316277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b83ece0b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) 673.677992ms ago: executing program 4 (id=6906): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000700)=0x9, 0x4) 579.80774ms ago: executing program 0 (id=6907): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$fuseblk(&(0x7f0000000080), &(0x7f0000000140)='./bus\x00', &(0x7f0000000240), 0x4, 0x0) 573.621172ms ago: executing program 5 (id=6908): r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x3, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0xc001) 497.221804ms ago: executing program 1 (id=6909): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x800) 427.335191ms ago: executing program 4 (id=6910): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x74, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x74}}, 0x0) 370.248388ms ago: executing program 0 (id=6911): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2000, 0x8000, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x12, 0x14, 0x20, 0x4000, 0x0, 0x2f, 0x0, @remote, @multicast1}}}}) 369.310695ms ago: executing program 5 (id=6912): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001f80"], 0x38}}, 0x0) 308.400996ms ago: executing program 1 (id=6913): r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x1}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="ef", 0x1}, {0x0}], 0x2}, 0x4040810) 202.980179ms ago: executing program 5 (id=6914): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x80000000, @mcast1, 0xd}, 0x1c) 178.752599ms ago: executing program 4 (id=6915): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10002}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0xfff7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) 142.073308ms ago: executing program 0 (id=6916): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x4, 0x0, 0x4, 0xa, 0x0, 0x0, 0x25dfdbfd, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xe5}, @sadb_address={0x3, 0x5, 0xff, 0x0, 0x0, @in={0x2, 0x4e21, @remote}}]}, 0x50}, 0x1, 0x7}, 0x0) 130.080982ms ago: executing program 5 (id=6917): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$sock(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x4f, 0x10001}}], 0x18}, 0x20004804) 87.394893ms ago: executing program 1 (id=6918): r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000002c0)={{0x2, 0x4e20, @loopback}, {0x60a, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x40, {0x2, 0x4e24, @multicast2}, 'bridge_slave_1\x00'}) 9.040435ms ago: executing program 3 (id=6919): r0 = add_key$keyring(&(0x7f0000000200), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000004c0)=@secondary) 0s ago: executing program 5 (id=6920): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f00000000c0)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}) kernel console output (not intermixed with test programs): [ 390.829643][ T30] audit: type=1326 audit(1768232122.296:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14236 comm="syz.4.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7fc2ba38f749 code=0x7ffc0000 [ 390.913977][ T5918] usb 2-1: USB disconnect, device number 118 [ 390.949437][ T30] audit: type=1326 audit(1768232122.296:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14236 comm="syz.4.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ba38f749 code=0x7ffc0000 [ 390.968833][T14209] udevd[14209]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 391.016391][ T30] audit: type=1326 audit(1768232122.296:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14236 comm="syz.4.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ba38f749 code=0x7ffc0000 [ 391.280099][T14258] IPv6: sit1: Disabled Multicast RS [ 391.308966][T14258] sit1: entered allmulticast mode [ 391.984178][ T5918] IPVS: starting estimator thread 0... [ 392.087061][T14287] IPVS: using max 36 ests per chain, 86400 per kthread [ 392.696994][T14319] netlink: 'syz.1.4011': attribute type 1 has an invalid length. [ 393.192070][T14341] netlink: 'syz.1.4022': attribute type 4 has an invalid length. [ 393.455602][T14352] program syz.4.4027 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 393.727350][ T5918] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 393.921951][ T5918] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 393.946862][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.965392][ T5918] usb 2-1: Product: syz [ 393.977419][ T5918] usb 2-1: Manufacturer: syz [ 394.005241][ T5918] usb 2-1: SerialNumber: syz [ 394.040189][ T5918] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 394.087298][ T6254] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 394.662390][ T5918] usb 2-1: USB disconnect, device number 119 [ 395.186866][ T6254] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 395.233296][ T6254] ath9k_htc: Failed to initialize the device [ 395.268038][ T5918] usb 2-1: ath9k_htc: USB layer deinitialized [ 395.317334][T14411] netlink: 'syz.0.4057': attribute type 3 has an invalid length. [ 395.325285][T14411] netlink: 'syz.0.4057': attribute type 3 has an invalid length. [ 395.368101][T14411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4057'. [ 396.002242][T14435] Cannot find map_set index 135 as target [ 396.697141][T14461] netlink: 'syz.0.4081': attribute type 2 has an invalid length. [ 396.744426][T14465] sctp: [Deprecated]: syz.1.4082 (pid 14465) Use of int in maxseg socket option. [ 396.744426][T14465] Use struct sctp_assoc_value instead [ 396.892333][T14471] program syz.4.4086 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 397.621007][T14503] xt_hashlimit: size too large, truncated to 1048576 [ 397.657988][T14503] xt_hashlimit: max too large, truncated to 1048576 [ 398.231116][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 398.231132][ T30] audit: type=1326 audit(1768232129.806:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.4.4110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ba38f749 code=0x7ffc0000 [ 398.339008][ T30] audit: type=1326 audit(1768232129.856:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.4.4110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7fc2ba38f749 code=0x7ffc0000 [ 398.433732][ T30] audit: type=1326 audit(1768232129.856:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.4.4110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ba38f749 code=0x7ffc0000 [ 398.877316][T14548] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4122'. [ 398.886435][T14548] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4122'. [ 399.242033][T14559] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4129'. [ 399.632266][ T5150] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 399.646619][ T5150] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 399.655510][ T5150] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 399.700808][ T5150] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 399.709780][ T5150] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 400.233993][T14590] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 400.622277][T14576] chnl_net:caif_netlink_parms(): no params data found [ 400.936026][T14620] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 401.074947][T14625] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4155'. [ 401.129766][T14576] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.154756][T14576] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.175916][T14576] bridge_slave_0: entered allmulticast mode [ 401.206954][T14576] bridge_slave_0: entered promiscuous mode [ 401.255131][T14576] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.275365][T14576] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.294554][T14576] bridge_slave_1: entered allmulticast mode [ 401.321087][T14576] bridge_slave_1: entered promiscuous mode [ 401.547058][T14576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.594871][T14576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.737512][ T5150] Bluetooth: hci5: command tx timeout [ 401.974680][T14576] team0: Port device team_slave_0 added [ 402.014445][T14576] team0: Port device team_slave_1 added [ 402.137058][ T6254] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 402.220631][T14576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.256916][T14576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.323971][T14576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.346956][ T6254] usb 4-1: Using ep0 maxpacket: 32 [ 402.357348][ T6254] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 402.371407][T14672] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 402.378290][ T6254] usb 4-1: config 0 has no interface number 0 [ 402.386485][T14576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.423453][ T6254] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 402.437960][T14576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.503526][ T6254] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 402.539492][ T6254] usb 4-1: config 0 interface 85 has no altsetting 0 [ 402.563000][T14576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.576616][ T6254] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 402.592582][ T6254] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.616912][ T6254] usb 4-1: Product: syz [ 402.630772][ T6254] usb 4-1: Manufacturer: syz [ 402.646102][ T6254] usb 4-1: SerialNumber: syz [ 402.678136][ T6254] usb 4-1: config 0 descriptor?? [ 402.947982][T14576] hsr_slave_0: entered promiscuous mode [ 402.972102][T14576] hsr_slave_1: entered promiscuous mode [ 402.994138][T14576] debugfs: 'hsr0' already exists in 'hsr' [ 403.022572][T14576] Cannot create hsr debugfs directory [ 403.137830][ T6254] appletouch 4-1:0.85: Failed to request geyser raw mode [ 403.185321][ T6254] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 403.261551][ T6254] usb 4-1: USB disconnect, device number 111 [ 403.502966][T14706] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4194'. [ 403.566825][ T30] audit: type=1326 audit(1768232135.136:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14707 comm="syz.1.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927af8f749 code=0x7ffc0000 [ 403.662308][ T30] audit: type=1326 audit(1768232135.176:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14707 comm="syz.1.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f927af8f749 code=0x7ffc0000 [ 403.745799][ T30] audit: type=1326 audit(1768232135.176:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14707 comm="syz.1.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927af8f749 code=0x7ffc0000 [ 403.818521][ T5150] Bluetooth: hci5: command tx timeout [ 403.824766][T14715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.878137][ T30] audit: type=1326 audit(1768232135.176:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14707 comm="syz.1.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927af8f749 code=0x7ffc0000 [ 404.129021][T14576] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 404.136193][T14720] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4201'. [ 404.166918][T14720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4201'. [ 404.211154][T14576] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 404.259228][T14576] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 404.339957][T14576] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 404.427270][ T5918] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 404.610139][ T5918] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 404.644424][ T5918] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 404.673710][ T5918] usb 4-1: config 0 interface 0 has no altsetting 0 [ 404.687144][T14576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.701879][ T5918] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 404.735045][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 404.747096][ T5918] usb 4-1: Product: syz [ 404.751515][ T5918] usb 4-1: Manufacturer: syz [ 404.768511][T14576] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.786979][ T5918] usb 4-1: SerialNumber: syz [ 404.797561][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.800049][ T5918] usb 4-1: config 0 descriptor?? [ 404.804768][ T4187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.827792][ T5918] hub 4-1:0.0: bad descriptor, ignoring hub [ 404.833802][ T5918] hub 4-1:0.0: probe with driver hub failed with error -5 [ 404.869300][ T5918] usb 4-1: selecting invalid altsetting 0 [ 404.903593][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.911109][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.213936][T14576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.284000][ T5830] usb 4-1: USB disconnect, device number 112 [ 405.373754][T14576] veth0_vlan: entered promiscuous mode [ 405.415366][T14576] veth1_vlan: entered promiscuous mode [ 405.508858][T14576] veth0_macvtap: entered promiscuous mode [ 405.542988][T14576] veth1_macvtap: entered promiscuous mode [ 405.560507][T14766] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 405.596189][T14766] block device autoloading is deprecated and will be removed. [ 405.609819][T14576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.650453][T14576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.686283][ T1106] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.718531][ T1106] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.752738][ T1106] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.819411][ T1106] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.870218][T14774] netlink: 'syz.4.4224': attribute type 19 has an invalid length. [ 405.897092][ T5150] Bluetooth: hci5: command tx timeout [ 405.906937][T14774] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4224'. [ 406.074265][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.126923][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.260707][ T3473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.308386][ T3473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.817588][T14803] usb usb8: usbfs: process 14803 (syz.1.4237) did not claim interface 0 before use [ 407.977244][ T5150] Bluetooth: hci5: command tx timeout [ 408.008999][T14852] xt_CT: You must specify a L4 protocol and not use inversions on it [ 408.986384][T14900] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 409.646303][ T5918] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 409.841294][ T5918] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 409.865860][ T5918] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 409.890806][ T5918] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 409.916021][ T5918] usb 2-1: config 1 has no interface number 1 [ 409.943280][ T5918] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 410.001303][ T5918] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 410.038314][ T5918] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 410.085117][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.107349][ T5918] usb 2-1: Product: syz [ 410.111576][ T5918] usb 2-1: Manufacturer: syz [ 410.156850][ T5918] usb 2-1: SerialNumber: syz [ 410.408193][ T5918] usb 2-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 410.429166][ T5918] usb 2-1: MIDIStreaming interface descriptor not found [ 410.510316][ T5918] usb 2-1: USB disconnect, device number 120 [ 410.567386][ T5830] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 410.604910][T14959] udevd[14959]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 410.792430][ T5830] usb 4-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 410.818567][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.849651][ T5830] usb 4-1: config 0 descriptor?? [ 411.094780][ T5830] snd-usb-hiface 4-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 411.157272][T14978] openvswitch: netlink: Multiple metadata blocks provided [ 411.322263][ T5830] usb 4-1: USB disconnect, device number 113 [ 411.577108][ T912] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 411.578111][T14996] delete_channel: no stack [ 411.746927][ T912] usb 6-1: Using ep0 maxpacket: 8 [ 411.760815][ T912] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 411.790985][ T912] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 411.817649][ T912] usb 6-1: Product: syz [ 411.832621][ T912] usb 6-1: Manufacturer: syz [ 411.853142][ T912] usb 6-1: SerialNumber: syz [ 411.878100][ T912] usb 6-1: config 0 descriptor?? [ 411.901568][ T912] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 412.106213][ T912] gspca_zc3xx: reg_w_i err -71 [ 412.126535][ T912] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 412.158786][ T912] usb 6-1: USB disconnect, device number 2 [ 412.379563][ T5830] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 412.519098][T15028] netlink: 'syz.4.4346': attribute type 10 has an invalid length. [ 412.540878][T15028] dummy0: left promiscuous mode [ 412.578171][ T5830] usb 4-1: Using ep0 maxpacket: 8 [ 412.601601][ T5830] usb 4-1: unable to get BOS descriptor or descriptor too short [ 412.619443][T15028] team0: Port device dummy0 added [ 412.629844][ T5830] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 412.649634][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 412.686787][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 412.698053][T15034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4349'. [ 412.719204][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 412.768878][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 412.795743][ T5830] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 412.829724][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 412.880582][ T5830] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1B, changing to 0xB [ 412.934309][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 32767, setting to 64 [ 412.975981][ T5830] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 413.004172][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.030836][ T5830] usb 4-1: Product: syz [ 413.055529][ T5830] usb 4-1: Manufacturer: syz [ 413.066956][ T5830] usb 4-1: SerialNumber: syz [ 413.095620][ T5830] usb 4-1: config 0 descriptor?? [ 413.145589][ T5830] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 413.167343][T15050] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 413.174302][T15050] [U] J"—e:ÀÆ" [ 413.203381][T15054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.220943][T15052] IPv6: sit1: Disabled Multicast RS [ 413.243349][T15052] sit1: entered allmulticast mode [ 413.433468][T14575] udevd[14575]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 413.450321][T15059] bond0: Error: Cannot enslave bond to itself. [ 413.467013][ T5830] usb 4-1: USB disconnect, device number 114 [ 413.884962][T15078] netlink: 200 bytes leftover after parsing attributes in process `syz.5.4370'. [ 413.907087][T15079] x_tables: duplicate underflow at hook 3 [ 414.492188][T15103] bond3 (unregistering): Released all slaves [ 416.269307][T15183] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 416.549262][ T5918] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 416.716810][ T5918] usb 5-1: Using ep0 maxpacket: 16 [ 416.734659][ T5918] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 416.753422][ T5918] usb 5-1: config 0 has no interface number 0 [ 416.785303][ T5918] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 416.813889][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.847567][ T5918] usb 5-1: Product: syz [ 416.851881][ T5918] usb 5-1: Manufacturer: syz [ 416.873101][ T5918] usb 5-1: SerialNumber: syz [ 416.897408][ T5918] usb 5-1: config 0 descriptor?? [ 416.915150][ T5918] hub 5-1:0.132: bad descriptor, ignoring hub [ 416.929578][ T5918] hub 5-1:0.132: probe with driver hub failed with error -5 [ 416.983322][ T5918] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input46 [ 417.055019][T15216] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 417.090463][T15216] bond3 (unregistering): Released all slaves [ 418.079874][T15261] openvswitch: netlink: Multiple metadata blocks provided [ 418.320125][ T5150] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 418.557376][T15287] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4473'. [ 419.139166][T15309] bridge_slave_0: entered promiscuous mode [ 419.198536][T15309] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 419.811053][T15335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4497'. [ 419.859378][T15335] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.918246][T15341] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4500'. [ 420.325114][T15356] xt_CT: You must specify a L4 protocol and not use inversions on it [ 420.484837][T15363] xt_TPROXY: Can be used only with -p tcp or -p udp [ 420.493002][ T5830] usb 5-1: USB disconnect, device number 105 [ 420.811424][T15380] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 421.047279][T15389] fuse: Bad value for 'fd' [ 421.579108][ T5830] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 421.786833][ T5830] usb 2-1: Using ep0 maxpacket: 16 [ 421.801966][ T5830] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 421.842389][ T5830] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 421.889633][ T5830] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 421.930442][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.956165][ T5830] usb 2-1: Product: syz [ 421.977093][ T5830] usb 2-1: Manufacturer: syz [ 421.981885][ T5830] usb 2-1: SerialNumber: syz [ 422.348621][T15440] xt_TCPMSS: Only works on TCP SYN packets [ 422.358119][T15441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4549'. [ 422.421069][ T5830] usb 2-1: cannot find UAC_HEADER [ 422.509990][ T5830] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 422.557930][ T5830] usb 2-1: USB disconnect, device number 121 [ 422.605208][T14962] udevd[14962]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 422.792157][T15455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4557'. [ 422.941429][T15459] binfmt_misc: register: failed to install interpreter file ./file0/file0 [ 423.290612][T15473] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 423.667228][ T5918] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 423.821273][ T5918] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 423.821307][ T5918] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 423.821330][ T5918] usb 6-1: config 0 interface 0 has no altsetting 0 [ 423.830890][ T5918] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 423.830924][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.830943][ T5918] usb 6-1: Product: syz [ 423.830958][ T5918] usb 6-1: Manufacturer: syz [ 423.830972][ T5918] usb 6-1: SerialNumber: syz [ 423.849865][ T5918] usb 6-1: config 0 descriptor?? [ 424.186523][T15500] netlink: 'syz.0.4576': attribute type 1 has an invalid length. [ 424.299493][ T5918] usb 6-1: USB disconnect, device number 3 [ 425.086908][T15533] netlink: 'syz.5.4588': attribute type 4 has an invalid length. [ 425.094804][T15533] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4588'. [ 425.198650][T15533] .`: renamed from bond0 (while UP) [ 425.567913][T15553] bond3: entered allmulticast mode [ 425.625329][T15553] 8021q: adding VLAN 0 to HW filter on device bond3 [ 426.004417][ T30] audit: type=1326 audit(1768232157.576:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15584 comm="syz.1.4609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927af8f749 code=0x7ffc0000 [ 426.103134][ T30] audit: type=1326 audit(1768232157.616:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15584 comm="syz.1.4609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927af8f749 code=0x7ffc0000 [ 426.232394][ T30] audit: type=1326 audit(1768232157.666:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15584 comm="syz.1.4609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f927af8f749 code=0x7ffc0000 [ 426.331536][ T30] audit: type=1326 audit(1768232157.666:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15584 comm="syz.1.4609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927af8f749 code=0x7ffc0000 [ 426.439128][ T30] audit: type=1326 audit(1768232157.666:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15584 comm="syz.1.4609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927af8f749 code=0x7ffc0000 [ 426.467309][T15603] program syz.3.4618 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 426.477481][T15605] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 427.354271][T15650] netlink: 200 bytes leftover after parsing attributes in process `syz.3.4636'. [ 427.600878][T15663] SET target dimension over the limit! [ 427.776667][T15672] program syz.4.4646 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 428.181258][T15692] kAFS: unable to lookup cell '(/c¾ûL' [ 428.556831][ T5837] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 428.736807][ T5837] usb 2-1: Using ep0 maxpacket: 32 [ 428.758684][ T5837] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 428.814681][ T5837] usb 2-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 428.863481][ T5837] usb 2-1: config 1 interface 0 has no altsetting 0 [ 428.901511][ T5837] usb 2-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 428.945110][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.967028][ T5837] usb 2-1: Product: syz [ 428.984650][ T5837] usb 2-1: Manufacturer: syz [ 429.004972][ T5837] usb 2-1: SerialNumber: syz [ 429.215793][T15735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4669'. [ 429.261452][ T5837] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input47 [ 429.283983][T15735] openvswitch: netlink: IP tunnel dst address not specified [ 429.372229][ T5837] usb 2-1: USB disconnect, device number 122 [ 429.581113][ T5837] appletouch 2-1:1.0: input: appletouch disconnected [ 430.781529][T15800] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 430.990458][T15809] bond5: option lp_interval: invalid value (18446744073709551610) [ 430.998967][T15809] bond5: option lp_interval: allowed values 1 - 2147483647 [ 431.009584][T15809] bond5 (unregistering): Released all slaves [ 431.019688][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 431.221122][ T24] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 431.256981][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.307322][ T24] usb 6-1: Product: syz [ 431.311546][ T24] usb 6-1: Manufacturer: syz [ 431.316274][ T24] usb 6-1: SerialNumber: syz [ 431.371820][ T24] usb 6-1: config 0 descriptor?? [ 431.429057][ T24] ch341 6-1:0.0: ch341-uart converter detected [ 431.516062][T15838] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 431.838093][ T24] usb 6-1: failed to send control message: -71 [ 431.850029][ T24] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 431.901183][ T24] usb 6-1: USB disconnect, device number 4 [ 431.948155][ T24] ch341 6-1:0.0: device disconnected [ 432.204613][T15867] SET target dimension over the limit! [ 432.488865][ T5830] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 432.645004][T15890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4728'. [ 432.666847][ T5830] usb 2-1: Using ep0 maxpacket: 16 [ 432.684969][ T5830] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 17408, setting to 1024 [ 432.746343][ T5830] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 432.801075][ T5830] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 432.852840][ T5830] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 432.908490][ T5830] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 432.961801][ T5830] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 433.011672][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 433.048021][ T5830] usb 2-1: SerialNumber: syz [ 433.081917][T15870] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 433.101250][T15897] bond0: option arp_all_targets: invalid value (18446744073290121217) [ 433.130289][T15870] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 433.164718][T15897] bond0 (unregistering): Released all slaves [ 433.431934][ T5830] usb 2-1: USB disconnect, device number 123 [ 433.697824][T15918] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 434.340022][ T24] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 434.517110][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 434.533331][ T24] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 434.564011][ T24] usb 2-1: config 0 has no interface number 0 [ 434.586573][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 434.612971][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.642541][ T24] usb 2-1: Product: syz [ 434.656786][ T24] usb 2-1: Manufacturer: syz [ 434.661695][ T24] usb 2-1: SerialNumber: syz [ 434.698300][ T24] usb 2-1: config 0 descriptor?? [ 434.717312][ T24] hub 2-1:0.132: bad descriptor, ignoring hub [ 434.736961][ T24] hub 2-1:0.132: probe with driver hub failed with error -5 [ 434.770746][ T24] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input48 [ 435.363675][ T30] audit: type=1326 audit(1768232166.936:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15985 comm="syz.4.4775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ba38f749 code=0x7ffc0000 [ 435.418621][ T30] audit: type=1326 audit(1768232166.966:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15985 comm="syz.4.4775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ba38f749 code=0x7ffc0000 [ 435.501817][ T30] audit: type=1326 audit(1768232166.986:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15985 comm="syz.4.4775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fc2ba38f749 code=0x7ffc0000 [ 435.546465][ T30] audit: type=1326 audit(1768232166.986:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15985 comm="syz.4.4775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ba38f749 code=0x7ffc0000 [ 436.242080][T16023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4792'. [ 436.271712][T16023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4792'. [ 436.450252][T16031] ip6erspan0: entered allmulticast mode [ 436.916906][ T5830] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 437.117963][ T5830] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 437.140441][ T5830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.170986][ T5830] usb 6-1: Product: syz [ 437.184970][ T5830] usb 6-1: Manufacturer: syz [ 437.199744][ T5830] usb 6-1: SerialNumber: syz [ 437.230798][ T5830] usb 6-1: config 0 descriptor?? [ 437.264746][ T5830] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 005 [ 437.448317][T16077] fuse: Unknown parameter 'no' [ 437.478799][ T5830] (null): failure setting delay to 10us [ 437.484660][ T5830] i2c-tiny-usb 6-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 437.509471][T16079] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4819'. [ 437.533741][ T5830] usb 6-1: USB disconnect, device number 5 [ 437.750275][T16089] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4826'. [ 438.176913][T16108] netlink: 'syz.4.4835': attribute type 12 has an invalid length. [ 438.375021][ T9] usb 2-1: USB disconnect, device number 124 [ 438.705170][T16133] netlink: 'syz.4.4847': attribute type 309 has an invalid length. [ 438.936034][T16142] program syz.1.4852 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 439.118658][ T9] usb 5-1: new full-speed USB device number 106 using dummy_hcd [ 439.140636][T16147] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 439.167802][T16147] bond5 (unregistering): Released all slaves [ 439.187505][ T5918] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 439.309994][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 439.328157][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 439.351770][ T9] usb 5-1: config 2 has an invalid interface number: 226 but max is 1 [ 439.372448][ T9] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 439.383901][ T5918] usb 4-1: Using ep0 maxpacket: 8 [ 439.399586][ T5918] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.421667][ T9] usb 5-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 439.444193][ T9] usb 5-1: config 2 has no interface number 0 [ 439.451495][ T9] usb 5-1: config 2 interface 226 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 439.464415][ T5918] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 439.481053][ T9] usb 5-1: config 2 interface 226 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 439.493610][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 439.507424][ T5918] usb 4-1: SerialNumber: syz [ 439.516850][ T9] usb 5-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 439.537630][ T5918] usb 4-1: config 0 descriptor?? [ 439.547005][ T5830] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 439.559404][ T9] usb 5-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 439.572787][ T5918] uvcvideo 4-1:0.0: Found UVC 0.00 device (05ac:8501) [ 439.596944][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.616434][ T5918] uvcvideo 4-1:0.0: Failed to create links for entity 255 [ 439.624087][ T9] usb 5-1: Product: syz [ 439.632128][ T5918] uvcvideo 4-1:0.0: Failed to register entities (-22). [ 439.639204][ T9] usb 5-1: Manufacturer: syz [ 439.644040][ T9] usb 5-1: SerialNumber: syz [ 439.768712][ T5830] usb 6-1: Using ep0 maxpacket: 8 [ 439.779555][ T5830] usb 6-1: unable to get BOS descriptor or descriptor too short [ 439.793242][T16158] program syz.1.4859 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 439.811232][ T5918] usb 4-1: USB disconnect, device number 115 [ 439.820834][ T5830] usb 6-1: config 4 has an invalid interface number: 146 but max is 0 [ 439.832421][ T5830] usb 6-1: config 4 has no interface number 0 [ 439.849978][ T5830] usb 6-1: config 4 interface 146 has no altsetting 0 [ 439.869749][ T5830] usb 6-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=af.79 [ 439.904751][ T5830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.924773][ T9] usb 5-1: USB disconnect, device number 106 [ 439.936849][ T5830] usb 6-1: Product: syz [ 439.941287][ T5830] usb 6-1: Manufacturer: syz [ 439.963706][ T5830] usb 6-1: SerialNumber: syz [ 440.046406][T16162] netlink: 1204 bytes leftover after parsing attributes in process `syz.1.4861'. [ 440.140156][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.154631][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.203910][ T5830] comedi comedi5: could not set alternate setting 3 in high speed [ 440.217293][ T5830] usbduxsigma 6-1:4.146: driver 'usbduxsigma' failed to auto-configure device. [ 440.233775][ T5830] usbduxsigma 6-1:4.146: probe with driver usbduxsigma failed with error -71 [ 440.264863][ T5830] usb 6-1: USB disconnect, device number 6 [ 440.445222][T16168] CIFS: VFS: Malformed UNC in devname [ 441.002267][ T30] audit: type=1326 audit(1768232172.576:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16197 comm="syz.1.4879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927af8f749 code=0x7ffc0000 [ 441.107045][ T30] audit: type=1326 audit(1768232172.616:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16197 comm="syz.1.4879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927af8f749 code=0x7ffc0000 [ 441.185151][ T30] audit: type=1326 audit(1768232172.616:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16197 comm="syz.1.4879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f927af8f749 code=0x7ffc0000 [ 441.237033][T16207] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4884'. [ 441.281394][ T30] audit: type=1326 audit(1768232172.616:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16197 comm="syz.1.4879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927af8f749 code=0x7ffc0000 [ 441.349729][ T30] audit: type=1326 audit(1768232172.616:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16197 comm="syz.1.4879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927af8f749 code=0x7ffc0000 [ 441.372991][ T5830] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 441.527091][ T5830] usb 5-1: Using ep0 maxpacket: 8 [ 441.540058][ T5830] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 441.569600][ T5830] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 441.602541][ T5830] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 441.642412][ T5830] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 441.658537][ T5830] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 441.695835][ T5830] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 441.734853][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.766873][T16225] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 1, id = 0 [ 442.242487][ T5830] usb 5-1: USB disconnect, device number 107 [ 443.468598][T16301] netlink: 'syz.5.4927': attribute type 1 has an invalid length. [ 443.843058][T16317] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4937'. [ 444.014910][T16327] trusted_key: encrypted_key: insufficient parameters specified [ 444.110201][ T5830] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 444.129710][T16331] netlink: 'syz.1.4945': attribute type 30 has an invalid length. [ 444.280212][ T5830] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 444.299112][ T5830] usb 5-1: config 0 has an invalid interface number: 3 but max is 2 [ 444.333095][ T5830] usb 5-1: config 0 has no interface number 0 [ 444.349959][ T5830] usb 5-1: config 0 has no interface number 1 [ 444.364477][ T5830] usb 5-1: too many endpoints for config 0 interface 3 altsetting 255: 255, using maximum allowed: 30 [ 444.389790][ T5830] usb 5-1: config 0 interface 3 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 444.441986][ T5830] usb 5-1: config 0 interface 3 has no altsetting 0 [ 444.467910][ T5830] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 444.500614][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.547848][ T5830] usb 5-1: config 0 descriptor?? [ 444.786353][ T5830] usb 5-1: Could not set interface, error -71 [ 444.839757][ T5830] usb 5-1: selecting invalid altsetting 0 [ 444.864115][ T5830] usb 5-1: Could not set interface, error -22 [ 444.914340][ T5830] usb 5-1: USB disconnect, device number 108 [ 444.974837][T16365] netlink: zone id is out of range [ 445.164095][T16365] netlink: set zone limit has 4 unknown bytes [ 445.501123][T16380] bond5: Removing last arp target with arp_interval on [ 445.511524][T16380] bond5: entered promiscuous mode [ 445.517311][T16380] bond5: entered allmulticast mode [ 445.523346][T16380] 8021q: adding VLAN 0 to HW filter on device bond5 [ 445.696919][T16393] raw_sendmsg: syz.3.4975 forgot to set AF_INET. Fix it! [ 445.926324][T16407] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4982'. [ 446.256680][T16422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 446.842249][T16446] netlink: 'syz.1.5002': attribute type 33 has an invalid length. [ 446.906901][T16446] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5002'. [ 447.006120][T16456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5006'. [ 447.443440][T16478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5018'. [ 447.616915][ T5830] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 447.807102][ T5830] usb 5-1: Using ep0 maxpacket: 32 [ 447.829454][ T5830] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 447.871550][ T5830] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 447.898084][ T5830] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 447.928791][ T5830] usb 5-1: config 1 has no interface number 0 [ 447.945992][ T5830] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 447.984901][ T5830] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 448.026838][ T5830] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 448.055133][T16498] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.075783][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.103483][T16498] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.120077][ T5830] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 448.128442][ T30] audit: type=1326 audit(1768232179.706:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16502 comm="syz.1.5029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927af8f749 code=0x7ffc0000 [ 448.205035][ T30] audit: type=1326 audit(1768232179.706:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16502 comm="syz.1.5029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927af8f749 code=0x7ffc0000 [ 448.295147][ T30] audit: type=1326 audit(1768232179.716:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16502 comm="syz.1.5029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f927af8f749 code=0x7ffc0000 [ 448.344436][ T5830] snd_usb_pod 5-1:1.1: invalid control EP [ 448.366897][ T5830] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 448.382500][ T5830] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 448.390195][ T30] audit: type=1326 audit(1768232179.716:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16502 comm="syz.1.5029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f927af8f783 code=0x7ffc0000 [ 448.427621][ T5830] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 448.469307][ T30] audit: type=1326 audit(1768232179.716:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16502 comm="syz.1.5029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f927af8f783 code=0x7ffc0000 [ 448.522777][ T30] audit: type=1326 audit(1768232179.716:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16502 comm="syz.1.5029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927af8f749 code=0x7ffc0000 [ 448.608712][ T24] usb 5-1: USB disconnect, device number 109 [ 448.642626][ T30] audit: type=1326 audit(1768232179.716:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16502 comm="syz.1.5029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927af8f749 code=0x7ffc0000 [ 448.703870][T16519] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 448.864046][T16527] netlink: 'syz.1.5042': attribute type 5 has an invalid length. [ 448.874121][T16527] netlink: 6 bytes leftover after parsing attributes in process `syz.1.5042'. [ 448.887820][T16529] vlan0: entered promiscuous mode [ 448.923889][T16531] netlink: 'syz.0.5043': attribute type 1 has an invalid length. [ 449.107036][ T5830] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 449.323195][ T5830] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 449.388829][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.421507][ T5830] usb 4-1: Product: syz [ 449.425744][ T5830] usb 4-1: Manufacturer: syz [ 449.441066][ T5830] usb 4-1: SerialNumber: syz [ 449.469500][ T5830] usb 4-1: config 0 descriptor?? [ 449.702942][ T5150] Bluetooth: hci1: unknown advertising packet type: 0x17 [ 449.704522][ T5830] usb-storage 4-1:0.0: USB Mass Storage device detected [ 449.708767][T16556] bond6: option miimon: invalid value (18446744071562067968) [ 449.757884][T16556] bond6: option miimon: allowed values 0 - 2147483647 [ 449.781008][T16556] bond6 (unregistering): Released all slaves [ 449.822565][ T5830] usb 4-1: USB disconnect, device number 116 [ 449.977310][T16561] bond0: (slave team0): Releasing backup interface [ 450.029567][T16561] team0: Port device dummy0 removed [ 450.109656][T16561] bond0: (slave bond_slave_0): Releasing backup interface [ 450.131671][T16561] bond0: (slave bond_slave_1): Releasing backup interface [ 450.136584][T16573] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5062'. [ 450.199155][T16561] team0: Port device team_slave_0 removed [ 450.222653][T16561] team0: Port device team_slave_1 removed [ 450.230665][T16561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.241138][T16561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.271717][T16561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.306802][T16561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.331289][T16561] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 450.436950][ T24] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 450.619903][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 450.655876][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 450.697593][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 450.723912][T16589] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5070'. [ 450.746142][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 450.757707][T16591] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5071'. [ 450.770670][T16589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5070'. [ 450.791971][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 450.850252][ T24] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 450.894524][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.929092][ T24] usb 2-1: Product: syz [ 450.934288][ T24] usb 2-1: Manufacturer: syz [ 450.976560][ T24] usb 2-1: SerialNumber: syz [ 450.990339][ T24] usb 2-1: config 0 descriptor?? [ 450.996580][T16576] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 451.039288][ T24] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input50 [ 451.404649][ T24] usb 2-1: USB disconnect, device number 125 [ 451.404704][ C1] kbtab 2-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 451.433097][T16615] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5083'. [ 451.478575][ T5150] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 451.955064][T16641] netlink: 200 bytes leftover after parsing attributes in process `syz.5.5095'. [ 452.367124][T16657] netlink: 'syz.1.5102': attribute type 2 has an invalid length. [ 452.705290][T16673] xt_nfacct: accounting object `syz1' does not exist [ 452.803052][T16677] netlink: 'syz.1.5114': attribute type 3 has an invalid length. [ 453.682596][T16714] SET target dimension over the limit! [ 454.137042][ T5920] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 454.159105][T16736] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5143'. [ 454.301761][ T5920] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 454.331662][ T5920] usb 6-1: config 0 has no interface number 0 [ 454.356942][ T5920] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=4f.5d [ 454.386254][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.415656][ T5920] usb 6-1: Product: syz [ 454.425798][ T5920] usb 6-1: Manufacturer: syz [ 454.431636][T16747] netlink: 'syz.3.5149': attribute type 5 has an invalid length. [ 454.440085][ T5920] usb 6-1: SerialNumber: syz [ 454.457140][ T5830] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 454.475979][ T5920] usb 6-1: config 0 descriptor?? [ 454.502478][ T5920] usbtest 6-1:0.85: Linux gadget zero [ 454.526937][ T5920] usbtest 6-1:0.85: high-speed {control in/out int-out} tests (+alt) [ 454.641051][ T5830] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 454.669436][ T5830] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 454.720188][ T5830] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 454.721096][ T5920] usb 6-1: USB disconnect, device number 7 [ 454.751084][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 454.776772][ T5830] usb 5-1: SerialNumber: syz [ 455.045904][ T5830] usb 5-1: 0:2 : does not exist [ 455.109388][ T5830] usb 5-1: USB disconnect, device number 110 [ 455.187908][T14962] udevd[14962]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 455.377029][T16768] netlink: 'syz.0.5159': attribute type 2 has an invalid length. [ 455.421537][T16768] netlink: 'syz.0.5159': attribute type 3 has an invalid length. [ 456.165403][T16793] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.250634][T16793] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.393474][T16793] geneve2: left promiscuous mode [ 456.599829][T16804] bridge3: entered promiscuous mode [ 456.605105][T16804] bridge3: entered allmulticast mode [ 456.901303][T16820] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 456.908148][T16820] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 456.957460][T16820] vhci_hcd vhci_hcd.0: Device attached [ 457.024255][T16826] vhci_hcd vhci_hcd.0: port 0 already used [ 457.078670][T16821] vhci_hcd: connection closed [ 457.080262][ T1135] vhci_hcd vhci_hcd.1: stop threads [ 457.115945][ T1135] vhci_hcd vhci_hcd.1: release socket [ 457.146768][ T1135] vhci_hcd vhci_hcd.1: disconnect device [ 457.373279][T16842] netlink: 34 bytes leftover after parsing attributes in process `syz.0.5193'. [ 457.897043][T16864] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5204'. [ 458.091227][T16872] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5208'. [ 458.111311][T16874] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 458.312495][T16881] netlink: 'syz.4.5213': attribute type 5 has an invalid length. [ 458.337327][T16882] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5212'. [ 459.317084][ T5918] usb 5-1: new low-speed USB device number 111 using dummy_hcd [ 459.498922][ T5918] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 459.530403][ T5918] usb 5-1: config 179 has no interface number 0 [ 459.553151][ T5918] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 459.579693][T16930] netlink: 'syz.5.5237': attribute type 2 has an invalid length. [ 459.600986][ T5918] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 459.629670][ T5918] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 459.676938][ T5918] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 459.729801][ T5918] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 459.774688][ T5918] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 459.794797][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.819907][T16913] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 459.837044][T16913] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 460.249506][T16913] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 460.256516][T16913] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 460.268218][T16913] vhci_hcd vhci_hcd.0: Device attached [ 460.334774][T16944] vhci_hcd: connection closed [ 460.335127][ T5971] vhci_hcd vhci_hcd.4: stop threads [ 460.354997][T16947] delete_channel: no stack [ 460.366785][ T5971] vhci_hcd vhci_hcd.4: release socket [ 460.375554][ T24] usb 5-1: USB disconnect, device number 111 [ 460.375614][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 460.391117][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 460.410759][ T5971] vhci_hcd vhci_hcd.4: disconnect device [ 460.560956][ T30] audit: type=1326 audit(1768232192.136:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16953 comm="syz.5.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86af8f749 code=0x7ffc0000 [ 460.656640][ T30] audit: type=1326 audit(1768232192.156:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16953 comm="syz.5.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86af8f749 code=0x7ffc0000 [ 460.726778][ T30] audit: type=1326 audit(1768232192.166:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16953 comm="syz.5.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fe86af8f749 code=0x7ffc0000 [ 460.775473][T16960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5251'. [ 460.804460][ T30] audit: type=1326 audit(1768232192.166:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16953 comm="syz.5.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86af8f749 code=0x7ffc0000 [ 460.852933][T16960] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 460.874399][T16962] ip6gretap2: entered promiscuous mode [ 460.886088][ T30] audit: type=1326 audit(1768232192.166:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16953 comm="syz.5.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86af8f749 code=0x7ffc0000 [ 460.961226][T16962] ip6gretap2: entered allmulticast mode [ 461.446876][ T5830] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 461.636080][ T5830] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 461.663246][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.693990][ T5830] usb 2-1: Product: syz [ 461.706259][ T5830] usb 2-1: Manufacturer: syz [ 461.725597][ T5830] usb 2-1: SerialNumber: syz [ 461.731165][ T5918] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 461.774498][ T5830] usb 2-1: config 0 descriptor?? [ 461.937346][ T5918] usb 6-1: Using ep0 maxpacket: 8 [ 461.950674][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 461.984332][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 462.012424][ T5830] usb-storage 2-1:0.0: USB Mass Storage device detected [ 462.021939][ T5918] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 462.042229][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 462.056918][ T5918] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 462.081685][ T5918] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 462.093911][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.105645][ T5918] usb 6-1: config 0 descriptor?? [ 462.124884][T16984] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 462.232521][ T5918] usb 2-1: USB disconnect, device number 126 [ 462.466174][ T65] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.486160][ T65] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.518780][ T65] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.557040][ T65] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.622969][ T5918] usb 6-1: USB disconnect, device number 8 [ 462.629084][ T5150] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 462.919261][T17008] netlink: 'syz.4.5273': attribute type 30 has an invalid length. [ 463.007384][T17014] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 463.569410][T17037] ipt_ECN: cannot use operation on non-tcp rule [ 463.789276][ T24] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 463.949109][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 463.976654][ T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 464.017164][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 464.057109][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.098665][T17038] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 464.140938][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 464.559632][ T9] usb 5-1: USB disconnect, device number 112 [ 464.658079][ T30] audit: type=1326 audit(1768232196.236:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17074 comm="syz.0.5307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007f38f749 code=0x7ffc0000 [ 464.741967][ T30] audit: type=1326 audit(1768232196.236:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17074 comm="syz.0.5307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007f38f749 code=0x7ffc0000 [ 464.819929][ T30] audit: type=1326 audit(1768232196.246:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17074 comm="syz.0.5307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f007f38f749 code=0x7ffc0000 [ 464.896794][ T30] audit: type=1326 audit(1768232196.246:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17074 comm="syz.0.5307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007f38f749 code=0x7ffc0000 [ 464.957801][T17087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5313'. [ 464.978794][ T30] audit: type=1326 audit(1768232196.246:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17074 comm="syz.0.5307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007f38f749 code=0x7ffc0000 [ 465.853314][T17130] netlink: 'syz.5.5334': attribute type 49 has an invalid length. [ 465.872309][T17134] fuse: Invalid rootmode [ 465.878174][T17133] netlink: 'syz.0.5336': attribute type 21 has an invalid length. [ 465.886188][T17133] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5336'. [ 465.906634][ T30] audit: type=1326 audit(1768232197.476:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17135 comm="syz.1.5337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927af8f749 code=0x7ffc0000 [ 465.975331][T17133] netlink: 'syz.0.5336': attribute type 5 has an invalid length. [ 465.984944][T17133] netlink: 'syz.0.5336': attribute type 6 has an invalid length. [ 466.037227][ T30] audit: type=1326 audit(1768232197.506:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17135 comm="syz.1.5337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927af8f749 code=0x7ffc0000 [ 466.060646][T17133] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5336'. [ 466.123516][ T30] audit: type=1326 audit(1768232197.506:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17135 comm="syz.1.5337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f927af8f749 code=0x7ffc0000 [ 466.244898][ T30] audit: type=1326 audit(1768232197.506:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17135 comm="syz.1.5337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927af8f749 code=0x7ffc0000 [ 466.342458][ T30] audit: type=1326 audit(1768232197.506:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17135 comm="syz.1.5337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927af8f749 code=0x7ffc0000 [ 466.713031][T17168] nft_compat: unsupported protocol 1 [ 466.950442][T17179] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 467.306895][ T24] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 467.477600][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 467.512344][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 467.556806][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 467.597631][ T24] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 467.636844][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.644889][ T24] usb 4-1: Product: syz [ 467.676993][ T24] usb 4-1: Manufacturer: syz [ 467.681752][ T24] usb 4-1: SerialNumber: syz [ 467.739995][ T24] usb 4-1: config 0 descriptor?? [ 467.745751][T17183] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 467.758715][T17183] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 467.817469][ T24] usb 4-1: ucan: probing device on interface #0 [ 467.884807][T17219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5378'. [ 468.012030][ T24] usb 4-1: ucan: could not read protocol version, ret=-71 [ 468.037320][ T24] usb 4-1: ucan: probe failed; try to update the device firmware [ 468.077999][ T24] usb 4-1: USB disconnect, device number 117 [ 468.157084][ T5920] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 468.217521][T17229] 8021q: adding VLAN 0 to HW filter on device .` [ 468.270817][T17229] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 468.338891][ T5920] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 468.357122][ T5920] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 468.387463][ T5920] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 468.426788][ T5920] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 468.458121][ T5920] usb 2-1: config 1 has no interface number 0 [ 468.464929][ T5920] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 468.505005][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.569965][ T5920] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 468.623094][ T30] audit: type=1326 audit(1768232200.196:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17242 comm="syz.0.5390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007f38f749 code=0x7ffc0000 [ 468.684721][ T30] audit: type=1326 audit(1768232200.196:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17242 comm="syz.0.5390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007f38f749 code=0x7ffc0000 [ 468.756826][ T30] audit: type=1326 audit(1768232200.216:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17242 comm="syz.0.5390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f007f38f749 code=0x7ffc0000 [ 468.798094][ T5920] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 468.820912][T17249] CIFS: VFS: Malformed UNC in devname [ 468.842515][ T5920] snd_usb_pod 2-1:1.1: invalid control EP [ 468.849252][ T30] audit: type=1326 audit(1768232200.216:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17242 comm="syz.0.5390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007f38f749 code=0x7ffc0000 [ 468.886970][ T5920] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 468.907139][ T5920] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 468.915041][ T5920] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 468.942056][ T30] audit: type=1326 audit(1768232200.216:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17242 comm="syz.0.5390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007f38f749 code=0x7ffc0000 [ 469.040306][ T5918] usb 2-1: USB disconnect, device number 127 [ 469.059181][T17256] __vm_enough_memory: pid: 17256, comm: syz.5.5396, bytes: 4503599627366400 not enough memory for the allocation [ 469.129252][T17261] binder: binder_mmap: 17260 200000ffb000-200000ffd000 bad vm_flags failed -1 [ 470.126294][T17300] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 470.168896][ T5918] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 470.291989][T17306] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5419'. [ 470.346891][ T5918] usb 2-1: Using ep0 maxpacket: 8 [ 470.363781][ T5918] usb 2-1: unable to get BOS descriptor or descriptor too short [ 470.390245][ T5918] usb 2-1: config 8 has an invalid interface number: 255 but max is 0 [ 470.427027][ T5918] usb 2-1: config 8 has no interface number 0 [ 470.441336][ T5918] usb 2-1: config 8 interface 255 has no altsetting 0 [ 470.465470][ T5918] usb 2-1: string descriptor 0 read error: -22 [ 470.485385][ T5918] usb 2-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 470.515833][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.008586][ T5918] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.1-1, 00:00:00:00:00:00. [ 471.129651][T17330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.158696][T17330] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.200850][T17330] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 471.287413][ T5918] usb 2-1: USB disconnect, device number 2 [ 472.151695][T17370] netlink: 'syz.3.5452': attribute type 2 has an invalid length. [ 472.256880][T17370] @„;: entered promiscuous mode [ 472.499569][T17384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5459'. [ 472.594593][T17386] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 472.723285][T17380] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.732243][T17380] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.098643][T17402] netlink: 'syz.1.5468': attribute type 1 has an invalid length. [ 473.311058][T17380] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.372381][T17380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.787377][ T65] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.839548][ T65] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.879158][ T65] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.901135][ T65] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.481727][T17444] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 474.489486][T17444] IPv6: NLM_F_CREATE should be set when creating new route [ 474.497422][T17444] IPv6: NLM_F_CREATE should be set when creating new route [ 474.750119][T17452] dlm: no locking on control device [ 475.177897][T17450] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.185698][T17450] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.668184][T17450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.701219][T17450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.091866][ T1135] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.117529][T17487] netlink: 'syz.4.5510': attribute type 1 has an invalid length. [ 476.139020][ T1135] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.167182][ T1135] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.201962][ T1135] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.352873][T17496] kAFS: unable to lookup cell 'Þ({^ú@' [ 476.389872][T17498] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5514'. [ 476.541328][T17502] openvswitch: netlink: Duplicate key (type 21). [ 476.932394][T17498] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 476.947871][T17498] bond0 (unregistering): Released all slaves [ 476.997736][T17511] ip6tnl1: entered allmulticast mode [ 477.538705][ T5830] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 477.730052][ T5830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 224, changing to 11 [ 477.756598][ T5830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32776, setting to 1024 [ 477.789705][ T5830] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 477.806022][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.830739][ T5830] usb 5-1: Product: syz [ 477.839529][ T5830] usb 5-1: Manufacturer: syz [ 477.853152][ T5830] usb 5-1: SerialNumber: syz [ 477.871178][ T5830] usb 5-1: config 0 descriptor?? [ 477.901230][ T5830] uvcvideo 5-1:0.0: Found UVC 0.00 device syz (18ec:3288) [ 477.921407][ T5830] uvcvideo 5-1:0.0: No valid video chain found. [ 478.150684][ T6254] usb 5-1: USB disconnect, device number 113 [ 478.235642][T17514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.291353][T17514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.841111][T17517] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 478.888713][T17532] netlink: 172 bytes leftover after parsing attributes in process `syz.1.5531'. [ 478.915913][T17532] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 478.943868][ T3672] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.998184][ T3672] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.044263][ T3672] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.087760][ T3672] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.242477][T17547] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request [ 479.520049][T17564] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 479.717650][ T5830] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 479.898242][T17563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.921107][ T5830] usb 2-1: config index 0 descriptor too short (expected 62498, got 34) [ 479.942670][ T5830] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 479.959040][T17563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.973614][ T5830] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 480.005659][ T5830] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 480.040062][ T5830] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 480.080700][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 480.104759][ T5830] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 480.140707][ T5830] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 480.168214][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.197894][ T5830] usb 2-1: Product: syz [ 480.213844][ T5830] usb 2-1: Manufacturer: syz [ 480.229753][ T5830] usb 2-1: SerialNumber: syz [ 480.254697][ T5830] usb 2-1: config 0 descriptor?? [ 480.382644][T17574] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5552'. [ 480.407305][ T8350] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.435980][ T8350] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.474523][ T8350] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.516324][ T8350] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.570275][ T5830] usb 2-1: USB disconnect, device number 3 [ 480.870026][T17607] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5568'. [ 481.156824][ T5830] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 481.349022][ T5830] usb 5-1: config 4 has an invalid interface number: 5 but max is 0 [ 481.378502][ T5830] usb 5-1: config 4 has no interface number 0 [ 481.384739][ T5830] usb 5-1: config 4 interface 5 altsetting 4 endpoint 0x9 has invalid maxpacket 59123, setting to 64 [ 481.430538][ T5830] usb 5-1: config 4 interface 5 has no altsetting 0 [ 481.448926][ T5830] usb 5-1: New USB device found, idVendor=05c6, idProduct=9068, bcdDevice=7c.ad [ 481.480359][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.500570][ T5830] usb 5-1: Product: syz [ 481.504967][ T5830] usb 5-1: Manufacturer: syz [ 481.537221][ T5830] usb 5-1: SerialNumber: syz [ 481.730140][T17636] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5582'. [ 481.781145][T17609] Invalid option length (0) for dns_resolver key [ 481.844912][ T5830] usb 5-1: USB disconnect, device number 114 [ 482.698865][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 482.834475][T17682] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 482.865845][T17682] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 482.896864][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 482.904445][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.925145][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 482.962622][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 483.007039][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 483.046889][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 483.061534][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 483.081055][ T10] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 483.092578][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.101843][ T10] usb 2-1: Product: syz [ 483.106440][ T10] usb 2-1: Manufacturer: syz [ 483.111461][ T10] usb 2-1: SerialNumber: syz [ 483.120105][ T10] usb 2-1: config 0 descriptor?? [ 483.134249][T17665] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 483.647903][T17707] bridge1: entered promiscuous mode [ 483.684185][T17707] bridge1: entered allmulticast mode [ 483.773062][T17717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.949810][T17720] : entered promiscuous mode [ 483.999510][T17723] xt_hashlimit: max too large, truncated to 1048576 [ 484.097648][T17723] Timeout policy `syz1' can only be used by L3 protocol number 34984 [ 484.165576][T17731] xt_TCPMSS: Only works on TCP SYN packets [ 484.522977][ T10] rc_core: IR keymap rc-snapstream-firefly not found [ 484.547531][ T10] Registered IR keymap rc-empty [ 484.583499][ T10] rc rc0: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 484.637435][ T10] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input51 [ 484.704541][ T10] input: syz syz mouse as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input52 [ 484.809433][ C0] ati_remote 2-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 484.836592][ T10] usb 2-1: USB disconnect, device number 4 [ 484.870430][T17762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5641'. [ 485.526422][T17782] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5650'. [ 485.690729][ T30] audit: type=1326 audit(1768232217.256:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17785 comm="syz.1.5653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927af8f749 code=0x7ffc0000 [ 485.809641][ T30] audit: type=1326 audit(1768232217.266:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17785 comm="syz.1.5653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927af8f749 code=0x7ffc0000 [ 485.937662][ T30] audit: type=1326 audit(1768232217.266:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17785 comm="syz.1.5653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f927af8f749 code=0x7ffc0000 [ 486.047684][ T30] audit: type=1326 audit(1768232217.266:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17785 comm="syz.1.5653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927af8f749 code=0x7ffc0000 [ 486.154467][ T30] audit: type=1326 audit(1768232217.266:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17785 comm="syz.1.5653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927af8f749 code=0x7ffc0000 [ 486.231789][T17808] usb usb8: usbfs: process 17808 (syz.1.5664) did not claim interface 0 before use [ 486.836803][ T24] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 486.995799][T17843] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 487.016798][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 487.030657][ T24] usb 5-1: config 0 has an invalid interface number: 60 but max is 0 [ 487.076841][ T24] usb 5-1: config 0 has no interface number 0 [ 487.085456][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=fa.5a [ 487.136926][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.145234][ T24] usb 5-1: Product: syz [ 487.159391][T17846] usb usb8: usbfs: process 17846 (syz.0.5683) did not claim interface 0 before use [ 487.175371][T17848] trusted_key: encrypted_key: master key parameter is missing [ 487.186786][ T24] usb 5-1: Manufacturer: syz [ 487.191562][ T24] usb 5-1: SerialNumber: syz [ 487.219843][ T24] usb 5-1: config 0 descriptor?? [ 487.249257][ T24] gspca_main: spca500-2.14.0 probing 046d:0900 [ 487.262059][T17852] vxcan3: entered promiscuous mode [ 487.289176][T17852] vxcan3: entered allmulticast mode [ 487.451971][ T24] gspca_spca500: reg write: error -71 [ 487.476578][ T24] gspca_spca500: reg write: error -71 [ 487.508017][ T24] gspca_spca500: reg write: error -71 [ 487.535910][ T24] gspca_spca500: reg write: error -71 [ 487.557339][ T24] gspca_spca500: reg write: error -71 [ 487.574975][T17864] Àÿ: renamed from vlan0 [ 487.577205][ T24] gspca_spca500: reg write: error -71 [ 487.606821][ T24] gspca_spca500: reg write: error -71 [ 487.632621][ T24] gspca_spca500: reg write: error -71 [ 487.657443][ T24] gspca_spca500: reg write: error -71 [ 487.676922][ T24] gspca_spca500: reg write: error -71 [ 487.693157][ T24] gspca_spca500: reg write: error -71 [ 487.715141][ T24] gspca_spca500: reg write: error -71 [ 487.734019][ T24] gspca_spca500: reg write: error -71 [ 487.757168][ T24] gspca_spca500: reg write: error -71 [ 487.807076][ T24] usb 5-1: USB disconnect, device number 115 [ 488.477833][ T9] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 488.667001][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 488.693760][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 488.713401][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.731854][ T9] usb 5-1: Product: syz [ 488.746512][ T9] usb 5-1: Manufacturer: syz [ 488.756664][ T9] usb 5-1: SerialNumber: syz [ 488.773254][ T9] usb 5-1: config 0 descriptor?? [ 488.801832][ T9] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 489.151795][T17925] netlink: 'syz.5.5718': attribute type 9 has an invalid length. [ 489.176923][T17925] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5718'. [ 489.206177][ T9] gspca_vc032x: reg_w err -71 [ 489.221510][ T9] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 489.260619][ T9] usb 5-1: USB disconnect, device number 116 [ 490.729937][T17964] netlink: 'syz.4.5737': attribute type 29 has an invalid length. [ 491.636856][ T5830] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 491.854515][ T5830] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 491.896239][ T5830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.911057][ T5830] usb 6-1: Product: syz [ 491.926059][ T5830] usb 6-1: Manufacturer: syz [ 491.946888][ T5830] usb 6-1: SerialNumber: syz [ 491.981846][ T5830] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 492.019146][ T10] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 492.074772][T18018] netlink: 'syz.3.5763': attribute type 30 has an invalid length. [ 492.525312][ T5830] usb 6-1: USB disconnect, device number 9 [ 492.692457][T18040] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap3 [ 492.722670][T18040] ip6gretap3: entered allmulticast mode [ 492.834480][T18044] netlink: 'syz.1.5776': attribute type 10 has an invalid length. [ 493.123048][ T10] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 493.152494][ T10] ath9k_htc: Failed to initialize the device [ 493.180313][ T5830] usb 6-1: ath9k_htc: USB layer deinitialized [ 493.205826][ T30] audit: type=1326 audit(1768232224.776:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18064 comm="syz.4.5786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ba38f749 code=0x7ffc0000 [ 493.306517][ T30] audit: type=1326 audit(1768232224.776:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18064 comm="syz.4.5786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ba38f749 code=0x7ffc0000 [ 493.394510][ T30] audit: type=1326 audit(1768232224.806:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18064 comm="syz.4.5786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ba38f749 code=0x7ffc0000 [ 493.467248][T18076] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5790'. [ 493.487658][ T30] audit: type=1326 audit(1768232224.806:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18064 comm="syz.4.5786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ba38f749 code=0x7ffc0000 [ 493.566841][ T30] audit: type=1326 audit(1768232224.806:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18064 comm="syz.4.5786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fc2ba38f749 code=0x7ffc0000 [ 493.636102][ T30] audit: type=1326 audit(1768232224.806:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18064 comm="syz.4.5786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ba38f749 code=0x7ffc0000 [ 493.681884][ T30] audit: type=1326 audit(1768232224.806:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18064 comm="syz.4.5786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ba38f749 code=0x7ffc0000 [ 493.704858][ T30] audit: type=1326 audit(1768232224.866:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18064 comm="syz.4.5786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc2ba38f749 code=0x7ffc0000 [ 493.731373][ T30] audit: type=1326 audit(1768232224.866:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18064 comm="syz.4.5786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc2ba38f749 code=0x7ffc0000 [ 494.103342][T18104] netlink: 'syz.3.5804': attribute type 10 has an invalid length. [ 494.142004][T18104] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5804'. [ 494.167111][ T10] usb 5-1: new full-speed USB device number 117 using dummy_hcd [ 494.340343][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 494.391682][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 494.422686][ T10] usb 5-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 494.448109][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.476773][ T10] usb 5-1: Product: syz [ 494.486895][ T10] usb 5-1: Manufacturer: syz [ 494.507650][ T10] usb 5-1: SerialNumber: syz [ 494.533731][ T10] usb 5-1: config 0 descriptor?? [ 494.816305][ T10] input: Griffin PowerMate as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input53 [ 494.887472][ C0] powermate: config urb returned -71 [ 494.893927][ C0] powermate: config urb returned -71 [ 494.900233][ C0] powermate: config urb returned -71 [ 494.906280][ C0] powermate: config urb returned -71 [ 494.934684][ T10] usb 5-1: USB disconnect, device number 117 [ 494.942766][ C0] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 495.384793][T18151] m1Ie5n: entered promiscuous mode [ 495.759588][T18171] netlink: 'syz.5.5836': attribute type 11 has an invalid length. [ 495.850190][T18173] sg_write: data in/out 768/168 bytes for SCSI command 0x96-- guessing data in; [ 495.850190][T18173] program syz.4.5839 not setting count and/or reply_len properly [ 496.439536][ T30] audit: type=1400 audit(1768232228.016:146): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=18197 comm="syz.1.5851" [ 496.545740][T18203] program syz.1.5853 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 496.627312][T18208] netlink: 'syz.4.5855': attribute type 9 has an invalid length. [ 497.153427][T18236] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 498.281740][T18291] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5896'. [ 499.117779][T18332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5916'. [ 499.176192][T18335] fuse: Invalid uid '00000000000000000003' [ 499.341309][T18341] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5921'. [ 499.946907][T18374] netlink: 'syz.0.5938': attribute type 6 has an invalid length. [ 499.983119][T18374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5938'. [ 500.327244][T18394] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 500.529800][T18404] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 500.894087][T18423] No such timeout policy "syz1" [ 501.135828][T18432] netlink: 'syz.5.5966': attribute type 21 has an invalid length. [ 501.585969][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.593030][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.829301][ T30] audit: type=1326 audit(1768232233.406:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18471 comm="syz.1.5986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927af8f749 code=0x7ffc0000 [ 501.886806][ T30] audit: type=1326 audit(1768232233.446:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18471 comm="syz.1.5986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f927af8f749 code=0x7ffc0000 [ 501.937952][ T5830] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 501.946334][ T30] audit: type=1326 audit(1768232233.446:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18471 comm="syz.1.5986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927af8f749 code=0x7ffc0000 [ 501.982560][T18474] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 502.014467][ T30] audit: type=1326 audit(1768232233.446:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18471 comm="syz.1.5986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927af8f749 code=0x7ffc0000 [ 502.107724][T18480] ip6t_rpfilter: unknown options [ 502.118596][ T5830] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 502.131550][ T5830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.167725][ T5830] usb 6-1: config 0 descriptor?? [ 502.193779][ T5830] cp210x 6-1:0.0: cp210x converter detected [ 502.479850][T18497] netlink: 'syz.1.5997': attribute type 10 has an invalid length. [ 502.557633][ T6254] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 502.598648][ T5830] cp210x 6-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 502.616732][ T5830] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 502.643424][ T5830] usb 6-1: cp210x converter now attached to ttyUSB0 [ 502.687905][ T5830] usb 6-1: USB disconnect, device number 10 [ 502.717322][ T6254] usb 4-1: Using ep0 maxpacket: 16 [ 502.725291][ T5830] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 502.762535][ T6254] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 502.772660][ T5830] cp210x 6-1:0.0: device disconnected [ 502.792018][ T6254] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.819435][ T6254] usb 4-1: Product: syz [ 502.823686][ T6254] usb 4-1: Manufacturer: syz [ 502.845939][ T6254] usb 4-1: SerialNumber: syz [ 502.872958][ T6254] r8152-cfgselector 4-1: Unknown version 0x0000 [ 502.890458][ T6254] r8152-cfgselector 4-1: config 0 descriptor?? [ 503.087595][T18513] libceph: resolve '4.4' (ret=-3): failed [ 503.126875][ T5920] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 503.287440][ T5920] usb 2-1: Using ep0 maxpacket: 8 [ 503.294863][ T5920] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 503.306395][T18522] SET target dimension over the limit! [ 503.316905][ T5920] usb 2-1: config 2 has no interface number 0 [ 503.321254][ T6254] r8152-cfgselector 4-1: USB disconnect, device number 118 [ 503.323298][ T5920] usb 2-1: config 2 interface 31 has no altsetting 0 [ 503.339161][ T5920] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 503.376985][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.388443][ T5920] usb 2-1: Product: syz [ 503.397147][ T5920] usb 2-1: Manufacturer: syz [ 503.401804][ T5920] usb 2-1: SerialNumber: syz [ 503.442482][ T5920] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22 [ 503.499131][ T5830] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 503.646858][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 503.651764][ T5920] usb 2-1: USB disconnect, device number 5 [ 503.666931][ T5830] usb 5-1: Using ep0 maxpacket: 8 [ 503.677212][ T5830] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 503.694549][ T5830] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x6F, changing to 0xF [ 503.714538][ T5830] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 47, changing to 9 [ 503.728264][ T5830] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 25189, setting to 1024 [ 503.741742][ T5830] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 503.758142][ T5830] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 503.768495][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.776647][ T5830] usb 5-1: Product: syz [ 503.784112][ T5830] usb 5-1: Manufacturer: syz [ 503.789554][ T5830] usb 5-1: SerialNumber: syz [ 503.806522][T18520] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 503.813881][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 503.825354][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 503.838801][ T5830] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 503.852051][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 503.874280][ T5830] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 503.888192][ T5830] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 503.899488][ T10] usb 6-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 503.936497][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.965574][ T10] usb 6-1: Product: syz [ 503.975716][ T10] usb 6-1: Manufacturer: syz [ 503.981533][ T10] usb 6-1: SerialNumber: syz [ 503.995222][ T10] usb 6-1: config 0 descriptor?? [ 504.063342][ T5830] usb 5-1: USB disconnect, device number 118 [ 504.439546][ T5830] usb 6-1: USB disconnect, device number 11 [ 504.702380][ T30] audit: type=1326 audit(1768232236.276:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18546 comm="syz.4.6023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ba38f749 code=0x7ffc0000 [ 504.777181][ T30] audit: type=1326 audit(1768232236.276:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18546 comm="syz.4.6023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ba38f749 code=0x7ffc0000 [ 504.842241][ T30] audit: type=1326 audit(1768232236.306:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18546 comm="syz.4.6023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fc2ba38f749 code=0x7ffc0000 [ 504.873341][ T30] audit: type=1326 audit(1768232236.306:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18546 comm="syz.4.6023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ba38f749 code=0x7ffc0000 [ 504.936751][ T30] audit: type=1326 audit(1768232236.306:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18546 comm="syz.4.6023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ba38f749 code=0x7ffc0000 [ 505.600086][T18582] batadv0: entered promiscuous mode [ 505.622656][T18582] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 505.940867][T18602] netlink: 'syz.1.6050': attribute type 3 has an invalid length. [ 506.015824][T18605] netlink: 'syz.4.6049': attribute type 1 has an invalid length. [ 506.069692][T18605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6049'. [ 506.353632][T18622] program syz.1.6059 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 506.471299][T18626] futex_wake_op: syz.0.6062 tries to shift op by 32; fix this program [ 506.702981][T18638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6067'. [ 506.856985][T18642] netlink: 'syz.4.6070': attribute type 39 has an invalid length. [ 507.107094][T18660] Cannot find del_set index 4 as target [ 507.779349][T18697] xt_hashlimit: max too large, truncated to 1048576 [ 507.797063][T18697] xt_hashlimit: overflow, try lower: 6/0 [ 507.887187][ T5830] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 507.960782][T18706] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6101'. [ 508.103690][ T5830] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 192, changing to 11 [ 508.139821][T18714] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6105'. [ 508.154168][ T5830] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 508.196836][ T5830] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 508.235490][ T5830] usb 5-1: Manufacturer: syz [ 508.249132][ T5830] usb 5-1: SerialNumber: syz [ 508.482018][ T5830] usbhid 5-1:36.0: couldn't find an input interrupt endpoint [ 508.525655][ T5830] usb 5-1: USB disconnect, device number 119 [ 508.746974][ T5837] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 508.909805][ T5837] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 508.936886][ T5837] usb 2-1: config 0 has no interface number 0 [ 508.964013][ T5837] usb 2-1: config 0 interface 29 has no altsetting 0 [ 508.994322][ T5837] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 509.026314][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.056857][ T5837] usb 2-1: Product: syz [ 509.067206][ T5837] usb 2-1: Manufacturer: syz [ 509.072462][ T5837] usb 2-1: SerialNumber: syz [ 509.117972][ T5837] usb 2-1: config 0 descriptor?? [ 509.346102][ T5837] peak_usb 2-1:0.29: PEAK-System PCAN-USB X6 v65 fw v224.204.25 (2 channels) [ 509.422233][T18765] netlink: 'syz.5.6129': attribute type 30 has an invalid length. [ 509.546767][ T5837] peak_usb 2-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 509.601304][ T5837] peak_usb 2-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 509.777638][ T5837] peak_usb 2-1:0.29: probe with driver peak_usb failed with error -71 [ 509.832997][ T5837] usb 2-1: USB disconnect, device number 6 [ 510.323418][T18807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6151'. [ 510.573632][ T30] audit: type=1326 audit(1768232242.146:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18819 comm="syz.3.6157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4798f749 code=0x7ffc0000 [ 510.661588][ T30] audit: type=1326 audit(1768232242.146:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18819 comm="syz.3.6157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4798f749 code=0x7ffc0000 [ 510.686869][ T5837] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 510.750221][ T30] audit: type=1326 audit(1768232242.186:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18819 comm="syz.3.6157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f2d4798f749 code=0x7ffc0000 [ 510.814977][ T30] audit: type=1326 audit(1768232242.186:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18819 comm="syz.3.6157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4798f749 code=0x7ffc0000 [ 510.866866][ T5837] usb 5-1: Using ep0 maxpacket: 32 [ 510.883236][ T30] audit: type=1326 audit(1768232242.186:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18819 comm="syz.3.6157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4798f749 code=0x7ffc0000 [ 510.935494][ T5837] usb 5-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 510.956813][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.965205][ T5837] usb 5-1: Product: syz [ 511.007234][ T5837] usb 5-1: Manufacturer: syz [ 511.022479][ T5837] usb 5-1: SerialNumber: syz [ 511.044026][ T5837] usb 5-1: config 0 descriptor?? [ 511.079595][ T5837] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 511.334497][ T5830] usb 5-1: USB disconnect, device number 120 [ 511.475957][T18854] can: request_module (can-proto-0) failed. [ 511.508098][T18859] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 512.068250][T18881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6184'. [ 512.227292][T18889] netlink: 'syz.0.6188': attribute type 11 has an invalid length. [ 512.256880][T18889] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.6188'. [ 512.761318][T18921] sit0: entered promiscuous mode [ 512.766564][T18921] netlink: 'syz.1.6203': attribute type 1 has an invalid length. [ 513.226906][ T5837] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 513.396909][ T5837] usb 2-1: Using ep0 maxpacket: 32 [ 513.424359][ T5837] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 513.440110][T18956] xt_bpf: check failed: parse error [ 513.462790][ T5837] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 513.506777][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.515518][ T5837] usb 2-1: Product: syz [ 513.547515][ T5837] usb 2-1: Manufacturer: syz [ 513.555195][ T5837] usb 2-1: SerialNumber: syz [ 513.590353][ T5837] usb 2-1: config 0 descriptor?? [ 513.606188][T18932] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 513.647076][ T5837] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input55 [ 514.026181][T18975] netlink: 'syz.5.6230': attribute type 3 has an invalid length. [ 514.059200][ T5837] usb 2-1: USB disconnect, device number 7 [ 514.065378][ C1] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 514.265475][T18982] xt_hashlimit: max too large, truncated to 1048576 [ 514.280843][T18984] netlink: 'syz.0.6235': attribute type 3 has an invalid length. [ 514.354147][T18984] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6235'. [ 515.037742][ T30] audit: type=1326 audit(1768232246.616:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19017 comm="syz.5.6252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86af8f749 code=0x7ffc0000 [ 515.164745][ T30] audit: type=1326 audit(1768232246.626:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19017 comm="syz.5.6252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7fe86af8f749 code=0x7ffc0000 [ 515.224745][T19025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6255'. [ 515.263354][ T30] audit: type=1326 audit(1768232246.626:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19017 comm="syz.5.6252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86af8f749 code=0x7ffc0000 [ 515.300266][T19025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6255'. [ 515.345206][ T30] audit: type=1326 audit(1768232246.626:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19017 comm="syz.5.6252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86af8f749 code=0x7ffc0000 [ 515.445237][T19034] ip6tnl1: entered promiscuous mode [ 515.469839][ T30] audit: type=1400 audit(1768232246.886:165): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=19027 comm="syz.0.6257" [ 515.933337][T19056] bond6: down delay (8) is not a multiple of miimon (5), value rounded to 5 ms [ 516.038135][T19056] bond6 (unregistering): Released all slaves [ 516.646971][T19099] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6292'. [ 516.937490][T19113] netlink: 'syz.5.6298': attribute type 2 has an invalid length. [ 516.945443][T19113] netlink: 119 bytes leftover after parsing attributes in process `syz.5.6298'. [ 517.318788][T19129] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6307'. [ 517.356903][T19129] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6307'. [ 517.617319][T19143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6314'. [ 517.698173][T19145] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.207024][T19171] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 518.588606][T19183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.637716][T19183] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.697363][T19183] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 519.027651][ T10] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 519.230530][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 519.262614][ T10] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 519.288992][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.322467][ T10] usb 5-1: Product: syz [ 519.335281][ T10] usb 5-1: Manufacturer: syz [ 519.358707][ T10] usb 5-1: SerialNumber: syz [ 519.383067][ T10] usb 5-1: config 0 descriptor?? [ 519.420674][ T10] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 519.452766][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 519.485137][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 519.502866][T19233] bridge4: entered promiscuous mode [ 519.523010][ T10] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 519.577026][ T10] usb 5-1: media controller created [ 519.626215][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 519.715157][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 519.809671][ T10] DVB: Unable to find symbol mt352_attach() [ 519.815651][ T10] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 520.016325][ T10] rc_core: IR keymap rc-dvico-portable not found [ 520.043449][ T10] Registered IR keymap rc-empty [ 520.053618][T19256] netlink: 'syz.0.6366': attribute type 1 has an invalid length. [ 520.071548][ T10] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 520.102555][ T10] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input57 [ 520.149309][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 520.156338][ T10] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 520.227054][T19261] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.6369'. [ 520.240903][ T10] usb 5-1: USB disconnect, device number 121 [ 520.278771][T19261] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 520.310307][T19266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 520.419090][ T10] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 520.565401][T19276] bridge_slave_1: left allmulticast mode [ 520.595552][T19276] bridge_slave_1: left promiscuous mode [ 520.620025][T19276] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.688978][T19276] bridge_slave_0: left allmulticast mode [ 520.706997][T19276] bridge_slave_0: left promiscuous mode [ 520.723469][T19276] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.848379][T19328] netlink: 'syz.0.6400': attribute type 32 has an invalid length. [ 522.355600][T19349] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 522.507327][T19359] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 522.545642][T19359] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 523.069173][ T30] audit: type=1326 audit(1768232254.646:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19383 comm="syz.0.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007f38f749 code=0x7ffc0000 [ 523.177161][ T30] audit: type=1326 audit(1768232254.666:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19383 comm="syz.0.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007f38f749 code=0x7ffc0000 [ 523.272448][ T30] audit: type=1326 audit(1768232254.676:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19383 comm="syz.0.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f007f38f749 code=0x7ffc0000 [ 523.320552][T19392] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 523.388454][ T30] audit: type=1326 audit(1768232254.676:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19383 comm="syz.0.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007f38f749 code=0x7ffc0000 [ 523.506283][ T30] audit: type=1326 audit(1768232254.676:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19383 comm="syz.0.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007f38f749 code=0x7ffc0000 [ 524.037111][T19426] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6446'. [ 524.136841][ T5844] Bluetooth: hci5: command 0x0406 tx timeout [ 524.422090][T19443] trusted_key: encrypted_key: master key parameter is missing [ 524.477503][T19445] xt_cgroup: xt_cgroup: no path or classid specified [ 525.088240][T19478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6472'. [ 525.125868][T19478] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6472'. [ 526.068741][ T10] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 526.256972][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 526.281303][ T10] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 526.316857][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 526.351560][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 526.396827][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 526.424628][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 526.438089][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.489276][ T10] usb 4-1: Product: syz [ 526.507674][ T10] usb 4-1: Manufacturer: syz [ 526.512360][ T10] usb 4-1: SerialNumber: syz [ 526.817078][ T10] usb 4-1: USB disconnect, device number 119 [ 526.955026][T19557] sock: sock_timestamping_bind_phc: sock not bind to device [ 527.197519][T19567] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6513'. [ 527.235034][T19567] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6513'. [ 527.694246][ T30] audit: type=1326 audit(1768232259.266:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19590 comm="syz.3.6525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4798f749 code=0x7ffc0000 [ 527.797138][ T30] audit: type=1326 audit(1768232259.306:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19590 comm="syz.3.6525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4798f749 code=0x7ffc0000 [ 527.896744][ T30] audit: type=1326 audit(1768232259.306:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19590 comm="syz.3.6525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4798f749 code=0x7ffc0000 [ 528.006072][ T30] audit: type=1326 audit(1768232259.306:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19590 comm="syz.3.6525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f2d4798f749 code=0x7ffc0000 [ 528.125326][ T30] audit: type=1326 audit(1768232259.306:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19590 comm="syz.3.6525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4798f749 code=0x7ffc0000 [ 528.157646][T19610] netlink: 'syz.3.6534': attribute type 1 has an invalid length. [ 528.239206][ T30] audit: type=1326 audit(1768232259.306:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19590 comm="syz.3.6525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4798f749 code=0x7ffc0000 [ 528.322370][ T30] audit: type=1326 audit(1768232259.306:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19590 comm="syz.3.6525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4798f749 code=0x7ffc0000 [ 528.436960][ T30] audit: type=1326 audit(1768232259.306:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19590 comm="syz.3.6525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2d4798f749 code=0x7ffc0000 [ 528.501010][ T30] audit: type=1326 audit(1768232259.306:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19590 comm="syz.3.6525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2d4798f749 code=0x7ffc0000 [ 528.681121][T19634] netlink: 'syz.0.6545': attribute type 62 has an invalid length. [ 529.290985][T19670] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6562'. [ 529.520115][T19683] netlink: 'syz.5.6569': attribute type 26 has an invalid length. [ 530.166846][ T5837] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 530.337039][ T5837] usb 5-1: Using ep0 maxpacket: 8 [ 530.348399][ T5837] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 530.379247][ T5837] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 530.415201][ T5837] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 530.446872][ T5837] usb 5-1: Product: syz [ 530.451204][ T5837] usb 5-1: Manufacturer: syz [ 530.455983][ T5837] usb 5-1: SerialNumber: syz [ 530.717098][ T5837] usb 5-1: Invalid connection information received from device [ 530.949277][T19749] openvswitch: netlink: IP tunnel dst address not specified [ 530.950324][ T5837] usb 5-1: USB disconnect, device number 122 [ 531.566896][ T5830] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 531.677212][T19783] x_tables: duplicate underflow at hook 2 [ 531.758249][ T5830] usb 2-1: Using ep0 maxpacket: 16 [ 531.775938][ T5830] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 531.811553][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.836905][ T5830] usb 2-1: Product: syz [ 531.841388][ T5830] usb 2-1: Manufacturer: syz [ 531.866443][ T5830] usb 2-1: SerialNumber: syz [ 531.885234][ T5830] usb 2-1: config 0 descriptor?? [ 532.139246][ T5830] speedtch 2-1:0.0: speedtch_bind: wrong device class 68 [ 532.171896][ T5830] speedtch 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 532.360418][ T5830] usb 2-1: USB disconnect, device number 8 [ 532.408203][T19808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6630'. [ 532.478138][T19815] netlink: 'syz.5.6632': attribute type 21 has an invalid length. [ 533.013146][T19839] x_tables: duplicate entry at hook 2 [ 533.295357][T19848] openvswitch: netlink: Actions may not be safe on all matching packets [ 533.547128][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 533.714408][T19872] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6658'. [ 533.728764][ T10] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 533.761578][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.809197][ T10] usb 6-1: config 0 descriptor?? [ 533.843944][ T10] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 534.254042][ T10] gspca_cpia1: usb_control_msg 03, error -71 [ 534.283054][ T10] gspca_cpia1: usb_control_msg 01, error -71 [ 534.313252][ T10] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 534.340909][ T10] usb 6-1: USB disconnect, device number 12 [ 534.609601][T19920] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 534.772007][ T30] audit: type=1326 audit(1768232266.346:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19927 comm="syz.3.6679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4798f749 code=0x7ffc0000 [ 534.832732][ T30] audit: type=1326 audit(1768232266.376:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19927 comm="syz.3.6679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4798f749 code=0x7ffc0000 [ 534.934023][ T30] audit: type=1326 audit(1768232266.386:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19927 comm="syz.3.6679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f2d4798f749 code=0x7ffc0000 [ 535.063766][ T30] audit: type=1326 audit(1768232266.386:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19927 comm="syz.3.6679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4798f749 code=0x7ffc0000 [ 535.116397][ T30] audit: type=1326 audit(1768232266.386:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19927 comm="syz.3.6679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4798f749 code=0x7ffc0000 [ 535.234477][T19950] xt_bpf: check failed: parse error [ 537.545369][T20074] netlink: 'syz.1.6748': attribute type 15 has an invalid length. [ 539.116874][T20162] xt_TPROXY: Can be used only with -p tcp or -p udp [ 540.267639][T20224] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6811'. [ 540.295293][T20224] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6811'. [ 542.066944][ T5837] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 542.239521][ T5837] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 542.276849][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.318618][ T5837] usb 5-1: config 0 descriptor?? [ 542.339078][ T5837] cp210x 5-1:0.0: cp210x converter detected [ 542.397475][ T5830] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 542.587380][ T5830] usb 4-1: Using ep0 maxpacket: 8 [ 542.606532][ T5830] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 542.638494][ T5830] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 542.653245][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 542.665178][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 542.674575][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 542.690260][ T5830] usb 4-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 542.709478][ T5830] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 542.726924][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.747380][ T5830] usb 4-1: Product: syz [ 542.753893][ T5837] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 542.756122][ T5830] usb 4-1: Manufacturer: syz [ 542.781786][ T5830] usb 4-1: SerialNumber: syz [ 542.788410][ T5837] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 542.802809][ T5830] usb 4-1: config 0 descriptor?? [ 542.817678][ T5837] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 542.850149][ T5837] usb 5-1: cp210x converter now attached to ttyUSB0 [ 542.868475][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 542.892968][ T5837] usb 5-1: USB disconnect, device number 123 [ 542.915795][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 542.945412][ T5837] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 542.992767][ T5837] cp210x 5-1:0.0: device disconnected [ 542.997713][ T10] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 543.041867][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.061533][ T10] usb 6-1: Product: syz [ 543.067484][ T10] usb 6-1: Manufacturer: syz [ 543.073322][ T10] usb 6-1: SerialNumber: syz [ 543.104803][ T10] usb 6-1: config 0 descriptor?? [ 543.129203][ T10] hub 6-1:0.0: bad descriptor, ignoring hub [ 543.147732][ T10] hub 6-1:0.0: probe with driver hub failed with error -5 [ 543.171619][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 543.243644][ T5830] iowarrior 4-1:0.0: IOWarrior product=0x1505, serial=42424242 interface=0 now attached to iowarrior0 [ 543.283990][ T10] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 543.307201][ T5830] usb 4-1: USB disconnect, device number 120 [ 543.378167][ T10] usb 6-1: USB disconnect, device number 13 [ 543.457181][T20385] udevd[20385]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 543.857091][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 544.046843][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 544.070863][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 544.101251][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.140634][ T10] usb 2-1: Product: syz [ 544.156171][ T10] usb 2-1: Manufacturer: syz [ 544.173837][ T10] usb 2-1: SerialNumber: syz [ 544.202221][ T10] usb 2-1: config 0 descriptor?? [ 544.222118][ T10] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a [ 544.616906][ T5830] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 544.625989][ T10] gspca_sn9c20x: Write register 1001 failed -71 [ 544.666556][ T10] gspca_sn9c20x: Device initialization failed [ 544.682997][ T10] gspca_sn9c20x 2-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 544.697338][T20455] binder: BC_ACQUIRE_RESULT not supported [ 544.703195][T20455] binder: 20454:20455 ioctl c0306201 2000000001c0 returned -22 [ 544.707323][ T10] usb 2-1: USB disconnect, device number 9 [ 544.796633][T20463] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6889'. [ 544.816813][ T5830] usb 5-1: Using ep0 maxpacket: 8 [ 544.827353][ T5830] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 544.861999][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.910672][ T5830] usb 5-1: config 0 descriptor?? [ 545.138574][T20482] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6894'. [ 545.148931][ T5830] usb 5-1: string descriptor 0 read error: -71 [ 545.187044][ T5830] uvcvideo 5-1:0.0: Found multiple Units with ID 1 [ 545.204143][ T5830] uvcvideo 5-1:0.0: Found UVC 0.00 device (2833:0201) [ 545.226844][ T6254] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 545.238125][ T5830] uvcvideo 5-1:0.0: No valid video chain found. [ 545.276983][ T5830] usb 5-1: USB disconnect, device number 124 [ 545.371628][T20497] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6899'. [ 545.397026][ T6254] usb 4-1: Using ep0 maxpacket: 16 [ 545.414009][ T6254] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.447026][ T6254] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 545.480204][ T6254] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 545.506821][ T6254] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.536817][ T6254] usb 4-1: Product: syz [ 545.547139][ T6254] usb 4-1: Manufacturer: syz [ 545.552187][ T6254] usb 4-1: SerialNumber: syz [ 545.601430][T20509] Timeout policy `syz0' can only be used by L3 protocol number 8939 [ 545.732630][T20511] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6905'. [ 545.794332][T20515] binder: 20514:20515 ioctl c0306201 200000000dc0 returned -14 [ 545.807824][ T6254] usb 4-1: 0:2 : does not exist [ 545.833930][ T6254] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 545.948255][ T6254] usb 4-1: USB disconnect, device number 121 [ 546.036616][T20385] udevd[20385]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 546.377092][ T31] INFO: task syz.2.3831:13950 blocked for more than 143 seconds. [ 546.386029][ T31] Not tainted syzkaller #0 [ 546.442315][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 546.456606][ T31] task:syz.2.3831 state:D stack:28184 pid:13950 tgid:13949 ppid:5846 task_flags:0x400040 flags:0x00080002 [ 546.484574][ T31] Call Trace: [ 546.496746][ T31] [ 546.505016][ T31] __schedule+0x149b/0x4fd0 [ 546.514091][ T31] ? irqentry_exit+0x5e8/0x670 [ 546.523628][ T31] ? __pfx___schedule+0x10/0x10 [ 546.536121][ T31] ? schedule+0x91/0x360 [ 546.552382][ T31] schedule+0x165/0x360 [ 546.562665][ T31] schedule_preempt_disabled+0x13/0x30 [ 546.574336][ T31] __mutex_lock+0x7e6/0x1350 [ 546.585231][ T31] ? __mutex_lock+0x5bb/0x1350 [ 546.598153][ T31] ? usbdev_open+0x16e/0x760 [ 546.605957][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 546.612355][ T31] ? bus_find_device+0x273/0x2b0 [ 546.619833][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 546.625674][ T31] ? __pfx_kobject_get_unless_zero+0x10/0x10 [ 546.637050][ T31] ? usbdev_open+0xa7/0x760 [ 546.641892][ T31] usbdev_open+0x16e/0x760 [ 546.650680][ T31] ? do_raw_spin_lock+0x121/0x290 [ 546.655885][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 546.664826][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 546.671463][ T31] chrdev_open+0x4cc/0x5e0 [ 546.676120][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 546.681852][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 546.691362][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 546.696448][ T31] do_dentry_open+0x7ce/0x1420 [ 546.702182][ T31] vfs_open+0x3b/0x340 [ 546.708255][ T31] ? path_openat+0x33f3/0x3dd0 [ 546.713339][ T31] path_openat+0x340e/0x3dd0 [ 546.718450][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 546.724229][ T31] ? __pfx_filemap_map_pages+0x10/0x10 [ 546.730766][ T31] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 546.737786][ T31] ? getname_flags+0xb8/0x540 [ 546.742854][ T31] ? __pfx_path_openat+0x10/0x10 [ 546.748598][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 546.753887][ T31] do_filp_open+0x1fa/0x410 [ 546.759784][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 546.764969][ T31] ? _raw_spin_unlock+0x28/0x50 [ 546.771536][ T31] ? alloc_fd+0x64c/0x6c0 [ 546.776225][ T31] do_sys_openat2+0x121/0x200 [ 546.786440][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 546.793017][ T31] ? exc_page_fault+0x71/0xd0 [ 546.799790][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 546.805519][ T31] __x64_sys_openat+0x138/0x170 [ 546.812141][ T31] do_syscall_64+0xec/0xf80 [ 546.817727][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.824227][ T31] ? trace_irq_disable+0x37/0x100 [ 546.830435][ T31] ? clear_bhb_loop+0x60/0xb0 [ 546.835393][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.842750][ T31] RIP: 0033:0x7fbe1138df90 [ 546.847756][ T31] RSP: 002b:00007fbe121ecb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 546.856250][ T31] RAX: ffffffffffffffda RBX: 0000000000103381 RCX: 00007fbe1138df90 [ 546.866278][ T31] RDX: 0000000000103381 RSI: 00007fbe121ecc10 RDI: 00000000ffffff9c [ 546.875828][ T31] RBP: 00007fbe121ecc10 R08: 0000000000000000 R09: 0000000000000000 [ 546.884489][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 546.893999][ T31] R13: 00007fbe115e6038 R14: 00007fbe115e5fa0 R15: 00007fbe1170fa28 [ 546.902831][ T31] [ 546.906067][ T31] [ 546.906067][ T31] Showing all locks held in the system: [ 546.951977][ T31] 1 lock held by khungtaskd/31: [ 546.964681][ T31] #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 546.984952][ T31] 2 locks held by getty/5586: [ 546.990294][ T31] #0: ffff888034f0c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 547.001218][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 547.012508][ T31] 5 locks held by kworker/1:7/5925: [ 547.021194][ T31] 1 lock held by syz.2.3831/13950: [ 547.027089][ T31] #0: ffff888142b80198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 547.037661][ T31] 3 locks held by syz.4.6915/20552: [ 547.043403][ T31] #0: ffffffff8f840ad0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 547.054248][ T31] #1: ffffffff8f311e48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 [ 547.065602][ T31] #2: ffffffff8df475f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2b1/0x6e0 [ 547.078422][ T31] [ 547.085937][ T31] ============================================= [ 547.085937][ T31] [ 547.096342][ T31] NMI backtrace for cpu 0 [ 547.096370][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 547.096390][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 547.096402][ T31] Call Trace: [ 547.096410][ T31] [ 547.096418][ T31] dump_stack_lvl+0xe8/0x150 [ 547.096446][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 547.096470][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 547.096498][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 547.096533][ T31] sys_info+0x135/0x170 [ 547.096553][ T31] watchdog+0xf95/0xfe0 [ 547.096581][ T31] ? watchdog+0x20a/0xfe0 [ 547.096608][ T31] kthread+0x711/0x8a0 [ 547.096632][ T31] ? __pfx_watchdog+0x10/0x10 [ 547.096656][ T31] ? __pfx_kthread+0x10/0x10 [ 547.096676][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 547.096690][ T31] ? __pfx_kthread+0x10/0x10 [ 547.096709][ T31] ret_from_fork+0x510/0xa50 [ 547.096726][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 547.096742][ T31] ? __switch_to+0xc9e/0x1480 [ 547.096766][ T31] ? __pfx_kthread+0x10/0x10 [ 547.096787][ T31] ret_from_fork_asm+0x1a/0x30 [ 547.096822][ T31] [ 547.214389][ T31] Sending NMI from CPU 0 to CPUs 1: [ 547.220115][ C1] NMI backtrace for cpu 1 [ 547.220134][ C1] CPU: 1 UID: 0 PID: 5925 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT(full) [ 547.220152][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 547.220163][ C1] Workqueue: usb_hub_wq hub_event [ 547.220189][ C1] RIP: 0010:__lock_acquire+0x6a6/0x2cf0 [ 547.220207][ C1] Code: 08 4c 89 ee ba 04 00 00 00 e8 96 44 00 00 85 c0 0f 84 99 0d 00 00 41 8b 45 20 a9 00 00 18 00 0f 84 bc 00 00 00 4c 8b 74 24 08 <4c> 89 f7 4c 89 ee ba 08 00 00 00 e8 6a 44 00 00 31 ed 85 c0 0f 84 [ 547.220221][ C1] RSP: 0018:ffffc900046a6330 EFLAGS: 00000046 [ 547.220234][ C1] RAX: 0000000000000004 RBX: ffff8880319e0c18 RCX: 0000000000000005 [ 547.220244][ C1] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000000000000000 [ 547.220253][ C1] RBP: ffff8880319e0bf8 R08: ffffffff8173fd65 R09: ffffffff8df41aa0 [ 547.220265][ C1] R10: ffffc900046a6638 R11: ffffffff81acf460 R12: 0000000000000004 [ 547.220276][ C1] R13: ffff8880319e0bf8 R14: ffff8880319e0000 R15: 0000000000000005 [ 547.220288][ C1] FS: 0000000000000000(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 547.220301][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 547.220312][ C1] CR2: 0000001b30f2421c CR3: 00000000689ac000 CR4: 00000000003526f0 [ 547.220327][ C1] Call Trace: [ 547.220333][ C1] [ 547.220344][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 547.220360][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 547.220380][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 547.220395][ C1] lock_acquire+0x107/0x340 [ 547.220408][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 547.220426][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 547.220442][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 547.220460][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 547.220476][ C1] unwind_next_frame+0xc2/0x23d0 [ 547.220491][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 547.220515][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 547.220531][ C1] ? ret_from_fork+0x510/0xa50 [ 547.220545][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 547.220682][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 547.220721][ C1] arch_stack_walk+0x11c/0x150 [ 547.220742][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 547.220763][ C1] stack_trace_save+0x9c/0xe0 [ 547.220783][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 547.220804][ C1] ? stack_trace_save+0x9c/0xe0 [ 547.220823][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 547.220842][ C1] kasan_save_track+0x3e/0x80 [ 547.220858][ C1] ? kasan_save_track+0x3e/0x80 [ 547.220878][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 547.220893][ C1] ? __kmalloc_node_track_caller_noprof+0x575/0x820 [ 547.220909][ C1] ? kmalloc_reserve+0x136/0x290 [ 547.220929][ C1] ? __alloc_skb+0x204/0x3a0 [ 547.220944][ C1] ? __netdev_alloc_skb+0xc1/0x850 [ 547.220959][ C1] ? ath6kl_usb_post_recv_transfers+0x207/0x6f0 [ 547.220977][ C1] ? ath6kl_usb_power_on+0x6a/0x280 [ 547.220992][ C1] ? ath6kl_core_init+0x1d9/0x10f0 [ 547.221005][ C1] ? ath6kl_usb_probe+0x14df/0x15d0 [ 547.221020][ C1] ? usb_probe_interface+0x668/0xc90 [ 547.221039][ C1] ? really_probe+0x26d/0xad0 [ 547.221060][ C1] ? __driver_probe_device+0x18c/0x320 [ 547.221077][ C1] ? driver_probe_device+0x4f/0x240 [ 547.221095][ C1] ? __device_attach_driver+0x279/0x430 [ 547.221111][ C1] ? bus_for_each_drv+0x251/0x2e0 [ 547.221132][ C1] ? __device_attach+0x2b8/0x430 [ 547.221147][ C1] ? device_initial_probe+0xa1/0xd0 [ 547.221161][ C1] ? bus_probe_device+0x12a/0x220 [ 547.221180][ C1] ? device_add+0x7b6/0xb80 [ 547.221194][ C1] ? usb_set_configuration+0x1a87/0x2110 [ 547.221213][ C1] ? usb_generic_driver_probe+0x8d/0x150 [ 547.221232][ C1] ? usb_probe_device+0x1c4/0x3c0 [ 547.221249][ C1] ? really_probe+0x26d/0xad0 [ 547.221265][ C1] ? __driver_probe_device+0x18c/0x320 [ 547.221283][ C1] ? driver_probe_device+0x4f/0x240 [ 547.221299][ C1] ? __device_attach_driver+0x279/0x430 [ 547.221316][ C1] ? bus_for_each_drv+0x251/0x2e0 [ 547.221335][ C1] ? __device_attach+0x2b8/0x430 [ 547.221350][ C1] ? device_initial_probe+0xa1/0xd0 [ 547.221365][ C1] ? bus_probe_device+0x12a/0x220 [ 547.221383][ C1] ? device_add+0x7b6/0xb80 [ 547.221397][ C1] ? usb_new_device+0xa39/0x1720 [ 547.221412][ C1] ? hub_event+0x29b1/0x4ef0 [ 547.221428][ C1] ? process_scheduled_works+0xad1/0x1770 [ 547.221443][ C1] ? worker_thread+0x8a0/0xda0 [ 547.221458][ C1] ? kthread+0x711/0x8a0 [ 547.221475][ C1] ? ret_from_fork+0x510/0xa50 [ 547.221491][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 547.221519][ C1] __kasan_kmalloc+0x93/0xb0 [ 547.221537][ C1] __kmalloc_node_track_caller_noprof+0x575/0x820 [ 547.221553][ C1] ? __alloc_skb+0x204/0x3a0 [ 547.221569][ C1] ? __alloc_skb+0x204/0x3a0 [ 547.221584][ C1] kmalloc_reserve+0x136/0x290 [ 547.221613][ C1] ? __alloc_skb+0x198/0x3a0 [ 547.221630][ C1] __alloc_skb+0x204/0x3a0 [ 547.221648][ C1] __netdev_alloc_skb+0xc1/0x850 [ 547.221664][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 547.221683][ C1] ath6kl_usb_post_recv_transfers+0x207/0x6f0 [ 547.221706][ C1] ath6kl_usb_power_on+0x6a/0x280 [ 547.221723][ C1] ath6kl_core_init+0x1d9/0x10f0 [ 547.221740][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 547.221757][ C1] ? __pfx_ath6kl_core_init+0x10/0x10 [ 547.221771][ C1] ? __asan_memcpy+0x40/0x70 [ 547.221791][ C1] ? ath6kl_core_create+0x7fb/0x9a0 [ 547.221806][ C1] ath6kl_usb_probe+0x14df/0x15d0 [ 547.221827][ C1] usb_probe_interface+0x668/0xc90 [ 547.221939][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 547.221960][ C1] really_probe+0x26d/0xad0 [ 547.222022][ C1] __driver_probe_device+0x18c/0x320 [ 547.222041][ C1] driver_probe_device+0x4f/0x240 [ 547.222060][ C1] __device_attach_driver+0x279/0x430 [ 547.222078][ C1] bus_for_each_drv+0x251/0x2e0 [ 547.222099][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 547.222115][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 547.222135][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 547.222152][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 547.222168][ C1] __device_attach+0x2b8/0x430 [ 547.222184][ C1] ? __pfx___device_attach+0x10/0x10 [ 547.222201][ C1] ? _raw_spin_unlock+0x28/0x50 [ 547.222216][ C1] device_initial_probe+0xa1/0xd0 [ 547.222232][ C1] bus_probe_device+0x12a/0x220 [ 547.222251][ C1] ? device_add+0x726/0xb80 [ 547.222266][ C1] device_add+0x7b6/0xb80 [ 547.222282][ C1] usb_set_configuration+0x1a87/0x2110 [ 547.222309][ C1] usb_generic_driver_probe+0x8d/0x150 [ 547.222328][ C1] usb_probe_device+0x1c4/0x3c0 [ 547.222349][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 547.222367][ C1] really_probe+0x26d/0xad0 [ 547.222385][ C1] __driver_probe_device+0x18c/0x320 [ 547.222403][ C1] driver_probe_device+0x4f/0x240 [ 547.222421][ C1] __device_attach_driver+0x279/0x430 [ 547.222439][ C1] bus_for_each_drv+0x251/0x2e0 [ 547.222458][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 547.222475][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 547.222493][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 547.222505][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 547.222519][ C1] __device_attach+0x2b8/0x430 [ 547.222536][ C1] ? __pfx___device_attach+0x10/0x10 [ 547.222553][ C1] ? _raw_spin_unlock+0x28/0x50 [ 547.222569][ C1] device_initial_probe+0xa1/0xd0 [ 547.222586][ C1] bus_probe_device+0x12a/0x220 [ 547.222605][ C1] ? device_add+0x726/0xb80 [ 547.222620][ C1] device_add+0x7b6/0xb80 [ 547.222637][ C1] usb_new_device+0xa39/0x1720 [ 547.222657][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 547.222675][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 547.222692][ C1] hub_event+0x29b1/0x4ef0 [ 547.222726][ C1] ? __pfx_hub_event+0x10/0x10 [ 547.222751][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 547.222770][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 547.222784][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 547.222800][ C1] process_scheduled_works+0xad1/0x1770 [ 547.222825][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 547.222840][ C1] ? do_raw_spin_lock+0x121/0x290 [ 547.222864][ C1] worker_thread+0x8a0/0xda0 [ 547.222888][ C1] kthread+0x711/0x8a0 [ 547.222906][ C1] ? __pfx_worker_thread+0x10/0x10 [ 547.222922][ C1] ? __pfx_kthread+0x10/0x10 [ 547.222941][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 547.222955][ C1] ? __pfx_kthread+0x10/0x10 [ 547.222973][ C1] ret_from_fork+0x510/0xa50 [ 547.222989][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 547.223002][ C1] ? __switch_to+0xc9e/0x1480 [ 547.223027][ C1] ? __pfx_kthread+0x10/0x10 [ 547.223045][ C1] ret_from_fork_asm+0x1a/0x30 [ 547.223074][ C1] [ 548.088243][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 548.095214][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 548.104427][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 548.114819][ T31] Call Trace: [ 548.118207][ T31] [ 548.121397][ T31] vpanic+0x1e0/0x670 [ 548.125474][ T31] panic+0xb9/0xc0 [ 548.129467][ T31] ? __pfx_panic+0x10/0x10 [ 548.134094][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 548.139669][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 548.146106][ T31] watchdog+0xfdf/0xfe0 [ 548.150271][ T31] ? watchdog+0x20a/0xfe0 [ 548.154874][ T31] kthread+0x711/0x8a0 [ 548.159107][ T31] ? __pfx_watchdog+0x10/0x10 [ 548.164041][ T31] ? __pfx_kthread+0x10/0x10 [ 548.168975][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 548.174276][ T31] ? __pfx_kthread+0x10/0x10 [ 548.178912][ T31] ret_from_fork+0x510/0xa50 [ 548.183710][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 548.188815][ T31] ? __switch_to+0xc9e/0x1480 [ 548.193490][ T31] ? __pfx_kthread+0x10/0x10 [ 548.198258][ T31] ret_from_fork_asm+0x1a/0x30 [ 548.203335][ T31] [ 548.207223][ T31] Kernel Offset: disabled [ 548.212100][ T31] Rebooting in 86400 seconds..