last executing test programs: 3.935542481s ago: executing program 2 (id=5724): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x80200, 0x0) read$FUSE(r0, &(0x7f0000002b00)={0x2020}, 0x2020) 3.843470994s ago: executing program 2 (id=5726): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, 0x0) 3.757330938s ago: executing program 2 (id=5731): fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getrusage(0x1, &(0x7f0000000880)) 1.385954008s ago: executing program 2 (id=5735): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000380)=0x3) 1.289397046s ago: executing program 2 (id=5740): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c000140060404000d0404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 1.147391395s ago: executing program 2 (id=5745): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 693.156974ms ago: executing program 0 (id=5758): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x0) 693.009783ms ago: executing program 1 (id=5759): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f0000000000)) 606.613955ms ago: executing program 1 (id=5761): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="9c", 0x1}], 0x1, 0xffffffff, 0x0) 539.434518ms ago: executing program 3 (id=5762): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x2000000, 0x80000000, 0x0, 0x0) 538.766003ms ago: executing program 0 (id=5771): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='btrfs\x00', 0x3010003, &(0x7f0000000080)='norecovery') 512.75171ms ago: executing program 1 (id=5763): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000003c40), 0x0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000003c80)=0x1ff, 0x80000001) 435.793299ms ago: executing program 0 (id=5765): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000040)) 434.209149ms ago: executing program 3 (id=5766): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) 345.006009ms ago: executing program 3 (id=5767): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x891f, &(0x7f0000000000)={'wlan1\x00', @ifru_addrs=@tipc=@name={0x1e, 0x2, 0x1, {{0x2}, 0x1}}}) 312.812138ms ago: executing program 1 (id=5768): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read(r0, 0x0, 0x36) 272.97678ms ago: executing program 0 (id=5769): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 272.506841ms ago: executing program 3 (id=5770): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000100001a4745c345971df160003000000060001"], 0x1c}}, 0x0) 173.518977ms ago: executing program 1 (id=5772): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000002000600", 0x1c) 165.641408ms ago: executing program 3 (id=5773): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="9c", 0x1}], 0x1, 0xffffffff, 0x0) 147.964091ms ago: executing program 0 (id=5774): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f0000000000)) 62.887412ms ago: executing program 1 (id=5775): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x2000000, 0x80000000, 0x0, 0x0) 682.7µs ago: executing program 0 (id=5776): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'batadv0\x00', &(0x7f0000000240)=@ethtool_stats}) 0s ago: executing program 3 (id=5784): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): rialNumber=0 [ 163.330007][ T10] usb 1-1: config 0 descriptor?? [ 163.370483][ T10] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 163.550511][ T5919] usb 1-1: USB disconnect, device number 11 [ 164.027146][ T5831] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 164.035966][ T5831] Bluetooth: hci1: Injecting HCI hardware error event [ 164.043616][ T5831] Bluetooth: hci1: hardware error 0x00 [ 164.127989][T10009] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 164.135266][T10009] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 164.141674][T10009] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 164.155025][T10009] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 164.227111][T10019] sit0: entered promiscuous mode [ 164.241067][T10019] netlink: 'syz.0.1957': attribute type 1 has an invalid length. [ 164.249486][T10019] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1957'. [ 164.266626][ T5839] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 164.286249][T10023] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 164.292793][T10023] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 164.337578][T10023] vhci_hcd vhci_hcd.0: Device attached [ 164.351593][T10026] vhci_hcd vhci_hcd.0: port 0 already used [ 164.370223][T10024] vhci_hcd: connection closed [ 164.376510][ T1148] vhci_hcd: stop threads [ 164.386248][ T1148] vhci_hcd: release socket [ 164.401600][ T1148] vhci_hcd: disconnect device [ 164.730092][T10056] netlink: 'syz.2.1972': attribute type 1 has an invalid length. [ 164.747339][T10056] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1972'. [ 165.268458][T10089] sit0: entered promiscuous mode [ 165.295234][T10089] netlink: 'syz.3.1988': attribute type 1 has an invalid length. [ 165.310864][T10089] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1988'. [ 165.426586][T10097] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 165.433147][T10097] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 165.445076][T10097] vhci_hcd vhci_hcd.0: Device attached [ 165.456363][T10097] vhci_hcd vhci_hcd.0: port 0 already used [ 165.463801][T10099] vhci_hcd: connection closed [ 165.464103][ T1148] vhci_hcd: stop threads [ 165.479550][ T1148] vhci_hcd: release socket [ 165.496931][ T1148] vhci_hcd: disconnect device [ 165.623359][T10106] netlink: 'syz.0.2002': attribute type 1 has an invalid length. [ 165.635057][T10106] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2002'. [ 165.860421][T10123] sit0: entered promiscuous mode [ 165.876230][T10123] netlink: 'syz.1.2001': attribute type 1 has an invalid length. [ 165.884079][T10123] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2001'. [ 166.003949][T10118] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 166.011464][T10118] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 166.106551][ T5831] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 166.177498][T10135] netlink: 'syz.1.2006': attribute type 1 has an invalid length. [ 166.209694][T10135] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2006'. [ 166.462292][T10148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.500664][T10148] bond0: (slave rose0): Enslaving as an active interface with an up link [ 166.778655][T10154] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 166.784977][T10154] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 167.026609][ T5888] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 167.190030][ T5888] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 167.218772][ T5888] usb 3-1: config 0 has no interface number 0 [ 167.242319][ T5888] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 167.262657][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.291853][ T5888] usb 3-1: config 0 descriptor?? [ 167.325686][ T5888] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 167.555377][ T5888] usb 3-1: USB disconnect, device number 10 [ 167.860555][T10215] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2035'. [ 168.256510][ T5888] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 168.416655][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 168.433857][ T5888] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 168.448996][ T5888] usb 1-1: config 0 has no interface number 0 [ 168.459504][ T5888] usb 1-1: config 0 interface 133 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 168.474692][ T5888] usb 1-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 168.488423][ T5888] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 168.497692][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.505686][ T5888] usb 1-1: Product: syz [ 168.510246][ T5888] usb 1-1: Manufacturer: syz [ 168.514862][ T5888] usb 1-1: SerialNumber: syz [ 168.523296][ T5888] usb 1-1: config 0 descriptor?? [ 168.743994][ T5888] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 168.756009][ T5888] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 168.769816][ T5888] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 168.781603][ T5888] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 168.794646][ T5888] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 168.808731][ T5888] usb 1-1: USB disconnect, device number 12 [ 168.820479][ T5888] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 168.832808][ T5888] keyspan 1-1:0.133: device disconnected [ 168.836706][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 169.533717][ T24] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 169.706249][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 169.726581][ T24] usb 4-1: config 0 has no interface number 0 [ 169.732735][ T24] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 169.770568][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.786536][T10284] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 169.800320][ T24] usb 4-1: config 0 descriptor?? [ 169.821184][ T24] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 170.035189][ T24] usb 4-1: USB disconnect, device number 7 [ 170.906714][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 171.094526][T10354] netlink: 'syz.3.2087': attribute type 4 has an invalid length. [ 171.147625][T10354] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2087'. [ 171.674077][T10392] netlink: 'syz.1.2101': attribute type 4 has an invalid length. [ 171.748101][T10392] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2101'. [ 171.873280][T10405] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR' [ 171.906870][T10405] CPU: 0 UID: 0 PID: 10405 Comm: syz.3.2105 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 171.906902][T10405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 171.906919][T10405] Call Trace: [ 171.906927][T10405] [ 171.906935][T10405] dump_stack_lvl+0x189/0x250 [ 171.906974][T10405] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.906995][T10405] ? __pfx__printk+0x10/0x10 [ 171.907015][T10405] ? kernfs_path_from_node+0x2c/0x260 [ 171.907040][T10405] ? kernfs_path_from_node+0x2c/0x260 [ 171.907062][T10405] ? kernfs_path_from_node+0x2c/0x260 [ 171.907088][T10405] ? kernfs_path_from_node+0x22c/0x260 [ 171.907110][T10405] ? kernfs_path_from_node+0x2c/0x260 [ 171.907138][T10405] sysfs_warn_dup+0x8e/0xa0 [ 171.907162][T10405] sysfs_do_create_link_sd+0xc0/0x110 [ 171.907189][T10405] device_add_class_symlinks+0x1cf/0x240 [ 171.907213][T10405] device_add+0x475/0xb50 [ 171.907236][T10405] wiphy_register+0x1ba6/0x28d0 [ 171.907278][T10405] ? __pfx_wiphy_register+0x10/0x10 [ 171.907298][T10405] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 171.907332][T10405] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 171.907362][T10405] ieee80211_register_hw+0x33e1/0x4120 [ 171.907397][T10405] ? ieee80211_register_hw+0x14a1/0x4120 [ 171.907423][T10405] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 171.907445][T10405] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 171.907473][T10405] ? __hrtimer_setup+0x187/0x210 [ 171.907489][T10405] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 171.907515][T10405] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 171.907570][T10405] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 171.907589][T10405] ? trace_kmalloc+0x1f/0xd0 [ 171.907606][T10405] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 171.907626][T10405] ? kstrndup+0xbf/0x160 [ 171.907660][T10405] hwsim_new_radio_nl+0xea4/0x1b10 [ 171.907684][T10405] ? __pfx___nla_validate_parse+0x10/0x10 [ 171.907719][T10405] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 171.907754][T10405] ? __nla_parse+0x40/0x60 [ 171.907776][T10405] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 171.907804][T10405] genl_family_rcv_msg_doit+0x215/0x300 [ 171.907830][T10405] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 171.907863][T10405] ? bpf_lsm_capable+0x9/0x20 [ 171.907885][T10405] ? security_capable+0x7e/0x2e0 [ 171.907911][T10405] genl_rcv_msg+0x60e/0x790 [ 171.907936][T10405] ? __pfx_genl_rcv_msg+0x10/0x10 [ 171.907953][T10405] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 171.907991][T10405] netlink_rcv_skb+0x205/0x470 [ 171.908015][T10405] ? __pfx_genl_rcv_msg+0x10/0x10 [ 171.908035][T10405] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 171.908077][T10405] ? down_read+0x1ad/0x2e0 [ 171.908104][T10405] genl_rcv+0x28/0x40 [ 171.908119][T10405] netlink_unicast+0x758/0x8d0 [ 171.908153][T10405] netlink_sendmsg+0x805/0xb30 [ 171.908187][T10405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.908213][T10405] ? aa_sock_msg_perm+0xf1/0x1d0 [ 171.908235][T10405] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 171.908258][T10405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.908281][T10405] __sock_sendmsg+0x21c/0x270 [ 171.908306][T10405] ____sys_sendmsg+0x505/0x830 [ 171.908338][T10405] ? __pfx_____sys_sendmsg+0x10/0x10 [ 171.908374][T10405] ? import_iovec+0x74/0xa0 [ 171.908403][T10405] ___sys_sendmsg+0x21f/0x2a0 [ 171.908430][T10405] ? __pfx____sys_sendmsg+0x10/0x10 [ 171.908496][T10405] ? __fget_files+0x2a/0x420 [ 171.908518][T10405] ? __fget_files+0x3a0/0x420 [ 171.908553][T10405] __x64_sys_sendmsg+0x19b/0x260 [ 171.908582][T10405] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 171.908619][T10405] ? rcu_is_watching+0x15/0xb0 [ 171.908643][T10405] ? do_syscall_64+0xbe/0x3b0 [ 171.908669][T10405] do_syscall_64+0xfa/0x3b0 [ 171.908689][T10405] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.908709][T10405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.908726][T10405] ? clear_bhb_loop+0x60/0xb0 [ 171.908748][T10405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.908763][T10405] RIP: 0033:0x7f5d7498e929 [ 171.908786][T10405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.908800][T10405] RSP: 002b:00007f5d7577c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.908826][T10405] RAX: ffffffffffffffda RBX: 00007f5d74bb5fa0 RCX: 00007f5d7498e929 [ 171.908839][T10405] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 171.908851][T10405] RBP: 00007f5d74a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 171.908862][T10405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.908872][T10405] R13: 0000000000000000 R14: 00007f5d74bb5fa0 R15: 00007ffd8b478888 [ 171.908908][T10405] [ 172.476528][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 172.631048][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 172.638647][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.654302][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 172.665411][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 172.674545][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.682622][ T10] usb 1-1: Product: syz [ 172.687534][ T10] usb 1-1: Manufacturer: syz [ 172.692150][ T10] usb 1-1: SerialNumber: syz [ 172.702695][ T10] usb 1-1: config 0 descriptor?? [ 172.755957][T10425] mmap: syz.2.2116 (10425): VmData 37478400 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 172.939155][ T10] usb 1-1: USB disconnect, device number 13 [ 172.986568][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 173.413506][T10472] netlink: 'syz.1.2138': attribute type 4 has an invalid length. [ 173.566790][ T24] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 173.729057][ T24] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 173.746514][ T24] usb 3-1: config 0 has no interface number 1 [ 173.756563][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 173.761738][ T24] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 173.783757][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.805812][ T24] usb 3-1: config 0 descriptor?? [ 173.906631][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 173.924849][ T10] usb 4-1: config 3 has an invalid interface number: 173 but max is 0 [ 173.942131][ T10] usb 4-1: config 3 has no interface number 0 [ 173.953622][ T10] usb 4-1: config 3 interface 173 has no altsetting 0 [ 173.965542][ T10] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=5a.0b [ 173.985695][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.999165][ T10] usb 4-1: Product: syz [ 174.003354][ T10] usb 4-1: Manufacturer: syz [ 174.008587][ T10] usb 4-1: SerialNumber: syz [ 174.055573][ T24] qcserial 3-1:0.2: Qualcomm USB modem converter detected [ 174.248252][ T10] usb 4-1: selecting invalid altsetting 3 [ 174.254268][ T10] comedi comedi0: could not set alternate setting 3 in high speed [ 174.262237][ T10] usbdux 4-1:3.173: driver 'usbdux' failed to auto-configure device. [ 174.272072][ T24] usb 3-1: USB disconnect, device number 11 [ 174.282529][ T10] usbdux 4-1:3.173: probe with driver usbdux failed with error -22 [ 174.282721][ T24] qcserial 3-1:0.2: device disconnected [ 174.298561][ T5888] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 174.321641][ T10] usb 4-1: USB disconnect, device number 8 [ 174.456745][ T5888] usb 2-1: Using ep0 maxpacket: 8 [ 174.465162][ T5888] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 174.474307][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.482359][ T5888] usb 2-1: Product: syz [ 174.486557][ T5888] usb 2-1: Manufacturer: syz [ 174.491148][ T5888] usb 2-1: SerialNumber: syz [ 174.500381][ T5888] usb 2-1: config 0 descriptor?? [ 174.512781][ T5888] gspca_main: se401-2.14.0 probing 047d:5003 [ 174.825362][T10519] netlink: 'syz.0.2168': attribute type 16 has an invalid length. [ 174.833418][T10519] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2168'. [ 174.850629][T10519] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.918478][ T5888] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 174.929958][ T5888] se401 2-1:0.0: probe with driver se401 failed with error -71 [ 174.950498][ T5888] usb 2-1: USB disconnect, device number 12 [ 175.191629][T10544] netlink: 'syz.3.2171': attribute type 4 has an invalid length. [ 175.281864][T10550] netlink: 'syz.3.2173': attribute type 16 has an invalid length. [ 175.293782][T10550] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2173'. [ 175.304537][T10550] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.371621][T10554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2175'. [ 175.387736][ T5888] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 175.452756][T10560] random: crng reseeded on system resumption [ 175.550187][ T5888] usb 3-1: Using ep0 maxpacket: 8 [ 175.559546][ T5888] usb 3-1: config 3 has an invalid interface number: 173 but max is 0 [ 175.572610][ T5888] usb 3-1: config 3 has no interface number 0 [ 175.579484][ T5888] usb 3-1: config 3 interface 173 has no altsetting 0 [ 175.588789][ T5888] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=5a.0b [ 175.598939][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.608561][ T5888] usb 3-1: Product: syz [ 175.612712][ T5888] usb 3-1: Manufacturer: syz [ 175.617414][ T5888] usb 3-1: SerialNumber: syz [ 175.726534][ T5984] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 175.841147][ T5888] usb 3-1: selecting invalid altsetting 3 [ 175.846959][ T5888] comedi comedi0: could not set alternate setting 3 in high speed [ 175.854765][ T5888] usbdux 3-1:3.173: driver 'usbdux' failed to auto-configure device. [ 175.866134][ T5888] usbdux 3-1:3.173: probe with driver usbdux failed with error -22 [ 175.876175][ T5888] usb 3-1: USB disconnect, device number 12 [ 175.882473][ T5984] usb 2-1: Using ep0 maxpacket: 16 [ 175.895240][ T5984] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.906047][ T5984] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 175.916790][ T5984] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 175.928107][ T5984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.936142][ T5984] usb 2-1: Product: syz [ 175.941259][ T5984] usb 2-1: Manufacturer: syz [ 175.945882][ T5984] usb 2-1: SerialNumber: syz [ 175.961282][ T5984] usb 2-1: config 0 descriptor?? [ 176.178741][ T5901] usb 2-1: USB disconnect, device number 13 [ 176.463836][T10575] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2185'. [ 176.483820][T10577] netlink: 'syz.2.2186': attribute type 16 has an invalid length. [ 176.494534][T10577] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2186'. [ 176.511434][T10577] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.636613][ T5888] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 176.644463][T10587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2189'. [ 176.808231][ T5888] usb 1-1: config 241 has an invalid interface number: 0 but max is -1 [ 176.826308][ T5888] usb 1-1: config 241 has 1 interface, different from the descriptor's value: 0 [ 176.836324][ T5888] usb 1-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 176.856297][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.879082][ T5888] pcwd_usb: The device isn't a Human Interface Device [ 176.967092][T10605] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2201'. [ 176.996802][ T5901] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 177.084781][ T24] usb 1-1: USB disconnect, device number 14 [ 177.156717][ T5901] usb 2-1: Using ep0 maxpacket: 8 [ 177.163511][ T5901] usb 2-1: config 3 has an invalid interface number: 173 but max is 0 [ 177.171775][ T5901] usb 2-1: config 3 has no interface number 0 [ 177.178778][ T5901] usb 2-1: config 3 interface 173 has no altsetting 0 [ 177.189029][ T5901] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=5a.0b [ 177.198082][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.206046][ T5901] usb 2-1: Product: syz [ 177.210247][ T5901] usb 2-1: Manufacturer: syz [ 177.214843][ T5901] usb 2-1: SerialNumber: syz [ 177.438065][ T5901] usb 2-1: selecting invalid altsetting 3 [ 177.443827][ T5901] comedi comedi0: could not set alternate setting 3 in high speed [ 177.451752][ T5901] usbdux 2-1:3.173: driver 'usbdux' failed to auto-configure device. [ 177.464129][ T5901] usbdux 2-1:3.173: probe with driver usbdux failed with error -22 [ 177.475423][ T5901] usb 2-1: USB disconnect, device number 14 [ 177.643427][T10609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2202'. [ 177.749194][T10617] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2206'. [ 178.088422][T10637] nfs: Unknown parameter 'defcontext' [ 178.150292][T10643] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2219'. [ 178.199057][T10646] delete_channel: no stack [ 178.420926][T10665] nfs: Unknown parameter 'defcontext' [ 178.619374][T10677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2235'. [ 178.845475][T10694] nfs: Unknown parameter 'defcontext' [ 179.197016][ T5888] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 179.370761][ T5888] usb 1-1: config 0 has an invalid interface number: 176 but max is 2 [ 179.380410][ T5888] usb 1-1: config 0 has no interface number 1 [ 179.386680][ T5888] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 179.395722][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.417491][ T5888] usb 1-1: config 0 descriptor?? [ 179.426557][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 179.596568][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 179.603930][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.621612][ T10] usb 3-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 179.634720][ T5888] qcserial 1-1:0.2: Qualcomm USB modem converter detected [ 179.643078][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.672565][ T10] usb 3-1: Product: syz [ 179.683315][ T10] usb 3-1: Manufacturer: syz [ 179.691266][ T10] usb 3-1: SerialNumber: syz [ 179.713490][ T10] usb 3-1: config 0 descriptor?? [ 179.749259][ T10] peak_usb 3-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 179.761183][ T10] peak_usb 3-1:0.0: unable to read PCAN-USB serial number (err -22) [ 179.807287][ T10] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -22 [ 179.853107][ T10] usb 1-1: USB disconnect, device number 15 [ 179.869398][ T10] qcserial 1-1:0.2: device disconnected [ 179.930956][ T24] usb 3-1: USB disconnect, device number 13 [ 180.403063][T10748] vivid-003: ================= START STATUS ================= [ 180.415998][T10748] vivid-003: Radio HW Seek Mode: Bounded [ 180.425392][T10748] vivid-003: Radio Programmable HW Seek: false [ 180.440533][T10748] vivid-003: RDS Rx I/O Mode: Block I/O [ 180.446132][T10748] vivid-003: Generate RBDS Instead of RDS: false [ 180.453228][T10748] vivid-003: RDS Reception: true [ 180.463347][T10748] vivid-003: RDS Program Type: 0 inactive [ 180.473775][T10748] vivid-003: RDS PS Name: inactive [ 180.483296][T10748] vivid-003: RDS Radio Text: inactive [ 180.489243][T10748] vivid-003: RDS Traffic Announcement: false inactive [ 180.496120][T10748] vivid-003: RDS Traffic Program: false inactive [ 180.505868][T10748] vivid-003: RDS Music: false inactive [ 180.511862][T10748] vivid-003: ================== END STATUS ================== [ 180.642702][T10760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2266'. [ 180.807291][T10774] netlink: 'syz.1.2273': attribute type 7 has an invalid length. [ 180.815060][T10774] netlink: 'syz.1.2273': attribute type 1 has an invalid length. [ 180.849237][T10774] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2273'. [ 181.212817][T10802] netlink: 'syz.2.2285': attribute type 7 has an invalid length. [ 181.252696][T10802] netlink: 'syz.2.2285': attribute type 1 has an invalid length. [ 181.763602][T10840] netlink: 'syz.0.2303': attribute type 7 has an invalid length. [ 181.778776][T10840] netlink: 'syz.0.2303': attribute type 1 has an invalid length. [ 181.802466][T10840] __nla_validate_parse: 2 callbacks suppressed [ 181.802484][T10840] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2303'. [ 182.180317][T10869] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.2320'. [ 182.573689][T10899] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.2333'. [ 183.368584][T10951] program syz.1.2368 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.386565][T10951] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 183.936826][T10989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2379'. [ 183.973233][T10991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2380'. [ 184.148145][T11002] netlink: 'syz.0.2386': attribute type 6 has an invalid length. [ 184.165635][T11002] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2386'. [ 184.300352][T11009] vivid-000: ================= START STATUS ================= [ 184.317707][T11009] vivid-000: Radio HW Seek Mode: Bounded [ 184.332362][T11009] vivid-000: Radio Programmable HW Seek: false [ 184.346206][T11009] vivid-000: RDS Rx I/O Mode: Block I/O [ 184.372315][T11009] vivid-000: Generate RBDS Instead of RDS: false [ 184.395927][T11009] vivid-000: RDS Reception: true [ 184.436618][T11009] vivid-000: RDS Program Type: 0 inactive [ 184.447689][T11009] vivid-000: RDS PS Name: inactive [ 184.466547][T11009] vivid-000: RDS Radio Text: inactive [ 184.480978][T11009] vivid-000: RDS Traffic Announcement: false inactive [ 184.494895][T11009] vivid-000: RDS Traffic Program: false inactive [ 184.518478][T11009] vivid-000: RDS Music: false inactive [ 184.524006][T11009] vivid-000: ================== END STATUS ================== [ 184.925397][T11052] dlm: no locking on control device [ 184.976525][ T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 185.136528][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 185.147983][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.160406][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 185.169971][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.199537][ T24] usb 1-1: config 0 descriptor?? [ 185.223090][ T24] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 185.381882][T11078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2413'. [ 185.483374][T11084] program syz.2.2416 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.493253][T11084] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 185.496501][ T5888] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 185.625973][ T24] gspca_vc032x: reg_w err -71 [ 185.632672][ T24] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 185.643403][ T24] usb 1-1: USB disconnect, device number 16 [ 185.687949][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 185.694432][ T5888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.707167][ T5888] usb 4-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 185.716212][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.724238][ T5888] usb 4-1: Product: syz [ 185.728462][ T5888] usb 4-1: Manufacturer: syz [ 185.734813][ T5888] usb 4-1: SerialNumber: syz [ 185.742230][ T5888] usb 4-1: config 0 descriptor?? [ 185.753507][ T5888] peak_usb 4-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 185.762934][ T5888] peak_usb 4-1:0.0: unable to read PCAN-USB serial number (err -22) [ 185.837258][ T5888] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -22 [ 185.971537][ T5888] usb 4-1: USB disconnect, device number 9 [ 186.253971][T11092] netlink: 'syz.2.2421': attribute type 6 has an invalid length. [ 186.264944][T11092] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2421'. [ 186.334418][T11098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2425'. [ 186.661371][T11120] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 186.922179][T11137] nftables ruleset with unbound chain [ 187.195695][T11158] netlink: 'syz.1.2455': attribute type 1 has an invalid length. [ 187.240136][T11158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2455'. [ 187.674518][T11191] netlink: 'syz.2.2470': attribute type 1 has an invalid length. [ 187.685843][T11191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2470'. [ 187.887824][T11205] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 188.294413][T11235] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 188.348327][ T5888] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 188.524859][ T5888] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 188.545355][ T5888] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 188.555774][ T5888] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.586310][ T5888] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 188.602122][ T5888] usb 2-1: config 1 has no interface number 0 [ 188.608831][ T5888] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 188.620808][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.645819][T11257] QAT: failed to copy from user cfg_data. [ 188.656385][ T5888] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 188.858732][ T5888] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 188.871229][ T5888] snd_usb_pod 2-1:1.1: invalid control EP [ 188.881386][ T5888] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 188.909738][ T5888] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 188.927159][ T5888] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 189.065794][ T5888] usb 2-1: USB disconnect, device number 15 [ 189.190736][ T30] audit: type=1326 audit(1751315119.146:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11288 comm="syz.0.2519" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff99bb8e929 code=0x0 [ 189.217706][T11291] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 189.239799][ T30] audit: type=1326 audit(1751315119.146:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11288 comm="syz.0.2519" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff99bb8e929 code=0x0 [ 189.859948][T11311] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 190.309908][T11327] netlink: 'syz.2.2544': attribute type 10 has an invalid length. [ 190.356272][T11327] batman_adv: batadv0: Adding interface: netdevsim0 [ 190.385645][T11327] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.443049][T11327] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 190.463737][T11332] 9pnet_fd: p9_fd_create_unix (11332): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 190.661673][T11340] tipc: Can't bind to reserved service type 1 [ 190.854753][T11350] random: crng reseeded on system resumption [ 191.181160][T11365] netlink: 'syz.3.2557': attribute type 10 has an invalid length. [ 191.235997][T11365] batman_adv: batadv0: Adding interface: netdevsim0 [ 191.252844][T11365] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.287898][T11365] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 191.377563][T11378] random: crng reseeded on system resumption [ 191.692070][T11400] 9pnet_fd: p9_fd_create_unix (11400): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 191.765801][T11405] netlink: 'syz.1.2574': attribute type 10 has an invalid length. [ 191.783248][T11405] batman_adv: batadv0: Adding interface: netdevsim0 [ 191.809830][T11405] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.836533][T11405] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 191.913635][T11412] random: crng reseeded on system resumption [ 191.976528][ T5888] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 192.128677][ T5888] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 192.139794][T11426] 9pnet_fd: p9_fd_create_unix (11426): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 192.171457][ T5888] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 192.182302][ T5888] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.199730][ T5888] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 192.210523][ T5888] usb 3-1: config 1 has no interface number 0 [ 192.218172][ T5888] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 192.229533][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.264715][ T5888] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 192.356728][T11434] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 192.469443][ T5888] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values [ 192.498271][ T5888] snd_usb_pod 3-1:1.1: invalid control EP [ 192.517984][ T5888] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 192.524739][ T5888] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 192.549078][ T5888] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 192.684900][ T5888] usb 3-1: USB disconnect, device number 14 [ 193.313353][ T30] audit: type=1326 audit(1751315123.256:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11493 comm="syz.1.2620" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa377f8e929 code=0x0 [ 193.361589][ T30] audit: type=1326 audit(1751315123.256:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11493 comm="syz.1.2620" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa377f8e929 code=0x0 [ 193.527969][T11506] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 194.006589][ T5888] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 194.168396][ T5888] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 194.180398][ T5888] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 194.189577][ T5888] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.202910][ T5888] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 194.212343][ T5888] usb 4-1: config 1 has no interface number 0 [ 194.221686][ T5888] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 194.231138][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.257990][ T5888] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 194.353654][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.360843][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.454567][ T5888] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 194.465332][ T5888] snd_usb_pod 4-1:1.1: invalid control EP [ 194.471541][ T5888] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 194.478641][ T5888] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 194.486316][ T5888] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 194.679235][ T24] usb 4-1: USB disconnect, device number 10 [ 194.853055][T11536] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 195.089748][ T30] audit: type=1326 audit(1751315125.046:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11554 comm="syz.2.2647" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb6bb8e929 code=0x0 [ 195.156487][ T30] audit: type=1326 audit(1751315125.106:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11554 comm="syz.2.2647" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7feb6bb8e929 code=0x0 [ 197.261771][T11653] futex_wake_op: syz.0.2702 tries to shift op by 144; fix this program [ 197.362258][T11661] kAFS: No cell specified [ 197.460696][ T30] audit: type=1326 audit(1751315127.406:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11664 comm="syz.3.2698" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d7498e929 code=0x0 [ 197.506837][ T30] audit: type=1326 audit(1751315127.456:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11664 comm="syz.3.2698" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7f5d7498e929 code=0x0 [ 197.656667][ T24] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 197.809951][ T24] usb 3-1: config 0 has an invalid interface number: 154 but max is 0 [ 197.818799][ T24] usb 3-1: config 0 has no interface number 0 [ 197.824930][ T24] usb 3-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=fa.eb [ 197.842111][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.854824][ T24] usb 3-1: config 0 descriptor?? [ 198.076968][ T24] usb 3-1: string descriptor 0 read error: -71 [ 198.095922][ T24] usb 3-1: unknown interface protocol 0xa3, assuming v1 [ 198.103153][ T24] usb 3-1: cannot find UAC_HEADER [ 198.159073][ T24] snd-usb-audio 3-1:0.154: probe with driver snd-usb-audio failed with error -22 [ 198.185938][ T24] usb 3-1: USB disconnect, device number 15 [ 198.622731][T11685] futex_wake_op: syz.1.2709 tries to shift op by 144; fix this program [ 198.716709][T11688] tmpfs: Bad value for 'mpol' [ 199.072267][T11711] futex_wake_op: syz.2.2723 tries to shift op by 144; fix this program [ 199.269416][ T24] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 199.364051][T11731] tmpfs: Bad value for 'mpol' [ 199.458828][ T24] usb 2-1: config 0 has an invalid interface number: 154 but max is 0 [ 199.491530][ T24] usb 2-1: config 0 has no interface number 0 [ 199.519071][ T24] usb 2-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=fa.eb [ 199.553287][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.568509][ T24] usb 2-1: config 0 descriptor?? [ 199.783876][ T24] usb 2-1: string descriptor 0 read error: -71 [ 199.793901][ T24] usb 2-1: unknown interface protocol 0xa3, assuming v1 [ 199.801072][ T24] usb 2-1: cannot find UAC_HEADER [ 199.839237][ T24] snd-usb-audio 2-1:0.154: probe with driver snd-usb-audio failed with error -22 [ 199.850451][ T24] usb 2-1: USB disconnect, device number 16 [ 199.896650][ T5901] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 200.046516][ T5901] usb 4-1: Using ep0 maxpacket: 16 [ 200.053249][ T5901] usb 4-1: config 0 has an invalid interface number: 63 but max is 0 [ 200.061541][ T5901] usb 4-1: config 0 has no interface number 0 [ 200.067738][ T5901] usb 4-1: config 0 interface 63 has no altsetting 0 [ 200.076331][ T5901] usb 4-1: New USB device found, idVendor=0921, idProduct=1000, bcdDevice=d7.7b [ 200.085570][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.096367][ T5901] usb 4-1: Product: syz [ 200.100570][ T5901] usb 4-1: Manufacturer: syz [ 200.105155][ T5901] usb 4-1: SerialNumber: syz [ 200.111924][ T5901] usb 4-1: config 0 descriptor?? [ 200.347688][ T5901] belkin_sa 4-1:0.63: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 200.380430][ T5901] usb 4-1: bcdDevice: d77b, bfc: 0 [ 200.409653][ T5901] usb 4-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 200.447814][ T5901] usb 4-1: USB disconnect, device number 11 [ 200.475698][ T5901] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 200.499700][ T5901] belkin_sa 4-1:0.63: device disconnected [ 200.914654][T11784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2760'. [ 201.313856][T11816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2774'. [ 201.406763][T11820] IPv6: NLM_F_CREATE should be specified when creating new route [ 201.695399][T11838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.736182][T11843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2788'. [ 202.130326][T11869] IPv6: NLM_F_CREATE should be specified when creating new route [ 202.570151][T11899] IPv6: NLM_F_CREATE should be specified when creating new route [ 202.991559][T11927] netlink: 'syz.3.2829': attribute type 21 has an invalid length. [ 203.005451][T11927] netlink: 'syz.3.2829': attribute type 6 has an invalid length. [ 203.017058][T11927] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2829'. [ 203.130949][ T5901] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 203.295603][ T5901] usb 1-1: Using ep0 maxpacket: 16 [ 203.313185][ T5901] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.328069][ T5901] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 203.349047][ T5901] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 203.359488][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.367923][ T5901] usb 1-1: Product: syz [ 203.371445][ T5888] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 203.373497][ T5901] usb 1-1: Manufacturer: syz [ 203.404590][ T5901] usb 1-1: SerialNumber: syz [ 203.520039][T11961] netlink: 'syz.2.2843': attribute type 21 has an invalid length. [ 203.528487][T11961] netlink: 'syz.2.2843': attribute type 6 has an invalid length. [ 203.536222][T11961] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2843'. [ 203.545537][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 203.556104][ T5888] usb 2-1: config 0 has an invalid interface number: 63 but max is 0 [ 203.564747][ T5888] usb 2-1: config 0 has no interface number 0 [ 203.571166][ T5888] usb 2-1: config 0 interface 63 has no altsetting 0 [ 203.585532][ T5888] usb 2-1: New USB device found, idVendor=0921, idProduct=1000, bcdDevice=d7.7b [ 203.604667][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.614725][ T5888] usb 2-1: Product: syz [ 203.621606][ T5888] usb 2-1: Manufacturer: syz [ 203.626228][ T5888] usb 2-1: SerialNumber: syz [ 203.649433][ T5888] usb 2-1: config 0 descriptor?? [ 203.827405][ T5901] usb 1-1: cannot find UAC_HEADER [ 203.847790][ T5901] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 203.860495][ T5901] usb 1-1: USB disconnect, device number 17 [ 203.887523][ T5888] belkin_sa 2-1:0.63: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 203.902963][T11045] udevd[11045]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 203.920010][ T5888] usb 2-1: bcdDevice: d77b, bfc: 0 [ 203.931466][ T5888] usb 2-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 203.954091][ T5888] usb 2-1: USB disconnect, device number 17 [ 203.965560][ T5888] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 203.979147][ T5888] belkin_sa 2-1:0.63: device disconnected [ 204.411658][T11969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.892948][T11997] autofs4:pid:11997:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2.1), cmd(0xc0189374) [ 204.916587][T11997] autofs4:pid:11997:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 205.380808][T12023] autofs4:pid:12023:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2.1), cmd(0xc0189374) [ 205.398599][T12023] autofs4:pid:12023:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 205.741786][T12051] autofs4:pid:12051:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2.1), cmd(0xc0189374) [ 205.767417][T12051] autofs4:pid:12051:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 206.029407][T12068] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 206.035968][T12068] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 206.097594][T12068] vhci_hcd vhci_hcd.0: Device attached [ 206.103237][T12076] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 206.109764][T12076] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 206.139353][T12076] vhci_hcd vhci_hcd.0: Device attached [ 206.152342][T12077] vhci_hcd: connection closed [ 206.155189][ T13] vhci_hcd: stop threads [ 206.165610][T12069] vhci_hcd: connection closed [ 206.175406][ T13] vhci_hcd: release socket [ 206.184692][ T13] vhci_hcd: disconnect device [ 206.199276][ T13] vhci_hcd: stop threads [ 206.218287][ T13] vhci_hcd: release socket [ 206.233233][ T13] vhci_hcd: disconnect device [ 206.276556][ T10] vhci_hcd: vhci_device speed not set [ 206.418968][T12100] netlink: 'syz.1.2913': attribute type 5 has an invalid length. [ 207.078652][T12142] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 207.085211][T12142] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 207.101729][T12142] vhci_hcd vhci_hcd.0: Device attached [ 207.126530][T12142] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 207.133082][T12142] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 207.141308][T12142] vhci_hcd vhci_hcd.0: Device attached [ 207.149421][T12147] vhci_hcd: connection closed [ 207.149942][T12143] vhci_hcd: connection closed [ 207.151783][ T1148] vhci_hcd: stop threads [ 207.177127][ T1148] vhci_hcd: release socket [ 207.181610][ T1148] vhci_hcd: disconnect device [ 207.191576][ T1148] vhci_hcd: stop threads [ 207.195852][ T1148] vhci_hcd: release socket [ 207.201693][ T1148] vhci_hcd: disconnect device [ 207.313862][T12158] netlink: 'syz.2.2939': attribute type 5 has an invalid length. [ 208.046359][T12209] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 208.052927][T12209] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 208.075835][T12209] vhci_hcd vhci_hcd.0: Device attached [ 208.103626][T12216] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 208.110184][T12216] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 208.142636][T12216] vhci_hcd vhci_hcd.0: Device attached [ 208.184321][T12217] vhci_hcd: connection closed [ 208.186933][ T13] vhci_hcd: stop threads [ 208.195883][ T13] vhci_hcd: release socket [ 208.206827][T12210] vhci_hcd: connection closed [ 208.212444][ T13] vhci_hcd: disconnect device [ 208.226961][ T13] vhci_hcd: stop threads [ 208.231245][ T13] vhci_hcd: release socket [ 208.236281][ T13] vhci_hcd: disconnect device [ 208.246914][ T10] vhci_hcd: vhci_device speed not set [ 208.790346][T12261] cgroup: noprefix used incorrectly [ 209.200090][T12287] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 209.206652][T12287] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 209.261171][T12287] vhci_hcd vhci_hcd.0: Device attached [ 209.282757][T12293] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 209.289305][T12293] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 209.349323][T12293] vhci_hcd vhci_hcd.0: Device attached [ 209.364659][T12295] vhci_hcd: connection closed [ 209.364738][T12289] vhci_hcd: connection closed [ 209.374799][ T69] vhci_hcd: stop threads [ 209.385714][T12302] cgroup: noprefix used incorrectly [ 209.394688][ T69] vhci_hcd: release socket [ 209.409993][ T69] vhci_hcd: disconnect device [ 209.425735][ T69] vhci_hcd: stop threads [ 209.438158][ T69] vhci_hcd: release socket [ 209.447050][ T5888] vhci_hcd: vhci_device speed not set [ 209.458216][ T69] vhci_hcd: disconnect device [ 209.506600][ T5888] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 209.515521][ T5888] usb 35-1: enqueue for inactive port 0 [ 209.619232][ T5888] vhci_hcd: vhci_device speed not set [ 210.072428][T12343] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 210.078988][T12343] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 210.090506][T12342] cgroup: noprefix used incorrectly [ 210.116297][T12343] vhci_hcd vhci_hcd.0: Device attached [ 210.157216][T12343] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 210.163768][T12343] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 210.179492][T12343] vhci_hcd vhci_hcd.0: Device attached [ 210.195442][T12348] vhci_hcd: connection closed [ 210.197021][T12344] vhci_hcd: connection closed [ 210.205078][ T13] vhci_hcd: stop threads [ 210.217226][ T13] vhci_hcd: release socket [ 210.221668][ T13] vhci_hcd: disconnect device [ 210.249395][ T13] vhci_hcd: stop threads [ 210.253683][ T13] vhci_hcd: release socket [ 210.268109][ T13] vhci_hcd: disconnect device [ 210.296693][ T10] vhci_hcd: vhci_device speed not set [ 210.382678][T12361] netlink: 'syz.1.3019': attribute type 3 has an invalid length. [ 210.394857][T12361] netlink: 'syz.1.3019': attribute type 3 has an invalid length. [ 210.407518][T12361] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3019'. [ 211.026553][ T5888] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 211.177560][ T5888] usb 2-1: Using ep0 maxpacket: 8 [ 211.189543][ T5888] usb 2-1: unable to get BOS descriptor or descriptor too short [ 211.200356][ T5888] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 211.222161][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 211.250078][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 211.263625][ T5888] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 211.278074][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 211.290926][ T5888] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDD, changing to 0x8D [ 211.305289][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 211.317913][ T5888] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 211.331124][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.345645][ T5888] usb 2-1: Product: syz [ 211.349070][T12419] netlink: 'syz.0.3052': attribute type 3 has an invalid length. [ 211.351096][ T5888] usb 2-1: Manufacturer: syz [ 211.366341][ T5888] usb 2-1: SerialNumber: syz [ 211.374320][T12419] netlink: 'syz.0.3052': attribute type 3 has an invalid length. [ 211.383438][ T5888] usb 2-1: config 0 descriptor?? [ 211.390639][T12385] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 211.400496][T12419] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3052'. [ 211.413491][ T5888] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 211.563189][T12427] Unsupported ieee802154 address type: 0 [ 211.619429][ T5901] usb 2-1: USB disconnect, device number 18 [ 211.689038][T12433] udevd[12433]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.951909][T12455] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 211.965776][T12455] overlayfs: missing 'lowerdir' [ 212.365957][T12481] netlink: 'syz.1.3073': attribute type 21 has an invalid length. [ 212.378955][T12481] netlink: 'syz.1.3073': attribute type 1 has an invalid length. [ 212.394563][T12481] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3073'. [ 213.082098][T12527] Unsupported ieee802154 address type: 0 [ 213.348996][T12540] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3101'. [ 213.579262][T12552] Unsupported ieee802154 address type: 0 [ 213.700201][T12559] netlink: 37 bytes leftover after parsing attributes in process `syz.1.3112'. [ 214.169682][T12583] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 214.196596][T12583] overlayfs: missing 'lowerdir' [ 214.288453][T12588] netlink: 'syz.3.3133': attribute type 21 has an invalid length. [ 214.306376][T12588] netlink: 'syz.3.3133': attribute type 1 has an invalid length. [ 214.329542][T12588] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3133'. [ 214.365670][T12593] netlink: 37 bytes leftover after parsing attributes in process `syz.0.3135'. [ 214.814245][T12614] netlink: 37 bytes leftover after parsing attributes in process `syz.3.3139'. [ 215.056620][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 215.227140][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 215.242018][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.270396][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 215.292958][ T10] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 215.305459][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.315070][ T10] usb 2-1: Product: syz [ 215.322057][ T10] usb 2-1: Manufacturer: syz [ 215.327146][ T10] usb 2-1: SerialNumber: syz [ 215.339863][ T10] usb 2-1: config 0 descriptor?? [ 215.360145][ T10] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 215.521478][T12644] overlay: Unknown parameter 'smackfstransmute' [ 215.562246][ T10] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 215.580199][ T10] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 215.592427][ T10] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 215.663980][T12652] tmpfs: Unknown parameter 'func' [ 215.773401][ T10] usb 2-1: USB disconnect, device number 19 [ 216.063779][T12677] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 216.091772][T12677] CIFS mount error: No usable UNC path provided in device string! [ 216.091772][T12677] [ 216.105672][T12677] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 216.424580][T12700] tmpfs: Unknown parameter 'func' [ 216.693952][T12718] tmpfs: Unknown parameter 'func' [ 216.770232][T12724] openvswitch: netlink: IP tunnel TTL not specified. [ 216.818542][T12726] xt_NFQUEUE: number of total queues is 0 [ 216.924879][T12734] overlay: Unknown parameter 'smackfstransmute' [ 217.101450][T12746] netlink: 592 bytes leftover after parsing attributes in process `syz.1.3202'. [ 217.222762][T12754] openvswitch: netlink: IP tunnel TTL not specified. [ 217.300547][T12756] xt_NFQUEUE: number of total queues is 0 [ 217.384481][T12764] netlink: 'syz.1.3212': attribute type 2 has an invalid length. [ 217.412836][T12764] netlink: 'syz.1.3212': attribute type 1 has an invalid length. [ 217.443234][T12764] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3212'. [ 217.660080][T12782] openvswitch: netlink: IP tunnel TTL not specified. [ 217.769369][T12790] xt_NFQUEUE: number of total queues is 0 [ 218.514121][T12829] netlink: 'syz.2.3245': attribute type 2 has an invalid length. [ 218.523092][T12829] netlink: 'syz.2.3245': attribute type 1 has an invalid length. [ 218.533304][T12829] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3245'. [ 218.739437][T12844] netlink: 'syz.3.3251': attribute type 1 has an invalid length. [ 218.748448][T12844] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3251'. [ 218.841249][T12850] netlink: 'syz.3.3255': attribute type 2 has an invalid length. [ 218.864469][T12850] netlink: 'syz.3.3255': attribute type 1 has an invalid length. [ 218.901329][T12850] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3255'. [ 219.689863][T12910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.810466][T12919] cgroup2: Unknown parameter 'obj_user' [ 219.994129][T12930] No source specified [ 220.074614][T12936] netlink: 'syz.1.3293': attribute type 1 has an invalid length. [ 220.083147][T12936] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3293'. [ 220.584957][T12955] netlink: 'syz.2.3305': attribute type 1 has an invalid length. [ 220.596643][T12955] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3305'. [ 221.086234][T12982] cgroup2: Unknown parameter 'obj_user' [ 221.109582][T12984] binder: 12983:12984 ioctl c018620c 200000000140 returned -22 [ 221.976808][ T5919] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 222.136522][ T5919] usb 3-1: Using ep0 maxpacket: 8 [ 222.143358][ T5919] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.153661][ T5919] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 222.165653][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 222.176634][ T5901] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 222.184289][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 222.197787][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 222.209385][ T5919] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.226541][ T5919] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 222.235574][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.243610][ T5919] usb 3-1: Product: syz [ 222.247806][ T5919] usb 3-1: Manufacturer: syz [ 222.252403][ T5919] usb 3-1: SerialNumber: syz [ 222.259841][ T5919] usb 3-1: config 0 descriptor?? [ 222.265600][T13022] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 222.376671][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 222.385638][ T5901] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 222.394739][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.402808][ T5901] usb 4-1: Product: syz [ 222.407030][ T5901] usb 4-1: Manufacturer: syz [ 222.411636][ T5901] usb 4-1: SerialNumber: syz [ 222.421049][ T5901] usb 4-1: config 0 descriptor?? [ 222.565551][T13044] IPv6: NLM_F_CREATE should be specified when creating new route [ 222.837922][ T5901] airspy 4-1:0.0: usb_control_msg() failed -71 request 0a [ 222.856969][ T5901] airspy 4-1:0.0: Could not detect board [ 222.863223][ T5901] airspy 4-1:0.0: probe with driver airspy failed with error -71 [ 222.878783][ T5901] usb 4-1: USB disconnect, device number 12 [ 223.099754][T13074] bio_check_eod: 26 callbacks suppressed [ 223.099773][T13074] syz.0.3370: attempt to access beyond end of device [ 223.099773][T13074] loop0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 223.121185][T13074] MINIX-fs: unable to read superblock [ 223.510125][T13101] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3376'. [ 223.520798][T13102] syz.2.3375: attempt to access beyond end of device [ 223.520798][T13102] loop2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 223.547262][T13102] MINIX-fs: unable to read superblock [ 223.646552][ T5919] rc_core: IR keymap rc-snapstream-firefly not found [ 223.659898][ T5919] Registered IR keymap rc-empty [ 223.679672][ T5919] rc rc0: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 223.699178][ T5919] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input16 [ 223.729728][ T5919] input: syz syz mouse as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input17 [ 223.776272][ C1] ati_remote 3-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 223.784393][ T5919] usb 3-1: USB disconnect, device number 16 [ 224.018038][T13126] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3386'. [ 224.034447][T13127] syz.1.3387: attempt to access beyond end of device [ 224.034447][T13127] loop1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 224.065920][T13127] MINIX-fs: unable to read superblock [ 224.535314][T13151] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3398'. [ 225.354396][T13208] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 225.360959][T13208] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 225.368979][T13208] vhci_hcd vhci_hcd.0: Device attached [ 225.383050][T13212] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3427'. [ 225.398156][ T5919] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 225.576612][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 225.583062][ T5919] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 225.593351][ T5919] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 225.604255][ T5919] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.617338][ T5919] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 225.626758][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.634762][ T5919] usb 3-1: Product: syz [ 225.636684][ T5984] usb 36-1: SetAddress Request (2) to port 0 [ 225.639041][ T5919] usb 3-1: Manufacturer: syz [ 225.649032][ T5984] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 225.658174][ T5901] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 225.665919][ T5919] usb 3-1: SerialNumber: syz [ 225.836611][ T5901] usb 2-1: Using ep0 maxpacket: 8 [ 225.843597][ T5901] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 225.852849][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.863797][ T5901] usb 2-1: config 0 descriptor?? [ 225.872301][ T5901] hso 2-1:0.0: Can't find BULK IN endpoint [ 225.888610][ T5919] usb 3-1: 0:2 : does not exist [ 225.906622][ T5919] usb 3-1: USB disconnect, device number 17 [ 225.922721][T12435] udevd[12435]: setting mode of /dev/bus/usb/003/017 to 020664 failed: No such file or directory [ 225.933733][T12435] udevd[12435]: setting owner of /dev/bus/usb/003/017 to uid=0, gid=0 failed: No such file or directory [ 225.954456][T12435] udevd[12435]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 226.073869][T13209] vhci_hcd: connection reset by peer [ 226.079322][ T10] usb 2-1: USB disconnect, device number 20 [ 226.081521][ T69] vhci_hcd: stop threads [ 226.090726][ T69] vhci_hcd: release socket [ 226.095311][ T69] vhci_hcd: disconnect device [ 226.692994][T13247] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3452'. [ 227.462164][T13286] netlink: 'syz.1.3464': attribute type 10 has an invalid length. [ 227.474670][T13286] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3464'. [ 227.958788][T13304] cgroup: Unknown subsys name 'cpuset' [ 227.966696][T13306] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.3474'. [ 228.306697][ T5919] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 228.466638][ T5919] usb 3-1: Using ep0 maxpacket: 32 [ 228.471867][ T5901] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 228.483000][ T5919] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 228.492136][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.500164][ T5919] usb 3-1: Product: syz [ 228.504310][ T5919] usb 3-1: Manufacturer: syz [ 228.509026][ T5919] usb 3-1: SerialNumber: syz [ 228.515548][ T5919] usb 3-1: config 0 descriptor?? [ 228.646563][ T5901] usb 4-1: Using ep0 maxpacket: 8 [ 228.653102][ T5901] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.664335][ T5901] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 228.676558][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 228.687589][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 228.698935][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 228.709850][ T5901] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.725577][ T5901] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 228.734762][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.743120][ T5901] usb 4-1: Product: syz [ 228.747392][ T5901] usb 4-1: Manufacturer: syz [ 228.751997][ T5901] usb 4-1: SerialNumber: syz [ 228.762594][ T5901] usb 4-1: config 0 descriptor?? [ 228.769602][T13318] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 228.936083][ T5919] airspy 3-1:0.0: usb_control_msg() failed -71 request 0a [ 228.945150][ T5919] airspy 3-1:0.0: Could not detect board [ 228.951001][ T5919] airspy 3-1:0.0: probe with driver airspy failed with error -71 [ 228.963718][ T5919] usb 3-1: USB disconnect, device number 18 [ 230.126622][ T5901] rc_core: IR keymap rc-snapstream-firefly not found [ 230.140701][ T5901] Registered IR keymap rc-empty [ 230.141186][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 230.156932][ T5901] rc rc0: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 230.179013][ T5901] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input18 [ 230.231797][ T5901] input: syz syz mouse as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input19 [ 230.314755][ T5901] usb 4-1: USB disconnect, device number 13 [ 230.318717][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 230.320873][ C1] ati_remote 4-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 230.340569][ T10] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 230.369687][ T10] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 230.426506][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 230.464205][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 230.482025][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.490465][ T10] usb 2-1: Product: syz [ 230.494645][ T10] usb 2-1: Manufacturer: syz [ 230.511157][ T10] usb 2-1: SerialNumber: syz [ 230.528913][T13385] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.3511'. [ 230.623752][T13389] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.3523'. [ 230.662556][T13391] cgroup: Unknown subsys name 'cpuset' [ 230.738955][ T10] usb 2-1: 0:2 : does not exist [ 230.752299][ T5984] usb 36-1: device descriptor read/8, error -110 [ 230.798021][ T10] usb 2-1: USB disconnect, device number 21 [ 230.845011][T12435] udevd[12435]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 230.963501][T13407] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 230.972609][T13407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.133578][T13415] netlink: 'syz.2.3528': attribute type 21 has an invalid length. [ 231.141810][T13415] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 231.149404][T13415] IPv6: NLM_F_CREATE should be set when creating new route [ 231.156745][T13415] IPv6: NLM_F_CREATE should be set when creating new route [ 231.163997][T13415] IPv6: NLM_F_CREATE should be set when creating new route [ 231.173920][ T5984] usb usb36-port1: attempt power cycle [ 231.345997][T13422] cgroup: Unknown subsys name 'cpuset' [ 231.627013][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.738713][ T5984] usb usb36-port1: unable to enumerate USB device [ 232.164252][T13460] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 232.172716][T13460] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.381026][T13468] netlink: 'syz.1.3553': attribute type 21 has an invalid length. [ 232.392321][T13468] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 232.399645][T13468] IPv6: NLM_F_CREATE should be set when creating new route [ 232.406909][T13468] IPv6: NLM_F_CREATE should be set when creating new route [ 232.414134][T13468] IPv6: NLM_F_CREATE should be set when creating new route [ 233.014700][T13492] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 233.024373][T13492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.321184][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.103571][T13546] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 234.110124][T13546] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 234.132744][T13546] vhci_hcd vhci_hcd.0: Device attached [ 234.161137][T13550] lo speed is unknown, defaulting to 1000 [ 234.188083][T13550] lo speed is unknown, defaulting to 1000 [ 234.207803][T13550] lo speed is unknown, defaulting to 1000 [ 234.387201][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 234.399844][ T5984] usb 38-1: SetAddress Request (2) to port 0 [ 234.405914][ T5984] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 234.568294][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 234.580680][ T10] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 234.584616][T13550] infiniband syz0: set active [ 234.596142][ T5901] lo speed is unknown, defaulting to 1000 [ 234.609625][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.612649][T13550] infiniband syz0: added lo [ 234.638458][ T10] usb 3-1: config 0 descriptor?? [ 234.648787][ T10] hso 3-1:0.0: Can't find BULK IN endpoint [ 234.760248][T13550] RDS/IB: syz0: added [ 234.771627][T13550] smc: adding ib device syz0 with port count 1 [ 234.785750][T13550] smc: ib device syz0 port 1 has pnetid [ 234.796866][ T5901] lo speed is unknown, defaulting to 1000 [ 234.809365][T13550] lo speed is unknown, defaulting to 1000 [ 234.877155][ T10] usb 3-1: USB disconnect, device number 19 [ 234.891918][T13547] vhci_hcd: connection reset by peer [ 234.922262][ T1148] vhci_hcd: stop threads [ 234.947068][ T1148] vhci_hcd: release socket [ 234.962288][ T1148] vhci_hcd: disconnect device [ 235.132424][T13577] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3606'. [ 235.171528][T13550] lo speed is unknown, defaulting to 1000 [ 235.514662][T13588] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3619'. [ 235.620486][T13550] lo speed is unknown, defaulting to 1000 [ 235.993456][T13609] netlink: 37 bytes leftover after parsing attributes in process `syz.0.3621'. [ 236.018892][T13550] lo speed is unknown, defaulting to 1000 [ 236.169264][T13615] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3624'. [ 236.636697][T13639] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3635'. [ 238.434567][ T30] audit: type=1326 audit(1751315168.386:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13734 comm="syz.1.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa377f8e929 code=0x7ffc0000 [ 238.511291][ T30] audit: type=1326 audit(1751315168.386:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13734 comm="syz.1.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa377f8e929 code=0x7ffc0000 [ 238.550290][ T30] audit: type=1326 audit(1751315168.416:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13734 comm="syz.1.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa377f8e929 code=0x7ffc0000 [ 238.577828][ T30] audit: type=1326 audit(1751315168.416:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13734 comm="syz.1.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa377f8e929 code=0x7ffc0000 [ 238.612622][ T30] audit: type=1326 audit(1751315168.416:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13734 comm="syz.1.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa377f8e929 code=0x7ffc0000 [ 238.640734][ T30] audit: type=1326 audit(1751315168.566:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13744 comm="syz.2.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6bb8e929 code=0x7ffc0000 [ 238.688018][ T30] audit: type=1326 audit(1751315168.566:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13744 comm="syz.2.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6bb8e929 code=0x7ffc0000 [ 238.714358][ T30] audit: type=1326 audit(1751315168.596:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13744 comm="syz.2.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7feb6bb8e929 code=0x7ffc0000 [ 238.749841][ T30] audit: type=1326 audit(1751315168.596:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13744 comm="syz.2.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6bb8e929 code=0x7ffc0000 [ 238.778851][ T30] audit: type=1326 audit(1751315168.596:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13744 comm="syz.2.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6bb8e929 code=0x7ffc0000 [ 238.871665][T13761] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 239.016559][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 239.176526][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 239.190470][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 239.214547][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.226760][ T10] usb 3-1: Product: syz [ 239.230963][ T10] usb 3-1: Manufacturer: syz [ 239.246063][ T10] usb 3-1: SerialNumber: syz [ 239.265846][ T10] r8152-cfgselector 3-1: Unknown version 0x0000 [ 239.282440][ T10] r8152-cfgselector 3-1: config 0 descriptor?? [ 239.411089][T13793] netlink: 'syz.1.3721': attribute type 12 has an invalid length. [ 239.467690][ T5984] usb 38-1: device descriptor read/8, error -110 [ 239.549884][T13801] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3715'. [ 239.648242][T13809] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 239.710773][ T10] r8152-cfgselector 3-1: USB disconnect, device number 20 [ 239.878170][ T5984] usb usb38-port1: attempt power cycle [ 240.012486][T13834] rdma_rxe: rxe_newlink: failed to add lo [ 240.099227][T13839] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 240.364933][T13857] rdma_rxe: rxe_newlink: failed to add lo [ 240.441656][T13863] netlink: 'syz.0.3747': attribute type 12 has an invalid length. [ 240.450933][ T5984] usb usb38-port1: unable to enumerate USB device [ 240.534296][T13869] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3749'. [ 240.602378][T13872] netlink: 'syz.2.3751': attribute type 37 has an invalid length. [ 240.652242][ T5831] Bluetooth: hci2: unexpected event for opcode 0x204e [ 240.996849][T13899] netlink: 'syz.2.3765': attribute type 12 has an invalid length. [ 241.093287][T13906] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3767'. [ 241.650641][T13946] netlink: 'syz.3.3787': attribute type 37 has an invalid length. [ 242.049107][T13973] netlink: 'syz.1.3800': attribute type 37 has an invalid length. [ 242.438606][ T5831] Bluetooth: hci0: unexpected event for opcode 0x204e [ 242.504874][T14004] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3816'. [ 242.540376][T14008] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 242.844561][T14025] netlink: 'syz.3.3828': attribute type 1 has an invalid length. [ 242.856964][T14025] netlink: 'syz.3.3828': attribute type 1 has an invalid length. [ 242.996692][T14034] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 243.580050][T14074] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3860'. [ 243.693823][T14082] netlink: 'syz.0.3854': attribute type 1 has an invalid length. [ 243.701902][T14082] netlink: 'syz.0.3854': attribute type 1 has an invalid length. [ 243.704615][T14084] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3855'. [ 243.785834][T14086] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3857'. [ 243.844310][T14090] 9p: Unknown access argument : -22 [ 243.942059][T14098] capability: warning: `syz.1.3862' uses 32-bit capabilities (legacy support in use) [ 244.128923][T14110] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3870'. [ 244.301535][T14119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3874'. [ 244.344598][T14123] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3884'. [ 244.870239][T14161] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3895'. [ 244.913235][T14165] 9p: Unknown access argument : -22 [ 245.076488][ T5901] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 245.240849][ T5901] usb 3-1: config 0 has an invalid interface number: 197 but max is 0 [ 245.253003][ T5901] usb 3-1: config 0 has no interface number 0 [ 245.276825][ T5901] usb 3-1: config 0 interface 197 has no altsetting 0 [ 245.294771][ T5901] usb 3-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice=f8.6c [ 245.306880][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.315258][ T5901] usb 3-1: Product: syz [ 245.321788][ T5901] usb 3-1: Manufacturer: syz [ 245.329471][ T5901] usb 3-1: SerialNumber: syz [ 245.338766][ T5901] usb 3-1: config 0 descriptor?? [ 245.416236][T14195] 9p: Unknown access argument : -22 [ 245.566042][ T5901] rtsx_usb 3-1:0.197: probe with driver rtsx_usb failed with error -22 [ 245.587076][ T5901] usb 3-1: USB disconnect, device number 21 [ 245.733522][T14214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3926'. [ 246.186555][ T5984] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 246.257123][T14250] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3936'. [ 246.356596][ T5984] usb 4-1: Using ep0 maxpacket: 16 [ 246.375413][ T5984] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 246.396548][ T5984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.404581][ T5984] usb 4-1: Product: syz [ 246.415103][ T5984] usb 4-1: Manufacturer: syz [ 246.422021][ T5984] usb 4-1: SerialNumber: syz [ 246.441401][ T5984] r8152-cfgselector 4-1: Unknown version 0x0000 [ 246.450569][ T5984] r8152-cfgselector 4-1: config 0 descriptor?? [ 246.886894][ T5984] r8152-cfgselector 4-1: USB disconnect, device number 14 [ 247.219331][T14302] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3961'. [ 247.530316][T14323] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3979'. [ 247.636492][ T5984] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 247.858769][T14338] validate_nla: 3 callbacks suppressed [ 247.858787][T14338] netlink: 'syz.3.3977': attribute type 8 has an invalid length. [ 247.887529][ T5984] usb 3-1: Using ep0 maxpacket: 32 [ 247.894896][ T5984] usb 3-1: unable to get BOS descriptor or descriptor too short [ 247.903972][ T5984] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 247.925225][ T5984] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 247.936510][ T5984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.944525][ T5984] usb 3-1: Product: syz [ 247.966486][ T5984] usb 3-1: Manufacturer: syz [ 247.971232][ T5984] usb 3-1: SerialNumber: syz [ 248.192604][ T5984] usb 3-1: Invalid number of CPorts: 0 [ 248.200894][ T5984] es2_ap_driver 3-1:7.0: probe with driver es2_ap_driver failed with error -22 [ 248.395579][ T5984] usb 3-1: USB disconnect, device number 22 [ 248.510430][T14369] netlink: 'syz.3.3993': attribute type 1 has an invalid length. [ 249.036078][T14394] netlink: 'syz.1.4013': attribute type 8 has an invalid length. [ 249.215548][T14406] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4009'. [ 249.222723][T14408] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 249.305694][T14414] netlink: 'syz.1.4015': attribute type 1 has an invalid length. [ 250.032164][T14447] netlink: 'syz.1.4031': attribute type 5 has an invalid length. [ 250.186884][T14460] netlink: 'syz.3.4037': attribute type 2 has an invalid length. [ 250.536733][ T5984] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 250.700692][ T5984] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 250.716443][ T5984] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.734758][ T5984] usb 3-1: config 0 descriptor?? [ 250.751037][ T5984] gspca_main: spca508-2.14.0 probing 8086:0110 [ 250.795435][T14499] netlink: 'syz.3.4057': attribute type 5 has an invalid length. [ 251.179071][ T5984] gspca_spca508: reg_read err -71 [ 251.197325][ T5984] gspca_spca508: reg_read err -71 [ 251.206544][ T5984] gspca_spca508: reg_read err -71 [ 251.212757][ T5984] gspca_spca508: reg_read err -71 [ 251.225337][ T5984] gspca_spca508: reg write: error -71 [ 251.231357][ T5984] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 251.254276][ T5984] usb 3-1: USB disconnect, device number 23 [ 251.468778][T14542] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 251.555005][T14546] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 251.933045][T14575] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4092'. [ 252.512539][T14612] netlink: 6308 bytes leftover after parsing attributes in process `syz.1.4108'. [ 253.165862][T14647] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4125'. [ 253.886487][ T5901] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 253.953231][T14677] netlink: 6308 bytes leftover after parsing attributes in process `syz.3.4136'. [ 254.057238][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 254.064636][ T5901] usb 2-1: unable to get BOS descriptor or descriptor too short [ 254.092302][ T5901] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 254.118063][ T5901] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 254.127604][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.135630][ T5901] usb 2-1: Product: syz [ 254.146781][ T5901] usb 2-1: Manufacturer: syz [ 254.151412][ T5901] usb 2-1: SerialNumber: syz [ 254.377987][ T5901] usb 2-1: Invalid number of CPorts: 0 [ 254.383515][ T5901] es2_ap_driver 2-1:7.0: probe with driver es2_ap_driver failed with error -22 [ 254.599260][ T5901] usb 2-1: USB disconnect, device number 22 [ 254.817621][T14693] netlink: 'syz.3.4154': attribute type 2 has an invalid length. [ 254.855814][T14693] netlink: 'syz.3.4154': attribute type 1 has an invalid length. [ 255.016343][T14698] netlink: 'syz.2.4156': attribute type 2 has an invalid length. [ 255.027359][T14698] netlink: 'syz.2.4156': attribute type 1 has an invalid length. [ 255.371216][T14712] netlink: 6308 bytes leftover after parsing attributes in process `syz.2.4150'. [ 255.573775][T14722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4159'. [ 255.644311][T14728] netlink: 'syz.0.4161': attribute type 2 has an invalid length. [ 255.667264][T14728] netlink: 'syz.0.4161': attribute type 1 has an invalid length. [ 255.792481][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.809885][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.846880][ T5901] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 256.009482][ T5901] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 256.029149][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.055784][ T5901] usb 4-1: config 0 descriptor?? [ 256.077494][ T5901] gspca_main: spca508-2.14.0 probing 8086:0110 [ 256.346615][ T5984] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 256.488131][ T5901] gspca_spca508: reg_read err -71 [ 256.500602][ T5901] gspca_spca508: reg_read err -71 [ 256.508259][ T5984] usb 3-1: Using ep0 maxpacket: 8 [ 256.510136][ T5901] gspca_spca508: reg_read err -71 [ 256.519191][ T5984] usb 3-1: unable to get BOS descriptor or descriptor too short [ 256.531076][ T5901] gspca_spca508: reg_read err -71 [ 256.534926][ T5984] usb 3-1: config 8 has an invalid interface number: 255 but max is 0 [ 256.540148][ T5901] gspca_spca508: reg write: error -71 [ 256.549832][ T5984] usb 3-1: config 8 has no interface number 0 [ 256.549871][ T5984] usb 3-1: config 8 interface 255 has no altsetting 0 [ 256.552919][ T5984] usb 3-1: string descriptor 0 read error: -22 [ 256.586603][ T5901] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 256.589349][ T5984] usb 3-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 256.613853][ T5984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.614892][ T5901] usb 4-1: USB disconnect, device number 15 [ 256.630003][T14756] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 257.061423][ T5984] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.2-1, 00:00:00:00:00:00. [ 257.178753][ T5984] usb 3-1: USB disconnect, device number 24 [ 261.687678][ T5984] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 261.848946][ T5984] usb 4-1: Using ep0 maxpacket: 8 [ 261.856194][ T5984] usb 4-1: unable to get BOS descriptor or descriptor too short [ 261.880434][ T5984] usb 4-1: config 8 has an invalid interface number: 255 but max is 0 [ 261.892044][ T5984] usb 4-1: config 8 has no interface number 0 [ 261.898590][ T5984] usb 4-1: config 8 interface 255 has no altsetting 0 [ 261.909006][ T5984] usb 4-1: string descriptor 0 read error: -22 [ 261.915314][ T5984] usb 4-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 261.938518][ T5984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.252454][T15053] tipc: Trying to set illegal importance in message [ 262.397508][ T5984] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.3-1, 00:00:00:00:00:00. [ 262.439066][ T5984] usb 4-1: USB disconnect, device number 16 [ 262.645122][T15072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4333'. [ 262.954029][T15089] siw: device registration error -23 [ 263.767447][T15142] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4360'. [ 263.838875][T15147] syz.1.4361: attempt to access beyond end of device [ 263.838875][T15147] loop1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 263.877351][T15147] qnx6: unable to read the first superblock [ 263.893805][T15147] syz.1.4361: attempt to access beyond end of device [ 263.893805][T15147] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 263.910810][T15147] qnx6: unable to read the first superblock [ 263.917041][T15147] qnx6: unable to read the first superblock [ 264.051005][T15160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4366'. [ 264.176517][ T5984] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 264.252649][T15172] cgroup: none used incorrectly [ 264.337053][ T5984] usb 3-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 264.356798][ T5984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.380562][ T5984] usb 3-1: Product: syz [ 264.384761][ T5984] usb 3-1: Manufacturer: syz [ 264.403237][ T5984] usb 3-1: SerialNumber: syz [ 264.419223][ T5984] usb 3-1: config 0 descriptor?? [ 264.741662][T15194] siw: device registration error -23 [ 264.849381][ T5984] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 264.877851][ T5984] asix 3-1:0.0: probe with driver asix failed with error -71 [ 264.896184][ T5984] usb 3-1: USB disconnect, device number 25 [ 265.200655][T15218] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4397'. [ 265.382074][T15226] siw: device registration error -23 [ 265.687096][ T5984] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 265.840173][ T5984] usb 4-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 265.850090][ T5984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.860824][ T5984] usb 4-1: Product: syz [ 265.862803][T15242] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4402'. [ 265.864996][ T5984] usb 4-1: Manufacturer: syz [ 265.865014][ T5984] usb 4-1: SerialNumber: syz [ 265.876219][ T5984] usb 4-1: config 0 descriptor?? [ 265.883143][ T5984] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 266.308677][ T5984] sonixb 4-1:0.0: Error writing register 01: -71 [ 266.316661][ T5984] sonixb 4-1:0.0: probe with driver sonixb failed with error -71 [ 266.359206][ T5984] usb 4-1: USB disconnect, device number 17 [ 267.286531][ T5984] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 267.407560][ T5901] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 267.436554][ T5984] usb 4-1: Using ep0 maxpacket: 32 [ 267.444461][ T5984] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 267.452780][ T5984] usb 4-1: config 0 has no interface number 0 [ 267.459047][ T5984] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 267.470000][ T5984] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 267.482651][ T5984] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 267.494034][ T5984] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 267.504262][ T5984] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 267.515977][ T5984] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 267.526022][ T5984] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 267.535993][ T5984] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 267.549947][ T5984] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 267.560112][ T5984] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 267.577091][ T5984] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 267.581157][ T5901] usb 2-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 267.586143][ T5984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.595956][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.605983][ T5984] usb 4-1: Product: syz [ 267.615511][ T5984] usb 4-1: Manufacturer: syz [ 267.616209][ T5901] usb 2-1: Product: syz [ 267.622856][ T5984] usb 4-1: SerialNumber: syz [ 267.632872][ T5901] usb 2-1: Manufacturer: syz [ 267.640703][ T5984] usb 4-1: config 0 descriptor?? [ 267.644872][ T5901] usb 2-1: SerialNumber: syz [ 267.647211][T15286] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 267.657955][T15286] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 267.670318][ T5901] usb 2-1: config 0 descriptor?? [ 267.679259][ T5901] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 267.704193][ T5984] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 267.716988][ T5984] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 267.757102][ T5984] scsi host1: microtekX6 [ 267.908525][ T5984] usb 4-1: USB disconnect, device number 18 [ 268.099940][ T5901] sonixb 2-1:0.0: Error writing register 01: -71 [ 268.117604][ T5901] sonixb 2-1:0.0: probe with driver sonixb failed with error -71 [ 268.146678][ T5901] usb 2-1: USB disconnect, device number 23 [ 269.356476][ T5901] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 269.374375][T15401] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4480'. [ 269.524212][ T5901] usb 3-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 269.540331][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.558074][ T5901] usb 3-1: Product: syz [ 269.571624][ T5901] usb 3-1: Manufacturer: syz [ 269.576270][ T5901] usb 3-1: SerialNumber: syz [ 269.607041][ T5901] usb 3-1: config 0 descriptor?? [ 269.615525][ T5901] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 269.804306][T15427] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4492'. [ 270.023166][ T5901] sonixb 3-1:0.0: Error writing register 01: -71 [ 270.049898][ T5901] sonixb 3-1:0.0: probe with driver sonixb failed with error -71 [ 270.080394][ T5901] usb 3-1: USB disconnect, device number 26 [ 270.582398][T15462] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4505'. [ 272.691572][T15565] netlink: 'syz.2.4560': attribute type 6 has an invalid length. [ 273.300676][T15605] netlink: 'syz.1.4580': attribute type 1 has an invalid length. [ 273.313025][T15605] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4580'. [ 273.782360][T15639] netlink: 'syz.1.4597': attribute type 10 has an invalid length. [ 274.193810][T15657] netlink: 'syz.1.4604': attribute type 6 has an invalid length. [ 274.576529][ T5901] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 274.746759][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 274.763795][ T5901] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 274.779661][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.788525][ T5901] usb 2-1: Product: syz [ 274.793101][ T5901] usb 2-1: Manufacturer: syz [ 274.800265][ T5901] usb 2-1: SerialNumber: syz [ 274.812221][ T5901] usb 2-1: config 0 descriptor?? [ 274.835541][T15693] openvswitch: netlink: Message has -1 unknown bytes. [ 274.891032][T15697] netlink: 'syz.3.4626': attribute type 10 has an invalid length. [ 275.037942][ T5901] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 024 [ 275.176794][T15705] program syz.3.4630 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.235787][ T5901] usb 2-1: USB disconnect, device number 24 [ 275.782231][T15717] openvswitch: netlink: Message has -1 unknown bytes. [ 276.158615][T15743] openvswitch: netlink: Message has -1 unknown bytes. [ 276.214081][T15747] program syz.0.4652 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 276.335695][T15755] netlink: 'syz.0.4663': attribute type 10 has an invalid length. [ 276.652157][T15776] program syz.2.4664 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 276.660998][T15775] program syz.0.4673 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 276.874017][T15790] openvswitch: netlink: Tunnel attr 7 has unexpected len 8 expected 0 [ 277.422537][T15831] tmpfs: Bad value for 'nr_blocks' [ 277.539898][T15837] tmpfs: Bad value for 'nr_blocks' [ 277.671041][T15847] program syz.2.4699 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 277.940909][T15865] tmpfs: Bad value for 'nr_blocks' [ 277.952322][T15867] netlink: 'syz.2.4711': attribute type 21 has an invalid length. [ 277.970845][T15867] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4711'. [ 278.286776][ T5901] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 278.446499][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 278.459873][ T5901] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 278.474822][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.483245][T15899] netlink: 'syz.1.4726': attribute type 21 has an invalid length. [ 278.491909][ T5901] usb 4-1: Product: syz [ 278.496191][ T5901] usb 4-1: Manufacturer: syz [ 278.496256][T15899] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4726'. [ 278.501853][ T5901] usb 4-1: SerialNumber: syz [ 278.526874][ T5901] usb 4-1: config 0 descriptor?? [ 278.754327][ T5901] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 019 [ 278.963275][ T5901] usb 4-1: USB disconnect, device number 19 [ 279.767542][ T5901] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 279.926506][ T5901] usb 3-1: Using ep0 maxpacket: 32 [ 279.938843][ T5901] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 279.951989][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.960975][ T5901] usb 3-1: Product: syz [ 279.966021][ T5901] usb 3-1: Manufacturer: syz [ 279.976139][ T5901] usb 3-1: SerialNumber: syz [ 279.986331][ T5901] usb 3-1: config 0 descriptor?? [ 280.201114][ T5901] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 027 [ 280.406703][ T10] usb 3-1: USB disconnect, device number 27 [ 281.595557][T15989] mmap: syz.3.4760 (15989) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 282.323746][T16030] netlink: 'syz.2.4788': attribute type 28 has an invalid length. [ 283.577502][ T5984] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 283.622600][T16111] netlink: 'syz.2.4829': attribute type 1 has an invalid length. [ 283.633604][T16111] netlink: 'syz.2.4829': attribute type 2 has an invalid length. [ 283.751324][ T5984] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 283.762139][ T5984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.807444][ T5984] usb 4-1: config 0 descriptor?? [ 283.836685][ T5984] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 283.975153][T16128] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4845'. [ 283.987188][T16128] team0: default FDB implementation only supports local addresses [ 284.220668][ T5984] gp8psk: usb out operation failed. [ 284.227505][ T5984] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 284.247399][ T5984] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 284.268553][ T5984] usb 4-1: USB disconnect, device number 20 [ 284.530969][T16161] netlink: 'syz.1.4855': attribute type 1 has an invalid length. [ 284.546567][T16161] netlink: 'syz.1.4855': attribute type 2 has an invalid length. [ 284.906343][T16187] blktrace: Concurrent blktraces are not allowed on sg0 [ 285.267813][ T5984] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 285.301082][T16215] blktrace: Concurrent blktraces are not allowed on sg0 [ 285.437154][ T5984] usb 3-1: Using ep0 maxpacket: 32 [ 285.443620][ T5984] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 285.455942][ T5984] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 285.467169][ T5984] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 285.476937][ T5984] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 285.488019][ T5984] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 285.502477][ T5984] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 285.511670][ T5984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.519714][ T5984] usb 3-1: Product: syz [ 285.523879][ T5984] usb 3-1: Manufacturer: syz [ 285.528882][ T5984] usb 3-1: SerialNumber: syz [ 285.535454][ T5984] usb 3-1: config 0 descriptor?? [ 285.606488][ T5901] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 285.758377][ T5901] usb 4-1: unable to get BOS descriptor or descriptor too short [ 285.767476][ T5901] usb 4-1: config 7 has an invalid interface number: 141 but max is 0 [ 285.775680][ T5901] usb 4-1: config 7 has no interface number 0 [ 285.781890][ T5901] usb 4-1: config 7 interface 141 has no altsetting 0 [ 285.791250][ T5901] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=43.85 [ 285.801424][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.809503][ T5901] usb 4-1: Product: syz [ 285.813660][ T5901] usb 4-1: Manufacturer: syz [ 285.818350][ T5901] usb 4-1: SerialNumber: syz [ 285.945887][ T5984] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 285.952582][ T5984] input input24: Device does not respond to id packet M [ 285.961420][ T5984] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 285.967674][ T5984] input input24: Device does not respond to id packet P [ 285.975539][ T5984] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 285.981683][ T5984] input input24: Device does not respond to id packet B [ 285.989367][ T5984] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 285.995391][ T5984] input input24: Device does not respond to id packet N [ 286.002870][ T5984] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 286.010983][ T5984] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 286.018626][ T5984] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 286.024992][ T5984] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 286.035054][ T5984] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input24 [ 286.048368][ T5901] usb_ehset_test 4-1:7.141: probe with driver usb_ehset_test failed with error -32 [ 286.054325][ T5984] usb 3-1: USB disconnect, device number 28 [ 286.096251][ T5901] usb 4-1: USB disconnect, device number 21 [ 286.509646][T16230] netlink: 'syz.0.4895': attribute type 10 has an invalid length. [ 286.548492][T16230] team0: Port device team_slave_0 removed [ 286.766522][T16244] netlink: 'syz.3.4896': attribute type 3 has an invalid length. [ 286.774375][T16244] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4896'. [ 287.156478][ T5901] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 287.191320][ T5831] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 287.314981][T16284] netlink: 'syz.1.4923': attribute type 3 has an invalid length. [ 287.318460][ T5901] usb 3-1: unable to get BOS descriptor or descriptor too short [ 287.341520][T16284] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4923'. [ 287.347876][ T5901] usb 3-1: config 7 has an invalid interface number: 141 but max is 0 [ 287.364776][ T5901] usb 3-1: config 7 has no interface number 0 [ 287.379453][ T5901] usb 3-1: config 7 interface 141 has no altsetting 0 [ 287.399261][ T5901] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=43.85 [ 287.416640][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.436576][ T5901] usb 3-1: Product: syz [ 287.441655][ T5901] usb 3-1: Manufacturer: syz [ 287.446264][ T5901] usb 3-1: SerialNumber: syz [ 287.562241][T16297] PKCS7: Unknown OID: [4] 0.0 [ 287.586446][T16297] PKCS7: Only support pkcs7_signedData type [ 287.679185][T16304] netlink: 'syz.0.4927': attribute type 3 has an invalid length. [ 287.688837][T16304] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4927'. [ 287.698915][ T5901] usb_ehset_test 3-1:7.141: probe with driver usb_ehset_test failed with error -32 [ 287.738694][ T5901] usb 3-1: USB disconnect, device number 29 [ 288.025010][T16325] PKCS7: Unknown OID: [4] 0.0 [ 288.033395][T16325] PKCS7: Only support pkcs7_signedData type [ 288.439373][T16353] PKCS7: Unknown OID: [4] 0.0 [ 288.444099][T16353] PKCS7: Only support pkcs7_signedData type [ 288.670746][T16370] netlink: 'syz.2.4957': attribute type 3 has an invalid length. [ 288.681619][T16370] netlink: 766 bytes leftover after parsing attributes in process `syz.2.4957'. [ 288.786545][ T24] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 288.939553][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 288.951770][ T24] usb 2-1: config 7 has an invalid interface number: 141 but max is 0 [ 288.963185][ T24] usb 2-1: config 7 has no interface number 0 [ 288.974101][ T24] usb 2-1: config 7 interface 141 has no altsetting 0 [ 288.985029][ T24] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=43.85 [ 288.995394][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.007825][ T24] usb 2-1: Product: syz [ 289.012010][ T24] usb 2-1: Manufacturer: syz [ 289.018567][ T24] usb 2-1: SerialNumber: syz [ 289.116635][ T5984] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 289.245659][ T24] usb_ehset_test 2-1:7.141: probe with driver usb_ehset_test failed with error -32 [ 289.268714][ T24] usb 2-1: USB disconnect, device number 25 [ 289.279203][ T5984] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 289.301038][ T5984] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.312426][ T5984] usb 3-1: config 0 descriptor?? [ 289.320688][ T5984] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 289.346538][ T10] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 289.498243][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.508517][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 289.522744][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 289.532178][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 289.540413][ T10] usb 4-1: SerialNumber: syz [ 289.553098][ T10] usb 4-1: 0:2 : does not exist [ 289.723626][ T5984] gp8psk: usb out operation failed. [ 289.731295][ T5984] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 289.741915][ T5984] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 289.761071][ T5984] usb 3-1: USB disconnect, device number 30 [ 289.832130][T16408] netlink: 'syz.0.4986': attribute type 3 has an invalid length. [ 289.840543][T16408] netlink: 766 bytes leftover after parsing attributes in process `syz.0.4986'. [ 289.959231][ T24] usb 4-1: USB disconnect, device number 22 [ 290.228192][T16432] netlink: 'syz.1.4990': attribute type 3 has an invalid length. [ 290.235933][T16432] netlink: 766 bytes leftover after parsing attributes in process `syz.1.4990'. [ 290.397814][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 290.397831][ T30] audit: type=1400 audit(1751315220.356:26): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=5D9625292F2F2E212D pid=16440 comm="syz.0.5002" [ 290.788818][T16470] misc userio: Invalid payload size [ 290.856049][T16474] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.5011'. [ 290.917946][ T30] audit: type=1400 audit(1751315220.876:27): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=5D9625292F2F2E212D pid=16475 comm="syz.2.5012" [ 291.299431][ T30] audit: type=1400 audit(1751315221.246:28): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=5D9625292F2F2E212D pid=16502 comm="syz.1.5025" [ 291.761797][T16534] misc userio: Invalid payload size [ 291.922570][T16548] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.5047'. [ 292.160181][T16564] misc userio: Invalid payload size [ 292.388321][T16578] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5060'. [ 292.450724][T16584] netlink: 'syz.3.5065': attribute type 11 has an invalid length. [ 292.758358][T16605] netlink: 'syz.0.5075': attribute type 10 has an invalid length. [ 292.811504][T16605] veth0_vlan: left promiscuous mode [ 292.840337][T16605] veth0_vlan: entered promiscuous mode [ 292.862902][T16605] team0: Device veth0_vlan failed to register rx_handler [ 293.006731][T16605] syz.0.5075 (16605) used greatest stack depth: 19640 bytes left [ 293.063507][T16622] team_slave_0: entered promiscuous mode [ 293.076536][T16622] team_slave_0: entered allmulticast mode [ 293.170885][T16627] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 293.901980][T16682] netlink: 'syz.1.5114': attribute type 11 has an invalid length. [ 294.346559][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 294.363378][T16712] netlink: 'syz.2.5130': attribute type 11 has an invalid length. [ 294.510877][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 294.521805][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 294.543687][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 294.565144][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 294.589403][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 294.615121][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 294.626766][T16726] netlink: 'syz.3.5135': attribute type 10 has an invalid length. [ 294.643419][ T10] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 294.656866][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.667816][T16726] team0: Device veth0_vlan failed to register rx_handler [ 294.675161][ T10] usb 2-1: Product: syz [ 294.681753][ T10] usb 2-1: Manufacturer: syz [ 294.693303][ T10] usb 2-1: SerialNumber: syz [ 294.720891][ T10] usb 2-1: config 0 descriptor?? [ 295.135559][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 295.162742][ T10] input input25: Device does not respond to id packet M [ 295.175816][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 295.182517][ T10] input input25: Device does not respond to id packet P [ 295.193494][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 295.202824][ T10] input input25: Device does not respond to id packet B [ 295.217287][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 295.236740][ T10] input input25: Device does not respond to id packet N [ 295.244374][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 295.258301][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 295.273268][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 295.281498][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 295.293621][ T10] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input25 [ 295.331103][ T10] usb 2-1: USB disconnect, device number 26 [ 295.532849][T16776] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 295.893425][T16790] usb usb1: usbfs: process 16790 (syz.3.5165) did not claim interface 0 before use [ 296.364063][T16822] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 297.082204][T16848] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 297.356226][T16866] usb usb1: usbfs: process 16866 (syz.2.5206) did not claim interface 0 before use [ 297.540985][T16879] syz.3.5211 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 297.796695][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 297.946582][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 297.956772][ T10] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 297.967692][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.979761][ T10] usb 2-1: config 0 descriptor?? [ 298.007652][ T10] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 298.044857][T16911] netlink: 'syz.2.5228': attribute type 64 has an invalid length. [ 298.053092][T16911] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5228'. [ 298.424113][ T10] gspca_nw80x: reg_r err -71 [ 298.429213][ T10] nw80x 2-1:0.0: probe with driver nw80x failed with error -71 [ 298.439679][ T10] usb 2-1: USB disconnect, device number 27 [ 298.980475][T16917] netlink: 'syz.2.5231': attribute type 3 has an invalid length. [ 299.003554][T16917] netlink: 'syz.2.5231': attribute type 1 has an invalid length. [ 299.017945][T16917] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5231'. [ 299.125304][T16925] tmpfs: Bad value for 'mpol' [ 299.405828][T16946] usb usb8: usbfs: process 16946 (syz.3.5245) did not claim interface 0 before use [ 299.452962][T16950] befs: (nbd1): No write support. Marking filesystem read-only [ 299.482612][T16950] syz.1.5247: attempt to access beyond end of device [ 299.482612][T16950] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 299.852734][T16976] befs: (nbd2): No write support. Marking filesystem read-only [ 299.869681][T16976] syz.2.5260: attempt to access beyond end of device [ 299.869681][T16976] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 299.885060][T16978] netlink: 'syz.1.5261': attribute type 3 has an invalid length. [ 299.893338][T16978] netlink: 'syz.1.5261': attribute type 1 has an invalid length. [ 299.903192][T16978] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5261'. [ 299.981611][T16982] tmpfs: Bad value for 'mpol' [ 300.275284][T17004] befs: (nbd3): No write support. Marking filesystem read-only [ 300.287228][T17004] syz.3.5273: attempt to access beyond end of device [ 300.287228][T17004] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 300.302887][T17005] openvswitch: netlink: Flow key attr not present in new flow. [ 301.083779][T17058] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 301.357852][ T30] audit: type=1800 audit(1751315231.316:29): pid=17079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5309" name="memory.events" dev="tmpfs" ino=6922 res=0 errno=0 [ 301.406742][ T5901] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 301.516696][ T24] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 301.556503][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 301.564800][ T5901] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 301.584103][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.600741][ T5901] usb 4-1: config 0 descriptor?? [ 301.611030][ T5901] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 301.690189][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 301.703655][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 301.711913][ T24] usb 3-1: config 0 has no interface number 0 [ 301.719936][ T24] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 301.729229][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.737496][ T24] usb 3-1: Product: syz [ 301.741723][ T24] usb 3-1: Manufacturer: syz [ 301.746318][ T24] usb 3-1: SerialNumber: syz [ 301.754005][ T24] usb 3-1: config 0 descriptor?? [ 301.762146][ T24] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 302.012874][ T5901] gspca_nw80x: reg_r err -71 [ 302.019140][ T5901] nw80x 4-1:0.0: probe with driver nw80x failed with error -71 [ 302.030302][ T5901] usb 4-1: USB disconnect, device number 23 [ 302.165810][ T24] gspca_spca1528: reg_w err -71 [ 302.186607][ T24] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 302.197656][ T24] usb 3-1: USB disconnect, device number 31 [ 302.795456][T17114] : renamed from lo (while UP) [ 302.824198][T17114] : entered promiscuous mode [ 303.089677][ T30] audit: type=1107 audit(1751315233.036:30): pid=17135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='d' [ 303.476478][ T30] audit: type=1107 audit(1751315233.416:31): pid=17160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='d' [ 303.654806][T17174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5354'. [ 303.667692][T17174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5354'. [ 303.760680][T17179] : renamed from lo (while UP) [ 303.773000][T17179] : entered promiscuous mode [ 303.780193][ T24]  speed is unknown, defaulting to 1000 [ 303.796526][ T24] syz0: Port: 1 Link DOWN [ 303.802454][ T24]  speed is unknown, defaulting to 1000 [ 304.093603][T17201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5367'. [ 304.105737][T17201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5367'. [ 304.188662][T17207] : renamed from lo (while UP) [ 304.197722][T17207] : entered promiscuous mode [ 306.052443][T17232] : renamed from lo (while UP) [ 306.065043][T17232] : entered promiscuous mode [ 306.738813][T17283] tmpfs: Bad value for 'mpol' [ 306.782776][T17285] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5409'. [ 306.862757][T17289] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5412'. [ 307.106882][T17307] tmpfs: Bad value for 'mpol' [ 307.135044][T17309] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5422'. [ 307.200297][T17315] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5425'. [ 307.552485][T17340] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5436'. [ 307.564484][T17341] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5437'. [ 307.939427][T17365] netlink: 'syz.1.5448': attribute type 11 has an invalid length. [ 308.136151][T17373] netlink: 'syz.0.5452': attribute type 5 has an invalid length. [ 308.873693][T17421] netlink: 'syz.0.5471': attribute type 11 has an invalid length. [ 309.018375][T17430] netlink: 'syz.1.5483': attribute type 5 has an invalid length. [ 310.525289][T17520] Sensor A: ================= START STATUS ================= [ 310.534325][T17520] Sensor A: Test Pattern: Horizontal 100% Colorbar [ 310.547102][T17520] Sensor A: Show Information: None [ 310.559351][T17520] Sensor A: Vertical Flip: false [ 310.564347][T17520] Sensor A: Horizontal Flip: false [ 310.579329][T17520] Sensor A: Brightness: 128 [ 310.589431][T17520] Sensor A: Contrast: 0 [ 310.599905][T17520] Sensor A: Hue: 3 [ 310.610007][T17520] Sensor A: Saturation: 128 [ 310.620151][T17520] Sensor A: ================== END STATUS ================== [ 310.935027][T17544] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5521'. [ 311.176597][T17558] Sensor A: ================= START STATUS ================= [ 311.184193][T17558] Sensor A: Test Pattern: Horizontal 100% Colorbar [ 311.228047][T17558] Sensor A: Show Information: None [ 311.233647][T17558] Sensor A: Vertical Flip: false [ 311.239650][T17558] Sensor A: Horizontal Flip: false [ 311.251536][T17558] Sensor A: Brightness: 128 [ 311.267954][T17558] Sensor A: Contrast: 0 [ 311.276853][T17558] Sensor A: Hue: 3 [ 311.294473][T17558] Sensor A: Saturation: 128 [ 311.304203][T17558] Sensor A: ================== END STATUS ================== [ 311.366205][T17569] Invalid source name [ 311.550567][T17577] netlink: 666 bytes leftover after parsing attributes in process `syz.3.5533'. [ 311.731680][T17588] netlink: 666 bytes leftover after parsing attributes in process `syz.0.5546'. [ 311.799158][T17594] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5541'. [ 311.914064][T17600] Invalid source name [ 311.935125][T17594] hsr_slave_1 (unregistering): left promiscuous mode [ 311.970104][T17602] openvswitch: netlink: Missing valid actions attribute. [ 311.977516][T17602] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.385025][T17625] openvswitch: netlink: Missing valid actions attribute. [ 312.411836][T17625] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.009944][T17661] openvswitch: netlink: Missing valid actions attribute. [ 313.022183][T17661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.035251][T17662] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.5576'. [ 313.054332][T17662] netlink: zone id is out of range [ 313.066448][T17662] netlink: get zone limit has 8 unknown bytes [ 313.478417][T17688] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5578'. [ 313.839751][T17713] random: crng reseeded on system resumption [ 314.087010][T17724] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5592'. [ 314.290579][T17739] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.5596'. [ 314.315947][T17739] netlink: zone id is out of range [ 314.326553][T17739] netlink: get zone limit has 8 unknown bytes [ 314.426512][T17744] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5609'. [ 314.959764][T17785] random: crng reseeded on system resumption [ 315.185628][T17798] bridge0: port 3(hsr_slave_0) entered blocking state [ 315.196194][T17798] bridge0: port 3(hsr_slave_0) entered disabled state [ 315.205816][T17798] hsr_slave_0: entered allmulticast mode [ 315.218852][T17798] hsr_slave_0: left allmulticast mode [ 316.122903][T17860] netlink: 'syz.3.5650': attribute type 27 has an invalid length. [ 316.532443][T17888] syz.2.5662 uses old SIOCAX25GETINFO [ 316.737892][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 316.899965][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 316.912665][ T10] usb 2-1: config 6 has an invalid interface number: 200 but max is 0 [ 316.922444][ T10] usb 2-1: config 6 has no interface number 0 [ 316.939981][ T10] usb 2-1: config 6 interface 200 has no altsetting 0 [ 316.947794][T17920] netlink: 'syz.0.5678': attribute type 27 has an invalid length. [ 316.965865][ T10] usb 2-1: string descriptor 0 read error: -22 [ 316.972684][ T10] usb 2-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 316.996652][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.030453][ T10] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 317.236392][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.244015][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 317.245170][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.301438][ T10] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 317.322455][ T10] usb 2-1: media controller created [ 317.363155][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 317.410604][ T10] dvb-usb: bulk message failed: -71 (6/0) [ 317.430248][ T10] dvb-usb: bulk message failed: -71 (6/0) [ 317.436145][ T10] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 317.474137][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input29 [ 317.500045][T17944] netlink: 'syz.2.5687': attribute type 1 has an invalid length. [ 317.501820][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 317.515543][ T10] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 317.530607][ T10] usb 2-1: USB disconnect, device number 28 [ 317.590744][ T10] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 317.662296][T17950] netlink: 'syz.2.5688': attribute type 27 has an invalid length. [ 317.933111][T17968] /dev/nullb0: Can't open blockdev [ 318.004709][T17974] netlink: 'syz.1.5701': attribute type 1 has an invalid length. [ 318.622666][T18017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5725'. [ 321.484210][T18063] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 321.636473][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 321.818842][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 321.831059][ T10] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 321.846616][ T10] usb 3-1: config 179 has no interface number 0 [ 321.855328][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 321.876832][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 321.898381][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 321.924421][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 321.944146][ T10] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 321.969177][ T10] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 321.996859][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.010346][T18095] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 322.024266][T18056] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 322.535602][ T24] usb 3-1: USB disconnect, device number 32 [ 322.535671][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 322.550441][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 322.559452][ C0] ================================================================== [ 322.567533][ C0] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23d/0x290 [ 322.575356][ C0] Read of size 4 at addr ffff88806be2c85c by task syz-executor/18122 [ 322.583427][ C0] [ 322.585745][ C0] CPU: 0 UID: 0 PID: 18122 Comm: syz-executor Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 322.585765][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 322.585783][ C0] Call Trace: [ 322.585790][ C0] [ 322.585796][ C0] dump_stack_lvl+0x189/0x250 [ 322.585817][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 322.585835][ C0] ? rcu_is_watching+0x15/0xb0 [ 322.585848][ C0] ? __kasan_check_byte+0x12/0x40 [ 322.585865][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.585879][ C0] ? rcu_is_watching+0x15/0xb0 [ 322.585892][ C0] ? lock_release+0x4b/0x3e0 [ 322.585914][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 322.585930][ C0] ? __virt_addr_valid+0x4a5/0x5c0 [ 322.585946][ C0] print_report+0xd2/0x2b0 [ 322.585965][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 322.585982][ C0] kasan_report+0x118/0x150 [ 322.585999][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 322.586022][ C0] do_raw_spin_lock+0x23d/0x290 [ 322.586039][ C0] ? __wake_up_common_lock+0x2f/0x1f0 [ 322.586057][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 322.586077][ C0] _raw_spin_lock_irqsave+0xb3/0xf0 [ 322.586094][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 322.586110][ C0] ? kcov_remote_stop+0x78/0x6d0 [ 322.586130][ C0] __wake_up_common_lock+0x2f/0x1f0 [ 322.586151][ C0] __usb_hcd_giveback_urb+0x4d7/0x690 [ 322.586170][ C0] ? usb_hcd_unlink_urb_from_ep+0x2c/0x110 [ 322.586189][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 322.586210][ C0] ? usb_hcd_giveback_urb+0x10e/0x420 [ 322.586228][ C0] dummy_timer+0x862/0x4550 [ 322.586255][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 322.586281][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 322.586298][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 322.586315][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 322.586330][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 322.586351][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 322.586365][ C0] ? read_tsc+0x9/0x20 [ 322.586385][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 322.586411][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 322.586427][ C0] handle_softirqs+0x286/0x870 [ 322.586441][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 322.586456][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 322.586472][ C0] __irq_exit_rcu+0xca/0x1f0 [ 322.586485][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 322.586501][ C0] irq_exit_rcu+0x9/0x30 [ 322.586513][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 322.586530][ C0] [ 322.586535][ C0] [ 322.586540][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 322.586556][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 322.586575][ C0] Code: 8b 3d 04 09 09 0c 48 89 de 5b e9 23 41 59 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 08 c0 c3 92 65 8b 15 88 a4 03 11 81 e2 00 01 ff 00 [ 322.586588][ C0] RSP: 0018:ffffc90003627bd8 EFLAGS: 00000246 [ 322.586603][ C0] RAX: ffffffff8238eb02 RBX: 1ffff110066a44da RCX: 0000000000000000 [ 322.586614][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90003627c30 [ 322.586624][ C0] RBP: ffffc90003627db0 R08: ffffc90003627c2f R09: 0000000000000000 [ 322.586633][ C0] R10: ffffc90003627c20 R11: fffff520006c4f86 R12: 0000000000000000 [ 322.586643][ C0] R13: ffff88806bd4a200 R14: ffff8880335226d0 R15: 0000000000000000 [ 322.586656][ C0] ? do_filp_open+0x1b2/0x410 [ 322.586674][ C0] do_filp_open+0x1b2/0x410 [ 322.586687][ C0] ? __lock_acquire+0xab9/0xd20 [ 322.586708][ C0] ? __pfx_do_filp_open+0x10/0x10 [ 322.586730][ C0] ? _raw_spin_unlock+0x28/0x50 [ 322.586744][ C0] ? alloc_fd+0x64c/0x6c0 [ 322.586766][ C0] do_sys_openat2+0x121/0x1c0 [ 322.586781][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 322.586794][ C0] ? exc_page_fault+0x76/0xf0 [ 322.586811][ C0] ? do_user_addr_fault+0xc8a/0x1390 [ 322.586831][ C0] __x64_sys_openat+0x138/0x170 [ 322.586847][ C0] do_syscall_64+0xfa/0x3b0 [ 322.586864][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.586880][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.586894][ C0] ? clear_bhb_loop+0x60/0xb0 [ 322.586910][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.586924][ C0] RIP: 0033:0x7f5d7498d290 [ 322.586938][ C0] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 322.586951][ C0] RSP: 002b:00007ffd8b478690 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 322.586965][ C0] RAX: ffffffffffffffda RBX: 0000000000080001 RCX: 00007f5d7498d290 [ 322.586975][ C0] RDX: 0000000000080001 RSI: 00007f5d74a1236c RDI: 00000000ffffff9c [ 322.586985][ C0] RBP: 00007f5d74a1236c R08: 0000000000000000 R09: 0000000000000000 [ 322.586994][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 322.587009][ C0] R13: 00007ffd8b478730 R14: 000000000004eb75 R15: 00007ffd8b478ca0 [ 322.587024][ C0] [ 322.587029][ C0] [ 323.060147][ C0] Allocated by task 10: [ 323.064286][ C0] kasan_save_track+0x3e/0x80 [ 323.068948][ C0] __kasan_kmalloc+0x93/0xb0 [ 323.073518][ C0] __kmalloc_cache_noprof+0x230/0x3d0 [ 323.078875][ C0] xpad_probe+0x428/0x1fc0 [ 323.083284][ C0] usb_probe_interface+0x634/0xbf0 [ 323.088383][ C0] really_probe+0x26d/0x9a0 [ 323.092871][ C0] __driver_probe_device+0x18c/0x2f0 [ 323.098150][ C0] driver_probe_device+0x4f/0x430 [ 323.103181][ C0] __device_attach_driver+0x2ce/0x530 [ 323.108554][ C0] bus_for_each_drv+0x24e/0x2e0 [ 323.113394][ C0] __device_attach+0x2b8/0x400 [ 323.118138][ C0] bus_probe_device+0x185/0x260 [ 323.122977][ C0] device_add+0x7b6/0xb50 [ 323.127297][ C0] usb_set_configuration+0x1a87/0x20e0 [ 323.132742][ C0] usb_generic_driver_probe+0x8d/0x150 [ 323.138181][ C0] usb_probe_device+0x1c4/0x390 [ 323.143013][ C0] really_probe+0x26d/0x9a0 [ 323.147497][ C0] __driver_probe_device+0x18c/0x2f0 [ 323.152764][ C0] driver_probe_device+0x4f/0x430 [ 323.157768][ C0] __device_attach_driver+0x2ce/0x530 [ 323.163123][ C0] bus_for_each_drv+0x24e/0x2e0 [ 323.167957][ C0] __device_attach+0x2b8/0x400 [ 323.172703][ C0] bus_probe_device+0x185/0x260 [ 323.177537][ C0] device_add+0x7b6/0xb50 [ 323.181854][ C0] usb_new_device+0xa39/0x16f0 [ 323.186620][ C0] hub_event+0x2941/0x4a00 [ 323.191036][ C0] process_scheduled_works+0xae1/0x17b0 [ 323.196586][ C0] worker_thread+0x8a0/0xda0 [ 323.201156][ C0] kthread+0x70e/0x8a0 [ 323.205207][ C0] ret_from_fork+0x3fc/0x770 [ 323.209784][ C0] ret_from_fork_asm+0x1a/0x30 [ 323.214529][ C0] [ 323.216833][ C0] Freed by task 24: [ 323.220616][ C0] kasan_save_track+0x3e/0x80 [ 323.225276][ C0] kasan_save_free_info+0x46/0x50 [ 323.230287][ C0] __kasan_slab_free+0x62/0x70 [ 323.235031][ C0] kfree+0x18e/0x440 [ 323.238907][ C0] xpad_disconnect+0x350/0x480 [ 323.243653][ C0] usb_unbind_interface+0x26b/0x910 [ 323.248842][ C0] device_release_driver_internal+0x4d6/0x7c0 [ 323.254915][ C0] bus_remove_device+0x34d/0x410 [ 323.259857][ C0] device_del+0x511/0x8e0 [ 323.264169][ C0] usb_disable_device+0x3e9/0x8a0 [ 323.269176][ C0] usb_disconnect+0x330/0x950 [ 323.273842][ C0] hub_event+0x1cdb/0x4a00 [ 323.278238][ C0] process_scheduled_works+0xae1/0x17b0 [ 323.283776][ C0] worker_thread+0x8a0/0xda0 [ 323.288350][ C0] kthread+0x70e/0x8a0 [ 323.292413][ C0] ret_from_fork+0x3fc/0x770 [ 323.297007][ C0] ret_from_fork_asm+0x1a/0x30 [ 323.301772][ C0] [ 323.304086][ C0] The buggy address belongs to the object at ffff88806be2c800 [ 323.304086][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 323.318134][ C0] The buggy address is located 92 bytes inside of [ 323.318134][ C0] freed 1024-byte region [ffff88806be2c800, ffff88806be2cc00) [ 323.331926][ C0] [ 323.334250][ C0] The buggy address belongs to the physical page: [ 323.340647][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6be28 [ 323.349390][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 323.357870][ C0] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 323.365836][ C0] page_type: f5(slab) [ 323.369811][ C0] raw: 00fff00000000040 ffff88801a841dc0 0000000000000000 dead000000000001 [ 323.378383][ C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 323.386968][ C0] head: 00fff00000000040 ffff88801a841dc0 0000000000000000 dead000000000001 [ 323.395636][ C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 323.404295][ C0] head: 00fff00000000003 ffffea0001af8a01 00000000ffffffff 00000000ffffffff [ 323.412951][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 323.421598][ C0] page dumped because: kasan: bad access detected [ 323.427999][ C0] page_owner tracks the page as allocated [ 323.433691][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 9475, tgid 9474 (syz.1.1691), ts 153807754733, free_ts 153610808765 [ 323.452956][ C0] post_alloc_hook+0x240/0x2a0 [ 323.457716][ C0] get_page_from_freelist+0x21e4/0x22c0 [ 323.463247][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 323.469040][ C0] alloc_pages_mpol+0x232/0x4a0 [ 323.473870][ C0] allocate_slab+0x8a/0x370 [ 323.478359][ C0] ___slab_alloc+0xbeb/0x1410 [ 323.483023][ C0] __kmalloc_noprof+0x305/0x4f0 [ 323.487858][ C0] ieee802_11_parse_elems_full+0x152/0x2b20 [ 323.493739][ C0] ieee80211_inform_bss+0x10c/0x10a0 [ 323.499006][ C0] cfg80211_inform_single_bss_data+0xd02/0x1ac0 [ 323.505232][ C0] cfg80211_inform_bss_data+0x1fb/0x3b20 [ 323.510861][ C0] cfg80211_inform_bss_frame_data+0x3d7/0x730 [ 323.516929][ C0] ieee80211_bss_info_update+0x746/0x9e0 [ 323.522559][ C0] ieee80211_scan_rx+0x593/0xa20 [ 323.527486][ C0] ieee80211_rx_list+0x22fc/0x2d80 [ 323.532582][ C0] ieee80211_rx_napi+0x1a8/0x3d0 [ 323.537506][ C0] page last free pid 5832 tgid 5832 stack trace: [ 323.543825][ C0] __free_frozen_pages+0xb80/0xd80 [ 323.548924][ C0] __put_partials+0x156/0x1a0 [ 323.553586][ C0] put_cpu_partial+0x17c/0x250 [ 323.558337][ C0] __slab_free+0x2d5/0x3c0 [ 323.562745][ C0] qlist_free_all+0x97/0x140 [ 323.567315][ C0] kasan_quarantine_reduce+0x148/0x160 [ 323.572752][ C0] __kasan_slab_alloc+0x22/0x80 [ 323.577597][ C0] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 323.583059][ C0] vm_area_dup+0x2b/0x680 [ 323.587387][ C0] dup_mmap+0x90c/0x1ac0 [ 323.591628][ C0] copy_mm+0x13c/0x4b0 [ 323.595683][ C0] copy_process+0x1706/0x3c00 [ 323.600347][ C0] kernel_clone+0x21e/0x870 [ 323.604838][ C0] __x64_sys_clone+0x18b/0x1e0 [ 323.609588][ C0] do_syscall_64+0xfa/0x3b0 [ 323.614077][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.619959][ C0] [ 323.622263][ C0] Memory state around the buggy address: [ 323.627872][ C0] ffff88806be2c700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 323.635915][ C0] ffff88806be2c780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 323.643961][ C0] >ffff88806be2c800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 323.652008][ C0] ^ [ 323.658922][ C0] ffff88806be2c880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 323.666967][ C0] ffff88806be2c900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 323.675007][ C0] ================================================================== [ 323.683059][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 323.690246][ C0] CPU: 0 UID: 0 PID: 18122 Comm: syz-executor Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 323.701950][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 323.711991][ C0] Call Trace: [ 323.715257][ C0] [ 323.718087][ C0] dump_stack_lvl+0x99/0x250 [ 323.722673][ C0] ? __asan_memcpy+0x40/0x70 [ 323.727261][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.732448][ C0] ? __pfx__printk+0x10/0x10 [ 323.737025][ C0] panic+0x2db/0x790 [ 323.740905][ C0] ? __pfx_panic+0x10/0x10 [ 323.745304][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 323.751184][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 323.757497][ C0] ? print_memory_metadata+0x314/0x400 [ 323.762949][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 323.767963][ C0] check_panic_on_warn+0x89/0xb0 [ 323.772891][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 323.777903][ C0] end_report+0x78/0x160 [ 323.782133][ C0] kasan_report+0x129/0x150 [ 323.786623][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 323.791811][ C0] do_raw_spin_lock+0x23d/0x290 [ 323.796653][ C0] ? __wake_up_common_lock+0x2f/0x1f0 [ 323.802058][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 323.807420][ C0] _raw_spin_lock_irqsave+0xb3/0xf0 [ 323.812605][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 323.818482][ C0] ? kcov_remote_stop+0x78/0x6d0 [ 323.823414][ C0] __wake_up_common_lock+0x2f/0x1f0 [ 323.828602][ C0] __usb_hcd_giveback_urb+0x4d7/0x690 [ 323.833963][ C0] ? usb_hcd_unlink_urb_from_ep+0x2c/0x110 [ 323.839757][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 323.845642][ C0] ? usb_hcd_giveback_urb+0x10e/0x420 [ 323.851007][ C0] dummy_timer+0x862/0x4550 [ 323.855510][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 323.860881][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 323.865808][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 323.870732][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 323.875663][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 323.880859][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 323.886562][ C0] ? read_tsc+0x9/0x20 [ 323.890621][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 323.896455][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 323.901567][ C0] handle_softirqs+0x286/0x870 [ 323.906318][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 323.911069][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 323.916342][ C0] __irq_exit_rcu+0xca/0x1f0 [ 323.920922][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 323.926107][ C0] irq_exit_rcu+0x9/0x30 [ 323.930333][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 323.935954][ C0] [ 323.938868][ C0] [ 323.941787][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 323.947752][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 323.953808][ C0] Code: 8b 3d 04 09 09 0c 48 89 de 5b e9 23 41 59 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 08 c0 c3 92 65 8b 15 88 a4 03 11 81 e2 00 01 ff 00 [ 323.973401][ C0] RSP: 0018:ffffc90003627bd8 EFLAGS: 00000246 [ 323.979455][ C0] RAX: ffffffff8238eb02 RBX: 1ffff110066a44da RCX: 0000000000000000 [ 323.987413][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90003627c30 [ 323.995368][ C0] RBP: ffffc90003627db0 R08: ffffc90003627c2f R09: 0000000000000000 [ 324.003327][ C0] R10: ffffc90003627c20 R11: fffff520006c4f86 R12: 0000000000000000 [ 324.011286][ C0] R13: ffff88806bd4a200 R14: ffff8880335226d0 R15: 0000000000000000 [ 324.019247][ C0] ? do_filp_open+0x1b2/0x410 [ 324.023918][ C0] do_filp_open+0x1b2/0x410 [ 324.028406][ C0] ? __lock_acquire+0xab9/0xd20 [ 324.033246][ C0] ? __pfx_do_filp_open+0x10/0x10 [ 324.038263][ C0] ? _raw_spin_unlock+0x28/0x50 [ 324.043097][ C0] ? alloc_fd+0x64c/0x6c0 [ 324.047418][ C0] do_sys_openat2+0x121/0x1c0 [ 324.052080][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 324.057259][ C0] ? exc_page_fault+0x76/0xf0 [ 324.061923][ C0] ? do_user_addr_fault+0xc8a/0x1390 [ 324.067200][ C0] __x64_sys_openat+0x138/0x170 [ 324.072036][ C0] do_syscall_64+0xfa/0x3b0 [ 324.076528][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 324.081715][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.087777][ C0] ? clear_bhb_loop+0x60/0xb0 [ 324.092449][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.098328][ C0] RIP: 0033:0x7f5d7498d290 [ 324.102748][ C0] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 324.122340][ C0] RSP: 002b:00007ffd8b478690 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 324.130743][ C0] RAX: ffffffffffffffda RBX: 0000000000080001 RCX: 00007f5d7498d290 [ 324.138700][ C0] RDX: 0000000000080001 RSI: 00007f5d74a1236c RDI: 00000000ffffff9c [ 324.146662][ C0] RBP: 00007f5d74a1236c R08: 0000000000000000 R09: 0000000000000000 [ 324.154618][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 324.162576][ C0] R13: 00007ffd8b478730 R14: 000000000004eb75 R15: 00007ffd8b478ca0 [ 324.170540][ C0] [ 324.173808][ C0] Kernel Offset: disabled [ 324.178113][ C0] Rebooting in 86400 seconds..