last executing test programs: 1.859493629s ago: executing program 3 (id=7009): syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b0001010000000904000012020600000524060000052414"], 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.576888685s ago: executing program 1 (id=7018): mlock2(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x1) 1.529272957s ago: executing program 1 (id=7019): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000340)="2bc7b1468e1baf87a36cc418a626739202e894245854a3d7ca502541a1c9d75f1da01f96eb42c637b52c41188586d6494a223ceec4c05bee2bc7f9d31f568f1cd40f7726523728f58f2dc2a157bca5312e2812b61eee2a8c29e612e87671", 0x5e}], 0x1}, 0x24004014) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000094037b40fd080200fdca010203010902120001000000000904"], 0x0) 609.969909ms ago: executing program 2 (id=7040): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8905, &(0x7f0000000340)={'pim6reg0\x00', @remote}) 584.713447ms ago: executing program 3 (id=7042): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(blake2b-256-generic)\x00'}, 0x58) 487.60545ms ago: executing program 0 (id=7043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0x6, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x121f2}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x24}}, 0x4000000) 487.476599ms ago: executing program 2 (id=7044): r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'netdevsim0\x00', @local}) 445.861807ms ago: executing program 0 (id=7045): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x12e, [0x0, 0x200000000880, 0x2000000008b0, 0x200000000ab4], 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000e8fffffeffffff01000000030000000000000012e869705f76746930000000000000000000644c1865616c6c657231000000000000766972745f776966693000000000000076657468310000000000000000000000bbbbbbbbbb0000006e0000006e0000009e00000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00"/302]}, 0x1a6) 395.980531ms ago: executing program 3 (id=7046): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000600)={0x0, 0x2, "43cb93", 0x7, 0x4}) 342.377699ms ago: executing program 2 (id=7047): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[], 0x8400) 342.259582ms ago: executing program 0 (id=7048): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3}) 291.616259ms ago: executing program 3 (id=7049): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0x40505331, &(0x7f00000000c0)={0xf00}) 279.36741ms ago: executing program 1 (id=7050): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000080)={{0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 'syz1\x00', 0x0}) 267.985353ms ago: executing program 0 (id=7051): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB='quota,grpquota_inode_hardlimit']) 203.376557ms ago: executing program 2 (id=7052): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x90, [0x0, 0x200000000880, 0x2000000008b4, 0x200000000ab4, 0xfffffffffffffffd], 0x0, 0x0, 0x0}, 0x108) 203.235607ms ago: executing program 3 (id=7053): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x5, 0x6, 0x801, 0x0, 0x0, {0x6a0286804a18f103, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) 188.756986ms ago: executing program 1 (id=7054): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r0, 0x891b, 0x0) 166.416219ms ago: executing program 2 (id=7055): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000000)) 122.796574ms ago: executing program 0 (id=7056): r0 = socket(0x1e, 0x1, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/192, 0xc0}], 0x1}, 0x2141) 42.634102ms ago: executing program 1 (id=7057): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x2e, 0x0, &(0x7f0000000000)=0xfffffffffffffe69) 42.524093ms ago: executing program 2 (id=7058): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x1}}) 42.448202ms ago: executing program 3 (id=7059): r0 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='-1\x00', 0x2) 12.692946ms ago: executing program 0 (id=7060): setrlimit(0x2, &(0x7f00000000c0)={0x1, 0x2400000}) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000865000/0x1000)=nil) 0s ago: executing program 1 (id=7061): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000022"], 0xd8}}, 0x0) kernel console output (not intermixed with test programs): ][ T925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 51646, setting to 64 [ 234.558727][ T925] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 234.570414][ T925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.581259][ T925] usb 3-1: Product: syz [ 234.585885][ T925] usb 3-1: Manufacturer: syz [ 234.591035][ T925] usb 3-1: SerialNumber: syz [ 234.601511][ T925] usb 3-1: config 0 descriptor?? [ 234.610617][T13111] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 234.627587][ T925] hub 3-1:0.0: bad descriptor, ignoring hub [ 234.633528][ T925] hub 3-1:0.0: probe with driver hub failed with error -5 [ 234.660523][ T925] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 234.699196][ T5905] usb 1-1: Using ep0 maxpacket: 16 [ 234.725958][ T5905] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 234.745347][ T5905] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 234.770708][ T5905] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 234.786147][ T5905] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 234.801126][ T5905] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 234.813571][ T5905] usb 1-1: config 1 interface 0 has no altsetting 0 [ 234.828020][ T5905] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 234.843821][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.848211][ T5891] usb 3-1: USB disconnect, device number 24 [ 234.875159][ T5905] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 235.026238][ T925] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 235.080192][ T5905] scsi host1: usb-storage 1-1:1.0 [ 235.176222][ T925] usb 4-1: Using ep0 maxpacket: 32 [ 235.182934][ T925] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 235.191019][ T925] usb 4-1: config 0 has no interface number 0 [ 235.197221][ T925] usb 4-1: config 0 interface 2 has no altsetting 0 [ 235.206236][ T925] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 235.215356][ T925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.224316][ T925] usb 4-1: Product: syz [ 235.228597][ T925] usb 4-1: Manufacturer: syz [ 235.233186][ T925] usb 4-1: SerialNumber: syz [ 235.240655][ T925] usb 4-1: config 0 descriptor?? [ 235.284181][ T5891] usb 1-1: USB disconnect, device number 23 [ 235.408278][T13166] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3491'. [ 235.453920][ T925] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 235.717233][ T925] usb 4-1: USB disconnect, device number 24 [ 235.826809][T11544] udevd[11544]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.896375][ T5905] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 237.066152][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 237.073163][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 237.088050][ T5905] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 237.096322][ T925] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 237.101264][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.121306][ T5905] usb 3-1: Product: syz [ 237.125625][ T5905] usb 3-1: Manufacturer: syz [ 237.130694][ T5905] usb 3-1: SerialNumber: syz [ 237.141831][ T5905] usb 3-1: config 0 descriptor?? [ 237.149312][ T5905] hub 3-1:0.0: bad descriptor, ignoring hub [ 237.155243][ T5905] hub 3-1:0.0: probe with driver hub failed with error -5 [ 237.169048][ T5905] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 237.256549][ T925] usb 1-1: Using ep0 maxpacket: 32 [ 237.298533][ T925] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 237.318723][ T925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.345904][ T925] usb 1-1: Product: syz [ 237.352924][ T925] usb 1-1: Manufacturer: syz [ 237.359764][ T925] usb 1-1: SerialNumber: syz [ 237.378103][ T925] usb 1-1: config 0 descriptor?? [ 237.395490][ T5905] usb 3-1: USB disconnect, device number 25 [ 237.604948][ T925] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 024 [ 237.769927][T13304] netlink: 'syz.1.3558': attribute type 10 has an invalid length. [ 237.812196][ T925] usb 1-1: USB disconnect, device number 24 [ 238.383109][T13344] netlink: 'syz.3.3579': attribute type 7 has an invalid length. [ 238.413202][T13344] : entered promiscuous mode [ 239.022820][T13388] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 239.175969][T13400] netlink: 'syz.1.3605': attribute type 1 has an invalid length. [ 239.183969][T13400] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3605'. [ 239.518542][T13423] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 240.036041][T13462] netlink: 'syz.2.3645': attribute type 1 has an invalid length. [ 240.043917][T13462] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3645'. [ 240.202195][T13476] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 240.756654][ T5876] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 240.806710][ T5905] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 240.919702][ T5876] usb 1-1: config 7 has an invalid interface number: 175 but max is 1 [ 240.931731][ T5876] usb 1-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 240.943789][ T5876] usb 1-1: config 7 has an invalid interface descriptor of length 7, skipping [ 240.954104][ T5876] usb 1-1: config 7 has an invalid interface number: 101 but max is 1 [ 240.963414][ T5876] usb 1-1: config 7 has no interface number 0 [ 240.969828][ T5876] usb 1-1: config 7 has no interface number 1 [ 240.975947][ T5876] usb 1-1: config 7 interface 175 altsetting 0 endpoint 0x8F has invalid maxpacket 1024, setting to 64 [ 240.987565][ T5905] usb 3-1: Using ep0 maxpacket: 32 [ 240.994416][ T5876] usb 1-1: config 7 interface 175 altsetting 0 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 241.006331][ T5876] usb 1-1: config 7 interface 175 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 241.018690][ T5905] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 241.028089][ T5876] usb 1-1: config 7 interface 175 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 241.039606][ T5905] usb 3-1: config 0 has no interface number 0 [ 241.046026][ T5905] usb 3-1: config 0 interface 2 has no altsetting 0 [ 241.057929][ T5876] usb 1-1: config 7 interface 175 altsetting 0 endpoint 0xE has an invalid bInterval 253, changing to 11 [ 241.072058][ T5876] usb 1-1: config 7 interface 175 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1023 [ 241.085304][ T5905] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 241.089067][ T30] audit: type=1326 audit(1751455155.833:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13528 comm="syz.3.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260ed8e929 code=0x7ffc0000 [ 241.095612][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.129253][ T5905] usb 3-1: Product: syz [ 241.133669][ T5905] usb 3-1: Manufacturer: syz [ 241.139491][ T5876] usb 1-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=3c.b4 [ 241.149799][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.154640][ T30] audit: type=1326 audit(1751455155.873:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13528 comm="syz.3.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260ed8e929 code=0x7ffc0000 [ 241.159180][ T5905] usb 3-1: SerialNumber: syz [ 241.187923][ T5876] usb 1-1: Product: 㘴复궟剅掦᢮㴠䳦믲놤 [ 241.194972][ T5876] usb 1-1: Manufacturer: ъ [ 241.210103][ T5876] usb 1-1: SerialNumber: 꼬훲ච즳㵾茳⍱Ηᡔ쥤养⸎〠◞꨸䏄ꢫ蠷죋爻剝聘㨃뱮뤳삸䜮ᵭ郴䠁⭙鴓ﴊ⇂묃〦驍ꏝ戫瞨댉㯷됁 [ 241.229933][ T5905] usb 3-1: config 0 descriptor?? [ 241.249000][T13499] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 241.263646][ T30] audit: type=1326 audit(1751455155.873:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13528 comm="syz.3.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f260ed8e929 code=0x7ffc0000 [ 241.309245][ T30] audit: type=1326 audit(1751455155.873:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13528 comm="syz.3.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260ed8e929 code=0x7ffc0000 [ 241.369090][ T30] audit: type=1326 audit(1751455155.873:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13528 comm="syz.3.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260ed8e929 code=0x7ffc0000 [ 241.444403][ T5905] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 241.485659][ T5876] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 241.526034][ T2345] pvrusb2: Invalid write control endpoint [ 241.550963][ T5876] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 241.559487][T13545] dlm: no local IP address has been set [ 241.569793][T13545] dlm: cannot start dlm midcomms -107 [ 241.592130][ T5876] usb 1-1: USB disconnect, device number 25 [ 241.685098][ T2345] pvrusb2: Invalid write control endpoint [ 241.702311][ T2345] pvrusb2: Invalid write control endpoint [ 241.713514][ T5905] usb 3-1: USB disconnect, device number 26 [ 241.724413][ T2345] pvrusb2: Invalid write control endpoint [ 241.753594][ T2345] pvrusb2: Invalid write control endpoint [ 241.780086][ T2345] pvrusb2: Invalid write control endpoint [ 241.800257][ T2345] pvrusb2: Invalid write control endpoint [ 241.816940][ T2345] pvrusb2: Invalid write control endpoint [ 241.834908][ T2345] pvrusb2: Invalid write control endpoint [ 241.857031][ T2345] pvrusb2: Invalid write control endpoint [ 241.865083][ T2345] pvrusb2: Invalid write control endpoint [ 241.879847][ T2345] pvrusb2: Invalid write control endpoint [ 241.885617][ T2345] pvrusb2: Invalid write control endpoint [ 241.899781][ T2345] pvrusb2: Invalid write control endpoint [ 241.905562][ T2345] pvrusb2: Invalid write control endpoint [ 241.911791][ T2345] pvrusb2: Invalid write control endpoint [ 241.925987][ T2345] pvrusb2: Invalid write control endpoint [ 241.935189][T13554] netlink: 'syz.1.3683': attribute type 21 has an invalid length. [ 241.941337][ T2345] pvrusb2: Invalid write control endpoint [ 241.943211][T13554] netlink: 'syz.1.3683': attribute type 5 has an invalid length. [ 241.949091][ T2345] pvrusb2: Invalid write control endpoint [ 241.949110][ T2345] pvrusb2: Invalid write control endpoint [ 241.949124][ T2345] pvrusb2: Invalid write control endpoint [ 241.949137][ T2345] pvrusb2: Invalid write control endpoint [ 241.949150][ T2345] pvrusb2: Invalid write control endpoint [ 241.949170][ T2345] pvrusb2: Invalid write control endpoint [ 241.949183][ T2345] pvrusb2: Invalid write control endpoint [ 241.949195][ T2345] pvrusb2: Invalid write control endpoint [ 241.949208][ T2345] pvrusb2: Invalid write control endpoint [ 241.958705][T13554] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3683'. [ 241.973042][ T2345] pvrusb2: Invalid write control endpoint [ 242.034480][ T2345] pvrusb2: Invalid write control endpoint [ 242.040299][ T2345] pvrusb2: Invalid write control endpoint [ 242.048958][ T2345] pvrusb2: Invalid write control endpoint [ 242.054706][ T2345] pvrusb2: Invalid write control endpoint [ 242.061371][ T2345] pvrusb2: Invalid write control endpoint [ 242.073321][ T2345] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 242.203732][ T2345] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_a) [ 242.211002][ T2345] pvrusb2: Invalid write control endpoint [ 242.220080][ T2345] pvrusb2: Invalid write control endpoint [ 242.225862][ T2345] pvrusb2: Invalid write control endpoint [ 242.233742][ T2345] pvrusb2: Invalid write control endpoint [ 242.258085][ T2345] pvrusb2: Invalid write control endpoint [ 242.267804][ T2345] pvrusb2: Invalid write control endpoint [ 242.274032][ T2345] pvrusb2: Invalid write control endpoint [ 242.290528][ T2345] pvrusb2: Invalid write control endpoint [ 242.306249][ T2345] pvrusb2: Invalid write control endpoint [ 242.312041][ T2345] pvrusb2: Invalid write control endpoint [ 242.326244][ T2345] pvrusb2: Invalid write control endpoint [ 242.334158][ T2345] pvrusb2: Invalid write control endpoint [ 242.352523][ T2345] pvrusb2: Invalid write control endpoint [ 242.363852][T13575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.373035][ T2345] pvrusb2: Invalid write control endpoint [ 242.380702][ T2345] pvrusb2: Invalid write control endpoint [ 242.408272][ T2345] pvrusb2: Invalid write control endpoint [ 242.416811][ T2345] pvrusb2: Invalid write control endpoint [ 242.422573][ T2345] pvrusb2: Invalid write control endpoint [ 242.457035][ T2345] pvrusb2: Invalid write control endpoint [ 242.462842][ T2345] pvrusb2: Invalid write control endpoint [ 242.504581][ T2345] pvrusb2: Invalid write control endpoint [ 242.521412][ T2345] pvrusb2: Attached sub-driver cs53l32a [ 242.622047][ T2345] pvrusb2: Invalid write control endpoint [ 242.633426][ T2345] pvrusb2: Invalid write control endpoint [ 242.646256][ T2345] pvrusb2: Invalid write control endpoint [ 242.662870][ T2345] pvrusb2: Invalid write control endpoint [ 242.674970][ T2345] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 242.728666][ T2345] pvrusb2: Device being rendered inoperable [ 242.734763][ T2345] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 242.755936][ T2345] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 242.806203][ T2345] pvrusb2: Invalid write control endpoint [ 242.914766][ T2345] pvrusb2: Invalid write control endpoint [ 242.939017][ T2345] pvrusb2: Invalid write control endpoint [ 242.954415][ T2345] pvrusb2: Invalid write control endpoint [ 242.971765][ T2345] pvrusb2: Invalid write control endpoint [ 242.991791][ T2345] pvrusb2: Invalid write control endpoint [ 243.016742][ T2345] pvrusb2: Invalid write control endpoint [ 243.022668][ T2345] pvrusb2: Invalid write control endpoint [ 243.034518][ T2345] pvrusb2: Invalid write control endpoint [ 243.044291][ T2345] pvrusb2: Invalid write control endpoint [ 243.055667][ T2345] pvrusb2: Invalid write control endpoint [ 243.067526][ T2345] pvrusb2: Invalid write control endpoint [ 243.073288][ T2345] pvrusb2: Invalid write control endpoint [ 243.099247][ T2345] pvrusb2: Invalid write control endpoint [ 243.120222][ T2345] pvrusb2: Invalid write control endpoint [ 243.126019][ T2345] pvrusb2: Invalid write control endpoint [ 243.132541][T13618] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.3711'. [ 243.147766][ T2345] pvrusb2: Invalid write control endpoint [ 243.153527][ T2345] pvrusb2: Invalid write control endpoint [ 243.196178][ T2345] pvrusb2: Invalid write control endpoint [ 243.201947][ T2345] pvrusb2: Invalid write control endpoint [ 243.225636][ T2345] pvrusb2: Invalid write control endpoint [ 243.248165][ T2345] pvrusb2: Invalid write control endpoint [ 243.253945][ T2345] pvrusb2: Invalid write control endpoint [ 243.266151][ T2345] pvrusb2: Invalid write control endpoint [ 243.272874][ T2345] pvrusb2: Invalid write control endpoint [ 243.311035][ T2345] pvrusb2: Invalid write control endpoint [ 243.327015][ T2345] pvrusb2: Invalid write control endpoint [ 243.333158][ T2345] pvrusb2: Invalid write control endpoint [ 243.359100][ T2345] pvrusb2: Invalid write control endpoint [ 243.364878][ T2345] pvrusb2: Invalid write control endpoint [ 243.371600][ T2345] pvrusb2: Invalid write control endpoint [ 243.384619][ T2345] pvrusb2: Invalid write control endpoint [ 243.390527][ T2345] pvrusb2: Invalid write control endpoint [ 243.400985][ T2345] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 243.488386][ T2345] cs53l32a 2-0011: chip found @ 0x22 (pvrusb2_b) [ 243.506929][ T2345] pvrusb2: Invalid write control endpoint [ 243.530321][ T2345] pvrusb2: Invalid write control endpoint [ 243.544522][ T2345] pvrusb2: Invalid write control endpoint [ 243.551675][ T2345] pvrusb2: Invalid write control endpoint [ 243.559732][ T2345] pvrusb2: Invalid write control endpoint [ 243.565572][ T2345] pvrusb2: Invalid write control endpoint [ 243.580396][ T2345] pvrusb2: Invalid write control endpoint [ 243.586382][ T2345] pvrusb2: Invalid write control endpoint [ 243.592166][ T2345] pvrusb2: Invalid write control endpoint [ 243.612855][ T2345] pvrusb2: Invalid write control endpoint [ 243.639371][ T2345] pvrusb2: Invalid write control endpoint [ 243.645171][ T2345] pvrusb2: Invalid write control endpoint [ 243.668707][ T2345] pvrusb2: Invalid write control endpoint [ 243.683547][ T2345] pvrusb2: Invalid write control endpoint [ 243.696963][ T2345] pvrusb2: Invalid write control endpoint [ 243.702739][ T2345] pvrusb2: Invalid write control endpoint [ 243.730796][ T2345] pvrusb2: Invalid write control endpoint [ 243.745193][T13652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.754923][ T2345] pvrusb2: Invalid write control endpoint [ 243.778466][ T2345] pvrusb2: Invalid write control endpoint [ 243.799372][ T2345] pvrusb2: Invalid write control endpoint [ 243.805153][ T2345] pvrusb2: Invalid write control endpoint [ 243.849806][ T2345] pvrusb2: Attached sub-driver cs53l32a [ 243.860475][T13659] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3731'. [ 243.900291][T13652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.932744][ T2345] pvrusb2: Invalid write control endpoint [ 243.939152][ T2345] pvrusb2: Invalid write control endpoint [ 243.953205][ T2345] pvrusb2: Invalid write control endpoint [ 243.959361][ T2345] pvrusb2: Invalid write control endpoint [ 243.965238][ T2345] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 244.006283][ T2345] pvrusb2: Device being rendered inoperable [ 244.015598][ T2345] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 244.046307][ T2345] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 244.436181][ T5876] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 244.526254][ T925] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 244.596653][ T5876] usb 1-1: Using ep0 maxpacket: 32 [ 244.603895][ T5876] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 244.619155][ T5876] usb 1-1: config 0 has no interface number 0 [ 244.645093][ T5876] usb 1-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.12 [ 244.654943][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.672305][ T5876] usb 1-1: Product: syz [ 244.682547][T13705] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3751'. [ 244.686247][ T5876] usb 1-1: Manufacturer: syz [ 244.691853][ T925] usb 2-1: Using ep0 maxpacket: 32 [ 244.696841][ T5876] usb 1-1: SerialNumber: syz [ 244.713385][ T925] usb 2-1: unable to get BOS descriptor or descriptor too short [ 244.713620][ T5876] usb 1-1: config 0 descriptor?? [ 244.737672][ T925] usb 2-1: config 7 has an invalid interface number: 187 but max is 0 [ 244.759971][ T925] usb 2-1: config 7 has no interface number 0 [ 244.781658][ T925] usb 2-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 244.807096][ T925] usb 2-1: config 7 interface 187 has no altsetting 0 [ 244.823313][ T925] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 244.838904][ T925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.850049][ T925] usb 2-1: Product: syz [ 244.859133][ T925] usb 2-1: Manufacturer: syz [ 244.863758][ T925] usb 2-1: SerialNumber: syz [ 244.869785][T13711] ieee802154 phy0 wpan0: encryption failed: -22 [ 244.885044][T13680] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 245.052501][T13722] netlink: 'syz.3.3759': attribute type 21 has an invalid length. [ 245.063957][T13722] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3759'. [ 245.077277][T13722] netlink: 'syz.3.3759': attribute type 5 has an invalid length. [ 245.085579][T13722] netlink: 'syz.3.3759': attribute type 6 has an invalid length. [ 245.095708][T13722] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3759'. [ 245.108128][ T925] usb 2-1: Limiting number of CPorts to U8_MAX [ 245.121440][ T925] usb 2-1: Unknown endpoint type found, address 0x07 [ 245.136558][ T925] usb 2-1: Not enough endpoints found in device, aborting! [ 245.207128][ T925] usb 1-1: USB disconnect, device number 26 [ 245.213854][ T925] f81534a_ctrl 1-1:0.88: failed to set register 0x116: -19 [ 245.223804][ T925] f81534a_ctrl 1-1:0.88: failed to enable ports: -19 [ 245.351232][ T43] usb 2-1: USB disconnect, device number 26 [ 245.722399][T13760] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3778'. [ 245.834577][T13765] libceph: resolve '4..' (ret=-3): failed [ 246.007434][T13778] syz.1.3787: attempt to access beyond end of device [ 246.007434][T13778] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 246.034104][T13778] XFS (nbd1): SB validate failed with error -5. [ 246.206036][T13797] netlink: 'syz.3.3794': attribute type 1 has an invalid length. [ 246.224315][T13797] netlink: 'syz.3.3794': attribute type 101 has an invalid length. [ 246.240220][T13797] netlink: 836 bytes leftover after parsing attributes in process `syz.3.3794'. [ 246.473680][T13813] netlink: 'syz.0.3802': attribute type 6 has an invalid length. [ 246.910109][T13843] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3817'. [ 247.144668][T13861] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 247.166416][T13863] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3827'. [ 248.062418][T13925] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 248.766895][ T5905] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 248.939588][ T5905] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 248.968339][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 248.988998][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 255, setting to 64 [ 249.011318][ T5905] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 249.031704][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.056853][ T5905] usb 3-1: config 0 descriptor?? [ 249.062478][T13956] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 249.094769][ T5905] input: USB Pegasus Device 0e20:0101 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input16 [ 249.150945][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.158968][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.166674][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.174029][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.181362][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.188723][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.196386][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.203908][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.211231][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.218671][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.225980][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.233329][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.241064][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.250656][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.261005][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.268469][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.275916][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.283264][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.290684][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.298266][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.305696][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.313786][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.321153][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.328489][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.335793][ T5905] usb 3-1: control msg error: -71 [ 249.335882][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.349456][ C0] usb 3-1: pegasus_irq - urb shutting down with status: -2 [ 249.362682][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.370124][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.377607][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.384937][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.392278][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.400073][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.408823][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.416492][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.424000][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.431582][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.439217][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.446833][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.454893][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.463090][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.470723][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.479480][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.487718][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.495235][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.503042][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.508608][ T5192] usb 3-1: control msg error: -71 [ 249.510637][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.523370][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.531002][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.538200][ C1] usb 3-1: pegasus_irq - usb_submit_urb failed with result -1 [ 249.575384][ T5905] input: failed to attach handler mousedev to device input16, error: -71 [ 249.614456][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.622029][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.630763][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.640720][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.653684][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.662140][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.666437][ T5192] usb 3-1: control msg error: -71 [ 249.676738][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 249.684299][ T5905] usb 3-1: USB disconnect, device number 27 [ 249.690327][ C0] usb 3-1: pegasus_irq - urb shutting down with status: -2 [ 250.073776][T14031] netlink: 'syz.1.3910': attribute type 20 has an invalid length. [ 250.666159][ T5977] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 250.799476][T14083] tmpfs: Bad value for 'mpol' [ 250.870650][ T5977] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.892524][ T5977] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 250.908451][ T5977] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 250.918994][ T5977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.964351][ T5977] usb 3-1: config 0 descriptor?? [ 251.116261][T14102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3945'. [ 251.221472][T14107] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3947'. [ 251.223472][ T5977] usb 3-1: USB disconnect, device number 28 [ 251.231644][T14108] ieee802154 phy0 wpan0: encryption failed: -90 [ 251.245916][T14001] udevd[14001]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 251.486295][T14120] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3954'. [ 251.607120][T14128] netlink: 'syz.3.3958': attribute type 1 has an invalid length. [ 251.614896][T14128] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3958'. [ 252.109368][T14166] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 252.264556][T14173] : renamed from bond_slave_0 (while UP) [ 252.892243][T14213] netlink: 'syz.0.3994': attribute type 1 has an invalid length. [ 252.913807][T14213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3994'. [ 253.184018][T14232] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 253.197646][T14232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.330583][ T30] audit: type=1326 audit(1751455168.083:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14236 comm="syz.1.4006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719e98e929 code=0x7ffc0000 [ 253.389096][ T30] audit: type=1326 audit(1751455168.083:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14236 comm="syz.1.4006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f719e98e929 code=0x7ffc0000 [ 253.411354][ C1] vkms_vblank_simulate: vblank timer overrun [ 253.445802][T14247] tmpfs: Bad value for 'mpol' [ 253.454332][ T30] audit: type=1326 audit(1751455168.083:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14236 comm="syz.1.4006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719e98e929 code=0x7ffc0000 [ 253.476984][ C1] vkms_vblank_simulate: vblank timer overrun [ 253.483554][ T30] audit: type=1326 audit(1751455168.083:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14236 comm="syz.1.4006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719e98e929 code=0x7ffc0000 [ 254.179079][ T30] audit: type=1800 audit(1751455168.933:20): pid=14297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4036" name="memory.events" dev="tmpfs" ino=5031 res=0 errno=0 [ 254.786163][ T5977] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 254.941387][ T5977] usb 1-1: Using ep0 maxpacket: 16 [ 254.961931][ T5977] usb 1-1: unable to get BOS descriptor or descriptor too short [ 254.977626][ T5977] usb 1-1: config 1 has an invalid interface number: 231 but max is 1 [ 254.996481][ T5977] usb 1-1: config 1 has an invalid interface number: 129 but max is 1 [ 255.004683][ T5977] usb 1-1: config 1 has no interface number 0 [ 255.019411][ T5977] usb 1-1: config 1 has no interface number 1 [ 255.041577][ T5977] usb 1-1: config 1 interface 231 has no altsetting 0 [ 255.053943][ T5977] usb 1-1: config 1 interface 129 has no altsetting 0 [ 255.071308][ T5977] usb 1-1: string descriptor 0 read error: -22 [ 255.078364][ T5977] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=5c.f5 [ 255.106351][ T5977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.130617][T14358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.210039][T14358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.347063][ T5977] usbtest 1-1:1.231: couldn't get endpoints, -71 [ 255.353506][ T5977] usbtest 1-1:1.231: probe with driver usbtest failed with error -71 [ 255.392471][ T5977] usbtest 1-1:1.129: couldn't get endpoints, -22 [ 255.399013][ T5977] usbtest 1-1:1.129: probe with driver usbtest failed with error -22 [ 255.416848][ T5977] usb 1-1: USB disconnect, device number 27 [ 255.423138][T14373] netlink: 763 bytes leftover after parsing attributes in process `syz.2.4069'. [ 255.831636][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.838467][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.819247][T14471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4120'. [ 256.867674][T14473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4122'. [ 256.976357][ T43] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 257.114361][T14491] netlink: 'syz.0.4131': attribute type 1 has an invalid length. [ 257.124171][T14491] netlink: 'syz.0.4131': attribute type 101 has an invalid length. [ 257.136011][T14491] netlink: 836 bytes leftover after parsing attributes in process `syz.0.4131'. [ 257.148632][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 257.155829][ T43] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 257.165768][T14493] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4132'. [ 257.179865][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 257.200012][ T43] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 257.228713][ T43] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 257.261419][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.261444][ T43] usb 3-1: Product: syz [ 257.261457][ T43] usb 3-1: Manufacturer: syz [ 257.261471][ T43] usb 3-1: SerialNumber: syz [ 257.271725][ T43] usb 3-1: config 0 descriptor?? [ 257.276678][T14465] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 257.282198][ T43] mceusb 3-1:0.0: mceusb_dev_probe: device setup failed! [ 257.319117][ T43] mceusb 3-1:0.0: probe with driver mceusb failed with error -12 [ 257.491240][ T43] usb 3-1: USB disconnect, device number 29 [ 257.546285][ T5977] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 257.707741][ T5977] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 257.726107][ T5977] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.748546][ T5977] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 257.777973][ T5977] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.792673][ T5977] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.806780][ T5977] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 257.819338][ T5977] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 257.835611][ T5977] usb 1-1: Product: syz [ 257.840874][ T5977] usb 1-1: Manufacturer: syz [ 257.861529][ T5977] cdc_wdm 1-1:1.0: skipping garbage [ 257.871568][ T5977] cdc_wdm 1-1:1.0: skipping garbage [ 257.885110][ T5977] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 257.894079][ T5977] cdc_wdm 1-1:1.0: Unknown control protocol [ 257.912352][T14533] netlink: 'syz.3.4151': attribute type 1 has an invalid length. [ 258.034805][T14539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4154'. [ 258.086995][T14499] cdc_wdm 1-1:1.0: Error submitting int urb - -90 [ 258.097550][ T5977] usb 1-1: USB disconnect, device number 28 [ 258.126336][ T43] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 258.204105][T14548] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 258.294948][ T43] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 258.321157][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.332198][ T43] usb 2-1: Product: syz [ 258.346186][ T43] usb 2-1: Manufacturer: syz [ 258.350816][ T43] usb 2-1: SerialNumber: syz [ 258.367434][ T43] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 258.399690][ T925] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 258.492148][T14562] sit0: entered promiscuous mode [ 258.503049][T14562] netlink: 'syz.2.4164': attribute type 1 has an invalid length. [ 258.513278][T14562] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4164'. [ 258.629753][ C1] usb 2-1: ath9k_htc: invalid pkt_len (bf53) [ 258.830598][ T5876] usb 2-1: USB disconnect, device number 27 [ 259.148370][T14605] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 259.244486][T14611] netlink: 'syz.0.4186': attribute type 1 has an invalid length. [ 259.252648][T14611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4186'. [ 259.265952][T14611] nbd: illegal input index 393224 [ 259.502134][ T925] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 259.524904][ T925] ath9k_htc: Failed to initialize the device [ 259.547393][ T5876] usb 2-1: ath9k_htc: USB layer deinitialized [ 259.590167][T14631] netlink: 'syz.1.4197': attribute type 12 has an invalid length. [ 259.630886][T14636] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4200'. [ 259.645812][T14636] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 259.663552][T14636] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 260.020303][T14658] netlink: 'syz.2.4209': attribute type 1 has an invalid length. [ 260.059343][T14662] usb usb8: usbfs: process 14662 (syz.0.4211) did not claim interface 0 before use [ 260.369451][T14683] tc_dump_action: action bad kind [ 260.487916][T14694] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.112746][T14736] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.4249'. [ 261.339886][T14754] i2c i2c-0: Invalid block write size 34 [ 262.017717][T14804] netlink: 'syz.0.4281': attribute type 1 has an invalid length. [ 262.031356][T14804] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4281'. [ 262.088447][T14806] netlink: 'syz.1.4284': attribute type 1 has an invalid length. [ 262.110404][ T5891] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 262.120382][T14806] netlink: 'syz.1.4284': attribute type 101 has an invalid length. [ 262.131500][T14806] netlink: 832 bytes leftover after parsing attributes in process `syz.1.4284'. [ 262.136218][T14810] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4286'. [ 262.232386][ T5157] Bluetooth: hci2: unexpected event for opcode 0x0c24 [ 262.270951][ T5891] usb 4-1: Using ep0 maxpacket: 8 [ 262.293831][T14820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4291'. [ 262.294202][ T5891] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.340524][ T5891] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 262.352284][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.381137][ T5891] usb 4-1: Product: syz [ 262.404414][ T5891] usb 4-1: Manufacturer: syz [ 262.416353][ T5891] usb 4-1: SerialNumber: syz [ 262.434156][ T5891] usb 4-1: config 0 descriptor?? [ 262.464781][ T5891] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 262.478099][ T5891] usb 4-1: selecting invalid altsetting 1 [ 262.526174][T14832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4295'. [ 262.671072][ T5891] gspca_stk014: init reg: 0x00 [ 262.676487][ T5891] stk014 4-1:0.0: probe with driver stk014 failed with error -5 [ 262.880136][ T925] usb 4-1: USB disconnect, device number 25 [ 262.926341][T14852] netlink: 'syz.0.4309': attribute type 1 has an invalid length. [ 262.934198][T14852] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4309'. [ 263.008584][T14858] x_tables: duplicate entry at hook 2 [ 263.012584][T14860] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4310'. [ 263.493438][T14891] netlink: 'syz.1.4327': attribute type 2 has an invalid length. [ 263.632801][T14898] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 263.784561][T14912] : renamed from bond_slave_0 (while UP) [ 264.165615][T14938] netlink: 'syz.1.4349': attribute type 12 has an invalid length. [ 264.649341][T14972] netlink: 'syz.3.4366': attribute type 40 has an invalid length. [ 265.383943][T15026] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4392'. [ 265.634162][T15041] netlink: 'syz.0.4399': attribute type 1 has an invalid length. [ 265.662783][T15041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4399'. [ 266.297802][ T5157] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 266.307441][ T5157] Bluetooth: hci2: Injecting HCI hardware error event [ 266.316166][ T5157] Bluetooth: hci2: hardware error 0x00 [ 266.358501][T15036] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 266.364715][T15036] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 266.436001][T15084] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 266.679689][T15095] program syz.3.4420 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 267.180775][T15123] No source specified [ 267.569882][ T5876] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 267.579980][T15148] openvswitch: netlink: Missing key (keys=44, expected=200000) [ 267.746493][ T5876] usb 1-1: Using ep0 maxpacket: 8 [ 267.764304][ T5876] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.787926][ T5876] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 267.806510][ T5876] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 267.828287][ T5876] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10 [ 267.856308][ T5876] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024 [ 267.878763][ T5876] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 267.898286][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.928103][ T5876] hub 1-1:1.0: bad descriptor, ignoring hub [ 267.936133][ T5876] hub 1-1:1.0: probe with driver hub failed with error -5 [ 267.943886][ T5876] cdc_wdm 1-1:1.0: skipping garbage [ 267.966223][ T5876] cdc_wdm 1-1:1.0: skipping garbage [ 267.979370][ T5876] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 268.247379][ T5876] usb 1-1: USB disconnect, device number 29 [ 268.386135][ T5157] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 268.394952][T15036] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 268.406305][T15036] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 268.426492][ T982] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 268.434660][T15036] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 268.441092][T15036] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 268.595978][T15199] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 268.620275][ T982] usb 4-1: config 0 has an invalid interface number: 157 but max is 0 [ 268.629567][ T982] usb 4-1: config 0 has no interface number 0 [ 268.648576][ T982] usb 4-1: config 0 interface 157 has no altsetting 0 [ 268.671864][ T982] usb 4-1: New USB device found, idVendor=2639, idProduct=0002, bcdDevice=3b.1d [ 268.702967][ T982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.724777][ T982] usb 4-1: config 0 descriptor?? [ 268.846799][T15206] netlink: 'syz.2.4459': attribute type 1 has an invalid length. [ 268.871815][T15206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4459'. [ 268.990290][ T982] usb 4-1: USB disconnect, device number 26 [ 269.651171][T15257] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4477'. [ 269.979006][T15277] tmpfs: Unknown parameter 'func' [ 270.403271][T15305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4496'. [ 271.027138][T15343] netlink: 'syz.3.4509': attribute type 12 has an invalid length. [ 271.213368][T15358] : renamed from lo (while UP) [ 271.234323][T15358] : entered promiscuous mode [ 271.709557][T15394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4535'. [ 272.018726][T15417] netlink: 'syz.0.4547': attribute type 27 has an invalid length. [ 272.747322][T15468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4571'. [ 272.759070][T15468] openvswitch: netlink: Missing key (keys=40, expected=100) [ 273.102264][T15495] kAFS: Can only specify source 'none' with -o dyn [ 273.342363][T15506] 9pnet_fd: Insufficient options for proto=fd [ 273.634195][T15523] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4599'. [ 274.212423][T15549] 9pnet: Could not find request transport: 0xffffffffffffffff [ 274.570231][T15578] netlink: 'syz.2.4626': attribute type 1 has an invalid length. [ 274.586208][T15578] netlink: 'syz.2.4626': attribute type 2 has an invalid length. [ 274.607202][T15578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4626'. [ 274.772290][T15594] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4634'. [ 275.082648][T15613] netlink: 'syz.2.4643': attribute type 1 has an invalid length. [ 275.481818][T15642] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4658'. [ 275.494917][T15642] tc_dump_action: action bad kind [ 275.660746][ T5905] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 275.833734][ T5905] usb 4-1: config index 0 descriptor too short (expected 72, got 10) [ 275.859014][ T5905] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 275.876789][ T5905] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 275.905837][ T5905] usb 4-1: string descriptor 0 read error: -71 [ 275.912718][ T5905] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 275.925286][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.940684][ T5905] usb 4-1: can't set config #1, error -71 [ 275.957263][ T5905] usb 4-1: USB disconnect, device number 27 [ 276.459884][T15707] netlink: 696 bytes leftover after parsing attributes in process `syz.3.4688'. [ 276.978837][T15743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.348097][T15770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4718'. [ 277.736858][T15798] netlink: 'syz.1.4732': attribute type 46 has an invalid length. [ 278.037112][T15818] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4742'. [ 278.243788][T15834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4750'. [ 278.256601][T15834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4750'. [ 278.265628][T15834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4750'. [ 278.623237][T15859] qrtr: Invalid version 43 [ 278.712825][T15866] ntfs3(nbd1): try to read out of volume at offset 0x0 [ 279.059608][T15893] PKCS8: Unsupported PKCS#8 version [ 279.172114][T15898] /dev/nullb0: Can't open blockdev [ 279.191895][ T982] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 279.376194][ T982] usb 1-1: Using ep0 maxpacket: 16 [ 279.383532][ T982] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 279.393607][ T982] usb 1-1: config 0 has no interface number 0 [ 279.400407][ T982] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 279.428955][ T982] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 279.442898][ T982] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 279.452626][ T982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.462015][ T982] usb 1-1: Product: syz [ 279.468813][ T982] usb 1-1: Manufacturer: syz [ 279.473523][ T982] usb 1-1: SerialNumber: syz [ 279.487632][ T982] usb 1-1: config 0 descriptor?? [ 279.493625][T15882] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 279.507295][T15882] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 279.546371][ T925] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 279.706169][ T925] usb 4-1: Using ep0 maxpacket: 16 [ 279.713166][ T925] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 279.722080][T15882] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 279.725501][ T925] usb 4-1: config 0 has an invalid descriptor of length 49, skipping remainder of the config [ 279.729496][T15882] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 279.760604][ T925] usb 4-1: config 0 has no interface number 0 [ 279.772709][ T925] usb 4-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 279.792513][ T925] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 279.805341][ T925] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 279.820310][ T925] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 26159, setting to 1024 [ 279.859924][ T925] usb 4-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 279.872219][ T925] usb 4-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 279.889193][ T925] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 279.900854][ T925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.916668][ T925] usb 4-1: config 0 descriptor?? [ 279.922931][T15907] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 279.936376][T15907] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 279.951156][ T925] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 280.004010][ T982] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 280.062903][ T982] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 280.091755][ T982] asix 1-1:0.251: probe with driver asix failed with error -5 [ 280.125864][ T982] usb 1-1: USB disconnect, device number 30 [ 280.169188][ T5905] usb 4-1: USB disconnect, device number 28 [ 280.571853][T15973] netlink: 'syz.0.4816': attribute type 1 has an invalid length. [ 280.580598][T15973] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4816'. [ 281.245420][T16021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4839'. [ 281.301554][T16021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4839'. [ 281.427937][T16031] PKCS8: Unsupported PKCS#8 version [ 281.821942][T16059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.837914][T16058] syzkaller1: renamed from hsr0 (while UP) [ 282.212699][T16087] tmpfs: Bad value for 'mpol' [ 282.845809][T16135] program syz.0.4897 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 282.937530][T16140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4899'. [ 283.390009][ T30] audit: type=1400 audit(1751455198.143:21): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=16169 comm="syz.2.4915" [ 283.836252][ T43] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 283.998250][ T43] usb 2-1: config 0 has an invalid interface number: 157 but max is 0 [ 284.020946][ T43] usb 2-1: config 0 has no interface number 0 [ 284.028091][ T43] usb 2-1: config 0 interface 157 has no altsetting 0 [ 284.038579][ T43] usb 2-1: New USB device found, idVendor=2639, idProduct=0002, bcdDevice=3b.1d [ 284.048503][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.067259][ T43] usb 2-1: config 0 descriptor?? [ 284.299711][ T5905] usb 2-1: USB disconnect, device number 28 [ 284.543619][T16250] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4951'. [ 284.800512][T16268] dlm: Unknown command passed to DLM device : 0 [ 284.800512][T16268] [ 284.976154][ T43] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 285.009267][T16281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4967'. [ 285.130998][ T43] usb 1-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 285.144378][ T43] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 285.175062][ T43] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 285.187006][ T43] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 285.195539][ T43] usb 1-1: Manufacturer: syz [ 285.201549][ T43] usb 1-1: SerialNumber: syz [ 285.424009][ T43] yealink 1-1:36.0: invalid payload size 6, expected 16 [ 285.456275][ T43] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input22 [ 285.491030][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 285.498179][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 285.505198][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 285.512515][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 285.519700][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 285.526737][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 285.533759][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 285.540843][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 285.547893][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 285.554685][ C1] yealink 1-1:36.0: unexpected response 0 [ 285.560657][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 285.567908][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 285.574702][ C1] yealink 1-1:36.0: unexpected response 0 [ 285.581774][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 285.588988][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 285.595768][ C1] yealink 1-1:36.0: unexpected response 0 [ 285.603638][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 285.615369][ C1] yealink 1-1:36.0: urb_irq_callback - urb status -71 [ 285.622165][ C1] yealink 1-1:36.0: unexpected response 0 [ 285.628134][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 285.635096][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 285.642076][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 285.649075][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 285.655853][ C1] yealink 1-1:36.0: urb_ctl_callback - usb_submit_urb failed -19 [ 285.663768][ T43] usb 1-1: USB disconnect, device number 31 [ 285.740147][T16319] netlink: 200 bytes leftover after parsing attributes in process `syz.1.4983'. [ 285.759762][T16319] tc_dump_action: action bad kind [ 285.831488][T16323] i2c i2c-0: Invalid block write size 34 [ 286.087588][T16341] usb usb7: usbfs: process 16341 (syz.0.4996) did not claim interface 0 before use [ 286.451286][T16366] syz.2.5009: attempt to access beyond end of device [ 286.451286][T16366] loop2: rw=0, sector=1, nr_sectors = 1 limit=0 [ 286.474979][T16366] qnx4: unable to read the superblock [ 286.594876][T16380] netlink: 324 bytes leftover after parsing attributes in process `syz.1.5015'. [ 286.600836][T16379] bond0: Error: Cannot enslave bond to itself. [ 286.773912][T16390] netlink: 'syz.1.5020': attribute type 10 has an invalid length. [ 286.785910][T16390] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5020'. [ 286.814691][T16392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5022'. [ 286.839343][ T30] audit: type=1400 audit(1751455201.593:22): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=16393 comm="syz.0.5021" [ 287.257431][T16424] binder: 16423:16424 ioctl 40046210 0 returned -14 [ 287.418520][T16436] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.5043'. [ 287.428459][T16436] netlink: zone id is out of range [ 287.433617][T16436] netlink: get zone limit has 8 unknown bytes [ 287.446260][ T5891] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 287.446280][ T5905] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 287.566175][ T925] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 287.607820][ T5891] usb 4-1: config 0 has an invalid interface number: 84 but max is 0 [ 287.615987][ T5891] usb 4-1: config 0 has an invalid interface number: 66 but max is 0 [ 287.624269][ T5891] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 287.629341][ T5905] usb 1-1: config index 0 descriptor too short (expected 72, got 10) [ 287.633357][ T5891] usb 4-1: config 0 has no interface number 0 [ 287.641601][ T5905] usb 1-1: config 1 descriptor has 1 excess byte, ignoring [ 287.648593][ T5891] usb 4-1: config 0 has no interface number 1 [ 287.657642][ T5905] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 287.661485][ T5891] usb 4-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 287.678261][ T5905] usb 1-1: string descriptor 0 read error: -71 [ 287.681403][ T5891] usb 4-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 287.695609][ T5905] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 287.712111][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.716661][ T5891] usb 4-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 287.730954][ T5905] usb 1-1: can't set config #1, error -71 [ 287.731905][ T5891] usb 4-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32 [ 287.748377][ T925] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 287.757155][ T925] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 287.760216][ T5905] usb 1-1: USB disconnect, device number 32 [ 287.771301][ T5891] usb 4-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2 [ 287.785261][ T925] usb 3-1: config 220 has no interface number 2 [ 287.793349][ T925] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 287.809346][ T5891] usb 4-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 287.823195][ T925] usb 3-1: config 220 interface 0 has no altsetting 0 [ 287.827622][ T982] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 287.830278][ T5891] usb 4-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 53 [ 287.847886][ T925] usb 3-1: config 220 interface 76 has no altsetting 0 [ 287.854784][ T925] usb 3-1: config 220 interface 1 has no altsetting 0 [ 287.861719][ T5891] usb 4-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216 [ 287.875320][ T5891] usb 4-1: config 0 interface 66 has no altsetting 0 [ 287.883989][ T925] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 287.893154][ T925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.901320][ T925] usb 3-1: Product: syz [ 287.905515][ T925] usb 3-1: Manufacturer: syz [ 287.910317][ T5891] usb 4-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 287.919399][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.929115][ T925] usb 3-1: SerialNumber: syz [ 287.934773][ T5891] usb 4-1: Product: syz [ 287.940929][ T5891] usb 4-1: Manufacturer: syz [ 287.945607][ T5891] usb 4-1: SerialNumber: syz [ 287.956588][ T5891] usb 4-1: config 0 descriptor?? [ 287.965207][ T5891] ljca 4-1:0.84: bulk endpoints not found [ 287.996246][ T982] usb 2-1: Using ep0 maxpacket: 8 [ 288.003260][ T982] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 288.011449][ T982] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.021693][ T982] usb 2-1: config 0 has no interface number 0 [ 288.029853][ T982] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 288.039974][ T982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.048095][ T982] usb 2-1: Product: syz [ 288.052339][ T982] usb 2-1: Manufacturer: syz [ 288.057026][ T982] usb 2-1: SerialNumber: syz [ 288.065089][ T982] usb 2-1: config 0 descriptor?? [ 288.163481][ T925] usb 3-1: selecting invalid altsetting 0 [ 288.174035][ T925] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 288.184202][ T5891] ljca 4-1:0.66: probe with driver ljca failed with error -71 [ 288.192643][ T925] usb 3-1: No valid video chain found. [ 288.210806][ T5891] usb 4-1: USB disconnect, device number 29 [ 288.219786][ T925] usb 3-1: selecting invalid altsetting 0 [ 288.225539][ T925] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 288.250638][ T925] usb 3-1: USB disconnect, device number 30 [ 288.304106][ T982] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 288.313700][ T982] usb 2-1: No valid video chain found. [ 288.513412][ T982] usb 2-1: USB disconnect, device number 29 [ 288.971817][T16479] netlink: 'syz.3.5064': attribute type 3 has an invalid length. [ 289.350250][T16507] netlink: 'syz.3.5077': attribute type 1 has an invalid length. [ 289.661299][T16530] cgroup: Bad value for 'name' [ 290.421674][T16581] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5116'. [ 290.716151][ T925] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 290.881386][ T925] usb 3-1: unable to get BOS descriptor or descriptor too short [ 290.897242][ T925] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 290.915899][ T925] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 290.927533][ T925] usb 3-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 290.938299][ T925] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 290.949307][ T925] usb 3-1: config 129 has no interface number 0 [ 290.955661][ T925] usb 3-1: config 129 has no interface number 1 [ 290.962261][ T925] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 290.976567][ T925] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 290.992439][ T925] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 291.008411][ T925] usb 3-1: config 129 interface 135 has no altsetting 0 [ 291.015900][ T925] usb 3-1: config 129 interface 5 has no altsetting 0 [ 291.049431][ T925] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 291.060836][ T925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.073813][ T925] usb 3-1: Product: syz [ 291.084145][ T925] usb 3-1: Manufacturer: syz [ 291.091646][ T925] usb 3-1: SerialNumber: syz [ 291.131050][T16630] netlink: 172 bytes leftover after parsing attributes in process `syz.3.5139'. [ 291.324917][ T925] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 291.335837][ T925] usb 3-1: MIDIStreaming interface descriptor not found [ 291.382441][ T925] usb 3-1: USB disconnect, device number 31 [ 291.464925][T16185] udevd[16185]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 292.606652][ T5905] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 292.733933][T16733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.757952][ T5905] usb 3-1: config 0 has an invalid interface number: 101 but max is 0 [ 292.772489][ T5905] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.788556][ T5905] usb 3-1: config 0 has no interface number 0 [ 292.809459][ T5905] usb 3-1: config 0 interface 101 has no altsetting 0 [ 292.825002][ T5905] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 292.850063][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.869290][ T5905] usb 3-1: config 0 descriptor?? [ 293.092462][ T925] usb 3-1: USB disconnect, device number 32 [ 293.606208][ T5905] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 293.756129][ T5905] usb 1-1: Using ep0 maxpacket: 8 [ 293.772197][ T5905] usb 1-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 64 [ 293.790054][ T5905] usb 1-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1024 [ 293.800813][ T5905] usb 1-1: config 1 interface 0 has no altsetting 0 [ 293.810496][ T5905] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 293.823966][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.832764][ T5905] usb 1-1: Product: syz [ 293.838129][ T5905] usb 1-1: Manufacturer: syz [ 293.842815][ T5905] usb 1-1: SerialNumber: syz [ 293.851857][T16771] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 293.866243][T16771] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 293.905647][T16807] program syz.1.5224 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 294.184069][ T5905] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 294.228634][ T5905] usb 1-1: USB disconnect, device number 33 [ 294.249010][T16821] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5231'. [ 294.704103][T16855] 9pnet_fd: Insufficient options for proto=fd [ 295.061369][T16880] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5260'. [ 295.132595][T16886] dlm: no locking on control device [ 295.213726][T16891] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5266'. [ 295.633689][T16920] mkiss: ax0: crc mode is auto. [ 295.736487][ T5905] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 295.897036][ T5905] usb 2-1: Using ep0 maxpacket: 32 [ 295.910270][ T5905] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 295.936345][ T5905] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 295.972696][ T5905] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.006012][ T5905] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 296.019247][ T5905] usb 2-1: config 1 has no interface number 0 [ 296.025529][ T5905] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 296.055875][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.094304][ T5905] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 296.301976][ T5905] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 296.345396][ T5905] snd_usb_pod 2-1:1.1: invalid control EP [ 296.374466][ T5905] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 296.393559][ T5905] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 296.401915][ T5905] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 296.429338][T16962] sctp: [Deprecated]: syz.3.5298 (pid 16962) Use of int in max_burst socket option. [ 296.429338][T16962] Use struct sctp_assoc_value instead [ 296.545821][ T5905] usb 2-1: USB disconnect, device number 30 [ 296.824874][T16985] qnx6: unable to read the first superblock [ 296.889770][T16988] netlink: 'syz.0.5307': attribute type 10 has an invalid length. [ 296.905903][T16991] usb usb7: usbfs: process 16991 (syz.2.5308) did not claim interface 0 before use [ 296.907169][T16988] lo: entered promiscuous mode [ 296.929155][T16988] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 296.956519][ T925] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 297.120283][ T925] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 297.129653][ T925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.152378][ T925] usb 4-1: Product: syz [ 297.163243][ T925] usb 4-1: Manufacturer: syz [ 297.168892][ T925] usb 4-1: SerialNumber: syz [ 297.184719][ T925] usb 4-1: config 0 descriptor?? [ 297.424617][ T925] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 297.484689][T17023] bond0: Error: Cannot enslave bond to itself. [ 297.625133][ T925] usb write operation failed. (-71) [ 297.647942][ T925] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 297.702952][ T925] usb write operation failed. (-71) [ 297.734171][ T925] usb 4-1: USB disconnect, device number 30 [ 298.008969][T17057] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5339'. [ 298.701653][T17107] netlink: 'syz.1.5364': attribute type 10 has an invalid length. [ 298.757529][T17107] hsr_slave_0: entered allmulticast mode [ 298.763832][T17107] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 299.517541][T17159] netlink: 'syz.1.5390': attribute type 16 has an invalid length. [ 300.156522][ T5876] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 300.165128][T17204] netlink: 'syz.2.5412': attribute type 1 has an invalid length. [ 300.186118][T17204] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5412'. [ 300.319467][ T5876] usb 1-1: Using ep0 maxpacket: 8 [ 300.326940][ T5876] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 300.335233][ T5876] usb 1-1: config 179 has no interface number 0 [ 300.345235][ T5876] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 300.373660][ T5876] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 300.386482][ T5876] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 300.398342][ T5876] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 300.426092][ T5876] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 300.449703][ T5876] usb 1-1: config 179 interface 65 has no altsetting 0 [ 300.468625][ T5876] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 300.484711][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.537184][ T5876] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input23 [ 300.588698][ T5192] input input23: unable to receive magic message: -110 [ 300.618852][ T5192] input input23: unable to receive magic message: -32 [ 300.718607][ T5192] input input23: unable to receive magic message: -32 [ 300.784738][ T5192] input input23: unable to receive magic message: -32 [ 300.810626][ T5192] input input23: unable to receive magic message: -32 [ 300.901886][T17244] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5433'. [ 300.970014][ T925] usb 1-1: USB disconnect, device number 34 [ 300.970489][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 301.033924][T17250] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 301.119754][T17256] IPVS: Unknown mcast interface: lo [ 301.696451][ T5891] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 301.846094][ T5891] usb 2-1: Using ep0 maxpacket: 8 [ 301.858929][ T5891] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 301.868295][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.896387][ T5891] usb 2-1: Product: syz [ 301.900590][ T5891] usb 2-1: Manufacturer: syz [ 301.905188][ T5891] usb 2-1: SerialNumber: syz [ 301.933184][ T5891] usb 2-1: config 0 descriptor?? [ 301.953932][ T5891] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244) [ 302.375632][ T5891] radio-usb-si4713 2-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 302.392452][ T5891] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 302.407858][ T5891] usb 2-1: USB disconnect, device number 31 [ 302.839481][T17370] random: crng reseeded on system resumption [ 303.839980][T17441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.859131][T17441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.022892][T17455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5536'. [ 304.346472][ T5905] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 304.497814][ T5905] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.515794][ T5905] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 304.536210][ T5905] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 304.555518][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 304.565444][ T5905] usb 3-1: SerialNumber: syz [ 304.570174][ T5876] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 304.728111][ T5876] usb 1-1: config 0 has an invalid interface number: 182 but max is 0 [ 304.736692][ T5876] usb 1-1: config 0 has an invalid descriptor of length 91, skipping remainder of the config [ 304.754613][ T5876] usb 1-1: config 0 has no interface number 0 [ 304.764775][ T5876] usb 1-1: too many endpoints for config 0 interface 182 altsetting 96: 185, using maximum allowed: 30 [ 304.776944][ T5876] usb 1-1: config 0 interface 182 altsetting 96 has 0 endpoint descriptors, different from the interface descriptor's value: 185 [ 304.804713][ T5905] usb 3-1: 0:2 : does not exist [ 304.812610][ T5876] usb 1-1: config 0 interface 182 has no altsetting 0 [ 304.835047][ T5876] usb 1-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 304.855810][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.864314][ T5905] usb 3-1: USB disconnect, device number 33 [ 304.870335][ T5876] usb 1-1: Product: syz [ 304.874501][ T5876] usb 1-1: Manufacturer: syz [ 304.902051][ T5876] usb 1-1: SerialNumber: syz [ 304.914570][T16647] udevd[16647]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 304.919284][ T5876] usb 1-1: config 0 descriptor?? [ 305.094236][T17516] netlink: 'syz.1.5566': attribute type 21 has an invalid length. [ 305.112930][T17516] netlink: 'syz.1.5566': attribute type 6 has an invalid length. [ 305.121441][T17516] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5566'. [ 305.163555][ T5876] imon 1-1:0.182: unable to register, err -19 [ 305.189035][ T5876] usb 1-1: USB disconnect, device number 35 [ 305.411163][T17534] netlink: 'syz.1.5575': attribute type 6 has an invalid length. [ 305.764627][T17559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5586'. [ 305.927083][T17569] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5591'. [ 306.105153][T17584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5598'. [ 306.411532][T17606] netlink: 124 bytes leftover after parsing attributes in process `syz.1.5608'. [ 306.464591][T17610] netlink: 763 bytes leftover after parsing attributes in process `syz.2.5611'. [ 306.827109][T17628] sctp: [Deprecated]: syz.0.5616 (pid 17628) Use of int in max_burst socket option. [ 306.827109][T17628] Use struct sctp_assoc_value instead [ 307.056662][ T5905] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 307.175343][T17646] netlink: 'syz.3.5628': attribute type 10 has an invalid length. [ 307.186722][T17646] lo: entered promiscuous mode [ 307.194939][T17646] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 307.232209][ T5905] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.249388][ T5905] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 307.267441][ T5905] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 307.279349][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 307.292287][ T5905] usb 2-1: SerialNumber: syz [ 307.507512][T17660] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 307.545369][ T5905] usb 2-1: 0:2 : does not exist [ 307.556254][ T5905] usb 2-1: unit 5 not found! [ 307.597526][ T5905] usb 2-1: USB disconnect, device number 32 [ 307.679530][T16647] udevd[16647]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 308.276657][T17700] netlink: 'syz.1.5655': attribute type 1 has an invalid length. [ 308.284422][T17700] netlink: 'syz.1.5655': attribute type 101 has an invalid length. [ 308.313035][T17700] netlink: 552 bytes leftover after parsing attributes in process `syz.1.5655'. [ 308.666409][T17726] netlink: 'syz.3.5667': attribute type 1 has an invalid length. [ 309.216437][T17763] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5685'. [ 309.370108][T17773] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5691'. [ 309.387120][T17773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5691'. [ 309.419906][T17773] netlink: 31 bytes leftover after parsing attributes in process `syz.3.5691'. [ 309.443280][T17773] netlink: 'syz.3.5691': attribute type 2 has an invalid length. [ 309.451927][T17773] netlink: 31 bytes leftover after parsing attributes in process `syz.3.5691'. [ 309.595965][T17784] raw_sendmsg: syz.3.5695 forgot to set AF_INET. Fix it! [ 309.616251][ T43] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 309.796603][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 309.810005][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.823796][T17796] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5702'. [ 309.837998][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.866206][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 309.882676][T17800] netlink: 'syz.0.5703': attribute type 15 has an invalid length. [ 309.886108][ T43] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 309.906349][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.906356][T17800] netlink: 666 bytes leftover after parsing attributes in process `syz.0.5703'. [ 309.939576][ T43] usb 3-1: config 0 descriptor?? [ 309.960659][ T43] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input25 [ 310.018972][ T5192] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 310.067111][ T5192] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 310.084604][T16187] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 310.140665][ T5192] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 310.195685][T17774] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 310.215102][ T5192] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 310.234083][ T43] usb 3-1: USB disconnect, device number 34 [ 310.266309][ T5192] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 310.388274][T17821] netlink: 'syz.3.5715': attribute type 16 has an invalid length. [ 310.497708][T17828] netlink: 129704 bytes leftover after parsing attributes in process `syz.1.5718'. [ 310.510078][T17827] netlink: 666 bytes leftover after parsing attributes in process `syz.3.5717'. [ 310.651560][T17836] netlink: 'syz.1.5722': attribute type 4 has an invalid length. [ 310.676174][T17836] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5722'. [ 310.801013][T17840] netlink: 'syz.3.5724': attribute type 3 has an invalid length. [ 310.818366][T17840] netlink: 'syz.3.5724': attribute type 1 has an invalid length. [ 310.861659][T17840] NCSI netlink: No device for ifindex 33022 [ 311.531515][T17888] netlink: 'syz.2.5748': attribute type 11 has an invalid length. [ 311.776235][ T982] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 311.885137][T17910] netlink: 'syz.2.5766': attribute type 10 has an invalid length. [ 311.947954][ T982] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 311.957206][ T982] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.978343][ T982] usb 2-1: config 0 has no interface number 0 [ 311.989106][ T982] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 311.999718][ T982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.011402][ T982] usb 2-1: Product: syz [ 312.015596][ T982] usb 2-1: Manufacturer: syz [ 312.048534][ T982] usb 2-1: SerialNumber: syz [ 312.048896][T17920] x_tables: duplicate underflow at hook 1 [ 312.067379][ T982] usb 2-1: config 0 descriptor?? [ 312.089087][ T982] cx231xx 2-1:0.1: New device syz syz @ 12 Mbps (0572:58a5) with 1 interfaces [ 312.108138][ T982] cx231xx 2-1:0.1: Not found matching IAD interface [ 312.135192][T17924] netlink: 'syz.2.5765': attribute type 23 has an invalid length. [ 312.301272][ T982] usb 2-1: USB disconnect, device number 33 [ 312.505621][T17949] netlink: 'syz.2.5777': attribute type 29 has an invalid length. [ 313.310202][T18008] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 313.490468][T18020] netlink: 'syz.2.5813': attribute type 5 has an invalid length. [ 313.568026][T18026] : entered promiscuous mode [ 313.573904][T18026] bond_slave_1: entered promiscuous mode [ 314.478843][T18092] cgroup: name respecified [ 315.776413][T18162] PM: Enabling pm_trace changes system date and time during resume. [ 315.776413][T18162] PM: Correct system time has to be restored manually after resume. [ 315.969474][T18171] rose0: entered allmulticast mode [ 315.979137][T18169] netlink: 'syz.2.5887': attribute type 1 has an invalid length. [ 316.020371][T18169] __nla_validate_parse: 5 callbacks suppressed [ 316.020389][T18169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5887'. [ 316.230553][T18108] syz.1.5857 (18108): drop_caches: 2 [ 316.664826][ T982] IPVS: starting estimator thread 0... [ 316.767329][T18215] IPVS: using max 28 ests per chain, 67200 per kthread [ 316.899148][T18232] : entered promiscuous mode [ 317.261131][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.270081][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.306304][ T982] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 317.358555][T18265] netlink: 'syz.2.5933': attribute type 3 has an invalid length. [ 317.366694][T18265] netlink: 766 bytes leftover after parsing attributes in process `syz.2.5933'. [ 317.467932][ T982] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 317.482893][ T982] usb 1-1: config 0 interface 0 has no altsetting 0 [ 317.492482][ T982] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 317.506125][ T982] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 317.506501][ T925] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 317.524209][ T982] usb 1-1: Product: syz [ 317.536284][ T982] usb 1-1: Manufacturer: syz [ 317.551186][ T982] usb 1-1: SerialNumber: syz [ 317.562888][ T982] usb 1-1: config 0 descriptor?? [ 317.584379][ T982] usb 1-1: selecting invalid altsetting 0 [ 317.712861][ T925] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 317.733325][ T925] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 317.753628][ T925] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 317.765185][ T925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 317.773256][ T925] usb 4-1: SerialNumber: syz [ 317.791766][ T982] usb 1-1: USB disconnect, device number 36 [ 317.792073][ T925] usb 4-1: bad CDC descriptors [ 317.812009][ T925] usb-storage 4-1:1.0: USB Mass Storage device detected [ 317.825254][ T925] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 317.833929][ T925] scsi host1: usb-storage 4-1:1.0 [ 317.986120][ T43] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 318.096325][ T5876] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 318.148359][ T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.158724][ T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 318.168663][ T43] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 318.177855][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 318.185839][ T43] usb 3-1: SerialNumber: syz [ 318.256349][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 318.263068][ T5876] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 318.271513][ T5876] usb 2-1: config 0 has no interface number 0 [ 318.277673][ T5876] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 318.290785][ T5876] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 318.299923][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.308072][ T5876] usb 2-1: Product: syz [ 318.312239][ T5876] usb 2-1: Manufacturer: syz [ 318.317144][ T5876] usb 2-1: SerialNumber: syz [ 318.325266][ T5876] usb 2-1: config 0 descriptor?? [ 318.405484][ T43] usb 3-1: 0:2 : does not exist [ 318.405574][ T43] usb 3-1: unit 5 not found! [ 318.429946][ T43] usb 3-1: USB disconnect, device number 35 [ 318.470254][T18245] udevd[18245]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 318.742925][ T5876] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 318.755155][ T5876] usb 2-1: USB disconnect, device number 34 [ 319.036102][ T30] audit: type=1400 audit(1751455233.783:23): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=18305 comm="syz.0.5949" [ 319.076253][ T43] usb 4-1: USB disconnect, device number 31 [ 320.121813][T18380] netlink: 'syz.2.5988': attribute type 3 has an invalid length. [ 320.161627][T18382] netlink: 'syz.0.5989': attribute type 11 has an invalid length. [ 320.192129][T18382] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5989'. [ 320.281747][T18391] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5994'. [ 320.454473][T18404] syz.2.6000: attempt to access beyond end of device [ 320.454473][T18404] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 320.470776][T18404] syz.2.6000: attempt to access beyond end of device [ 320.470776][T18404] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 320.499494][T18404] Mount JFS Failure: -5 [ 320.509258][T18404] jfs_mount failed w/return code = -5 [ 320.666222][ T925] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 320.826850][ T925] usb 4-1: Using ep0 maxpacket: 8 [ 320.852511][ T925] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 320.862581][ T925] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 320.884243][ T925] usb 4-1: Product: syz [ 320.888829][ T925] usb 4-1: Manufacturer: syz [ 320.893435][ T925] usb 4-1: SerialNumber: syz [ 320.913376][ T925] usb 4-1: config 0 descriptor?? [ 320.944696][ T925] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 320.985877][T18437] netlink: 796 bytes leftover after parsing attributes in process `syz.2.6015'. [ 321.382452][ T925] gspca_zc3xx: reg_r err -71 [ 321.389736][ T925] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 321.417095][ T925] usb 4-1: USB disconnect, device number 32 [ 321.670991][T18481] binder: 18479:18481 ioctl c018620c 200000000140 returned -1 [ 321.762073][T18487] random: crng reseeded on system resumption [ 321.850662][T18491] openvswitch: netlink: VXLAN extension 206 out of range max 1 [ 321.961220][T18499] openvswitch: netlink: ct_state flags 7fffffff unsupported [ 322.409605][T18536] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6064'. [ 323.186134][ T5891] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 323.348311][ T5891] usb 4-1: Using ep0 maxpacket: 8 [ 323.355215][ T5891] usb 4-1: config 5 has an invalid interface number: 236 but max is 0 [ 323.370576][ T5891] usb 4-1: config 5 has no interface number 0 [ 323.383488][ T5891] usb 4-1: config 5 interface 236 has no altsetting 0 [ 323.406462][ T5891] usb 4-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice=78.63 [ 323.426273][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.434293][ T5891] usb 4-1: Product: syz [ 323.446109][ T5891] usb 4-1: Manufacturer: syz [ 323.460938][ T5891] usb 4-1: SerialNumber: syz [ 323.700138][ T5891] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:5.236/input/input29 [ 323.720475][ T5192] bcm5974 4-1:5.236: could not read from device [ 323.741070][ T5192] bcm5974 4-1:5.236: could not read from device [ 323.757051][ T5891] usb 4-1: USB disconnect, device number 33 [ 323.899977][T18619] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6103'. [ 324.254117][T18643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6116'. [ 324.332643][T18650] openvswitch: netlink: Duplicate key (type 32). [ 324.382556][T18651] block device autoloading is deprecated and will be removed. [ 324.413634][T18651] syz.3.6119: attempt to access beyond end of device [ 324.413634][T18651] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 324.531095][T18663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6126'. [ 324.706477][T18675] netlink: 'syz.2.6132': attribute type 10 has an invalid length. [ 324.727366][T18675] team0: Device ipvlan1 failed to register rx_handler [ 324.805950][T18675] syz.2.6132 (18675) used greatest stack depth: 19928 bytes left [ 324.861135][T18683] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6137'. [ 324.884337][T18683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6137'. [ 325.006204][ T5876] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 325.199917][ T5876] usb 4-1: config 6 has an invalid interface number: 223 but max is 1 [ 325.213307][ T5876] usb 4-1: config 6 has an invalid interface number: 168 but max is 1 [ 325.225167][ T5876] usb 4-1: config 6 has no interface number 0 [ 325.234955][ T5876] usb 4-1: config 6 has no interface number 1 [ 325.242148][ T5876] usb 4-1: config 6 interface 223 has no altsetting 0 [ 325.256097][ T5876] usb 4-1: config 6 interface 168 has no altsetting 0 [ 325.266355][ T5876] usb 4-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=93.a4 [ 325.278235][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.291542][ T5876] usb 4-1: Product: syz [ 325.299335][ T5876] usb 4-1: Manufacturer: syz [ 325.303951][ T5876] usb 4-1: SerialNumber: syz [ 325.344529][T18715] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 325.541811][ T5876] usb 4-1: USB disconnect, device number 34 [ 325.630044][T18730] netlink: 22 bytes leftover after parsing attributes in process `syz.0.6158'. [ 325.697443][T18734] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6161'. [ 326.246344][T18772] x_tables: unsorted entry at hook 2 [ 326.637761][T18800] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6194'. [ 326.658470][T18800] veth1_vlan: left allmulticast mode [ 326.689510][T18800] team0: Port device macvlan0 removed [ 326.959941][T18822] netlink: 'syz.1.6205': attribute type 10 has an invalid length. [ 326.981642][T18822] team0: Device ipvlan1 failed to register rx_handler [ 327.494010][T18864] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6226'. [ 327.625999][T18870] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6229'. [ 327.710325][T18872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6230'. [ 328.097581][ T925] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 328.128687][T18892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6240'. [ 328.172101][T18896] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6242'. [ 328.266230][ T925] usb 1-1: Using ep0 maxpacket: 16 [ 328.282655][ T925] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 328.299219][ T925] usb 1-1: config 0 has no interface number 0 [ 328.318382][ T925] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 328.332797][ T925] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 328.344552][ T925] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 328.359130][ T925] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 328.377192][ T925] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 328.386962][ T925] usb 1-1: Product: syz [ 328.391141][ T925] usb 1-1: SerialNumber: syz [ 328.399021][ T925] usb 1-1: config 0 descriptor?? [ 328.404666][T18878] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 328.425346][ T925] cm109 1-1:0.8: invalid payload size 1024, expected 4 [ 328.444665][ T925] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input30 [ 328.690800][T18924] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.6256'. [ 328.852262][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 328.859612][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 328.866820][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 328.874053][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 328.881240][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 328.888424][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 328.895595][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 328.902843][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 328.914638][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 328.922090][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 328.933686][ T925] usb 1-1: USB disconnect, device number 37 [ 328.939716][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 328.960604][ T925] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 329.157732][T18951] mmap: syz.2.6269 (18951) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 329.406264][ T925] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 329.557651][ T925] usb 4-1: Using ep0 maxpacket: 8 [ 329.568936][ T925] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 329.579081][ T925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.617346][ T925] usb 4-1: config 0 descriptor?? [ 329.832648][ T925] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 329.947845][T19006] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6297'. [ 330.037342][ T925] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 330.066264][ T925] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 330.083836][ T925] asix 4-1:0.0: probe with driver asix failed with error -71 [ 330.123516][ T925] usb 4-1: USB disconnect, device number 35 [ 331.274491][T19101] lo speed is unknown, defaulting to 1000 [ 331.284297][T19101] lo speed is unknown, defaulting to 1000 [ 331.293259][T19101] lo speed is unknown, defaulting to 1000 [ 331.334039][T19104] binder: 19103:19104 ioctl c018620c 200000000140 returned -1 [ 331.543605][T19101] infiniband syz0: set down [ 331.549764][ T5876] lo speed is unknown, defaulting to 1000 [ 331.557916][T19101] infiniband syz0: added lo [ 331.620665][T19101] RDS/IB: syz0: added [ 331.627690][T19101] smc: adding ib device syz0 with port count 1 [ 331.636304][T19101] smc: ib device syz0 port 1 has pnetid [ 331.641711][T19115] openvswitch: netlink: VXLAN extension 206 out of range max 1 [ 331.645869][ T925] lo speed is unknown, defaulting to 1000 [ 331.660019][T19101] lo speed is unknown, defaulting to 1000 [ 331.902601][T19101] lo speed is unknown, defaulting to 1000 [ 332.182294][T19101] lo speed is unknown, defaulting to 1000 [ 332.387880][T19141] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 332.394612][T19141] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 332.414639][T19141] vhci_hcd vhci_hcd.0: Device attached [ 332.428891][T19146] vhci_hcd vhci_hcd.0: port 0 already used [ 332.449749][T19142] vhci_hcd: connection closed [ 332.451998][ T49] vhci_hcd: stop threads [ 332.476841][ T49] vhci_hcd: release socket [ 332.491545][ T49] vhci_hcd: disconnect device [ 332.629410][T19101] lo speed is unknown, defaulting to 1000 [ 333.137887][T19182] netlink: 'syz.1.6382': attribute type 1 has an invalid length. [ 333.173643][T19184] netlink: 'syz.0.6383': attribute type 8 has an invalid length. [ 333.195243][T19187] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 333.569250][ T925] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 333.744584][ T925] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 333.765614][T19228] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 333.768239][ T925] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 333.772444][T19228] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 333.786067][ T925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 333.813799][ T925] usb 4-1: SerialNumber: syz [ 334.003898][T19241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6410'. [ 334.247505][ T925] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 334.269979][ T925] usb 4-1: USB disconnect, device number 36 [ 334.403323][T19265] Option '' to dns_resolver key: bad/missing value [ 334.673151][T19283] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6432'. [ 334.836251][ T982] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 334.901857][T19297] program syz.0.6439 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 334.987845][ T982] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 335.001994][ T982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.024206][ T982] usb 2-1: config 0 descriptor?? [ 335.047591][ T982] cp210x 2-1:0.0: cp210x converter detected [ 335.258559][ T982] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 335.277087][ T982] cp210x 2-1:0.0: querying part number failed [ 335.298917][ T982] usb 2-1: cp210x converter now attached to ttyUSB0 [ 335.388383][T19327] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6454'. [ 335.472368][ T982] usb 2-1: USB disconnect, device number 35 [ 335.489610][ T982] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 335.513715][ T982] cp210x 2-1:0.0: device disconnected [ 335.561842][T19337] [U] ^R [ 335.703848][ T925] IPVS: starting estimator thread 0... [ 335.799592][T19350] IPVS: using max 28 ests per chain, 67200 per kthread [ 335.937002][ T5876] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 335.986453][ T982] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 336.088077][ T5876] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.101397][ T5876] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 336.112318][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.124537][ T5876] usb 4-1: config 0 descriptor?? [ 336.158285][ T982] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.177214][ T982] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 336.194907][ T982] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 336.204790][ T982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.229393][ T982] usb 3-1: config 0 descriptor?? [ 336.469831][ T982] Bluetooth: Can't get state to change to load ram patch err [ 336.476217][T19397] cgroup: subsys name conflicts with all [ 336.494366][ T982] Bluetooth: Loading patch file failed [ 336.501907][ T982] ath3k 3-1:0.0: probe with driver ath3k failed with error -71 [ 336.525647][ T982] usb 3-1: USB disconnect, device number 36 [ 336.551028][ T5876] ath6kl: Failed to read usb control message: -71 [ 336.568159][ T5876] ath6kl: Unable to read the bmi data from the device: -71 [ 336.575394][ T5876] ath6kl: Unable to recv target info: -71 [ 336.595281][ T5876] ath6kl: Failed to init ath6kl core: -71 [ 336.611251][ T5876] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 336.641571][ T5876] usb 4-1: USB disconnect, device number 37 [ 336.721355][T19407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.834321][T19416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6498'. [ 337.172769][T19437] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6508'. [ 337.606189][ T5890] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 337.741892][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 337.778027][ T5890] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 337.790227][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.813214][ T5890] usb 4-1: config 0 descriptor?? [ 338.237456][ T5890] usb 4-1: Cannot set MAC address [ 338.247862][ T5890] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 338.277392][ T5890] usb 4-1: USB disconnect, device number 38 [ 338.449589][ T925] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 338.572208][T19528] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 338.606230][ T925] usb 3-1: Using ep0 maxpacket: 8 [ 338.623672][ T925] usb 3-1: config 0 has an invalid interface number: 122 but max is 0 [ 338.636276][ T925] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.654569][ T925] usb 3-1: config 0 has no interface number 0 [ 338.660860][ T925] usb 3-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 338.671938][ T925] usb 3-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 338.682342][ T925] usb 3-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023 [ 338.706142][ T925] usb 3-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 338.722297][ T925] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 338.733861][ T925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.742318][ T925] usb 3-1: Product: syz [ 338.767921][ T925] usb 3-1: Manufacturer: syz [ 338.772726][ T925] usb 3-1: SerialNumber: syz [ 338.788772][ T925] usb 3-1: config 0 descriptor?? [ 338.794596][T19506] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 338.819978][T19506] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 339.061787][ T925] usb 3-1: NFC: intf ffff88807c527000 id ffffffff8ed67c00 [ 339.119784][ T925] nfcmrvl 3-1:0.122: NFC: registered with nci successfully [ 339.147630][ T925] usb 3-1: USB disconnect, device number 37 [ 339.167812][ T925] usb 3-1: NFC: intf ffff88807c527000 [ 339.291325][T19567] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6570'. [ 339.626276][ T982] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 339.661893][T19593] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6584'. [ 339.787743][ T982] usb 2-1: Using ep0 maxpacket: 16 [ 339.807080][ T982] usb 2-1: config 254 has an invalid interface number: 235 but max is 0 [ 339.846147][ T982] usb 2-1: config 254 has no interface number 0 [ 339.852495][ T982] usb 2-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 339.865827][T19607] netlink: 'syz.0.6591': attribute type 1 has an invalid length. [ 339.873780][T19607] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6591'. [ 339.890627][ T982] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 339.906493][ T982] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 339.921313][ T982] usb 2-1: config 254 interface 235 has no altsetting 0 [ 339.932905][ T982] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 339.952359][ T982] usb 2-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 339.970319][ T982] usb 2-1: Product: syz [ 339.978682][ T982] usb 2-1: Manufacturer: syz [ 340.006167][ T982] usb 2-1: SerialNumber: syz [ 340.015799][T19575] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 340.090141][T19621] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6597'. [ 340.249905][T19575] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 340.268436][ T982] usbtest 2-1:254.235: Linux gadget zero [ 340.284649][ T982] usbtest 2-1:254.235: high-speed {control in/out bulk-out int-in} tests (+alt) [ 340.297353][T19633] netlink: 'syz.2.6603': attribute type 21 has an invalid length. [ 340.320515][T19633] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6603'. [ 340.341282][T19635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6604'. [ 340.416892][T19640] dlm: no locking on control device [ 340.469415][ T5890] usb 2-1: USB disconnect, device number 36 [ 340.479356][T19645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.528649][T19647] netlink: 'syz.3.6610': attribute type 1 has an invalid length. [ 340.568598][T19647] netlink: 'syz.3.6610': attribute type 1 has an invalid length. [ 341.051424][T19685] vivid-000: ================= START STATUS ================= [ 341.072782][T19685] vivid-000: Radio HW Seek Mode: Bounded [ 341.101727][T19685] vivid-000: Radio Programmable HW Seek: false [ 341.122892][T19685] vivid-000: RDS Rx I/O Mode: Block I/O [ 341.145986][T19685] vivid-000: Generate RBDS Instead of RDS: false [ 341.156817][T19685] vivid-000: RDS Reception: false [ 341.170171][T19685] vivid-000: RDS Program Type: 0 inactive [ 341.179517][T19685] vivid-000: RDS PS Name: inactive [ 341.184840][T19685] vivid-000: RDS Radio Text: inactive [ 341.191254][T19685] vivid-000: RDS Traffic Announcement: false inactive [ 341.198896][T19685] vivid-000: RDS Traffic Program: false inactive [ 341.205462][T19685] vivid-000: RDS Music: false inactive [ 341.211625][T19685] vivid-000: ================== END STATUS ================== [ 341.317270][T19699] netlink: 1072 bytes leftover after parsing attributes in process `syz.1.6636'. [ 341.356199][T19699] netlink: 280 bytes leftover after parsing attributes in process `syz.1.6636'. [ 341.547651][T19716] netlink: 'syz.2.6644': attribute type 1 has an invalid length. [ 342.132268][T19760] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 342.138822][T19760] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 342.152149][T19760] vhci_hcd vhci_hcd.0: Device attached [ 342.156153][ T925] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 342.217014][ T5977] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 342.319411][ T925] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.336672][ T925] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 342.352347][ T925] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 342.363843][ T925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 342.372530][ T925] usb 1-1: SerialNumber: syz [ 342.397423][ T925] usb 1-1: bad CDC descriptors [ 342.407798][ T982] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 342.417056][ T5876] usb 36-1: SetAddress Request (2) to port 0 [ 342.423245][ T5876] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 342.546223][ T5890] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 342.576140][ T982] usb 2-1: Using ep0 maxpacket: 8 [ 342.583461][ T982] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 342.592746][ T982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.605093][ T982] usb 2-1: config 0 descriptor?? [ 342.619189][ T982] hso 2-1:0.0: Can't find BULK IN endpoint [ 342.659483][ T925] usb 1-1: USB disconnect, device number 38 [ 342.699861][ T5890] usb 3-1: unable to get BOS descriptor or descriptor too short [ 342.708152][ T5890] usb 3-1: not running at top speed; connect to a high speed hub [ 342.718115][ T5890] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.726174][ T5977] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 342.731148][ T5890] usb 3-1: string descriptor 0 read error: -22 [ 342.742047][ T5890] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 342.751108][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 342.761095][ T5890] usb 3-1: config 0 descriptor?? [ 342.814821][ T982] usb 2-1: USB disconnect, device number 37 [ 342.821223][T19761] vhci_hcd: connection reset by peer [ 342.828147][ T49] vhci_hcd: stop threads [ 342.832591][ T49] vhci_hcd: release socket [ 342.841218][ T49] vhci_hcd: disconnect device [ 342.886207][ T5977] usb 4-1: Using ep0 maxpacket: 16 [ 342.894315][ T5977] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 342.903509][ T5977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.911561][ T5977] usb 4-1: Product: syz [ 342.915731][ T5977] usb 4-1: Manufacturer: syz [ 342.920575][ T5977] usb 4-1: SerialNumber: syz [ 342.936347][ T5977] r8152-cfgselector 4-1: Unknown version 0x0000 [ 342.942592][ T5977] r8152-cfgselector 4-1: config 0 descriptor?? [ 342.972657][ T5905] usb 3-1: USB disconnect, device number 38 [ 343.245946][T19788] can0: slcan on ttyS3. [ 343.288932][T19787] can0 (unregistered): slcan off ttyS3. [ 343.383437][ T5905] r8152-cfgselector 4-1: USB disconnect, device number 39 [ 343.496806][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 343.550397][T19803] binder: BC_ATTEMPT_ACQUIRE not supported [ 343.556958][T19803] binder: 19802:19803 ioctl c0306201 2000000001c0 returned -22 [ 343.713014][T19815] sctp: [Deprecated]: syz.2.6692 (pid 19815) Use of int in maxseg socket option. [ 343.713014][T19815] Use struct sctp_assoc_value instead [ 343.773324][T19817] netlink: 'syz.0.6693': attribute type 6 has an invalid length. [ 344.739104][T19882] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6725'. [ 344.813929][T19887] veth1_macvtap: entered allmulticast mode [ 344.942384][T19898] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 345.720088][T19955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6760'. [ 345.790040][T19959] netlink: 'syz.2.6763': attribute type 1 has an invalid length. [ 345.915527][T19970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6768'. [ 345.936457][ T925] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 346.100688][ T925] usb 2-1: Using ep0 maxpacket: 32 [ 346.120143][ T925] usb 2-1: unable to get BOS descriptor or descriptor too short [ 346.129492][ T925] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 346.148608][ T925] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 346.158262][ T925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.178091][ T925] usb 2-1: Product: syz [ 346.182293][ T925] usb 2-1: Manufacturer: syz [ 346.196490][ T925] usb 2-1: SerialNumber: syz [ 346.311074][T19998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6781'. [ 346.417873][ T925] usb 2-1: Invalid number of CPorts: 0 [ 346.430409][ T925] es2_ap_driver 2-1:7.0: probe with driver es2_ap_driver failed with error -22 [ 346.521588][T20010] random: crng reseeded on system resumption [ 346.620851][ T5891] usb 2-1: USB disconnect, device number 38 [ 346.792250][T20027] 9pnet: Unknown protocol version 9 [ 346.890428][T20036] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6801'. [ 347.024496][ T5157] Bluetooth: hci0: command tx timeout [ 347.213594][T20060] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6813'. [ 347.222789][T20060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6813'. [ 347.259812][T20060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6813'. [ 347.373100][T20069] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 347.502364][T20079] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6822'. [ 347.518408][ T5876] usb 36-1: device descriptor read/8, error -110 [ 347.536199][ T5905] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 347.629148][T20086] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6827'. [ 347.703274][ T5905] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 347.712970][ T5905] usb 4-1: New USB device strings: Mfr=13, Product=2, SerialNumber=3 [ 347.742307][ T5905] usb 4-1: Product: syz [ 347.747942][ T5905] usb 4-1: Manufacturer: syz [ 347.752559][ T5905] usb 4-1: SerialNumber: syz [ 347.770301][ T5905] r8152-cfgselector 4-1: Unknown version 0x0000 [ 347.778954][ T5905] r8152-cfgselector 4-1: config 0 descriptor?? [ 347.919993][ T5876] usb usb36-port1: attempt power cycle [ 347.993856][ T1092] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 348.007670][ T5905] r8152-cfgselector 4-1: Unknown version 0x0000 [ 348.021317][ T5905] r8152-cfgselector 4-1: bad CDC descriptors [ 348.189001][T20122] cgroup: noprefix used incorrectly [ 348.215089][ T5905] r8152-cfgselector 4-1: USB disconnect, device number 40 [ 348.385949][T20135] ksmbd: Unknown IPC event: 4, ignore. [ 348.460043][T20141] unsupported nlmsg_type 40 [ 348.519245][ T5876] usb usb36-port1: unable to enumerate USB device [ 348.527425][T20145] QAT: Invalid ioctl 21531 [ 348.618857][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 348.696205][ T5905] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 348.851156][ T5905] usb 2-1: Using ep0 maxpacket: 32 [ 348.864709][ T5905] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 348.879470][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.896075][ T5905] usb 2-1: Product: syz [ 348.901673][ T5905] usb 2-1: Manufacturer: syz [ 348.917748][ T5905] usb 2-1: SerialNumber: syz [ 348.934401][ T5905] usb 2-1: config 0 descriptor?? [ 348.949672][ T5905] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 349.237090][T20191] usb usb8: usbfs: process 20191 (syz.2.6878) did not claim interface 0 before use [ 349.350352][ T5905] gspca_stk1135: reg_w 0x0 err -71 [ 349.360257][ T5905] gspca_stk1135: serial bus timeout: status=0x00 [ 349.378956][ T5905] gspca_stk1135: Sensor write failed [ 349.402931][ T5905] gspca_stk1135: serial bus timeout: status=0x00 [ 349.416329][ T5905] gspca_stk1135: Sensor write failed [ 349.422144][ T5905] gspca_stk1135: serial bus timeout: status=0x00 [ 349.441138][ T5905] gspca_stk1135: Sensor read failed [ 349.457264][ T5905] gspca_stk1135: serial bus timeout: status=0x00 [ 349.463698][ T5905] gspca_stk1135: Sensor read failed [ 349.472207][ T5905] gspca_stk1135: Detected sensor type unknown (0x0) [ 349.479284][ T5905] gspca_stk1135: serial bus timeout: status=0x00 [ 349.506054][ T5905] gspca_stk1135: Sensor read failed [ 349.526079][ T5905] gspca_stk1135: serial bus timeout: status=0x00 [ 349.532450][ T5905] gspca_stk1135: Sensor read failed [ 349.547607][ T5905] gspca_stk1135: serial bus timeout: status=0x00 [ 349.559601][ T5905] gspca_stk1135: Sensor write failed [ 349.568765][ T5905] gspca_stk1135: serial bus timeout: status=0x00 [ 349.582977][ T5905] gspca_stk1135: Sensor write failed [ 349.596179][ T5905] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 349.611942][ T5905] usb 2-1: USB disconnect, device number 39 [ 349.827627][ T5876] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 350.006224][ T5876] usb 3-1: Using ep0 maxpacket: 16 [ 350.023413][ T5876] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 350.035097][ T5876] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.047151][ T5876] usb 3-1: config 0 has no interface number 0 [ 350.058596][ T5876] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 350.076070][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.094395][ T5876] usb 3-1: Product: syz [ 350.101467][ T5876] usb 3-1: Manufacturer: syz [ 350.117934][ T5876] usb 3-1: SerialNumber: syz [ 350.146712][ T5876] usb 3-1: config 0 descriptor?? [ 350.186366][ T5891] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 350.336933][ T5891] usb 2-1: Using ep0 maxpacket: 16 [ 350.350587][ T5891] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 350.361966][ T5876] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 350.377623][ T5891] usb 2-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 350.381729][ T5876] usb 3-1: No valid video chain found. [ 350.403484][ T5891] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 350.429299][ T5891] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 350.442998][ T5891] usb 2-1: config 0 interface 0 has no altsetting 0 [ 350.453271][ T5891] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 350.465409][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.474381][ T5891] usb 2-1: Product: syz [ 350.481071][ T5891] usb 2-1: Manufacturer: syz [ 350.485683][ T5891] usb 2-1: SerialNumber: syz [ 350.493884][ T5891] usb 2-1: config 0 descriptor?? [ 350.501225][T20235] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 350.543081][T20269] __nla_validate_parse: 4 callbacks suppressed [ 350.543097][T20269] netlink: 4268 bytes leftover after parsing attributes in process `syz.0.6917'. [ 350.559440][T20269] netlink: 4268 bytes leftover after parsing attributes in process `syz.0.6917'. [ 350.575255][ T5876] usb 3-1: USB disconnect, device number 39 [ 350.722817][T20235] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 350.742233][ T5891] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input33 [ 350.858647][T20283] netlink: 'syz.0.6924': attribute type 3 has an invalid length. [ 350.866650][T20283] netlink: 'syz.0.6924': attribute type 1 has an invalid length. [ 350.874489][T20283] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6924'. [ 350.913586][T20285] usb usb8: usbfs: process 20285 (syz.0.6925) did not claim interface 0 before use [ 350.942983][ T5891] usb 2-1: USB disconnect, device number 40 [ 351.046278][ T5876] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 351.206160][ T5876] usb 4-1: Using ep0 maxpacket: 8 [ 351.215668][ T5876] usb 4-1: unable to get BOS descriptor or descriptor too short [ 351.235718][ T5876] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 351.256067][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 351.276240][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 351.289037][ T5876] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 351.298859][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 351.309974][ T5876] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDD, changing to 0x8D [ 351.326082][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 351.338491][ T5876] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 351.350100][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.365123][ T5876] usb 4-1: Product: syz [ 351.373014][ T5876] usb 4-1: Manufacturer: syz [ 351.377923][ T5876] usb 4-1: SerialNumber: syz [ 351.390015][ T5876] usb 4-1: config 0 descriptor?? [ 351.396392][T20281] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 351.410501][ T5876] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 351.568998][T18260] udevd[18260]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 351.639720][ T5876] usb 4-1: USB disconnect, device number 41 [ 351.667005][T20321] tmpfs: Bad value for 'nr_blocks' [ 351.685016][T20322] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 351.702361][T20322] VFS: Can't find a romfs filesystem on dev rnullb0. [ 351.702361][T20322] [ 352.292220][T20365] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6964'. [ 352.319355][T20365] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 352.710458][T20393] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6978'. [ 353.132899][T20425] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 353.154305][T20425] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 353.451015][T20449] can0: slcan on ttyS3. [ 353.516640][T20448] can0 (unregistered): slcan off ttyS3. [ 353.592462][T20460] netlink: 'syz.2.7010': attribute type 1 has an invalid length. [ 353.681590][T20466] netlink: 'syz.1.7014': attribute type 4 has an invalid length. [ 353.738952][ T3487] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 353.807238][ T5890] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 353.967904][ T5890] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.981553][ T5890] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 354.002362][ T5890] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 354.013580][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 354.021852][ T5890] usb 4-1: SerialNumber: syz [ 354.036880][ T5890] usb 4-1: bad CDC descriptors [ 354.106196][ T925] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 354.134950][T20484] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7023'. [ 354.246174][ T982] usb 4-1: USB disconnect, device number 42 [ 354.261908][ T925] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 354.273618][ T925] usb 2-1: config 0 has no interface number 0 [ 354.284899][ T925] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 354.295116][ T925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.307843][ T925] usb 2-1: Product: syz [ 354.313690][ T925] usb 2-1: Manufacturer: syz [ 354.318551][ T925] usb 2-1: SerialNumber: syz [ 354.330332][ T925] usb 2-1: config 0 descriptor?? [ 354.376602][ T3487] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 354.548782][ T982] usb 2-1: USB disconnect, device number 41 [ 354.677640][T20512] can0: slcan on ttyS3. [ 354.740933][T20510] can0 (unregistered): slcan off ttyS3. [ 354.937407][T20528] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 355.015577][T20533] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 355.184344][T20543] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 355.386926][T20559] [ 355.389282][T20559] ============================================ [ 355.395444][T20559] WARNING: possible recursive locking detected [ 355.401593][T20559] 6.16.0-rc4-next-20250702-syzkaller #0 Not tainted [ 355.408159][T20559] -------------------------------------------- [ 355.414286][T20559] syz.3.7059/20559 is trying to acquire lock: [ 355.420326][T20559] ffff88807da41060 (&sb->s_type->i_mutex_key#17){+.+.}-{4:4}, at: __simple_recursive_removal+0x95/0x510 [ 355.431465][T20559] [ 355.431465][T20559] but task is already holding lock: [ 355.438805][T20559] ffff88802311e480 (&sb->s_type->i_mutex_key#17){+.+.}-{4:4}, at: bm_entry_write+0x289/0x540 [ 355.448973][T20559] [ 355.448973][T20559] other info that might help us debug this: [ 355.457007][T20559] Possible unsafe locking scenario: [ 355.457007][T20559] [ 355.464519][T20559] CPU0 [ 355.467775][T20559] ---- [ 355.471034][T20559] lock(&sb->s_type->i_mutex_key#17); [ 355.476481][T20559] lock(&sb->s_type->i_mutex_key#17); [ 355.481929][T20559] [ 355.481929][T20559] *** DEADLOCK *** [ 355.481929][T20559] [ 355.490046][T20559] May be due to missing lock nesting notation [ 355.490046][T20559] [ 355.498340][T20559] 3 locks held by syz.3.7059/20559: [ 355.503516][T20559] #0: ffff888033d180f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x247/0x320 [ 355.512554][T20559] #1: ffff888035348428 (sb_writers#11){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 355.521506][T20559] #2: ffff88802311e480 (&sb->s_type->i_mutex_key#17){+.+.}-{4:4}, at: bm_entry_write+0x289/0x540 [ 355.532107][T20559] [ 355.532107][T20559] stack backtrace: [ 355.537986][T20559] CPU: 0 UID: 0 PID: 20559 Comm: syz.3.7059 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 355.538004][T20559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 355.538017][T20559] Call Trace: [ 355.538025][T20559] [ 355.538031][T20559] dump_stack_lvl+0x189/0x250 [ 355.538049][T20559] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.538063][T20559] ? __pfx__printk+0x10/0x10 [ 355.538076][T20559] ? __schedule+0x1713/0x4d00 [ 355.538092][T20559] ? print_lock_name+0xde/0x100 [ 355.538107][T20559] print_deadlock_bug+0x28b/0x2a0 [ 355.538122][T20559] validate_chain+0x1a3f/0x2140 [ 355.538136][T20559] ? __lock_acquire+0xab9/0xd20 [ 355.538158][T20559] __lock_acquire+0xab9/0xd20 [ 355.538177][T20559] ? __simple_recursive_removal+0x95/0x510 [ 355.538192][T20559] lock_acquire+0x120/0x360 [ 355.538209][T20559] ? __simple_recursive_removal+0x95/0x510 [ 355.538227][T20559] down_write+0x96/0x1f0 [ 355.538244][T20559] ? __simple_recursive_removal+0x95/0x510 [ 355.538258][T20559] ? __pfx_down_write+0x10/0x10 [ 355.538277][T20559] __simple_recursive_removal+0x95/0x510 [ 355.538294][T20559] bm_entry_write+0x4f7/0x540 [ 355.538311][T20559] ? __pfx_bm_entry_write+0x10/0x10 [ 355.538328][T20559] ? __pfx_bm_entry_write+0x10/0x10 [ 355.538344][T20559] vfs_write+0x27e/0xa90 [ 355.538361][T20559] ? __pfx_vfs_write+0x10/0x10 [ 355.538375][T20559] ? __fget_files+0x2a/0x420 [ 355.538393][T20559] ? __fget_files+0x3a0/0x420 [ 355.538409][T20559] ? __fget_files+0x2a/0x420 [ 355.538427][T20559] ksys_write+0x145/0x250 [ 355.538442][T20559] ? __pfx_ksys_write+0x10/0x10 [ 355.538457][T20559] ? do_syscall_64+0xbe/0x3b0 [ 355.538474][T20559] do_syscall_64+0xfa/0x3b0 [ 355.538490][T20559] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.538504][T20559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.538517][T20559] ? clear_bhb_loop+0x60/0xb0 [ 355.538530][T20559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.538543][T20559] RIP: 0033:0x7f260ed8e929 [ 355.538563][T20559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.538575][T20559] RSP: 002b:00007f260fb1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 355.538589][T20559] RAX: ffffffffffffffda RBX: 00007f260efb5fa0 RCX: 00007f260ed8e929 [ 355.538599][T20559] RDX: 0000000000000002 RSI: 0000200000000100 RDI: 0000000000000003 [ 355.538608][T20559] RBP: 00007f260ee10b39 R08: 0000000000000000 R09: 0000000000000000 [ 355.538617][T20559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.538626][T20559] R13: 0000000000000000 R14: 00007f260efb5fa0 R15: 00007ffcc47bb898 [ 355.538640][T20559] [ 355.538665][ C0] vkms_vblank_simulate: vblank timer overrun [ 355.804782][ C0] vkms_vblank_simulate: vblank timer overrun [ 357.016190][ T5157] Bluetooth: hci0: command tx timeout [ 358.856727][ T3487] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 359.496381][ T3615] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 364.616447][ T3615] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 365.257051][ T1092] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration