last executing test programs: 2m46.446603385s ago: executing program 0 (id=1984): syz_usb_connect(0x0, 0x46, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x6d, 0x15, 0xaa, 0x8, 0x421, 0x4ce, 0x8378, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x0, 0x3, 0x0, 0x3, "", [{{0x9, 0x4, 0xfb, 0x5, 0x3, 0x2, 0x2, 0xff, 0x8d, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0xe1, 0xf2, 0x1002}]}], [{{0x9, 0x5, 0x1, 0x1, 0x3ff, 0xc, 0xfc, 0x8}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x0, 0x0, 0x3}}, {{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x5, 0x2}}]}}]}}]}}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0}) 2m44.644969239s ago: executing program 0 (id=2002): syz_usb_connect(0x2, 0x46, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x53, 0x4f, 0xfb, 0x8, 0x3f0, 0x307, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x1, 0x6, 0x90, 0x3b, "", [{{0x9, 0x4, 0x74, 0xf, 0x3, 0xf2, 0xb7, 0x5e, 0x80, [], [{{0x9, 0x5, 0x80, 0x2, 0x400, 0xf, 0x0, 0x81}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x9, 0x81, 0x0, [@generic={0x7, 0x5, "a1662cbf36"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x1, 0x1, 0x2}}]}}]}}]}}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0}) 2m42.803726282s ago: executing program 0 (id=2015): prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 2m42.634242523s ago: executing program 0 (id=2018): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b40500000000000071100f000000000066000000000000009500000000000000595b4bfcf3026b014b45a3dc70a560d2eb623f18fe486d280ae10312a10f832e25b5abb17e733f15a923fabe391cf618b58a1f60baa04b1910bd"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 2m42.551493718s ago: executing program 0 (id=2019): pipe2$9p(&(0x7f0000000200), 0x80) 2m42.483669546s ago: executing program 0 (id=2020): r0 = syz_open_dev$usbfs(&(0x7f0000000700), 0x2000000000000, 0x141002) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0xc0185500, &(0x7f0000000040)={0x80, 0x100000, "aa2fe1a243fcd9abf29cc3391c06b86f68e7f73d4f0bff9669a8e82040ccb44d75131fb06cade553a6bdc314438ce0af11c38cd724980b087a7a16f9295be0a69db51576e7a06ef6bcabc67b52ba82e73504fa842ec2f0c06bf006f3e5bcdd5057997bf171c60d96a538b02ee9f4b573457498ca09cb417b1fbe6dc3b0c27ab0693ac57aff136748f7740dfc33f3a902b670f8933aec28869e637c18379d6d0b4d844b732cb1932733dfcec2f69f8b6df76ba84e1f001ad29105230471f466b6f9d7d2b05a57fe16e7363e5ecebc2c74539ca55c7ce3a175061adedd20532a9de97379f4dd5baeeae835946311e6e4e2361355c54b3bd500"}) 2m27.357359195s ago: executing program 32 (id=2020): r0 = syz_open_dev$usbfs(&(0x7f0000000700), 0x2000000000000, 0x141002) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0xc0185500, &(0x7f0000000040)={0x80, 0x100000, "aa2fe1a243fcd9abf29cc3391c06b86f68e7f73d4f0bff9669a8e82040ccb44d75131fb06cade553a6bdc314438ce0af11c38cd724980b087a7a16f9295be0a69db51576e7a06ef6bcabc67b52ba82e73504fa842ec2f0c06bf006f3e5bcdd5057997bf171c60d96a538b02ee9f4b573457498ca09cb417b1fbe6dc3b0c27ab0693ac57aff136748f7740dfc33f3a902b670f8933aec28869e637c18379d6d0b4d844b732cb1932733dfcec2f69f8b6df76ba84e1f001ad29105230471f466b6f9d7d2b05a57fe16e7363e5ecebc2c74539ca55c7ce3a175061adedd20532a9de97379f4dd5baeeae835946311e6e4e2361355c54b3bd500"}) 3.121057077s ago: executing program 4 (id=4191): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x143b02) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000040)={0x0, {0x14c, 0x66}}) 2.823844666s ago: executing program 4 (id=4196): r0 = syz_open_dev$video(&(0x7f0000000180), 0xc407, 0x800) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x5, 0x1, {0x9, @pix_mp={0x96, 0x1, 0x5eec3288416e45e, 0x2, 0x9, [{0x0, 0x1}, {0xfffffffc, 0x40}, {0x8, 0x49}, {0x1ff}, {0x12f8, 0x5}, {}, {0x3, 0x8}, {0x3, 0x7}], 0x3, 0x5, 0x3, 0x0, 0x5}}, 0x10000}) 2.625657966s ago: executing program 4 (id=4198): r0 = socket$inet(0x2, 0x3, 0x6) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@generic={0x82, 0xc, "3e06c87387a4e7f0fde2"}]}}}], 0x20}, 0x4080) 2.35587593s ago: executing program 4 (id=4203): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000b80)={{0x12, 0x1, 0x201, 0x88, 0x29, 0xec, 0x10, 0x93a, 0x260e, 0x1885, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x9, 0xb0, 0x8, "", [{{0x9, 0x4, 0x97, 0x6, 0x0, 0x10, 0x11, 0x2c, 0xd2}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) 1.661997959s ago: executing program 1 (id=4215): r0 = syz_io_uring_setup(0x231e, &(0x7f0000000c40)={0x0, 0x9d59, 0x0, 0x1, 0x88}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x8, 0x2, 0x0) 1.627564106s ago: executing program 2 (id=4217): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) sendmmsg(r0, 0x0, 0x0, 0x200c0) 1.431043596s ago: executing program 1 (id=4219): r0 = fsopen(&(0x7f0000000100)='overlay\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000003700)='default_permissions', &(0x7f0000003740)="8c", 0x1) 1.41288145s ago: executing program 5 (id=4220): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x101, 0x0, 0x300, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd1}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x300}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.31308528s ago: executing program 2 (id=4221): r0 = socket$inet(0x2, 0x3, 0x2) getsockopt(r0, 0xff, 0x1, 0x0, 0x0) 1.235754843s ago: executing program 3 (id=4222): r0 = socket(0x40000000015, 0x5, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x80800) 1.207559305s ago: executing program 1 (id=4223): r0 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000140)={{0x0, 0x1}, {0xf}}) 1.176927125s ago: executing program 5 (id=4224): r0 = syz_open_dev$video(&(0x7f00000000c0), 0x200000802, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000001280)={0x1, @pix_mp={0x10000, 0x802, 0x34325258, 0x4, 0x5, [{0xff, 0x3}, {0x40004944, 0x8bbc043}, {0x8, 0xc}, {0xe, 0x7fffffff}, {0x1, 0xfffffffd}, {0x39, 0x1}, {0x9, 0x2}, {0x400, 0x500}], 0x2, 0x3, 0x8, 0x1, 0x1}}) 1.008319619s ago: executing program 2 (id=4225): r0 = socket(0x10, 0x803, 0x0) getsockopt$netlink(r0, 0x10e, 0x3, 0x0, &(0x7f00000018c0)) 978.589706ms ago: executing program 3 (id=4226): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d80000002000811f4e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) 946.250967ms ago: executing program 1 (id=4227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfff}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) 931.651581ms ago: executing program 5 (id=4228): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x6f5e, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) 724.907506ms ago: executing program 3 (id=4229): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x5}, @in=@dev={0xac, 0x14, 0x14, 0x2e}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@rand_addr=' \x01\x00', @in=@rand_addr=0x64010102, 0x3c, 0x4, 0x0, 0x10000000, 0xa, 0x2}, {@in=@private=0xa010101, @in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x38}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x6a8dd86ef567f079}, 0x4020800) 723.036152ms ago: executing program 2 (id=4230): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 707.543968ms ago: executing program 5 (id=4231): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x5c}, 0x6e) 673.90732ms ago: executing program 1 (id=4232): unshare(0xe060400) bpf$ITER_CREATE(0x21, 0x0, 0x0) 530.334263ms ago: executing program 3 (id=4233): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x60, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x28, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x24, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 441.257161ms ago: executing program 1 (id=4234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000014c0)={0x14, 0x3, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x8008814}, 0x10) 429.387191ms ago: executing program 5 (id=4235): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x57}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0xc, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 422.591742ms ago: executing program 2 (id=4236): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, 0x0) 373.396117ms ago: executing program 4 (id=4237): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BITWISE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x20008000) 276.939104ms ago: executing program 3 (id=4238): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) fcntl$addseals(r0, 0x409, 0x3) 176.697094ms ago: executing program 2 (id=4239): io_setup(0x7, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0}) 54.783688ms ago: executing program 3 (id=4240): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x2aa09, 0x51a23}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040080}, 0x1080) 34.943812ms ago: executing program 5 (id=4241): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af83, 0x0) 0s ago: executing program 4 (id=4242): r0 = gettid() rt_tgsigqueueinfo(r0, r0, 0xf, &(0x7f0000000000)={0x2b, 0x46, 0x80000001}) kernel console output (not intermixed with test programs): s: Mfr=1, Product=2, SerialNumber=3 [ 304.883125][ T5757] usb 5-1: Product: syz [ 304.887737][ T5757] usb 5-1: Manufacturer: syz [ 304.893330][ T5757] usb 5-1: SerialNumber: syz [ 304.980495][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 304.994451][ T10] usb 4-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 305.005265][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.014504][ T10] usb 4-1: Product: syz [ 305.018937][ T10] usb 4-1: Manufacturer: syz [ 305.028842][ T10] usb 4-1: SerialNumber: syz [ 305.038180][ T10] usb 4-1: config 0 descriptor?? [ 305.059445][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 305.083054][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 305.126750][ T5757] usb 5-1: 1:0 : does not exist [ 305.149001][ T5757] usb 5-1: BAAD GENERIC IO: no channels? [ 305.180274][ T5360] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 305.228259][ T5757] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 305.239409][ T5757] snd_usb_variax 5-1:1.1: Line 6 PODxt Live found [ 305.250821][ T5757] usb 5-1: selecting invalid altsetting 1 [ 305.256747][ T5757] snd_usb_variax 5-1:1.1: set_interface failed [ 305.290917][ T5757] snd_usb_variax 5-1:1.1: Line 6 PODxt Live now disconnected [ 305.319685][ T5757] snd_usb_variax 5-1:1.1: probe with driver snd_usb_variax failed with error -22 [ 305.337242][ T5757] usb 5-1: USB disconnect, device number 111 [ 305.367908][ T5360] usb 3-1: unable to get BOS descriptor or descriptor too short [ 305.388562][ T5360] usb 3-1: not running at top speed; connect to a high speed hub [ 305.407164][ T5360] usb 3-1: config 4 has an invalid interface number: 23 but max is 0 [ 305.425118][ T5756] udevd[5756]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 305.443910][ T5360] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 305.458699][ T10] usb 4-1: USB disconnect, device number 106 [ 305.474809][ T5360] usb 3-1: config 4 has no interface number 0 [ 305.500083][ T5360] usb 3-1: config 4 interface 23 altsetting 5 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 305.537718][ T5360] usb 3-1: config 4 interface 23 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.549238][ T5360] usb 3-1: config 4 interface 23 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 15 [ 305.563331][ T5360] usb 3-1: config 4 interface 23 has no altsetting 0 [ 305.575672][ T5360] usb 3-1: New USB device found, idVendor=087d, idProduct=5704, bcdDevice=ce.19 [ 305.588415][ T5360] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.597337][ T5360] usb 3-1: Product: syz [ 305.602236][ T5360] usb 3-1: Manufacturer: syz [ 305.606900][ T5360] usb 3-1: SerialNumber: syz [ 305.872089][ T5360] kaweth 3-1:4.23: couldn't find required endpoints [ 305.934251][ T5360] usb 3-1: USB disconnect, device number 116 [ 307.477608][T10027] netlink: 'syz.3.2060': attribute type 11 has an invalid length. [ 307.505803][T10027] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2060'. [ 308.007835][T10043] netlink: 'syz.3.2068': attribute type 10 has an invalid length. [ 309.197628][T10077] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.535791][T10084] netlink: zone id is out of range [ 309.855288][T10091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.360724][ T5757] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 310.463133][T10108] Cannot find del_set index 0 as target [ 310.571923][ T5757] usb 4-1: Using ep0 maxpacket: 8 [ 310.595485][ T5757] usb 4-1: unable to get BOS descriptor or descriptor too short [ 310.620963][ T5757] usb 4-1: config 1 has an invalid interface number: 211 but max is 0 [ 310.638809][ T5757] usb 4-1: config 1 has no interface number 0 [ 310.647312][ T5757] usb 4-1: config 1 interface 211 has no altsetting 0 [ 310.677461][ T5757] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=5a.54 [ 310.702707][ T5757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.732955][ T5757] usb 4-1: Product: syz [ 310.747757][ T5757] usb 4-1: Manufacturer: syz [ 310.763303][ T5757] usb 4-1: SerialNumber: syz [ 311.046070][ T5757] usb 4-1: USB disconnect, device number 107 [ 311.072272][T10122] trusted_key: encrypted_key: keylen parameter is missing [ 311.977109][T10148] Cannot find set identified by id 0 to match [ 312.681199][T10172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2129'. [ 313.547798][T10196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2140'. [ 313.576690][T10196] vlan0: entered promiscuous mode [ 313.604382][T10199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2141'. [ 313.871866][T10206] autofs4:pid:10206:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 314.084008][T10214] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2148'. [ 316.013408][T10272] bond1: down delay (511) is not a multiple of miimon (8), value rounded to 504 ms [ 316.029628][T10272] bond1: entered promiscuous mode [ 316.037189][T10272] bond1: entered allmulticast mode [ 316.043460][T10272] 8021q: adding VLAN 0 to HW filter on device bond1 [ 316.482840][ T24] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 316.670741][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 316.706852][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 316.749676][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 316.790369][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 316.824487][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 316.866827][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.874530][T10305] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2193'. [ 316.878716][T10303] vivid-007: disconnect [ 316.926869][ T24] usb 4-1: config 0 descriptor?? [ 316.955485][T10302] vivid-007: reconnect [ 317.170507][ T24] hdpvr 4-1:0.0: firmware version 0xd dated jl;S11!vOp [ 317.170507][ T24] 4(r [ 317.170507][ T24] d2}d~٭^r [ 317.376736][ T24] hdpvr 4-1:0.0: device init failed [ 317.396608][ T24] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 317.433643][ T24] usb 4-1: USB disconnect, device number 108 [ 317.465164][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.472301][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.284342][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 318.311670][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 318.321854][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 318.334154][ T5629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 318.347072][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 318.576924][T10352] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2216'. [ 319.772199][T10380] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.782423][T10380] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.119554][T10380] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.174439][T10380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.431149][ T4945] Bluetooth: hci5: command tx timeout [ 320.895068][T10412] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2244'. [ 320.924631][ T48] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.952108][T10404] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 320.970211][ T48] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.003390][T10404] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 321.049649][T10404] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 321.097381][ T48] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.129851][ T48] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.156752][T10412] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2244'. [ 321.841682][T10349] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.872246][T10349] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.894807][T10349] bridge_slave_0: entered allmulticast mode [ 321.938728][T10349] bridge_slave_0: entered promiscuous mode [ 321.989687][T10349] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.020576][T10349] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.053649][T10349] bridge_slave_1: entered allmulticast mode [ 322.078485][T10349] bridge_slave_1: entered promiscuous mode [ 322.123708][T10439] Cannot find add_set index 2 as target [ 322.175128][T10442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2257'. [ 322.210372][T10442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2257'. [ 322.241506][T10444] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2258'. [ 322.253001][T10349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.316854][T10349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.501079][ T4945] Bluetooth: hci5: command tx timeout [ 322.524746][T10349] team0: Port device team_slave_0 added [ 322.545147][T10349] team0: Port device team_slave_1 added [ 322.729515][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2263'. [ 322.773414][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2263'. [ 322.822763][T10456] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 322.871651][T10349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.897615][T10349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.952829][T10349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.999496][T10349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.019473][T10349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.069029][T10349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.564954][T10478] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2274'. [ 323.712954][T10349] hsr_slave_0: entered promiscuous mode [ 323.754083][T10349] hsr_slave_1: entered promiscuous mode [ 323.770965][T10349] debugfs: 'hsr0' already exists in 'hsr' [ 323.787550][T10349] Cannot create hsr debugfs directory [ 323.960228][ T5688] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 324.132373][ T5688] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 324.163314][ T5688] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 324.199835][ T5688] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.253302][ T5688] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 324.580243][ T4945] Bluetooth: hci5: command tx timeout [ 325.193979][T10349] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 325.246946][T10349] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 325.282582][T10349] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 325.301378][ T5688] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 325.339216][T10349] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 325.355646][T10349] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 325.378248][T10349] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 325.390254][ T5360] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 325.410037][T10349] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 325.464536][T10349] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 325.504984][ T5688] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 325.543588][ T5688] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 325.580356][ T5360] usb 4-1: Using ep0 maxpacket: 16 [ 325.586069][ T5688] usb 5-1: USB disconnect, device number 112 [ 325.598625][ T5360] usb 4-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=41.ba [ 325.653391][ T5360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.691257][ T5360] usb 4-1: Product: syz [ 325.714797][ T5360] usb 4-1: Manufacturer: syz [ 325.736144][ T5360] usb 4-1: SerialNumber: syz [ 325.777976][ T5360] usb 4-1: config 0 descriptor?? [ 325.834854][T10349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.844898][T10527] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2291'. [ 325.858695][T10527] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2291'. [ 325.912012][T10349] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.967457][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.974810][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.012296][ T30] audit: type=1326 audit(1777250448.523:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10528 comm="syz.2.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa228f9cdd9 code=0x7ffc0000 [ 326.078975][ T5360] snd-usb-hiface 4-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 326.091851][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.099093][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.100199][ T30] audit: type=1326 audit(1777250448.523:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10528 comm="syz.2.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa228f9cdd9 code=0x7ffc0000 [ 326.203905][ T30] audit: type=1326 audit(1777250448.523:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10528 comm="syz.2.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa228f9cdd9 code=0x7ffc0000 [ 326.255379][ T30] audit: type=1326 audit(1777250448.533:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10528 comm="syz.2.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa228f9cdd9 code=0x7ffc0000 [ 326.287173][ T5767] usb 4-1: USB disconnect, device number 109 [ 326.404355][ T30] audit: type=1326 audit(1777250448.533:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10528 comm="syz.2.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa228f9cdd9 code=0x7ffc0000 [ 326.476129][ T30] audit: type=1326 audit(1777250448.533:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10528 comm="syz.2.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fa228f9cdd9 code=0x7ffc0000 [ 326.547976][ T30] audit: type=1326 audit(1777250448.533:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10528 comm="syz.2.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa228f9cdd9 code=0x7ffc0000 [ 326.574171][T10537] xfrm1: entered allmulticast mode [ 326.574374][ T30] audit: type=1326 audit(1777250448.533:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10528 comm="syz.2.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa228f9cdd9 code=0x7ffc0000 [ 326.661100][ T4945] Bluetooth: hci5: command tx timeout [ 326.708811][ T30] audit: type=1326 audit(1777250448.533:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10528 comm="syz.2.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa228f9cdd9 code=0x7ffc0000 [ 326.805433][T10349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.419110][T10557] netlink: 400 bytes leftover after parsing attributes in process `syz.3.2305'. [ 327.462289][T10349] veth0_vlan: entered promiscuous mode [ 327.535653][T10349] veth1_vlan: entered promiscuous mode [ 327.660593][ T5767] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 327.844344][ T5767] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 327.882810][ T5767] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 327.883591][T10349] veth0_macvtap: entered promiscuous mode [ 327.915015][ T5767] usb 3-1: New USB device found, idVendor=08b7, idProduct=8000, bcdDevice= 0.00 [ 327.941869][ T5767] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 327.986495][ T5767] usb 3-1: SerialNumber: syz [ 327.986642][T10349] veth1_macvtap: entered promiscuous mode [ 328.141394][T10349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.236064][T10349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.259986][ T5767] usb 3-1: 0:2 : does not exist [ 328.396358][T10572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.453065][ T5767] usb 3-1: USB disconnect, device number 117 [ 328.495363][ T1123] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.503368][T10574] process 'syz.1.2314' launched './file0' with NULL argv: empty string added [ 328.542866][ T1123] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.597885][ T1123] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.614589][ T5756] udevd[5756]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 328.632881][ T48] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.007738][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.060852][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.239344][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.282116][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.307729][T10627] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2339'. [ 331.319481][T10652] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048) [ 331.628788][T10660] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2354'. [ 331.667019][T10660] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2354'. [ 331.925880][T10671] syz.2.2359 (10671): /proc/10670/oom_adj is deprecated, please use /proc/10670/oom_score_adj instead. [ 333.206982][T10710] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2378'. [ 333.313249][T10710] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.333196][T10714] netlink: 'syz.3.2381': attribute type 10 has an invalid length. [ 333.373716][T10710] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.407401][T10710] bond0 (unregistering): Released all slaves [ 333.520371][T10714] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 333.856734][T10722] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2383'. [ 335.684076][T10775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2410'. [ 336.008411][ T30] audit: type=1326 audit(1777250458.523:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10784 comm="syz.3.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda94b9cdd9 code=0x7ffc0000 [ 336.078629][ T30] audit: type=1326 audit(1777250458.523:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10784 comm="syz.3.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda94b9cdd9 code=0x7ffc0000 [ 336.137431][ T30] audit: type=1326 audit(1777250458.543:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10784 comm="syz.3.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fda94b9cdd9 code=0x7ffc0000 [ 336.228129][ T30] audit: type=1326 audit(1777250458.543:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10784 comm="syz.3.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda94b9cdd9 code=0x7ffc0000 [ 337.431138][T10830] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 337.691441][T10839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2440'. [ 337.974322][T10839] : entered promiscuous mode [ 338.580749][T10867] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2454'. [ 338.595197][ T10] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 338.805656][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 338.834128][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 338.865519][ T10] usb 3-1: config 0 has no interface number 0 [ 338.897912][ T10] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 338.940586][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.970909][ T10] usb 3-1: Product: syz [ 338.983033][ T10] usb 3-1: Manufacturer: syz [ 339.000843][ T10] usb 3-1: SerialNumber: syz [ 339.030941][ T10] usb 3-1: config 0 descriptor?? [ 339.292820][ T10] usb 3-1: selecting invalid altsetting 1 [ 339.316758][ T10] speedtch 3-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 339.357903][ T10] speedtch 3-1:0.1: usbatm_usb_probe: bind failed: -22! [ 339.397296][ T10] speedtch 3-1:0.1: probe with driver speedtch failed with error -22 [ 339.419739][T10893] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2464'. [ 339.445013][ T10] usb 3-1: USB disconnect, device number 118 [ 339.456841][T10893] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2464'. [ 339.705398][T10898] openvswitch: netlink: Unknown key attributes 1 [ 339.872411][T10901] netlink: 'syz.4.2469': attribute type 11 has an invalid length. [ 340.539666][T10923] sctp: [Deprecated]: syz.3.2479 (pid 10923) Use of struct sctp_assoc_value in delayed_ack socket option. [ 340.539666][T10923] Use struct sctp_sack_info instead [ 342.108555][T10978] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2506'. [ 342.213508][T10978] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2506'. [ 342.233070][T10972] bond1: option resend_igmp: invalid value (2878) [ 342.270390][T10972] bond1: option resend_igmp: allowed values 0 - 255 [ 342.325557][T10988] netlink: 820 bytes leftover after parsing attributes in process `syz.1.2511'. [ 342.346688][T10972] bond1 (unregistering): Released all slaves [ 342.361298][T10988] netlink: 820 bytes leftover after parsing attributes in process `syz.1.2511'. [ 342.873822][T11000] openvswitch: netlink: IP tunnel TTL not specified. [ 343.820871][T11029] misc userio: The device must be registered before sending interrupts [ 343.994968][T11033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2533'. [ 344.502293][ T5757] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 344.702891][ T5757] usb 4-1: unable to get BOS descriptor or descriptor too short [ 344.730895][ T5757] usb 4-1: not running at top speed; connect to a high speed hub [ 344.748353][ T5757] usb 4-1: config 5 has an invalid interface number: 246 but max is 0 [ 344.762801][ T5757] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 344.795227][ T5757] usb 4-1: config 5 has no interface number 0 [ 344.827743][ T5757] usb 4-1: config 5 interface 246 altsetting 4 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 344.842108][T11056] xt_hashlimit: invalid interval [ 344.866628][ T5757] usb 4-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 344.923502][ T5757] usb 4-1: config 5 interface 246 has no altsetting 0 [ 344.969951][ T5757] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 345.011477][ T5757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.045956][ T5757] usb 4-1: Product: syz [ 345.061099][ T5757] usb 4-1: Manufacturer: syz [ 345.076246][ T5757] usb 4-1: SerialNumber: syz [ 345.341725][ T5697] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 345.412668][ T5757] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 345.454306][ T36] usb 4-1: Failed to submit usb control message: -71 [ 345.506912][ T36] usb 4-1: unable to send the bmi data to the device: -71 [ 345.536360][ T5757] usb 4-1: USB disconnect, device number 110 [ 345.585833][ T36] usb 4-1: unable to get target info from device [ 345.601625][ T5697] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.638119][ T36] usb 4-1: could not get target info (-71) [ 345.673652][ T5697] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 345.685577][ T36] usb 4-1: could not probe fw (-71) [ 345.736080][ T5697] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 0.00 [ 345.795300][ T5697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 345.873414][ T5697] usb 3-1: SerialNumber: syz [ 345.948616][ T5697] usb 3-1: 0:2 : does not exist [ 346.297848][T11089] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 346.419093][ T5697] usb 3-1: USB disconnect, device number 119 [ 347.760624][T11134] mmap: syz.3.2579 (11134): VmData 37474304 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 348.721750][T11167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.990263][ T5757] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 349.174906][T11181] netlink: zone id is out of range [ 349.199035][T11181] netlink: zone id is out of range [ 349.215164][ T5757] usb 6-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 349.245089][T11181] netlink: zone id is out of range [ 349.265327][ T5757] usb 6-1: config 13 has 1 interface, different from the descriptor's value: 2 [ 349.277968][T11181] netlink: zone id is out of range [ 349.288122][T11181] netlink: zone id is out of range [ 349.315281][ T5757] usb 6-1: config 13 interface 0 has no altsetting 0 [ 349.324746][ T5757] usb 6-1: config 13 interface 0 has no altsetting 1 [ 349.324875][T11187] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.2605'. [ 349.332446][T11181] netlink: zone id is out of range [ 349.349643][T11181] netlink: zone id is out of range [ 349.357588][ T5757] usb 6-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice=70.25 [ 349.370598][ T5757] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.378978][T11181] netlink: zone id is out of range [ 349.387868][T11181] netlink: zone id is out of range [ 349.393181][ T5757] usb 6-1: Product: syz [ 349.398680][ T5757] usb 6-1: Manufacturer: syz [ 349.423612][ T5757] usb 6-1: SerialNumber: syz [ 349.976538][T11201] binder: 11200:11201 ioctl c018620b 0 returned -14 [ 349.995511][T11204] netlink: 560 bytes leftover after parsing attributes in process `syz.4.2614'. [ 350.057619][ T5757] snd-usb-audio 6-1:13.0: probe with driver snd-usb-audio failed with error -22 [ 350.101613][ T5757] usb 6-1: USB disconnect, device number 2 [ 350.175852][ T5756] udevd[5756]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:13.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 351.406884][T11241] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.415551][T11241] IPv6: NLM_F_CREATE should be set when creating new route [ 351.423014][T11241] IPv6: NLM_F_CREATE should be set when creating new route [ 352.293083][T11268] program syz.5.2645 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 352.849148][T11285] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2653'. [ 352.932027][T11289] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2655'. [ 353.092171][T11285] bond1: option miimon: invalid value (18446744071578845313) [ 353.150262][T11285] bond1: option miimon: allowed values 0 - 2147483647 [ 353.187851][T11285] bond1 (unregistering): Released all slaves [ 353.518472][T11306] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2663'. [ 353.906463][T11320] kAFS: unable to lookup cell '(' [ 354.097469][T11326] sctp: [Deprecated]: syz.5.2673 (pid 11326) Use of struct sctp_assoc_value in delayed_ack socket option. [ 354.097469][T11326] Use struct sctp_sack_info instead [ 354.687857][T11346] netlink: 'syz.4.2684': attribute type 21 has an invalid length. [ 354.756136][T11346] netlink: 'syz.4.2684': attribute type 6 has an invalid length. [ 354.812617][T11346] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2684'. [ 355.195851][T11365] net_ratelimit: 381 callbacks suppressed [ 355.195876][T11365] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 355.697680][T11384] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2701'. [ 355.937050][T11392] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 356.216656][T11400] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2709'. [ 356.230493][T11402] netlink: 'syz.2.2710': attribute type 2 has an invalid length. [ 356.264656][T11402] netlink: 119 bytes leftover after parsing attributes in process `syz.2.2710'. [ 356.467350][ T30] audit: type=1326 audit(1777250478.983:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11408 comm="syz.4.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab699cdd9 code=0x7ffc0000 [ 356.591688][ T30] audit: type=1326 audit(1777250479.013:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11408 comm="syz.4.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab699cdd9 code=0x7ffc0000 [ 356.729624][ T30] audit: type=1326 audit(1777250479.033:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11408 comm="syz.4.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fdab699cdd9 code=0x7ffc0000 [ 356.846708][ T30] audit: type=1326 audit(1777250479.033:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11408 comm="syz.4.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab699cdd9 code=0x7ffc0000 [ 356.973214][ T30] audit: type=1326 audit(1777250479.033:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11408 comm="syz.4.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab699cdd9 code=0x7ffc0000 [ 357.439788][T11439] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 357.992102][ T5767] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 358.176121][ T5767] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 358.222599][ T5767] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.272801][ T5767] usb 3-1: config 0 descriptor?? [ 358.320708][ T5767] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 358.707868][ T5767] gp8psk: usb in 128 operation failed. [ 358.715805][T11468] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 358.755363][ T5767] gp8psk: usb in 137 operation failed. [ 358.781939][ T5767] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 358.828684][ T5767] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 358.865519][ T5767] usb 3-1: USB disconnect, device number 120 [ 359.217722][T11482] netlink: 'syz.4.2750': attribute type 8 has an invalid length. [ 359.267752][T11486] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 359.994960][ T30] audit: type=1326 audit(1777250482.513:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11506 comm="syz.2.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa228f9cdd9 code=0x7ffc0000 [ 360.078602][ T30] audit: type=1326 audit(1777250482.533:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11506 comm="syz.2.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa228f9cdd9 code=0x7ffc0000 [ 360.192118][ T30] audit: type=1326 audit(1777250482.553:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11506 comm="syz.2.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fa228f9cdd9 code=0x7ffc0000 [ 360.284164][ T30] audit: type=1326 audit(1777250482.553:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11506 comm="syz.2.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa228f9cdd9 code=0x7ffc0000 [ 360.329041][T11516] xt_l2tp: missing protocol rule (udp|l2tpip) [ 360.714266][T11528] netlink: 'syz.4.2771': attribute type 3 has an invalid length. [ 361.989598][T11559] openvswitch: netlink: VXLAN extension message has 16 unknown bytes. [ 362.036620][T11561] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 362.116309][T11563] autofs4:pid:11563:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(65021.1), cmd(0xc018937e) [ 362.159558][T11565] ipt_ECN: cannot use operation on non-tcp rule [ 362.160982][T11563] autofs4:pid:11563:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 362.188793][ T58] ip6_tunnel: K xmit: Local address not yet configured! [ 362.221498][ T5697] ip6_tunnel: K xmit: Local address not yet configured! [ 362.241682][ T58] ip6_tunnel: K xmit: Local address not yet configured! [ 362.512187][ T5697] ip6_tunnel: K xmit: Local address not yet configured! [ 362.820348][ T5697] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 362.871481][ T5757] ip6_tunnel: K xmit: Local address not yet configured! [ 363.056938][ T5697] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 363.099023][ T5697] usb 3-1: config 0 has no interface number 0 [ 363.151968][ T5697] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 363.182054][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.229449][ T5697] usb 3-1: Product: syz [ 363.247638][ T5697] usb 3-1: Manufacturer: syz [ 363.335286][ T5697] usb 3-1: SerialNumber: syz [ 363.372339][ T5697] usb 3-1: config 0 descriptor?? [ 363.423565][T11605] netlink: 'syz.1.2807': attribute type 1 has an invalid length. [ 363.456350][T11605] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2807'. [ 363.644601][ T5697] uvcvideo 3-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 363.684917][ T5697] uvcvideo 3-1:0.64: Failed to create links for entity 32768 [ 363.725265][ T5697] uvcvideo 3-1:0.64: Failed to register entities (-22). [ 363.783028][ T5697] usb 3-1: USB disconnect, device number 121 [ 363.842426][ T5756] udevd[5756]: setting mode of /dev/media28 to 020660 failed: No such file or directory [ 363.888939][T11617] netlink: 'syz.4.2814': attribute type 13 has an invalid length. [ 363.895738][ T5756] udevd[5756]: setting owner of /dev/media28 to uid=0, gid=28 failed: No such file or directory [ 363.922265][T11617] netlink: 'syz.4.2814': attribute type 17 has an invalid length. [ 364.070413][ T5360] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 364.270644][ T5360] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 364.314520][ T5360] usb 6-1: config 0 interface 0 has no altsetting 0 [ 364.383564][ T5360] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 364.411562][ T5360] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 364.445661][ T5360] usb 6-1: Product: syz [ 364.466638][ T5360] usb 6-1: Manufacturer: syz [ 364.482892][ T5360] usb 6-1: SerialNumber: syz [ 364.519112][ T5360] usb 6-1: config 0 descriptor?? [ 364.583004][ T5360] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 364.620020][ T5360] pctv452e: pctv452e_power_ctrl: 1 [ 364.620020][ T5360] [ 364.764085][ T5360] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -71 [ 364.764085][ T5360] [ 364.812765][ T5360] dvb-usb: bulk message failed: -22 (5/0) [ 364.867964][ T5360] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 364.946878][ T5360] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 365.012457][ T5360] usb 6-1: USB disconnect, device number 3 [ 365.290605][ T5697] ip6_tunnel: K xmit: Local address not yet configured! [ 365.709914][T11649] : entered promiscuous mode [ 365.963555][T11657] Option ' ' to dns_resolver key: bad/missing value [ 366.024613][ T5757] ip6_tunnel: K xmit: Local address not yet configured! [ 366.510806][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 366.640398][T11681] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.831842][T11686] netlink: 1216 bytes leftover after parsing attributes in process `syz.3.2848'. [ 366.894448][T11686] netlink: 4436 bytes leftover after parsing attributes in process `syz.3.2848'. [ 366.981180][T11691] netlink: 'syz.2.2850': attribute type 1 has an invalid length. [ 367.096022][T11696] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 367.299648][T11702] libceph: resolve '0.' (ret=-3): failed [ 367.425591][T11698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.473908][T11698] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.558105][T11698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.859470][T11698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.923125][T11698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.008755][T11718] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2864'. [ 368.016945][T11698] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 368.090328][T11698] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 368.144803][T11720] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2865'. [ 368.201861][T11698] veth1_vlan: left promiscuous mode [ 368.286417][T11698] vlan0: left promiscuous mode [ 368.320323][T11698] veth1_vlan: entered promiscuous mode [ 368.360660][T11698] veth1_macvtap: left promiscuous mode [ 368.384393][T11698] veth0_macvtap: left promiscuous mode [ 368.412898][T11698] veth0_macvtap: entered promiscuous mode [ 368.432875][T11698] veth1_macvtap: entered promiscuous mode [ 368.478073][T11698] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 368.511110][T11698] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 368.537190][T11698] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 368.571223][T11698] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 368.618451][T11698] bond1: left promiscuous mode [ 368.631862][T11698] bond1: left allmulticast mode [ 368.645174][T11698] 8021q: adding VLAN 0 to HW filter on device bond1 [ 368.704354][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.711845][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.743737][T11732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2871'. [ 368.768032][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.775674][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.195301][ T151] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.229717][ T151] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.266876][ T151] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.309410][ T151] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.576430][T11753] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2882'. [ 369.652704][T11753] xfrm1: entered allmulticast mode [ 369.697052][T11757] xt_CT: You must specify a L4 protocol and not use inversions on it [ 369.840280][ T5721] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 370.060228][ T5721] usb 4-1: Using ep0 maxpacket: 8 [ 370.088655][ T5721] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 370.095513][T11758] xfrm1: left allmulticast mode [ 370.122197][ T5721] usb 4-1: config 179 has no interface number 0 [ 370.155776][ T5721] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 370.214356][ T5721] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 370.261664][ T5721] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 370.329150][ T5721] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 370.364086][ T5721] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 370.424949][ T5721] usb 4-1: config 179 interface 65 has no altsetting 0 [ 370.460358][ T5721] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 370.490760][ T5721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.651572][ T48] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 370.676524][ T5721] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input34 [ 370.682054][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 370.699902][ T48] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 370.827129][ T5721] usb 4-1: USB disconnect, device number 111 [ 371.186586][ T5360] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 371.464394][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 372.628632][T11834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2921'. [ 372.834869][T11834] bond1 (unregistering): Released all slaves [ 373.449234][ T30] audit: type=1326 audit(1777250495.963:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11862 comm="syz.3.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda94b9cdd9 code=0x7ffc0000 [ 373.549885][ T30] audit: type=1326 audit(1777250495.993:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11862 comm="syz.3.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda94b9cdd9 code=0x7ffc0000 [ 373.660953][ T30] audit: type=1326 audit(1777250495.993:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11862 comm="syz.3.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda94b9cdd9 code=0x7ffc0000 [ 373.758705][ T30] audit: type=1326 audit(1777250495.993:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11862 comm="syz.3.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda94b9cdd9 code=0x7ffc0000 [ 373.895970][ T30] audit: type=1326 audit(1777250495.993:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11862 comm="syz.3.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fda94b9cdd9 code=0x7ffc0000 [ 374.004186][ T30] audit: type=1326 audit(1777250495.993:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11862 comm="syz.3.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda94b9cdd9 code=0x7ffc0000 [ 374.114331][ T30] audit: type=1326 audit(1777250495.993:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11862 comm="syz.3.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fda94b9cdd9 code=0x7ffc0000 [ 374.183181][ T30] audit: type=1326 audit(1777250495.993:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11862 comm="syz.3.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fda94b9cdd9 code=0x7ffc0000 [ 374.590870][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 375.060306][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 375.734757][ T5360] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 375.936113][ T5360] usb 5-1: Using ep0 maxpacket: 32 [ 375.967330][ T5360] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 375.999782][ T5360] usb 5-1: config 0 has no interface number 0 [ 376.036539][ T5360] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 376.091190][ T5360] usb 5-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 376.143101][ T5360] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 376.164834][T11947] openvswitch: netlink: IP tunnel dst address not specified [ 376.183580][ T5360] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.215013][ T5360] usb 5-1: Product: syz [ 376.230361][ T5360] usb 5-1: Manufacturer: syz [ 376.255657][ T5360] usb 5-1: SerialNumber: syz [ 376.292878][ T5360] usb 5-1: config 0 descriptor?? [ 376.364015][ T5360] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 376.410179][ T5360] em28xx 5-1:0.132: Video interface 132 found: bulk [ 376.596553][ T5360] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 376.722800][ T5360] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 376.785679][ T5360] em28xx 5-1:0.132: board has no eeprom [ 376.797603][T11964] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.821642][T11964] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 376.885176][ T5360] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 376.906016][ T5360] em28xx 5-1:0.132: analog set to bulk mode. [ 376.939676][ T5757] em28xx 5-1:0.132: Registering V4L2 extension [ 376.975644][ T5360] usb 5-1: USB disconnect, device number 113 [ 377.022497][ T5360] em28xx 5-1:0.132: Disconnecting em28xx [ 377.608796][ T5757] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 377.638230][ T5757] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 377.699790][ T5757] em28xx 5-1:0.132: No AC97 audio processor [ 377.759975][ T5757] usb 5-1: Decoder not found [ 377.791612][ T5757] em28xx 5-1:0.132: failed to create media graph [ 377.824511][ T5757] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 377.916689][ T5757] em28xx 5-1:0.132: Remote control support is not available for this card. [ 377.979217][ T5360] em28xx 5-1:0.132: Closing input extension [ 378.129800][ T5360] em28xx 5-1:0.132: Freeing device [ 378.729976][ T30] audit: type=1326 audit(1777250501.243:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12022 comm="syz.4.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab699cdd9 code=0x7ff00000 [ 378.835357][ T30] audit: type=1326 audit(1777250501.243:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12022 comm="syz.4.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab699cdd9 code=0x7ff00000 [ 378.896327][T12026] syz.3.3011: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset= [ 378.906172][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.923102][T12026] / [ 378.927220][ T30] audit: type=1326 audit(1777250501.243:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12022 comm="syz.4.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab699cdd9 code=0x7ff00000 [ 378.932513][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.963444][T12026] ,mems_allowed=0-1 [ 378.991658][T12026] CPU: 0 UID: 0 PID: 12026 Comm: syz.3.3011 Not tainted syzkaller #0 PREEMPT(full) [ 378.991692][T12026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 378.991706][T12026] Call Trace: [ 378.991715][T12026] [ 378.991726][T12026] dump_stack_lvl+0xe8/0x150 [ 378.991760][T12026] warn_alloc+0x249/0x340 [ 378.991799][T12026] ? __pfx_warn_alloc+0x10/0x10 [ 378.991853][T12026] __vmalloc_node_range_noprof+0x132/0x1750 [ 378.991884][T12026] ? __mutex_trylock_common+0x158/0x260 [ 378.991916][T12026] ? __pfx___mutex_trylock_common+0x10/0x10 [ 378.991952][T12026] ? trace_contention_end+0x3d/0x140 [ 378.991983][T12026] ? __mutex_lock+0x319/0x1550 [ 378.992020][T12026] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 378.992048][T12026] ? tomoyo_path_number_perm+0x219/0x630 [ 378.992075][T12026] ? dvb_demux_do_ioctl+0x320/0x540 [ 378.992106][T12026] ? __pfx___mutex_lock+0x10/0x10 [ 378.992133][T12026] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 378.992160][T12026] vmalloc_noprof+0xb2/0xe0 [ 378.992188][T12026] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 378.992229][T12026] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 378.992265][T12026] dvb_demux_do_ioctl+0x45d/0x540 [ 378.992298][T12026] dvb_usercopy+0x199/0x2e0 [ 378.992324][T12026] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 378.992351][T12026] ? __pfx_dvb_usercopy+0x10/0x10 [ 378.992390][T12026] ? __fget_files+0x3a0/0x420 [ 378.992415][T12026] ? __fget_files+0x2a/0x420 [ 378.992444][T12026] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 378.992470][T12026] dvb_demux_ioctl+0x29/0x40 [ 378.992497][T12026] __se_sys_ioctl+0xfc/0x170 [ 378.992537][T12026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.992561][T12026] do_syscall_64+0x15f/0xf80 [ 378.992585][T12026] ? trace_irq_disable+0x3b/0x140 [ 378.992623][T12026] ? clear_bhb_loop+0x40/0x90 [ 378.992652][T12026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.992680][T12026] RIP: 0033:0x7fda94b9cdd9 [ 378.992702][T12026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.992720][T12026] RSP: 002b:00007fda959a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 378.992745][T12026] RAX: ffffffffffffffda RBX: 00007fda94e15fa0 RCX: 00007fda94b9cdd9 [ 378.992761][T12026] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 378.992776][T12026] RBP: 00007fda94c32d69 R08: 0000000000000000 R09: 0000000000000000 [ 378.992790][T12026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 378.992804][T12026] R13: 00007fda94e16038 R14: 00007fda94e15fa0 R15: 00007fda94f3fa48 [ 378.992840][T12026] [ 379.250371][T12026] Mem-Info: [ 379.291468][T12026] active_anon:6605 inactive_anon:0 isolated_anon:0 [ 379.291468][T12026] active_file:15108 inactive_file:40090 isolated_file:0 [ 379.291468][T12026] unevictable:768 dirty:421 writeback:0 [ 379.291468][T12026] slab_reclaimable:10193 slab_unreclaimable:145266 [ 379.291468][T12026] mapped:35436 shmem:1290 pagetables:1395 [ 379.291468][T12026] sec_pagetables:0 bounce:0 [ 379.291468][T12026] kernel_misc_reclaimable:0 [ 379.291468][T12026] free:1243933 free_pcp:16756 free_cma:0 [ 379.340361][ T30] audit: type=1326 audit(1777250501.243:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12022 comm="syz.4.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab699cdd9 code=0x7ff00000 [ 379.381763][T12026] Node 0 active_anon:26308kB inactive_anon:0kB active_file:60376kB inactive_file:160152kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:141652kB dirty:1688kB writeback:0kB shmem:3620kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12512kB pagetables:5444kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 379.442278][T12026] Node 1 active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 379.454202][ T30] audit: type=1326 audit(1777250501.243:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12022 comm="syz.4.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab699cdd9 code=0x7ff00000 [ 379.482606][T12026] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 379.537086][T12026] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 379.546413][T12026] Node 0 DMA32 free:1024260kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26208kB inactive_anon:0kB active_file:60376kB inactive_file:160152kB unevictable:1536kB writepending:1688kB zspages:0kB present:3129332kB managed:2552716kB mlocked:0kB bounce:0kB free_pcp:65884kB local_pcp:21788kB free_cma:0kB [ 379.660318][ T30] audit: type=1326 audit(1777250501.243:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12022 comm="syz.4.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab699cdd9 code=0x7ff00000 [ 379.669649][T12026] lowmem_reserve[]: [ 379.742910][ T30] audit: type=1326 audit(1777250501.243:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12022 comm="syz.4.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab699cdd9 code=0x7ff00000 [ 379.742973][T12026] 0 [ 379.760277][ T30] audit: type=1326 audit(1777250501.243:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12022 comm="syz.4.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab699cdd9 code=0x7ff00000 [ 379.896234][ T30] audit: type=1326 audit(1777250501.243:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12022 comm="syz.4.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab699cdd9 code=0x7ff00000 [ 379.897097][T12026] 0 [ 379.986603][T12039] warning: `syz.5.3017' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 379.994044][ T30] audit: type=1326 audit(1777250501.243:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12022 comm="syz.4.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab699cdd9 code=0x7ff00000 [ 380.013377][T12026] 0 0 0 [ 380.061979][T12026] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 380.193614][T12026] lowmem_reserve[]: 0 0 0 0 0 [ 380.222931][T12026] Node 1 Normal free:3938732kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 380.318020][T12026] lowmem_reserve[]: 0 0 0 0 0 [ 380.326228][T12026] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 380.383131][T12026] Node 0 DMA32: 140*4kB (UME) 1660*8kB (UE) 864*16kB (UME) 154*32kB (UME) 203*64kB (UME) 166*128kB (UME) 53*256kB (UME) 21*512kB (UME) 12*1024kB (UME) 6*2048kB (UM) 222*4096kB (M) = 1025040kB [ 380.452551][T12026] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 380.487009][T12026] Node 1 Normal: 1*4kB (U) 9*8kB (U) 6*16kB (U) 8*32kB (U) 12*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 3*1024kB (UM) 0*2048kB 960*4096kB (M) = 3938732kB [ 380.565980][T12051] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3023'. [ 380.592183][T12026] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 380.622585][T12026] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 380.668131][T12026] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 380.704894][T12026] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 380.722816][T12053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.750214][T12026] 56479 total pagecache pages [ 380.773062][T12026] 0 pages in swap cache [ 380.791135][T12026] Free swap = 124996kB [ 380.814058][T12026] Total swap = 124996kB [ 380.843391][T12026] 2097051 pages RAM [ 380.864412][T12026] 0 pages HighMem/MovableOnly [ 380.883863][T12026] 427089 pages reserved [ 380.893533][T12026] 0 pages cma reserved [ 381.381872][T12070] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3031'. [ 381.515463][T12074] SET target dimension over the limit! [ 382.188277][T12098] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3046'. [ 382.353419][T12104] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.390572][T12104] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 382.700182][ T5360] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 382.742299][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 382.761751][T12116] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3056'. [ 382.907182][ T5360] usb 3-1: Using ep0 maxpacket: 16 [ 382.928485][ T5360] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 382.964165][ T5360] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.016522][ T5360] usb 3-1: config 0 descriptor?? [ 383.040556][ T5360] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 383.267801][ T5360] usb 3-1: Detected FT232B [ 383.481165][ T5360] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 383.530917][ T5360] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 383.565310][ T5360] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 383.585365][T12141] netlink: 'syz.4.3066': attribute type 21 has an invalid length. [ 383.616338][ T5360] usb 3-1: USB disconnect, device number 122 [ 383.627671][T12141] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3066'. [ 383.682437][T12141] netlink: 'syz.4.3066': attribute type 4 has an invalid length. [ 383.694758][ T5360] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 383.734444][T12141] netlink: 'syz.4.3066': attribute type 5 has an invalid length. [ 383.750247][ T5360] ftdi_sio 3-1:0.0: device disconnected [ 383.770190][T12141] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3066'. [ 383.849864][T12146] netlink: 'syz.3.3070': attribute type 11 has an invalid length. [ 384.071847][T12151] tc_dump_action: action bad kind [ 384.610674][ T24] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 384.764074][ T24] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 384.800277][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.844306][ T24] usb 4-1: config 0 descriptor?? [ 384.854043][T12176] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3085'. [ 385.308241][ T24] ath6kl: Failed to submit usb control message: -71 [ 385.324016][ T24] ath6kl: unable to send the bmi data to the device: -71 [ 385.352271][ T24] ath6kl: Unable to send get target info: -71 [ 385.381390][ T24] ath6kl: Failed to init ath6kl core: -71 [ 385.417000][ T24] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 385.471905][ T24] usb 4-1: USB disconnect, device number 112 [ 385.592726][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 385.592749][ T30] audit: type=1326 audit(1777250508.113:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12194 comm="syz.4.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab699cdd9 code=0x7ffc0000 [ 385.818884][T12192] bond1: option min_links: invalid value (18446744073709551608) [ 385.828517][ T30] audit: type=1326 audit(1777250508.153:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12194 comm="syz.4.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab699cdd9 code=0x7ffc0000 [ 385.877924][T12192] bond1: option min_links: allowed values 0 - 2147483647 [ 385.925770][T12192] bond1 (unregistering): Released all slaves [ 385.936699][ T30] audit: type=1326 audit(1777250508.163:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12194 comm="syz.4.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7fdab699cdd9 code=0x7ffc0000 [ 386.031568][ T30] audit: type=1326 audit(1777250508.163:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12194 comm="syz.4.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab699cdd9 code=0x7ffc0000 [ 386.124377][ T30] audit: type=1326 audit(1777250508.163:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12194 comm="syz.4.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab699cdd9 code=0x7ffc0000 [ 386.608749][T12218] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 386.608749][T12218] Please contact the netfilter-devel mailing list or update your nftables rules. [ 386.843945][T12219] bond0: option packets_per_slave: invalid value (18446744073709551615) [ 386.901791][T12219] bond0: option packets_per_slave: allowed values 0 - 65535 [ 386.939404][T12219] bond0 (unregistering): Released all slaves [ 387.319295][T12240] PKCS8: Unsupported PKCS#8 version [ 387.497440][T12232] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.505473][T12232] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.073142][T12232] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.120322][T12232] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.716039][T12249] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 388.780596][ T151] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.854214][ T151] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.907819][ T151] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.962963][ T151] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.029591][T12271] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3129'. [ 389.354241][T12274] bond0: option mode: invalid value (255) [ 389.411568][T12274] bond0 (unregistering): Released all slaves [ 389.565517][T12291] netlink: 'syz.4.3139': attribute type 6 has an invalid length. [ 389.670401][T12293] netlink: 'syz.2.3140': attribute type 21 has an invalid length. [ 389.700559][T12293] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3140'. [ 389.735538][T12293] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3140'. [ 390.191066][T12307] [U] .h0FwZ,iqgҏV2sO [ 390.225524][T12307] [U] ` w*BBOLhU [ 390.230110][T12307] [U] w$n|#%o.z\̧mРw [ 390.256059][T12309] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 390.291506][T12307] [U] R{ꫢ S [ 390.303607][T12306] [U] [ 390.585941][T12322] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.242908][T12404] netlink: 'syz.5.3193': attribute type 10 has an invalid length. [ 393.278256][T12404] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3193'. [ 393.391395][ T30] audit: type=1326 audit(1777250515.903:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12409 comm="syz.1.3196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd51b9cdd9 code=0x7ffc0000 [ 393.461515][T12412] netlink: 'syz.4.3199': attribute type 13 has an invalid length. [ 393.506564][ T30] audit: type=1326 audit(1777250515.903:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12409 comm="syz.1.3196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd51b9cdd9 code=0x7ffc0000 [ 393.599774][ T30] audit: type=1326 audit(1777250515.923:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12409 comm="syz.1.3196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fbd51b9cdd9 code=0x7ffc0000 [ 393.658760][ T30] audit: type=1326 audit(1777250515.923:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12409 comm="syz.1.3196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd51b9cdd9 code=0x7ffc0000 [ 394.953451][T12463] x_tables: duplicate underflow at hook 3 [ 395.000190][ T5766] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 395.187943][ T5766] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 395.230185][ T5766] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.287533][ T5766] usb 6-1: config 0 descriptor?? [ 395.529593][ T5767] usb 6-1: USB disconnect, device number 4 [ 395.673275][T12487] kAFS: unable to lookup cell ' [ 395.673275][T12487] $)-.ײfYǝa2s [ 395.673275][T12487] ' [ 397.133271][T12531] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3253'. [ 397.534312][T12547] netlink: 'syz.5.3261': attribute type 10 has an invalid length. [ 397.606197][T12547] team0 (unregistering): Port device team_slave_0 removed [ 397.657634][T12547] team0 (unregistering): Port device team_slave_1 removed [ 397.660218][ T30] audit: type=1326 audit(1777250520.163:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12549 comm="syz.3.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda94b9cdd9 code=0x7ffc0000 [ 397.811056][ T30] audit: type=1326 audit(1777250520.173:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12549 comm="syz.3.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda94b9cdd9 code=0x7ffc0000 [ 397.918485][ T30] audit: type=1326 audit(1777250520.183:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12549 comm="syz.3.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda94b9cdd9 code=0x7ffc0000 [ 398.024779][ T30] audit: type=1326 audit(1777250520.183:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12549 comm="syz.3.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda94b9cdd9 code=0x7ffc0000 [ 398.120873][ T30] audit: type=1326 audit(1777250520.183:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12549 comm="syz.3.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7fda94b9cdd9 code=0x7ffc0000 [ 398.241280][ T30] audit: type=1326 audit(1777250520.183:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12549 comm="syz.3.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda94b9cdd9 code=0x7ffc0000 [ 398.784154][T12587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.038007][T12596] netlink: 'syz.2.3286': attribute type 10 has an invalid length. [ 399.084962][T12596] ipvlan0: entered allmulticast mode [ 399.110789][T12596] veth0_vlan: entered allmulticast mode [ 399.168152][T12596] team0: Device ipvlan0 failed to register rx_handler [ 399.390838][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 399.434454][T12605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3290'. [ 399.887298][T12621] netlink: 'syz.4.3298': attribute type 21 has an invalid length. [ 399.928943][T12621] netlink: 'syz.4.3298': attribute type 22 has an invalid length. [ 399.965668][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 399.965691][ T30] audit: type=1326 audit(1777250522.463:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12622 comm="syz.2.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa228f9cdd9 code=0x7ffc0000 [ 400.128736][ T30] audit: type=1326 audit(1777250522.463:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12622 comm="syz.2.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa228f9cdd9 code=0x7ffc0000 [ 400.242556][ T30] audit: type=1326 audit(1777250522.523:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12622 comm="syz.2.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7fa228f9cdd9 code=0x7ffc0000 [ 400.359629][ T30] audit: type=1326 audit(1777250522.523:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12622 comm="syz.2.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa228f9cdd9 code=0x7ffc0000 [ 400.853295][T12647] bond2: entered promiscuous mode [ 400.893832][T12647] 8021q: adding VLAN 0 to HW filter on device bond2 [ 400.926886][T12652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3313'. [ 401.330836][T12659] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3316'. [ 401.372434][T12659] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3316'. [ 401.568586][T12665] x_tables: duplicate underflow at hook 4 [ 402.827937][T12706] IPv6: Can't replace route, no match found [ 403.116188][T12718] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3344'. [ 403.746182][T12741] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3357'. [ 403.926705][T12747] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3360'. [ 404.426591][T12760] netlink: 'syz.2.3366': attribute type 13 has an invalid length. [ 404.801189][ T5688] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 404.841244][T12773] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 404.916453][T12773] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 405.574801][T12793] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3382'. [ 405.623109][T12793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3382'. [ 405.674692][T12793] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3382'. [ 405.704522][ T5688] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 406.210291][ T5360] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 406.405860][ T5360] usb 4-1: Using ep0 maxpacket: 32 [ 406.443318][ T5360] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 406.478591][ T5360] usb 4-1: config 0 has no interface number 0 [ 406.499326][ T5360] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 406.522397][ T5360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.540348][ T5360] usb 4-1: Product: syz [ 406.552671][ T5360] usb 4-1: Manufacturer: syz [ 406.574281][ T5360] usb 4-1: SerialNumber: syz [ 406.610936][ T5360] usb 4-1: config 0 descriptor?? [ 406.643646][ T5360] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 406.697333][ T5360] usb 4-1: selecting invalid altsetting 1 [ 406.702831][T12831] netlink: 'syz.5.3400': attribute type 13 has an invalid length. [ 406.719435][ T5360] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 406.784623][ T5360] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 406.818463][ T5360] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 406.849910][ T5360] usb 4-1: media controller created [ 406.888475][ T5360] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 407.066298][ T5360] usb 4-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)... [ 407.114206][ T5360] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 407.414328][ T5360] DVB: Unable to find symbol mxl5005s_attach() [ 407.475359][ T5360] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 407.663788][ T5360] usb 4-1: USB disconnect, device number 113 [ 407.791871][ T10] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 407.802837][T12853] openvswitch: netlink: IPv4 tun info is not correct [ 408.003287][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.049925][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 408.103105][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 408.135878][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.163727][ T10] usb 3-1: Product: syz [ 408.179222][ T10] usb 3-1: Manufacturer: syz [ 408.215232][ T10] usb 3-1: SerialNumber: syz [ 408.692693][T12877] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 408.745560][T12870] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.753778][T12870] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.970852][ T10] usb 3-1: USB disconnect, device number 123 [ 409.159171][ T5756] udevd[5756]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 409.254972][T12870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.325880][T12870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.373772][T12891] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3427'. [ 409.411160][T12891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3427'. [ 410.182426][ T1123] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.231134][ T1123] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.343256][ T1123] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.391787][ T1123] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.704895][T12929] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20003 [ 410.998665][T12939] team0: entered promiscuous mode [ 411.031522][T12939] team_slave_0: entered promiscuous mode [ 411.064616][T12939] team_slave_1: entered promiscuous mode [ 411.622194][ T30] audit: type=1326 audit(1777250534.133:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12959 comm="syz.4.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab699cdd9 code=0x7ffc0000 [ 411.730417][ T30] audit: type=1326 audit(1777250534.143:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12959 comm="syz.4.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab699cdd9 code=0x7ffc0000 [ 411.800261][ T30] audit: type=1326 audit(1777250534.143:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12959 comm="syz.4.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab699cdd9 code=0x7ffc0000 [ 411.886738][ T30] audit: type=1326 audit(1777250534.143:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12959 comm="syz.4.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab699cdd9 code=0x7ffc0000 [ 412.043621][ T30] audit: type=1326 audit(1777250534.153:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12959 comm="syz.4.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7fdab699cdd9 code=0x7ffc0000 [ 412.174457][ T30] audit: type=1326 audit(1777250534.153:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12959 comm="syz.4.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab699cdd9 code=0x7ffc0000 [ 412.274246][ T30] audit: type=1326 audit(1777250534.153:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12959 comm="syz.4.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdab699cdd9 code=0x7ffc0000 [ 412.396240][ T30] audit: type=1326 audit(1777250534.153:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12959 comm="syz.4.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdab699cdd9 code=0x7ffc0000 [ 412.473145][ T30] audit: type=1326 audit(1777250534.703:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12974 comm="syz.5.3467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff898b9cdd9 code=0x7ffc0000 [ 412.563866][ T30] audit: type=1326 audit(1777250534.703:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12974 comm="syz.5.3467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff898b9cdd9 code=0x7ffc0000 [ 413.340444][ T10] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 413.507534][T13019] SET target dimension over the limit! [ 413.539376][ T10] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 413.579930][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.615735][ T10] usb 4-1: Product: syz [ 413.631184][ T10] usb 4-1: Manufacturer: syz [ 413.643310][ T10] usb 4-1: SerialNumber: syz [ 413.687663][ T10] usb 4-1: config 0 descriptor?? [ 413.739858][ T10] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 413.937776][T13027] bond2: option all_slaves_active: invalid value (9) [ 413.964483][T13027] bond2 (unregistering): Released all slaves [ 414.144081][ T10] gspca_sunplus: reg_w_riv err -71 [ 414.144175][ T10] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 414.165630][ T10] usb 4-1: USB disconnect, device number 114 [ 415.021907][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 415.212206][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 415.243228][ T24] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 48, changing to 7 [ 415.293248][ T24] usb 6-1: language id specifier not provided by device, defaulting to English [ 415.333801][ T24] usb 6-1: New USB device found, idVendor=0582, idProduct=007a, bcdDevice= 0.40 [ 415.363188][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.398595][ T24] usb 6-1: Product: syz [ 415.420347][ T24] usb 6-1: Manufacturer: 撤勱鶜̞輡풖䬛幔睽飹쵽倩Ꙝ檜岠陚冸棆 [ 415.472836][ T24] usb 6-1: SerialNumber: syz [ 415.745272][ T24] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 415.939244][ T24] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 416.037319][ T24] usb 6-1: USB disconnect, device number 5 [ 416.152956][ T5756] udevd[5756]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 416.450441][T13101] netlink: 'syz.2.3529': attribute type 30 has an invalid length. [ 416.601966][T13107] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048) [ 416.659731][T13109] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3533'. [ 416.850847][T13111] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 416.900774][T13111] bridge1: entered promiscuous mode [ 417.027940][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 417.027974][ T30] audit: type=1326 audit(1777250539.543:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13118 comm="syz.5.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff898b9cdd9 code=0x7ffc0000 [ 417.139779][ T30] audit: type=1326 audit(1777250539.543:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13118 comm="syz.5.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff898b9cdd9 code=0x7ffc0000 [ 417.254372][ T30] audit: type=1326 audit(1777250539.603:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13118 comm="syz.5.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff898b9cdd9 code=0x7ffc0000 [ 417.348740][ T30] audit: type=1326 audit(1777250539.603:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13118 comm="syz.5.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff898b9cdd9 code=0x7ffc0000 [ 417.407601][ T30] audit: type=1326 audit(1777250539.603:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13118 comm="syz.5.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7ff898b9cdd9 code=0x7ffc0000 [ 417.462659][ T30] audit: type=1326 audit(1777250539.603:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13118 comm="syz.5.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff898b9cdd9 code=0x7ffc0000 [ 417.561838][ T30] audit: type=1326 audit(1777250539.603:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13118 comm="syz.5.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff898b9cdd9 code=0x7ffc0000 [ 417.676261][ T30] audit: type=1326 audit(1777250539.613:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13118 comm="syz.5.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff898b9cdd9 code=0x7ffc0000 [ 417.757811][ T30] audit: type=1326 audit(1777250539.613:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13118 comm="syz.5.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff898b9cdd9 code=0x7ffc0000 [ 418.497801][T13157] bond3: option downdelay: invalid value (18446744073709551609) [ 418.508523][T13157] bond3: option downdelay: allowed values 0 - 2147483647 [ 418.548368][T13157] bond3 (unregistering): Released all slaves [ 419.082248][T13176] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 419.895768][T13200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3577'. [ 420.072489][T13205] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.122729][T13200] bond1: option ad_actor_sys_prio: invalid value (0) [ 420.171938][T13200] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 420.224137][T13211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3582'. [ 420.242256][T13200] bond1 (unregistering): Released all slaves [ 421.337489][T13249] xt_ecn: cannot match TCP bits for non-tcp packets [ 421.567821][T13255] netlink: 'syz.3.3603': attribute type 1 has an invalid length. [ 422.421809][T13287] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.196285][T13313] bond1: option xmit_hash_policy: invalid value (14) [ 423.244957][T13313] bond1 (unregistering): Released all slaves [ 423.603081][T13330] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3640'. [ 423.674641][T13326] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.682659][T13326] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.066315][T13326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.134049][T13326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.147828][T13342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3646'. [ 424.894679][T12907] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.941756][T12907] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.994116][T12907] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.048806][T12907] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.359387][ T30] audit: type=1326 audit(1777250547.873:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.3.3659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda94b9cdd9 code=0x7ffc0000 [ 425.449618][ T30] audit: type=1326 audit(1777250547.893:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.3.3659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda94b9cdd9 code=0x7ffc0000 [ 425.461223][T13374] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3662'. [ 425.533106][ T30] audit: type=1326 audit(1777250547.893:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.3.3659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7fda94b9cdd9 code=0x7ffc0000 [ 425.637288][T13378] ipt_REJECT: ECHOREPLY no longer supported. [ 425.641217][ T29] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 425.653831][ T30] audit: type=1326 audit(1777250547.893:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.3.3659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda94b9cdd9 code=0x7ffc0000 [ 425.729819][ T30] audit: type=1326 audit(1777250547.893:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.3.3659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda94b9cdd9 code=0x7ffc0000 [ 425.856787][ T29] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 425.882536][ T29] usb 5-1: config 0 has no interface number 0 [ 425.913444][ T29] usb 5-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 425.979284][ T29] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 426.040361][ T29] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 426.070282][ T29] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 426.111177][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.145355][ T29] usb 5-1: config 0 descriptor?? [ 426.169245][T13393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3670'. [ 426.226361][ T29] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input40 [ 426.608713][ T5757] usb 5-1: USB disconnect, device number 114 [ 426.915955][T13415] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 427.550936][ T5757] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 427.720186][ T5757] usb 4-1: Using ep0 maxpacket: 16 [ 427.741311][ T5757] usb 4-1: config 254 has an invalid interface number: 235 but max is 0 [ 427.773265][ T5757] usb 4-1: config 254 has no interface number 0 [ 427.792033][ T5757] usb 4-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 427.814854][ T5757] usb 4-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xA2, changing to 0x82 [ 427.856208][ T5757] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 427.896353][ T5757] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 427.927259][ T5757] usb 4-1: config 254 interface 235 has no altsetting 0 [ 427.960144][ T5757] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 427.984596][ T5757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.002438][ T5757] usb 4-1: Product: syz [ 428.019857][T13445] trusted_key: encrypted_key: master key parameter is missing [ 428.036262][ T5757] usb 4-1: Manufacturer: syz [ 428.060243][ T5757] usb 4-1: SerialNumber: syz [ 428.094981][T13427] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 428.331396][T13427] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 428.383144][ T5757] usbtest 4-1:254.235: Linux gadget zero [ 428.406128][ T5757] usbtest 4-1:254.235: high-speed {control in/out bulk-out iso-in} tests (+alt) [ 428.635286][ T5766] usb 4-1: USB disconnect, device number 115 [ 429.222400][T13481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 429.516226][ T30] audit: type=1326 audit(1777250552.033:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13488 comm="syz.5.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff898b9cdd9 code=0x7ffc0000 [ 429.592668][ T30] audit: type=1326 audit(1777250552.053:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13488 comm="syz.5.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff898b9cdd9 code=0x7ffc0000 [ 429.698716][ T30] audit: type=1326 audit(1777250552.063:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13488 comm="syz.5.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7ff898b9cdd9 code=0x7ffc0000 [ 429.769885][ T30] audit: type=1326 audit(1777250552.063:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13488 comm="syz.5.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff898b9cdd9 code=0x7ffc0000 [ 430.178094][T13510] netlink: 65051 bytes leftover after parsing attributes in process `syz.5.3726'. [ 430.438197][T13514] bond0: option updelay: invalid value (18446744073709551615) [ 430.446699][T13514] bond0: option updelay: allowed values 0 - 2147483647 [ 430.464180][T13514] bond0 (unregistering): Released all slaves [ 430.764054][T13524] netlink: 'syz.3.3732': attribute type 3 has an invalid length. [ 430.842377][T13524] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3732'. [ 430.888011][T13530] binder: 13529:13530 ioctl c018620c 200000000000 returned -1 [ 431.172422][T13537] netlink: 'syz.2.3738': attribute type 3 has an invalid length. [ 431.493852][ T30] audit: type=1400 audit(1777250554.013:177): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=13549 comm="syz.1.3746" [ 431.698030][ T30] audit: type=1400 audit(1777250554.213:178): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=13555 comm="syz.4.3748" [ 432.011295][T13569] RDS: rds_bind could not find a transport for fe88::106, load rds_tcp or rds_rdma? [ 432.364775][T13582] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3760'. [ 432.591279][T13589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3764'. [ 432.649914][T13589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3764'. [ 432.666050][T13595] netlink: 'syz.2.3767': attribute type 5 has an invalid length. [ 432.687922][T13595] netlink: 'syz.2.3767': attribute type 5 has an invalid length. [ 432.701931][T13589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3764'. [ 432.763120][ T29] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 432.777399][T13589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3764'. [ 432.859139][T13589] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 432.930485][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 432.958059][ T29] usb 5-1: config 0 has an invalid interface number: 137 but max is 0 [ 432.996734][ T29] usb 5-1: config 0 has no interface number 0 [ 433.023965][ T29] usb 5-1: config 0 interface 137 altsetting 1 has an endpoint descriptor with address 0x11, changing to 0x1 [ 433.090368][ T29] usb 5-1: config 0 interface 137 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 433.123465][ T29] usb 5-1: config 0 interface 137 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 433.156574][ T29] usb 5-1: config 0 interface 137 has no altsetting 0 [ 433.184166][ T29] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=32.10 [ 433.203667][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.236541][ T29] usb 5-1: Product: syz [ 433.252852][ T29] usb 5-1: Manufacturer: syz [ 433.272360][ T29] usb 5-1: SerialNumber: syz [ 433.300354][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 433.327207][ T29] usb 5-1: config 0 descriptor?? [ 433.361951][ T29] xbox_remote_probe: Unexpected endpoint_in [ 433.640604][ T5757] usb 5-1: USB disconnect, device number 115 [ 434.757967][T13661] usb usb8: usbfs: process 13661 (syz.1.3799) did not claim interface 0 before use [ 435.027299][T13668] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 435.033929][T13668] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 435.099008][T13668] vhci_hcd vhci_hcd.0: Device attached [ 435.165511][T13672] vhci_hcd vhci_hcd.0: port 0 already used [ 435.196530][T13671] vhci_hcd: connection closed [ 435.212355][ T36] vhci_hcd vhci_hcd.4: stop threads [ 435.266699][ T36] vhci_hcd vhci_hcd.4: release socket [ 435.294758][ T36] vhci_hcd vhci_hcd.4: disconnect device [ 435.839340][T13699] ip6tnl2: entered allmulticast mode [ 435.881289][ T135] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 435.909826][ T135] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 435.918484][ T10] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 435.956536][ T5757] usb usb42-port1: attempt power cycle [ 435.992643][ T5360] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 436.124436][T13708] program syz.5.3819 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 436.216604][T13715] openvswitch: netlink: IPv4 tunnel dst address is zero [ 436.341129][ T5360] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 436.415382][T13717] netlink: 'syz.3.3824': attribute type 2 has an invalid length. [ 436.508490][T13719] xt_CT: No such helper "pptp" [ 436.562570][ T5757] usb usb42-port1: unable to enumerate USB device [ 437.000434][ T29] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 437.180336][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 437.206414][ T29] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 437.248736][ T29] usb 5-1: config 0 has no interface number 0 [ 437.295321][ T29] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 437.335291][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.382783][ T29] usb 5-1: Product: syz [ 437.402619][ T29] usb 5-1: Manufacturer: syz [ 437.420296][ T29] usb 5-1: SerialNumber: syz [ 437.448527][ T29] usb 5-1: config 0 descriptor?? [ 437.473446][T13757] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3843'. [ 437.473787][ T29] hub 5-1:0.132: bad descriptor, ignoring hub [ 437.493664][ T5757] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 437.522119][ T29] hub 5-1:0.132: probe with driver hub failed with error -5 [ 437.530855][T13757] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3843'. [ 437.564428][ T29] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input41 [ 437.640231][ T5360] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 437.690424][ T5757] usb 6-1: Using ep0 maxpacket: 16 [ 437.699906][ T5757] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 437.757196][ T5757] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 437.802427][ T5757] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 437.840352][ T5360] usb 3-1: Using ep0 maxpacket: 32 [ 437.862164][ T5757] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.896724][ T5360] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.936535][ T5757] usb 6-1: Product: syz [ 437.952144][ T5757] usb 6-1: Manufacturer: syz [ 437.957034][ T5360] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.987911][ T5757] usb 6-1: SerialNumber: syz [ 438.007834][ T5360] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 438.043653][ T5757] usb 6-1: 0:2 : does not exist [ 438.058691][ T5360] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 438.079608][T13768] netlink: 'syz.1.3848': attribute type 21 has an invalid length. [ 438.099643][ T5360] usb 3-1: Product: syz [ 438.109747][ T5360] usb 3-1: Manufacturer: syz [ 438.147311][ T5360] hub 3-1:4.0: USB hub found [ 438.272213][ T5757] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 438.368429][ T5360] hub 3-1:4.0: 7 ports detected [ 438.389493][ T5360] hub 3-1:4.0: insufficient power available to use all downstream ports [ 438.456056][ T5757] usb 6-1: USB disconnect, device number 6 [ 438.555453][ C1] sd 0:0:1:0: [sda] tag#8940 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 438.566289][ C1] sd 0:0:1:0: [sda] tag#8940 CDB: Read(6) 08 00 00 00 00 00 [ 438.569465][ T5360] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 438.617191][ T5360] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 438.693325][ T5756] udevd[5756]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 438.741571][ T5360] usb 3-1: USB disconnect, device number 124 [ 439.640384][T13805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3865'. [ 439.726121][T13805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3865'. [ 439.888444][T13816] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3870'. [ 439.939988][T13816] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 440.007241][T13822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.021478][T13805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3865'. [ 440.024760][T13818] geneve2: entered promiscuous mode [ 440.044712][T13805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3865'. [ 440.064733][T13818] geneve2: entered allmulticast mode [ 440.100469][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 440.348403][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.355760][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.408454][T13805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3865'. [ 440.447679][T13805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3865'. [ 441.028208][T13851] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3886'. [ 441.054647][T13852] program syz.4.3887 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 441.475292][ T5766] usb 5-1: USB disconnect, device number 116 [ 441.552481][ T5679] udevd[5679]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 441.592292][ T5679] udevd[5679]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 441.630534][ T5360] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 441.810700][ T30] audit: type=1326 audit(1777250564.333:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13876 comm="syz.5.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff898b9cdd9 code=0x7ffc0000 [ 441.882648][ T5360] usb 3-1: Using ep0 maxpacket: 32 [ 441.912280][ T5360] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 441.936002][ T30] audit: type=1326 audit(1777250564.333:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13876 comm="syz.5.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff898b9cdd9 code=0x7ffc0000 [ 441.968422][ T5360] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 442.010025][ T5360] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 442.059968][ T5360] usb 3-1: config 1 has no interface number 0 [ 442.072929][ T30] audit: type=1326 audit(1777250564.333:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13876 comm="syz.5.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7ff898b9cdd9 code=0x7ffc0000 [ 442.110796][ T5360] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 442.144043][ T5360] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 17412, setting to 1024 [ 442.171209][ T30] audit: type=1326 audit(1777250564.363:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13876 comm="syz.5.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff898b9cdd9 code=0x7ffc0000 [ 442.209196][ T5360] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 442.223837][ T5360] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 442.233596][ T30] audit: type=1326 audit(1777250564.363:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13876 comm="syz.5.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff898b9cdd9 code=0x7ffc0000 [ 442.258823][ T5360] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.278552][T13866] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 442.341920][ T5360] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 442.421774][ T4945] Bluetooth: hci5: command 0x0406 tx timeout [ 442.511572][T13866] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 442.564462][ T5360] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 442.902697][ T5360] usb 3-1: USB disconnect, device number 125 [ 442.929786][T13899] __nla_validate_parse: 1 callbacks suppressed [ 442.929818][T13899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3911'. [ 442.952387][ T5360] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 443.192217][T13903] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3912'. [ 443.630877][ T24] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 443.812475][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.858371][ T24] usb 5-1: config 0 has no interfaces? [ 443.884514][ T24] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 443.893353][T13928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.927971][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.979689][ T24] usb 5-1: config 0 descriptor?? [ 444.219913][ T24] usb 5-1: USB disconnect, device number 117 [ 444.621584][T13945] xt_CT: No such helper "snmp_trap" [ 445.238425][T13964] bond2: entered promiscuous mode [ 445.268424][T13964] 8021q: adding VLAN 0 to HW filter on device bond2 [ 445.313248][T13967] pim6reg: entered allmulticast mode [ 445.520780][T13983] dummy0: mtu less than device minimum [ 445.818373][T13995] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3955'. [ 446.168706][T14002] m>e5n: entered promiscuous mode [ 446.230861][T14007] netlink: 'syz.1.3963': attribute type 9 has an invalid length. [ 446.683154][ T30] audit: type=1326 audit(1777250569.193:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.4.3969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab699cdd9 code=0x7ffc0000 [ 446.787671][ T30] audit: type=1326 audit(1777250569.193:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.4.3969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab699cdd9 code=0x7ffc0000 [ 446.862735][T14027] xt_hashlimit: size too large, truncated to 1048576 [ 446.895995][T14027] xt_hashlimit: max too large, truncated to 1048576 [ 446.911434][ T30] audit: type=1326 audit(1777250569.233:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.4.3969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab699cdd9 code=0x7ffc0000 [ 446.997117][ T30] audit: type=1326 audit(1777250569.233:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.4.3969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab699cdd9 code=0x7ffc0000 [ 447.093997][ T30] audit: type=1326 audit(1777250569.233:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.4.3969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fdab699cdd9 code=0x7ffc0000 [ 447.164155][T14035] Cannot find add_set index 3 as target [ 447.189951][ T30] audit: type=1326 audit(1777250569.233:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.4.3969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab699cdd9 code=0x7ffc0000 [ 447.275371][ T30] audit: type=1326 audit(1777250569.233:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.4.3969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab699cdd9 code=0x7ffc0000 [ 447.374793][ T30] audit: type=1326 audit(1777250569.233:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.4.3969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdab699cdd9 code=0x7ffc0000 [ 447.445797][ T30] audit: type=1326 audit(1777250569.233:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.4.3969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdab699cdd9 code=0x7ffc0000 [ 447.473214][ T30] audit: type=1326 audit(1777250569.243:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14019 comm="syz.2.3971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa228f9cdd9 code=0x7ffc0000 [ 447.550330][ T30] audit: type=1326 audit(1777250569.253:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14019 comm="syz.2.3971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa228f9cdd9 code=0x7ffc0000 [ 447.627625][ T30] audit: type=1326 audit(1777250569.263:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14019 comm="syz.2.3971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fa228f9cdd9 code=0x7ffc0000 [ 447.846110][T14059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.382780][T14069] geneve3: entered promiscuous mode [ 448.406643][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.436268][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.468473][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.497641][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.550268][ T24] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 448.607612][T14079] syz.5.3995: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 448.655340][T14079] CPU: 0 UID: 0 PID: 14079 Comm: syz.5.3995 Not tainted syzkaller #0 PREEMPT(full) [ 448.655375][T14079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 448.655388][T14079] Call Trace: [ 448.655397][T14079] [ 448.655407][T14079] dump_stack_lvl+0xe8/0x150 [ 448.655441][T14079] warn_alloc+0x249/0x340 [ 448.655474][T14079] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 448.655503][T14079] ? __pfx_warn_alloc+0x10/0x10 [ 448.655545][T14079] ? kasan_save_track+0x4f/0x80 [ 448.655574][T14079] ? kasan_save_track+0x3e/0x80 [ 448.655601][T14079] ? __kasan_kmalloc+0x93/0xb0 [ 448.655629][T14079] ? __kmalloc_cache_noprof+0x31c/0x660 [ 448.655658][T14079] ? xskq_create+0x56/0x170 [ 448.655678][T14079] ? xsk_setsockopt+0x54c/0x990 [ 448.655708][T14079] ? do_sock_setsockopt+0x17c/0x1b0 [ 448.655733][T14079] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 448.655757][T14079] ? do_syscall_64+0x15f/0xf80 [ 448.655793][T14079] __vmalloc_node_range_noprof+0x132/0x1750 [ 448.655857][T14079] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 448.655894][T14079] ? __kasan_kmalloc+0x93/0xb0 [ 448.655942][T14079] vmalloc_user_noprof+0xad/0xe0 [ 448.655972][T14079] ? xskq_create+0xbf/0x170 [ 448.655994][T14079] xskq_create+0xbf/0x170 [ 448.656018][T14079] xsk_init_queue+0x8a/0xe0 [ 448.656054][T14079] xsk_setsockopt+0x54c/0x990 [ 448.656090][T14079] ? __pfx_xsk_setsockopt+0x10/0x10 [ 448.656122][T14079] ? __pfx_aa_sk_perm+0x10/0x10 [ 448.656153][T14079] ? aa_sock_opt_perm+0xff/0x1a0 [ 448.656184][T14079] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 448.656213][T14079] ? __pfx_xsk_setsockopt+0x10/0x10 [ 448.656245][T14079] do_sock_setsockopt+0x17c/0x1b0 [ 448.656275][T14079] __x64_sys_setsockopt+0x13d/0x1b0 [ 448.656304][T14079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.656328][T14079] do_syscall_64+0x15f/0xf80 [ 448.656351][T14079] ? trace_irq_disable+0x3b/0x140 [ 448.656383][T14079] ? clear_bhb_loop+0x40/0x90 [ 448.656410][T14079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.656432][T14079] RIP: 0033:0x7ff898b9cdd9 [ 448.656453][T14079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.656472][T14079] RSP: 002b:00007ff899aed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 448.656498][T14079] RAX: ffffffffffffffda RBX: 00007ff898e15fa0 RCX: 00007ff898b9cdd9 [ 448.656512][T14079] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 448.656525][T14079] RBP: 00007ff898c32d69 R08: 0000000000000029 R09: 0000000000000000 [ 448.656539][T14079] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.656553][T14079] R13: 00007ff898e16038 R14: 00007ff898e15fa0 R15: 00007ff898f3fa48 [ 448.656588][T14079] [ 448.656610][T14079] Mem-Info: [ 448.734799][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 448.743585][T14079] active_anon:6558 inactive_anon:0 isolated_anon:0 [ 448.743585][T14079] active_file:15108 inactive_file:40118 isolated_file:0 [ 448.743585][T14079] unevictable:768 dirty:300 writeback:0 [ 448.743585][T14079] slab_reclaimable:10299 slab_unreclaimable:102775 [ 448.743585][T14079] mapped:35434 shmem:1289 pagetables:1370 [ 448.743585][T14079] sec_pagetables:0 bounce:0 [ 448.743585][T14079] kernel_misc_reclaimable:0 [ 448.743585][T14079] free:1281478 free_pcp:20104 free_cma:0 [ 448.771594][ T24] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 448.860494][T14079] Node 0 active_anon:26332kB inactive_anon:0kB active_file:60376kB inactive_file:160264kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:141732kB dirty:1196kB writeback:0kB shmem:3620kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12596kB pagetables:5456kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 449.067702][T14079] Node 1 active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 449.110201][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.132152][T14079] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 449.150251][ T24] usb 4-1: config 0 has no interface number 0 [ 449.191359][ T5360] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 449.213179][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 449.214361][T14079] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 449.240293][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.246106][T14079] Node 0 DMA32 free:1167188kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26380kB inactive_anon:0kB active_file:60376kB inactive_file:160264kB unevictable:1536kB writepending:1292kB zspages:0kB present:3129332kB managed:2552716kB mlocked:0kB bounce:0kB free_pcp:82336kB local_pcp:23976kB free_cma:0kB [ 449.262516][ T24] usb 4-1: Product: syz [ 449.300354][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 449.335318][T14079] lowmem_reserve[]: 0 0 0 0 0 [ 449.352731][T14079] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 449.362981][ T24] usb 4-1: Manufacturer: syz [ 449.414807][ T5360] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 449.424573][ T5360] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.442866][ T24] usb 4-1: SerialNumber: syz [ 449.443006][ T5360] usb 5-1: Product: syz [ 449.466141][ T24] usb 4-1: config 0 descriptor?? [ 449.475535][ T5360] usb 5-1: Manufacturer: syz [ 449.493307][ T5360] usb 5-1: SerialNumber: syz [ 449.530667][ T5360] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 449.565401][T14079] lowmem_reserve[]: 0 0 0 0 0 [ 449.595301][T14079] Node 1 Normal free:3938732kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 449.653602][T14079] lowmem_reserve[]: 0 0 0 0 0 [ 449.665909][T14079] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 449.704193][ T24] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 449.712600][T14079] Node 0 DMA32: 713*4kB (UME) 1690*8kB (UME) 1193*16kB (UME) 303*32kB (UME) 156*64kB (UME) 114*128kB (UME) 45*256kB (UME) 18*512kB (UME) 12*1024kB (UME) 2*2048kB (UM) 260*4096kB (UM) = 1171812kB [ 449.739003][ T9] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 449.765043][ T24] uvcvideo 4-1:0.105: No valid video chain found. [ 449.853656][T14079] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 449.902737][T14079] Node 1 Normal: 1*4kB (U) 9*8kB (U) 6*16kB (U) 8*32kB (U) 12*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 3*1024kB (UM) 0*2048kB 960*4096kB (M) = 3938732kB [ 449.970251][T14079] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 450.000328][T14079] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 450.050296][T14079] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 450.080230][T14079] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 450.110196][T14079] 56507 total pagecache pages [ 450.144036][T14079] 0 pages in swap cache [ 450.148157][ T5360] usb 4-1: USB disconnect, device number 116 [ 450.156506][T14079] Free swap = 124996kB [ 450.173533][T14079] Total swap = 124996kB [ 450.193173][T14079] 2097051 pages RAM [ 450.209947][T14079] 0 pages HighMem/MovableOnly [ 450.217751][ T24] usb 5-1: USB disconnect, device number 118 [ 450.255409][T14079] 427089 pages reserved [ 450.271976][T14079] 0 pages cma reserved [ 450.461134][T14103] netlink: 'syz.1.4007': attribute type 2 has an invalid length. [ 450.511417][T14103] netlink: 'syz.1.4007': attribute type 8 has an invalid length. [ 450.519770][T14103] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4007'. [ 450.543940][T14106] veth3: entered promiscuous mode [ 450.829886][ T9] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 450.858919][ T9] ath9k_htc: Failed to initialize the device [ 450.893703][ T24] usb 5-1: ath9k_htc: USB layer deinitialized [ 452.163947][T14161] syz.3.4035 (14161): drop_caches: 0 [ 452.359148][T14167] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4038'. [ 452.412656][T14167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4038'. [ 452.871700][T14185] QAT: Stopping all acceleration devices. [ 453.019908][T14191] bridge_slave_0: left allmulticast mode [ 453.047707][T14191] bridge_slave_0: left promiscuous mode [ 453.077919][T14191] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.146924][T14191] bridge_slave_1: left allmulticast mode [ 453.146957][T14191] bridge_slave_1: left promiscuous mode [ 453.147925][T14191] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.191608][T14191] bond0: (slave bond_slave_0): Releasing backup interface [ 453.203124][ T5757] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 453.214062][T14191] bond0: (slave bond_slave_1): Releasing backup interface [ 453.219420][T14191] team_slave_0: left promiscuous mode [ 453.245503][T14191] team0: Port device team_slave_0 removed [ 453.254991][T14191] team_slave_1: left promiscuous mode [ 453.263923][T14191] team0: Port device team_slave_1 removed [ 453.264488][T14191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.288858][T14191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.307373][T14191] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 453.350350][ T5757] usb 6-1: Using ep0 maxpacket: 16 [ 453.361727][ T5757] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.361761][ T5757] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 453.366138][ T5757] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 453.366177][ T5757] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.366200][ T5757] usb 6-1: Product: syz [ 453.366218][ T5757] usb 6-1: Manufacturer: syz [ 453.366234][ T5757] usb 6-1: SerialNumber: syz [ 453.403258][ T5757] usb 6-1: 0:2 : does not exist [ 453.403358][ T5757] usb 6-1: unit 9 not found! [ 453.592014][ T5757] usb 6-1: 4:0: cannot get min/max values for control 1 (id 4) [ 453.620349][ T5757] usb 6-1: 4:0: cannot get min/max values for control 2 (id 4) [ 453.647832][ T5757] usb 6-1: 4:0: cannot get min/max values for control 3 (id 4) [ 453.669809][ T5757] usb 6-1: 4:0: cannot get min/max values for control 4 (id 4) [ 453.849368][ T5757] usb 6-1: USB disconnect, device number 7 [ 454.035297][ T5756] udevd[5756]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 454.067453][T14216] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4062'. [ 454.414304][T14220] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 454.447624][T14220] bond3 (unregistering): Released all slaves [ 454.834183][T14234] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4071'. [ 454.884193][T14237] netlink: 'syz.5.4070': attribute type 21 has an invalid length. [ 454.914816][T14237] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4070'. [ 454.943117][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 454.943139][ T30] audit: type=1400 audit(1777250577.463:197): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=14238 comm="syz.4.4074" [ 455.178218][T14247] netlink: 272 bytes leftover after parsing attributes in process `syz.4.4078'. [ 455.537186][T14261] netlink: 'syz.4.4084': attribute type 5 has an invalid length. [ 455.590418][T14261] netlink: 'syz.4.4084': attribute type 5 has an invalid length. [ 456.811751][T14306] trusted_key: encrypted_key: insufficient parameters specified [ 456.997585][T14309] usb usb8: check_ctrlrecip: process 14309 (syz.2.4107) requesting ep 01 but needs 81 [ 457.009044][T14310] program syz.1.4108 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 457.062389][T14309] usb usb8: usbfs: process 14309 (syz.2.4107) did not claim interface 0 before use [ 457.315790][T14314] bond1 (unregistering): Released all slaves [ 457.696457][T14328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4117'. [ 457.739629][T14328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4117'. [ 458.782879][T14369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4137'. [ 458.811508][T14371] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 458.844304][T14369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4137'. [ 458.949205][T14377] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 459.055095][T14379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4142'. [ 460.038900][ T30] audit: type=1326 audit(1777250582.553:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14405 comm="syz.4.4155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab699cdd9 code=0x7ffc0000 [ 460.211769][ T30] audit: type=1326 audit(1777250582.553:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14405 comm="syz.4.4155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab699cdd9 code=0x7ffc0000 [ 460.303214][T14416] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4158'. [ 460.357747][ T30] audit: type=1326 audit(1777250582.593:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14405 comm="syz.4.4155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab699cdd9 code=0x7ffc0000 [ 460.485297][ T30] audit: type=1326 audit(1777250582.593:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14405 comm="syz.4.4155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab699cdd9 code=0x7ffc0000 [ 460.551032][ T30] audit: type=1326 audit(1777250582.593:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14405 comm="syz.4.4155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fdab699cdd9 code=0x7ffc0000 [ 460.577025][ T30] audit: type=1326 audit(1777250582.593:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14405 comm="syz.4.4155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab699cdd9 code=0x7ffc0000 [ 460.601074][ T30] audit: type=1326 audit(1777250582.593:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14405 comm="syz.4.4155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdab699cdd9 code=0x7ffc0000 [ 460.625995][ T30] audit: type=1326 audit(1777250582.593:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14405 comm="syz.4.4155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdab699cdd9 code=0x7ffc0000 [ 460.692374][T14416] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 460.749180][T14416] bond3 (unregistering): Released all slaves [ 460.974543][T14435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4168'. [ 461.025181][T14435] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4168'. [ 461.058135][T14435] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4168'. [ 461.394100][T14447] netlink: 'syz.4.4174': attribute type 61 has an invalid length. [ 461.449080][T14447] netlink: 'syz.4.4174': attribute type 62 has an invalid length. [ 462.496987][T14486] netlink: 'syz.3.4193': attribute type 4 has an invalid length. [ 462.539677][T14489] xt_ipcomp: unknown flags 1D [ 462.568587][T14486] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4193'. [ 463.270853][ T9] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 463.488436][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 463.516200][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 463.544601][ T9] usb 5-1: config 1 has an invalid interface number: 151 but max is 0 [ 463.581729][ T9] usb 5-1: config 1 has no interface number 0 [ 463.604968][ T9] usb 5-1: config 1 interface 151 has no altsetting 0 [ 463.652921][ T9] usb 5-1: string descriptor 0 read error: -22 [ 463.674566][ T9] usb 5-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 463.716477][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.783436][ T9] gspca_main: pac7311-2.14.0 probing 093a:260e [ 464.204560][ T9] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 464.252057][ T9] pac7311 5-1:1.151: probe with driver pac7311 failed with error -71 [ 464.288224][ T9] usb 5-1: USB disconnect, device number 119 [ 464.393259][T14551] netlink: 'syz.3.4226': attribute type 10 has an invalid length. [ 464.413565][T14551] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4226'. [ 464.836317][T14567] IPv6: NLM_F_CREATE should be specified when creating new route [ 465.301219][ T31] INFO: task syz.0.2020:9944 blocked for more than 143 seconds. [ 465.348269][ T31] Not tainted syzkaller #0 [ 465.373974][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 465.408958][ T31] task:syz.0.2020 state:D stack:27104 pid:9944 tgid:9943 ppid:5642 task_flags:0x400040 flags:0x00080002 [ 465.434189][ T31] Call Trace: [ 465.437800][ T31] [ 465.442424][ T31] __schedule+0x17b4/0x5680 [ 465.447188][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 465.468806][ T31] ? __pfx___schedule+0x10/0x10 [ 465.492436][ T31] ? schedule+0x90/0x360 [ 465.509830][ T31] schedule+0x164/0x360 [ 465.522050][ T31] schedule_preempt_disabled+0x13/0x30 [ 465.538033][ T31] __mutex_lock+0x7f7/0x1550 [ 465.560725][ T31] ? __mutex_lock+0x608/0x1550 [ 465.575542][ T31] ? usbdev_open+0x182/0x770 [ 465.586250][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 465.593504][ T31] ? bus_find_device+0x27d/0x2d0 [ 465.598733][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 465.604811][ T31] ? usbdev_open+0xa7/0x770 [ 465.609571][ T31] ? __kmalloc_cache_noprof+0x15b/0x660 [ 465.616422][ T31] usbdev_open+0x182/0x770 [ 465.621532][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 465.626864][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 465.634858][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 465.640778][ T31] chrdev_open+0x4cd/0x5e0 [ 465.645441][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 465.651224][ T31] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 465.657739][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 465.665597][ T31] do_dentry_open+0x785/0x14e0 [ 465.671736][ T31] vfs_open+0x3b/0x340 [ 465.676071][ T31] ? path_openat+0x2df0/0x3860 [ 465.684314][ T31] path_openat+0x2e08/0x3860 [ 465.689388][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 465.696005][ T31] ? stack_depot_save_flags+0x33/0x810 [ 465.703323][ T31] ? __pfx_path_openat+0x10/0x10 [ 465.708855][ T31] ? __x64_sys_openat+0x138/0x170 [ 465.714560][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 465.721825][ T31] do_file_open+0x23e/0x4a0 [ 465.726626][ T31] ? __pfx_do_file_open+0x10/0x10 [ 465.732423][ T31] ? _raw_spin_unlock+0x28/0x50 [ 465.739525][ T31] ? alloc_fd+0x64b/0x6c0 [ 465.745192][ T31] do_sys_openat2+0x113/0x200 [ 465.750454][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 465.755801][ T31] ? exc_page_fault+0x6a/0xc0 [ 465.761874][ T31] __x64_sys_openat+0x138/0x170 [ 465.767044][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.775769][ T31] do_syscall_64+0x15f/0xf80 [ 465.783520][ T31] ? trace_irq_disable+0x3b/0x140 [ 465.788794][ T31] ? clear_bhb_loop+0x40/0x90 [ 465.796875][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.803923][ T31] RIP: 0033:0x7f062e95d60e [ 465.808605][ T31] RSP: 002b:00007f062f7afb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 465.819070][ T31] RAX: ffffffffffffffda RBX: 00007f062f7b06c0 RCX: 00007f062e95d60e [ 465.828135][ T31] RDX: 0000000000141002 RSI: 00007f062f7afc00 RDI: ffffffffffffff9c [ 465.838796][ T31] RBP: 00007f062f7afc00 R08: 0000000000000000 R09: 0000000000000000 [ 465.848091][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 465.857416][ T31] R13: 00007f062ec16038 R14: 00007f062ec15fa0 R15: 00007f062ed3fa48 [ 465.867927][ T31] [ 465.871407][ T31] [ 465.871407][ T31] Showing all locks held in the system: [ 465.879388][ T31] 1 lock held by khungtaskd/31: [ 465.892238][ T31] #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 465.937690][ T31] 2 locks held by getty/5380: [ 465.960650][ T31] #0: ffff888035fbe0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 465.973518][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 465.986161][ T31] 5 locks held by kworker/1:4/5698: [ 465.993102][ T31] 3 locks held by udevd/5756: [ 465.998273][ T31] #0: ffff8880b873aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 466.009609][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 466.019704][ T31] #2: ffff888066be2d50 (&ep->lock){....}-{3:3}, at: ep_poll_callback+0x87/0xac0 [ 466.032619][ T31] 1 lock held by syz.0.2020/9944: [ 466.039284][ T31] #0: ffff88802ae041d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 466.051294][ T31] [ 466.053842][ T31] ============================================= [ 466.053842][ T31] [ 466.064163][ T31] NMI backtrace for cpu 0 [ 466.064181][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 466.064204][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 466.064215][ T31] Call Trace: [ 466.064224][ T31] [ 466.064233][ T31] dump_stack_lvl+0xe8/0x150 [ 466.064262][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 466.064292][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 466.064316][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 466.064348][ T31] sys_info+0x135/0x170 [ 466.064373][ T31] watchdog+0xfd3/0x1030 [ 466.064411][ T31] ? watchdog+0x1c9/0x1030 [ 466.064446][ T31] kthread+0x388/0x470 [ 466.064474][ T31] ? __pfx_watchdog+0x10/0x10 [ 466.064500][ T31] ? __pfx_kthread+0x10/0x10 [ 466.064529][ T31] ret_from_fork+0x514/0xb70 [ 466.064564][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 466.064592][ T31] ? __switch_to+0xc79/0x1410 [ 466.064625][ T31] ? __pfx_kthread+0x10/0x10 [ 466.064653][ T31] ret_from_fork_asm+0x1a/0x30 [ 466.064694][ T31] [ 466.064720][ T31] Sending NMI from CPU 0 to CPUs 1: [ 466.187866][ C1] NMI backtrace for cpu 1 [ 466.187888][ C1] CPU: 1 UID: 0 PID: 5698 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 466.187908][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 466.187920][ C1] Workqueue: usb_hub_wq hub_event [ 466.187945][ C1] RIP: 0010:check_preemption_disabled+0x1f/0xe0 [ 466.187969][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 65 8b 05 b7 ff 90 07 65 8b 0d ac ff 90 07 f7 c1 ff ff ff 7f 74 0c 5b 41 5e <41> 5f 5d e9 09 d7 02 00 cc 9c 59 f7 c1 00 02 00 00 74 ea 65 4c 8b [ 466.187984][ C1] RSP: 0018:ffffc90000a085a0 EFLAGS: 00000002 [ 466.187998][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000080000101 [ 466.188010][ C1] RDX: 000000002d1ec89b RSI: ffffffff8e217007 RDI: ffffffff8c28aa60 [ 466.188022][ C1] RBP: ffffffff8176e256 R08: ffffffff8176e256 R09: ffffffff8e95cd60 [ 466.188034][ C1] R10: ffffc90000a08778 R11: ffffffff81b0d880 R12: 0000000000000002 [ 466.188046][ C1] R13: ffffffff8e95cd60 R14: 0000000000000000 R15: 0000000000000046 [ 466.188057][ C1] FS: 0000000000000000(0000) GS:ffff888125393000(0000) knlGS:0000000000000000 [ 466.188071][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 466.188083][ C1] CR2: 00007fdab6a4f0d1 CR3: 00000000775c2000 CR4: 00000000003526f0 [ 466.188100][ C1] Call Trace: [ 466.188108][ C1] [ 466.188116][ C1] ? unwind_next_frame+0xa6/0x2550 [ 466.188137][ C1] lock_acquire+0x116/0x350 [ 466.188158][ C1] ? unwind_next_frame+0xa6/0x2550 [ 466.188176][ C1] ? kasan_save_track+0x3e/0x80 [ 466.188197][ C1] ? unwind_next_frame+0xa6/0x2550 [ 466.188215][ C1] unwind_next_frame+0xc3/0x2550 [ 466.188233][ C1] ? unwind_next_frame+0xa6/0x2550 [ 466.188253][ C1] ? unwind_next_frame+0xa6/0x2550 [ 466.188272][ C1] ? stack_trace_save+0xa9/0x100 [ 466.188294][ C1] ? kasan_save_track+0x3e/0x80 [ 466.188314][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 466.188336][ C1] arch_stack_walk+0x11b/0x150 [ 466.188357][ C1] ? kasan_save_track+0x3e/0x80 [ 466.188376][ C1] stack_trace_save+0xa9/0x100 [ 466.188396][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 466.188419][ C1] ? ktime_get+0x45/0x220 [ 466.188441][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 466.188458][ C1] kasan_save_track+0x3e/0x80 [ 466.188478][ C1] ? kasan_save_track+0x3e/0x80 [ 466.188515][ C1] kasan_save_free_info+0x46/0x50 [ 466.188532][ C1] __kasan_slab_free+0x5c/0x80 [ 466.188554][ C1] kfree+0x1c5/0x640 [ 466.188625][ C1] ? dummy_timer+0xb5c/0x4650 [ 466.188647][ C1] dummy_timer+0xb5c/0x4650 [ 466.188666][ C1] ? dummy_timer+0x451f/0x4650 [ 466.188691][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 466.188708][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 466.188730][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 466.188754][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 466.188774][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 466.188792][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 466.188810][ C1] __hrtimer_run_queues+0x3c0/0xa20 [ 466.188836][ C1] hrtimer_run_softirq+0x17a/0x240 [ 466.188859][ C1] handle_softirqs+0x22a/0x840 [ 466.188878][ C1] ? __irq_exit_rcu+0xca/0x220 [ 466.188896][ C1] __irq_exit_rcu+0xca/0x220 [ 466.188913][ C1] irq_exit_rcu+0x9/0x30 [ 466.188927][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 466.188945][ C1] [ 466.188951][ C1] [ 466.188957][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 466.188975][ C1] RIP: 0010:deref_stack_reg+0x81/0x230 [ 466.188994][ C1] Code: 08 4d 8d 77 10 4d 89 f5 49 c1 ed 03 41 80 7c 35 00 00 74 16 4c 89 f7 e8 8d d4 b9 00 4c 8b 04 24 48 be 00 00 00 00 00 fc ff df <4c> 89 74 24 08 4d 8b 77 10 4c 89 fd 48 c1 ed 03 0f b6 44 35 00 84 [ 466.189008][ C1] RSP: 0018:ffffc90004706540 EFLAGS: 00000246 [ 466.189022][ C1] RAX: fffffffffffffff0 RBX: ffffc90004700000 RCX: 0000000000000000 [ 466.189033][ C1] RDX: ffffc900047066a8 RSI: dffffc0000000000 RDI: ffffc90004706668 [ 466.189045][ C1] RBP: dffffc0000000000 R08: ffffc900047076d0 R09: 0000000000000000 [ 466.189056][ C1] R10: ffffc900047066b8 R11: fffff520008e0cd9 R12: 1ffff920008e0cce [ 466.189068][ C1] R13: 1ffff920008e0ccf R14: ffffc90004706678 R15: ffffc90004706668 [ 466.189089][ C1] unwind_next_frame+0x19d5/0x2550 [ 466.189110][ C1] ? unwind_next_frame+0xa6/0x2550 [ 466.189129][ C1] ? device_add+0x7e9/0xbb0 [ 466.189148][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 466.189171][ C1] arch_stack_walk+0x11b/0x150 [ 466.189191][ C1] ? usb_new_device+0xa08/0x16f0 [ 466.189215][ C1] stack_trace_save+0xa9/0x100 [ 466.189237][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 466.189263][ C1] kasan_save_track+0x3e/0x80 [ 466.189282][ C1] ? kasan_save_track+0x3e/0x80 [ 466.189301][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 466.189320][ C1] ? __kmalloc_node_track_caller_noprof+0x4db/0x7b0 [ 466.189342][ C1] ? __alloc_skb+0x2c1/0x7d0 [ 466.189359][ C1] ? __netdev_alloc_skb+0xc1/0x810 [ 466.189376][ C1] ? ath6kl_usb_post_recv_transfers+0x207/0x6f0 [ 466.189393][ C1] ? ath6kl_usb_power_on+0x6a/0x280 [ 466.189409][ C1] ? ath6kl_core_init+0x1e1/0x10b0 [ 466.189430][ C1] ? ath6kl_usb_probe+0x14a6/0x15a0 [ 466.189445][ C1] ? usb_probe_interface+0x659/0xc70 [ 466.189463][ C1] ? really_probe+0x267/0xaf0 [ 466.189480][ C1] ? __driver_probe_device+0x1ef/0x380 [ 466.189498][ C1] ? driver_probe_device+0x4f/0x240 [ 466.189515][ C1] ? __device_attach_driver+0x279/0x430 [ 466.189533][ C1] ? bus_for_each_drv+0x258/0x2f0 [ 466.189554][ C1] ? __device_attach+0x2c5/0x450 [ 466.189578][ C1] ? device_initial_probe+0xa1/0xd0 [ 466.189595][ C1] ? bus_probe_device+0x12a/0x220 [ 466.189616][ C1] ? device_add+0x7e9/0xbb0 [ 466.189631][ C1] ? usb_set_configuration+0x1a87/0x2110 [ 466.189648][ C1] ? usb_generic_driver_probe+0x8d/0x150 [ 466.189664][ C1] ? usb_probe_device+0x1c4/0x3b0 [ 466.189681][ C1] ? really_probe+0x267/0xaf0 [ 466.189698][ C1] ? __driver_probe_device+0x1ef/0x380 [ 466.189716][ C1] ? driver_probe_device+0x4f/0x240 [ 466.189733][ C1] ? __device_attach_driver+0x279/0x430 [ 466.189750][ C1] ? bus_for_each_drv+0x258/0x2f0 [ 466.189771][ C1] ? __device_attach+0x2c5/0x450 [ 466.189787][ C1] ? device_initial_probe+0xa1/0xd0 [ 466.189804][ C1] ? bus_probe_device+0x12a/0x220 [ 466.189825][ C1] ? device_add+0x7e9/0xbb0 [ 466.189850][ C1] __kasan_kmalloc+0x93/0xb0 [ 466.189872][ C1] __kmalloc_node_track_caller_noprof+0x4db/0x7b0 [ 466.189895][ C1] ? __netdev_alloc_skb+0xc1/0x810 [ 466.189911][ C1] ? __kmalloc_node_track_caller_noprof+0x34a/0x7b0 [ 466.189935][ C1] __alloc_skb+0x2c1/0x7d0 [ 466.189954][ C1] __netdev_alloc_skb+0xc1/0x810 [ 466.189971][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 466.189988][ C1] ath6kl_usb_post_recv_transfers+0x207/0x6f0 [ 466.190011][ C1] ath6kl_usb_power_on+0x6a/0x280 [ 466.190029][ C1] ath6kl_core_init+0x1e1/0x10b0 [ 466.190051][ C1] ? rcu_is_watching+0x15/0xb0 [ 466.190071][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 466.190094][ C1] ? __pfx_ath6kl_core_init+0x10/0x10 [ 466.190118][ C1] ? __asan_memcpy+0x40/0x70 [ 466.190137][ C1] ? ath6kl_core_create+0x7de/0x980 [ 466.190161][ C1] ath6kl_usb_probe+0x14a6/0x15a0 [ 466.190182][ C1] usb_probe_interface+0x659/0xc70 [ 466.190205][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 466.190222][ C1] really_probe+0x267/0xaf0 [ 466.190242][ C1] __driver_probe_device+0x1ef/0x380 [ 466.190262][ C1] driver_probe_device+0x4f/0x240 [ 466.190282][ C1] __device_attach_driver+0x279/0x430 [ 466.190302][ C1] bus_for_each_drv+0x258/0x2f0 [ 466.190324][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 466.190343][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 466.190365][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 466.190382][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 466.190400][ C1] __device_attach+0x2c5/0x450 [ 466.190418][ C1] ? __pfx___device_attach+0x10/0x10 [ 466.190437][ C1] ? _raw_spin_unlock+0x28/0x50 [ 466.190454][ C1] device_initial_probe+0xa1/0xd0 [ 466.190473][ C1] bus_probe_device+0x12a/0x220 [ 466.190496][ C1] device_add+0x7e9/0xbb0 [ 466.190514][ C1] usb_set_configuration+0x1a87/0x2110 [ 466.190541][ C1] usb_generic_driver_probe+0x8d/0x150 [ 466.190558][ C1] usb_probe_device+0x1c4/0x3b0 [ 466.190585][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 466.190602][ C1] really_probe+0x267/0xaf0 [ 466.190623][ C1] __driver_probe_device+0x1ef/0x380 [ 466.190642][ C1] driver_probe_device+0x4f/0x240 [ 466.190661][ C1] __device_attach_driver+0x279/0x430 [ 466.190682][ C1] bus_for_each_drv+0x258/0x2f0 [ 466.190703][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 466.190723][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 466.190745][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 466.190761][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 466.190779][ C1] __device_attach+0x2c5/0x450 [ 466.190798][ C1] ? __pfx___device_attach+0x10/0x10 [ 466.190817][ C1] ? _raw_spin_unlock+0x28/0x50 [ 466.190833][ C1] device_initial_probe+0xa1/0xd0 [ 466.190852][ C1] bus_probe_device+0x12a/0x220 [ 466.190875][ C1] device_add+0x7e9/0xbb0 [ 466.190892][ C1] usb_new_device+0xa08/0x16f0 [ 466.190918][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 466.190942][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 466.190958][ C1] hub_event+0x2a1c/0x4f30 [ 466.190991][ C1] ? __pfx_hub_event+0x10/0x10 [ 466.191008][ C1] ? process_scheduled_works+0xa70/0x1860 [ 466.191027][ C1] ? process_scheduled_works+0xa70/0x1860 [ 466.191043][ C1] ? process_scheduled_works+0xa70/0x1860 [ 466.191059][ C1] process_scheduled_works+0xb5d/0x1860 [ 466.191086][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 466.191104][ C1] ? assign_work+0x3d5/0x5e0 [ 466.191121][ C1] worker_thread+0xa53/0xfc0 [ 466.191147][ C1] kthread+0x388/0x470 [ 466.191167][ C1] ? __pfx_worker_thread+0x10/0x10 [ 466.191183][ C1] ? __pfx_kthread+0x10/0x10 [ 466.191203][ C1] ret_from_fork+0x514/0xb70 [ 466.191222][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 466.191238][ C1] ? __switch_to+0xc79/0x1410 [ 466.191260][ C1] ? __pfx_kthread+0x10/0x10 [ 466.191280][ C1] ret_from_fork_asm+0x1a/0x30 [ 466.191306][ C1] [ 466.193855][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 466.193876][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 466.193899][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 466.193911][ T31] Call Trace: [ 466.193920][ T31] [ 466.193929][ T31] vpanic+0x56c/0xa60 [ 466.193956][ T31] ? __pfx___schedule+0x10/0x10 [ 466.193977][ T31] ? __pfx_vpanic+0x10/0x10 [ 466.194008][ T31] panic+0xc5/0xd0 [ 466.194028][ T31] ? __pfx_panic+0x10/0x10 [ 466.194050][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 466.194083][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 466.194114][ T31] watchdog+0x102c/0x1030 [ 466.194147][ T31] ? watchdog+0x1c9/0x1030 [ 466.194178][ T31] kthread+0x388/0x470 [ 466.194203][ T31] ? __pfx_watchdog+0x10/0x10 [ 466.194228][ T31] ? __pfx_kthread+0x10/0x10 [ 466.194253][ T31] ret_from_fork+0x514/0xb70 [ 466.194276][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 466.194297][ T31] ? __switch_to+0xc79/0x1410 [ 466.194335][ T31] ? __pfx_kthread+0x10/0x10 [ 466.194360][ T31] ret_from_fork_asm+0x1a/0x30 [ 466.194396][ T31] [ 467.322926][ T31] Kernel Offset: disabled [ 467.327341][ T31] Rebooting in 86400 seconds..