last executing test programs: 1.972771917s ago: executing program 2 (id=21340): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0305602, &(0x7f0000000880)={0x0, 0x10, {0x40, 0x5, 0x200c, 0x0, 0x8, 0x1, 0x0, 0x3}}) 1.807632315s ago: executing program 2 (id=21345): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x4b3d, 0x0) 1.687845728s ago: executing program 2 (id=21350): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000080)={0x18, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}}, 0x0) 1.666489942s ago: executing program 1 (id=21352): prctl$PR_MCE_KILL(0x35, 0x1, 0x8) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) 1.523763253s ago: executing program 2 (id=21355): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0040d07, 0x0) 1.504969411s ago: executing program 1 (id=21358): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELTABLE={0x24, 0x2, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}]}, @NFT_MSG_DELRULE={0x1c, 0x8, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}}, 0x0) 1.399586402s ago: executing program 2 (id=21362): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x33) 1.330803809s ago: executing program 1 (id=21363): r0 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f0000000340)={{0x8, 0x4, 0x0, 0x0, '\x00', 0xfffffffd}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4000000, 0x100001, 0x7, 0x4000000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0xf7dd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x5, 0x0, 0x0, 0xe4, 0x0, 0x9, 0x3, 0x800, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0xa, 0x1, 0xcdc, 0x0, 0xffffffff, 0x600000, 0x4000002, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1559, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x8, 0x5, 0x800, 0x0, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0x80000000, 0x400000, 0x3, 0xc13, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x80000000, 0xfffffffd, 0x0, 0x3, 0x800001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x80, 0x3, 0x0, 0x40000000, 0x2cbb, 0x2, 0x7b1ae8f, 0x3, 0x0, 0x80000005, 0x0, 0x2000003, 0x2d6, 0x0, 0x6, 0x100000, 0x0, 0x0, 0x4, 0x1, 0x2002001, 0x0, 0x0, 0xd686, 0x0, 0x8, 0x40000000, 0x80000001]}) 1.207752067s ago: executing program 2 (id=21367): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e1338720402068829527010203010902240001020000100904d30002be79e8000905040200020500ff090582"], 0x0) 1.207469424s ago: executing program 1 (id=21368): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x7800, 0x0, 0x7, 0xfffffffc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast1, @rand_addr=0x64010101}}}}) 1.056518836s ago: executing program 1 (id=21373): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) 1.000589265s ago: executing program 4 (id=21374): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be", 0x1}], 0x1, &(0x7f0000000080)=[@ip_retopts={{0x10}}], 0x10}, 0x0) 931.648352ms ago: executing program 1 (id=21377): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x240, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0xe0, 0x5, "", [{{0x9, 0x4, 0x0, 0xd3, 0x1, 0x3, 0x1, 0x2, 0x8, {0x9, 0x21, 0x9, 0x4, 0x1, {0x22, 0xe75}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x8, 0x4}}}}}]}}]}}, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) 903.52604ms ago: executing program 4 (id=21378): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000240)="7800000018001f07b9409b0dffff000d0216be0402030605060140034300080012000000fac8388827a685a168d0bf46d323456511000000caaf6c26c274214549935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160000000000403622a590ef62f6b0f8eca0faed00000000", 0x78, 0x4000000, 0x0, 0x0) 878.675843ms ago: executing program 0 (id=21379): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xffffffff80000001, 0x80) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000080)) 787.895024ms ago: executing program 3 (id=21381): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) 765.890711ms ago: executing program 0 (id=21382): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x9d4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x0, 0x32314142}}) 765.769467ms ago: executing program 4 (id=21383): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/mcfilter\x00') lseek(r0, 0xcb6, 0x0) 651.229046ms ago: executing program 3 (id=21384): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4e1e, 0xe, @empty}, 0xffffffffffffffff, 0xfffffffe}}, 0x48) 559.025315ms ago: executing program 4 (id=21385): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @loopback}, @can, @nl=@unspec, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 551.154492ms ago: executing program 0 (id=21386): chdir(&(0x7f0000000480)='./cgroup\x00') link(&(0x7f0000000140)='.\x00', &(0x7f00000001c0)='./file0\x00') 530.29145ms ago: executing program 3 (id=21387): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000000010104000000000000000002000000240001801400018008000100ac1e000108000200e00000010c0002800500010000000000240002800c000280050001000000000014000180080001000000000008000200e00000020800074000000000080008400000000008001540000000001c0018"], 0x90}}, 0x0) 465.247508ms ago: executing program 3 (id=21388): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) sysfs$1(0x1, &(0x7f00000001c0)='sysfs\x00') 443.002488ms ago: executing program 0 (id=21389): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000027c0)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002800)={0x2020}, 0x2020) 413.013804ms ago: executing program 4 (id=21390): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 314.014159ms ago: executing program 3 (id=21391): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8940, &(0x7f0000000000)=@buf={0x3, &(0x7f0000000040)="ce6c06"}) 211.335698ms ago: executing program 0 (id=21392): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000002840)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000028c0)={0x60, 0x3, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x8, &(0x7f0000002880)=[{0x9, 0xd, 0xc3}], 0x1, 0x7, 0x0, 0x20, 0x24, 0x12}) 137.231553ms ago: executing program 4 (id=21393): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xffffffbb, 0x2) preadv(r0, &(0x7f0000003640)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1, 0x6, 0x4) 123.445429ms ago: executing program 3 (id=21394): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 0s ago: executing program 0 (id=21395): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x10}, [@ldst={0x6, 0x2, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) kernel console output (not intermixed with test programs): 260][T12381] ath6kl: Unable to recv target info: -71 [ 1188.875714][T12381] ath6kl: Failed to init ath6kl core: -71 [ 1188.900247][T12381] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1188.947048][T12381] usb 3-1: USB disconnect, device number 122 [ 1188.996612][ T30] audit: type=1326 audit(1777546221.906:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13089 comm="syz.4.18883" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 1189.022572][ T30] audit: type=1326 audit(1777546221.906:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13089 comm="syz.4.18883" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 1189.079142][ T30] audit: type=1326 audit(1777546221.926:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13089 comm="syz.4.18883" exe="/root/syz-executor" sig=0 arch=40000003 syscall=75 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 1189.110259][T12380] usb 4-1: USB disconnect, device number 3 [ 1189.118680][ T30] audit: type=1326 audit(1777546221.926:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13089 comm="syz.4.18883" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 1189.167889][ T30] audit: type=1326 audit(1777546221.926:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13089 comm="syz.4.18883" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 1189.273452][T13101] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1189.282339][T13101] [U] J"—e:ÀÆ" [ 1189.396988][T13109] netlink: 9 bytes leftover after parsing attributes in process `syz.1.18892'. [ 1189.435650][T13109] netlink: 9 bytes leftover after parsing attributes in process `syz.1.18892'. [ 1189.795469][T12390] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1189.947240][T12390] usb 1-1: Using ep0 maxpacket: 8 [ 1189.959063][T12390] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1189.970919][T12390] usb 1-1: config 179 has no interface number 0 [ 1189.998170][T12390] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1190.035848][T12390] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1190.059417][T12390] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1190.085305][T12390] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1190.114127][T12390] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1190.156742][T12390] usb 1-1: config 179 interface 65 has no altsetting 0 [ 1190.177857][T12390] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1190.192951][T12390] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.219939][T12390] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input171 [ 1190.285648][ T4976] input input171: unable to receive magic message: -110 [ 1190.329173][ T4976] input input171: unable to receive magic message: -32 [ 1190.360391][ T4976] input input171: unable to receive magic message: -32 [ 1190.373793][ T4976] input input171: unable to receive magic message: -32 [ 1190.400877][ T4976] input input171: unable to receive magic message: -32 [ 1190.475800][T13169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18922'. [ 1190.667305][T12390] usb 1-1: USB disconnect, device number 118 [ 1190.673430][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1190.912146][ T30] audit: type=1326 audit(1777546223.816:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13192 comm="syz.2.18934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 1190.945049][ T30] audit: type=1326 audit(1777546223.816:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13192 comm="syz.2.18934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 1190.969876][ T30] audit: type=1326 audit(1777546223.836:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13192 comm="syz.2.18934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=453 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 1191.011761][ T30] audit: type=1326 audit(1777546223.836:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13192 comm="syz.2.18934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 1191.077784][T13199] netlink: 'syz.4.18936': attribute type 39 has an invalid length. [ 1191.109220][T13199] hsr_slave_0 (unregistering): left promiscuous mode [ 1191.568803][T13233] netlink: 'syz.1.18952': attribute type 1 has an invalid length. [ 1191.964923][ T30] audit: type=1326 audit(1777546224.866:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13259 comm="syz.1.18968" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff601c code=0x7ffc0000 [ 1192.106743][T13271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18973'. [ 1193.127867][T13344] netlink: 'syz.2.19009': attribute type 2 has an invalid length. [ 1193.138688][T12606] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1193.142787][T13344] netlink: 1 bytes leftover after parsing attributes in process `syz.2.19009'. [ 1193.309803][T12606] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1193.337893][T12606] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.349087][T12606] usb 1-1: config 0 descriptor?? [ 1193.363305][T12606] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1193.381413][T13359] Timeout policy `syz1' can only be used by L3 protocol number 34825 [ 1193.727403][T13383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19029'. [ 1193.766786][T12606] gspca_stv06xx: I2C: Read error writing address: -71 [ 1193.799229][T12606] usb 1-1: USB disconnect, device number 119 [ 1193.875477][T12382] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1194.032021][T12380] IPVS: starting estimator thread 0... [ 1194.055282][T12382] usb 2-1: Using ep0 maxpacket: 16 [ 1194.066324][T12382] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1194.090048][T12382] usb 2-1: config 0 has no interface number 0 [ 1194.107185][T12382] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1194.128693][T12382] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.135539][T13403] IPVS: using max 29 ests per chain, 69600 per kthread [ 1194.138692][T12382] usb 2-1: Product: syz [ 1194.153097][T12382] usb 2-1: Manufacturer: syz [ 1194.163037][T12382] usb 2-1: SerialNumber: syz [ 1194.185943][T12382] usb 2-1: config 0 descriptor?? [ 1194.197155][T12382] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1194.485249][T12606] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1194.603595][T12382] gspca_spca1528: reg_w err -71 [ 1194.635595][T12382] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 1194.645472][T12606] usb 3-1: Using ep0 maxpacket: 32 [ 1194.645779][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1194.645822][ T30] audit: type=1326 audit(1777546227.546:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13434 comm="syz.0.19054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff501c code=0x7ffc0000 [ 1194.667331][T12606] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 1194.694220][T12382] usb 2-1: USB disconnect, device number 119 [ 1194.708613][ T30] audit: type=1326 audit(1777546227.546:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13434 comm="syz.0.19054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff501c code=0x7ffc0000 [ 1194.725766][T13437] xfrm0: entered promiscuous mode [ 1194.758612][T12606] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 1194.771046][T13437] xfrm0: entered allmulticast mode [ 1194.778813][ T30] audit: type=1326 audit(1777546227.606:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13434 comm="syz.0.19054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff501c code=0x7ffc0000 [ 1194.816788][T12606] usb 3-1: string descriptor 0 read error: -22 [ 1194.823229][T12606] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1194.833144][ T30] audit: type=1326 audit(1777546227.606:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13434 comm="syz.0.19054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff501c code=0x7ffc0000 [ 1194.844337][T12606] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.873529][ T30] audit: type=1326 audit(1777546227.616:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13434 comm="syz.0.19054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=61 compat=1 ip=0xf7ff501c code=0x7ffc0000 [ 1194.910063][ T30] audit: type=1326 audit(1777546227.616:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13434 comm="syz.0.19054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff501c code=0x7ffc0000 [ 1194.933726][ T30] audit: type=1326 audit(1777546227.616:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13434 comm="syz.0.19054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff501c code=0x7ffc0000 [ 1194.963358][T13411] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1194.980888][T12606] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1194.999491][ T30] audit: type=1326 audit(1777546227.616:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13434 comm="syz.0.19054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7ff501c code=0x7ffc0000 [ 1195.000201][T12606] usb 3-1: MIDIStreaming interface descriptor not found [ 1195.047414][ T30] audit: type=1326 audit(1777546227.616:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13434 comm="syz.0.19054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7ff501c code=0x7ffc0000 [ 1195.073165][ T30] audit: type=1326 audit(1777546227.966:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13440 comm="syz.4.19058" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 1195.226600][T12606] usb 3-1: USB disconnect, device number 123 [ 1196.075326][T12606] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1196.237474][T12606] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1196.255212][T12606] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1196.272067][T12606] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 1196.285525][T12606] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1196.317337][T13517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19095'. [ 1196.328907][T12606] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1196.344721][T12606] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1196.375830][T12606] usb 1-1: SerialNumber: syz [ 1196.609869][T12606] usb 1-1: 0:2 : does not exist [ 1196.625049][T12606] usb 1-1: unit 5 not found! [ 1196.701482][T12606] usb 1-1: USB disconnect, device number 120 [ 1196.760405][T10895] udevd[10895]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1196.805398][T12382] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1196.894793][T13549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19111'. [ 1196.978910][T13555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19114'. [ 1196.988437][T12382] usb 5-1: Using ep0 maxpacket: 32 [ 1196.997399][T12382] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1197.011527][T12382] usb 5-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 1197.030645][T12382] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.055410][T12382] usb 5-1: config 0 descriptor?? [ 1197.082506][T12382] usb 5-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 1197.118555][T12382] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1197.143240][T12382] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 1197.158995][T12382] usb 5-1: media controller created [ 1197.181498][T12382] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1197.282094][T12382] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1197.303647][T12382] error writing reg: 0xff, val: 0x00 [ 1197.363385][T12382] dvb_usb_mxl111sf 5-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 1197.492605][T13577] bond7: option arp_missed_max: mode dependency failed, not supported in mode balance-tlb(5) [ 1197.528227][T12382] usb 5-1: USB disconnect, device number 4 [ 1197.540028][T13577] bond7 (unregistering): Released all slaves [ 1197.667547][T13591] net_ratelimit: 35 callbacks suppressed [ 1197.667564][T13591] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1197.683419][T13590] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1197.693907][T13584] bond1: up delay (7) is not a multiple of miimon (10), value rounded to 0 ms [ 1197.713384][T13584] bond1: down delay (2) is not a multiple of miimon (10), value rounded to 0 ms [ 1197.731824][T13584] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1197.759760][T13584] bond1 (unregistering): Released all slaves [ 1198.097186][T13613] netlink: 'syz.3.19142': attribute type 1 has an invalid length. [ 1198.336776][T13629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19149'. [ 1198.351056][T12380] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1198.432106][T13637] xt_nat: multiple ranges no longer supported [ 1198.518597][T12380] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1198.537026][T12380] usb 3-1: config 4 has an invalid interface number: 138 but max is 0 [ 1198.551011][T12380] usb 3-1: config 4 has no interface number 0 [ 1198.565252][T12380] usb 3-1: config 4 interface 138 has no altsetting 0 [ 1198.591020][T12380] usb 3-1: string descriptor 0 read error: -22 [ 1198.602224][T12380] usb 3-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 1198.635180][T12380] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.877615][T12380] catc 3-1:4.138: Missing or invalid endpoints [ 1199.079988][T13677] netlink: 40 bytes leftover after parsing attributes in process `syz.3.19174'. [ 1199.112150][T13679] trusted_key: encrypted_key: keylen parameter is missing [ 1199.135214][T12380] usb 3-1: USB disconnect, device number 124 [ 1199.266693][T13688] kAFS: unable to lookup cell 'ŒÉúZ°ÿ-ñn$vï(,bÅÌñ©ih¾Ì' [ 1199.318533][T13691] netlink: 'syz.4.19181': attribute type 21 has an invalid length. [ 1199.329537][T13691] netlink: 132 bytes leftover after parsing attributes in process `syz.4.19181'. [ 1199.470909][T13701] program syz.1.19186 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1199.504627][T13701] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1199.521652][T13706] openvswitch: netlink: Message has 1 unknown bytes. [ 1199.529750][T13706] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1199.665504][T12390] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1199.846891][T12390] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 1199.865327][T12390] usb 5-1: config 0 has no interface number 0 [ 1199.874822][T12390] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1199.887101][T12390] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1199.903466][T12390] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1199.916727][T12390] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.926503][T12390] usb 5-1: Product: syz [ 1199.934563][T12390] usb 5-1: Manufacturer: syz [ 1199.941686][T12390] usb 5-1: SerialNumber: syz [ 1199.958459][T12390] usb 5-1: config 0 descriptor?? [ 1199.968940][T13699] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1199.982320][T12390] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1200.007911][T12390] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1200.125277][T12606] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 1200.287933][T12606] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1200.302996][T12606] usb 4-1: not running at top speed; connect to a high speed hub [ 1200.316400][T12606] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 1200.335197][T12606] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1200.360967][T12606] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 64 [ 1200.377953][T13750] fuse: Bad value for 'user_id' [ 1200.382845][T12606] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1200.382871][T12606] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x5B, changing to 0xB [ 1200.413151][T13750] fuse: Bad value for 'user_id' [ 1200.427332][T12390] usb 5-1: USB disconnect, device number 5 [ 1200.449989][T12606] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1200.461820][T12390] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1200.478121][T12606] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1200.498677][T12390] cyberjack 5-1:0.69: device disconnected [ 1200.508001][T12606] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.531684][T12606] usb 4-1: Product: syz [ 1200.541011][T12606] usb 4-1: Manufacturer: syz [ 1200.550783][T12606] usb 4-1: SerialNumber: syz [ 1200.567863][T12606] usb 4-1: config 0 descriptor?? [ 1200.580219][T13726] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1200.599823][T13757] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19213'. [ 1200.610230][T12606] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1200.773775][T10870] udevd[10870]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1200.861805][T12606] usb 4-1: USB disconnect, device number 4 [ 1200.925450][ T24] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1201.039309][T13776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19222'. [ 1201.057090][T13776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19222'. [ 1201.103311][ T24] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1201.125438][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.137638][ T24] usb 3-1: Product: syz [ 1201.145665][ T24] usb 3-1: Manufacturer: syz [ 1201.155391][ T24] usb 3-1: SerialNumber: syz [ 1201.173096][ T24] usb 3-1: config 0 descriptor?? [ 1201.600806][ T24] usb 3-1: f81604_write: reg: 105 data: 0 failed: -EPROTO [ 1201.620387][ T24] f81604 3-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 1201.637142][ T24] f81604 3-1:0.0: probe with driver f81604 failed with error -71 [ 1201.666750][ T24] usb 3-1: USB disconnect, device number 125 [ 1201.887623][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1201.887641][ T30] audit: type=1326 audit(1777546234.796:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13828 comm="syz.1.19248" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff601c code=0x0 [ 1201.943101][T13831] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19249'. [ 1201.986714][T13834] dvmrp0: entered allmulticast mode [ 1202.004399][T13835] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19251'. [ 1202.038202][T13837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19252'. [ 1202.055900][T13837] netlink: 48 bytes leftover after parsing attributes in process `syz.1.19252'. [ 1202.072812][T13837] netlink: 48 bytes leftover after parsing attributes in process `syz.1.19252'. [ 1202.252736][T13850] batadv0: entered promiscuous mode [ 1202.312410][T13853] bridge0: port 2(bridge_slave_1) entered disabled state [ 1202.320674][T13853] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1202.847907][T13882] bond1: option arp_missed_max: mode dependency failed, not supported in mode balance-tlb(5) [ 1202.865498][T13882] bond1 (unregistering): Released all slaves [ 1203.715504][T12380] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1203.885453][T12380] usb 3-1: Using ep0 maxpacket: 16 [ 1203.912663][T12380] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1203.931448][T12380] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.940078][T12380] usb 3-1: Product: syz [ 1203.944300][T12380] usb 3-1: Manufacturer: syz [ 1203.949905][T12380] usb 3-1: SerialNumber: syz [ 1203.964357][T12380] usb 3-1: config 0 descriptor?? [ 1204.114300][T13967] netlink: 'syz.3.19314': attribute type 5 has an invalid length. [ 1204.138555][T13968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1204.192149][T12380] speedtch 3-1:0.0: speedtch_bind: data interface not found! [ 1204.207026][T12380] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1204.377351][T13986] program syz.3.19323 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1204.405309][T12382] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1204.433110][T12380] usb 3-1: USB disconnect, device number 126 [ 1204.527831][ T30] audit: type=1326 audit(1777546237.436:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13992 comm="syz.3.19326" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 1204.572849][ T30] audit: type=1326 audit(1777546237.466:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13992 comm="syz.3.19326" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 1204.595393][T12382] usb 2-1: Using ep0 maxpacket: 8 [ 1204.608977][T12382] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1204.627217][T12382] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1204.629576][ T30] audit: type=1326 audit(1777546237.466:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13992 comm="syz.3.19326" exe="/root/syz-executor" sig=0 arch=40000003 syscall=461 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 1204.653242][T12382] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.683211][ T30] audit: type=1326 audit(1777546237.466:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13992 comm="syz.3.19326" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 1204.695280][T12382] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1204.748158][T12382] usb 2-1: config 1 has no interface number 1 [ 1204.754337][T12382] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1204.768760][T12382] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1204.782449][T12382] usb 2-1: config 1 interface 2 has no altsetting 0 [ 1204.791946][T12382] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1204.806074][T12382] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.820744][T12382] usb 2-1: Product: syz [ 1204.826978][T12382] usb 2-1: Manufacturer: syz [ 1204.832486][T12382] usb 2-1: SerialNumber: syz [ 1204.853226][T12382] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1204.864361][T12382] usb 2-1: MIDIStreaming interface descriptor not found [ 1204.888754][T14002] : entered promiscuous mode [ 1204.904971][T14004] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1205.111924][T12382] usb 2-1: USB disconnect, device number 120 [ 1205.281452][T14020] __nla_validate_parse: 4 callbacks suppressed [ 1205.281471][T14020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19339'. [ 1205.743314][T14051] netlink: 'syz.2.19355': attribute type 21 has an invalid length. [ 1205.765698][T14051] netlink: 152 bytes leftover after parsing attributes in process `syz.2.19355'. [ 1205.817514][ T30] audit: type=1400 audit(1777546238.726:668): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=":(%#{//(@\)//&@},['%%&\#*" pid=14054 comm="syz.1.19357" [ 1205.937870][T14061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19360'. [ 1205.968702][T14061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19360'. [ 1205.991229][T14061] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19360'. [ 1206.141113][T14077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19368'. [ 1206.491822][T14102] geneve3: entered promiscuous mode [ 1206.540939][ T1024] netdevsim netdevsim0 : set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.552721][T14107] netlink: 'syz.4.19383': attribute type 10 has an invalid length. [ 1206.561641][ T1024] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.592589][T14107] bond0: (slave erspan1): Enslaving as an active interface with an up link [ 1206.611452][ T1024] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.630707][ T1024] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.745721][T14117] usb usb8: usbfs: process 14117 (syz.2.19388) did not claim interface 0 before use [ 1206.794385][T14119] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1207.143168][T14142] libceph: resolve '0..' (ret=-3): failed [ 1207.187266][T14147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19402'. [ 1207.313214][T14154] netlink: 'syz.2.19406': attribute type 6 has an invalid length. [ 1207.340540][T14154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19406'. [ 1208.100878][T14211] netlink: 'syz.3.19432': attribute type 63 has an invalid length. [ 1208.126032][T14211] netlink: 'syz.3.19432': attribute type 17 has an invalid length. [ 1208.161911][ T30] audit: type=1326 audit(1777546241.066:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14212 comm="syz.1.19435" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff601c code=0x7ffc0000 [ 1208.183491][T14214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19434'. [ 1208.232924][ T30] audit: type=1326 audit(1777546241.066:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14212 comm="syz.1.19435" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff601c code=0x7ffc0000 [ 1208.326530][ T30] audit: type=1326 audit(1777546241.066:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14212 comm="syz.1.19435" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff601c code=0x7ffc0000 [ 1208.374059][ T30] audit: type=1326 audit(1777546241.096:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14212 comm="syz.1.19435" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff601c code=0x7ffc0000 [ 1208.398969][T14221] netlink: 'syz.3.19438': attribute type 3 has an invalid length. [ 1208.448221][ T30] audit: type=1326 audit(1777546241.096:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14212 comm="syz.1.19435" exe="/root/syz-executor" sig=0 arch=40000003 syscall=71 compat=1 ip=0xf7ff601c code=0x7ffc0000 [ 1208.526332][ T30] audit: type=1326 audit(1777546241.096:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14212 comm="syz.1.19435" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff601c code=0x7ffc0000 [ 1208.585712][ T30] audit: type=1326 audit(1777546241.096:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14212 comm="syz.1.19435" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff601c code=0x7ffc0000 [ 1208.639448][ T30] audit: type=1326 audit(1777546241.096:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14212 comm="syz.1.19435" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7ff601c code=0x7ffc0000 [ 1208.701856][ T30] audit: type=1326 audit(1777546241.096:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14212 comm="syz.1.19435" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7ff601c code=0x7ffc0000 [ 1208.765285][T12380] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1208.786017][T14241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19447'. [ 1208.935593][T12380] usb 1-1: Using ep0 maxpacket: 8 [ 1208.948685][T12380] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1208.967374][T12380] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 1208.988576][T12380] usb 1-1: config 0 has no interface number 0 [ 1209.010068][T12380] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1209.046613][T12380] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1209.074072][T12380] usb 1-1: config 0 interface 88 has no altsetting 0 [ 1209.094089][T12380] usb 1-1: string descriptor 0 read error: -22 [ 1209.101022][T12380] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1209.114756][T14261] netlink: 'syz.4.19457': attribute type 1 has an invalid length. [ 1209.128239][T12380] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1209.153590][T12380] usb 1-1: config 0 descriptor?? [ 1209.182815][T12380] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input172 [ 1209.330939][T14233] udevd[14233]: Error opening device "/dev/input/event4": Input/output error [ 1209.358385][T14233] udevd[14233]: Unable to EVIOCGABS device "/dev/input/event4" [ 1209.386025][T14233] udevd[14233]: Unable to EVIOCGABS device "/dev/input/event4" [ 1209.421831][T12380] usb 1-1: USB disconnect, device number 121 [ 1209.692080][T14292] netlink: 'syz.4.19471': attribute type 5 has an invalid length. [ 1209.787197][T14300] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1209.945229][T12390] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1210.109725][T12390] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 1210.120911][T14321] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 1210.140177][T12390] usb 4-1: config 0 has no interface number 0 [ 1210.151736][T12390] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1210.172527][T12390] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1210.187917][T12390] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1210.199235][T12390] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.216658][T12390] usb 4-1: Product: syz [ 1210.221009][T12390] usb 4-1: Manufacturer: syz [ 1210.226088][T12390] usb 4-1: SerialNumber: syz [ 1210.234997][T12390] usb 4-1: config 0 descriptor?? [ 1210.245272][T12380] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1210.248813][T14294] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1210.274340][T12390] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1210.305346][T12390] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1210.318513][T14328] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1210.418265][T12380] usb 2-1: Using ep0 maxpacket: 32 [ 1210.437578][T12380] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 1210.456441][T12380] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 1210.484549][T12380] usb 2-1: string descriptor 0 read error: -22 [ 1210.516708][T12380] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1210.530696][T12380] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.549771][T14314] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1210.558504][T14338] netlink: 'syz.2.19494': attribute type 1 has an invalid length. [ 1210.581807][T12380] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1210.598419][T12380] usb 2-1: MIDIStreaming interface descriptor not found [ 1210.730461][ T10] usb 4-1: USB disconnect, device number 5 [ 1210.788766][ T10] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1210.822007][ T10] cyberjack 4-1:0.69: device disconnected [ 1210.858494][T12380] usb 2-1: USB disconnect, device number 121 [ 1211.164036][T14361] CIFS: VFS: UNC: path must begin with // or \\ [ 1211.171287][T14361] CIFS: VFS: Malformed UNC in devname [ 1211.525073][T14379] netlink: 'syz.4.19514': attribute type 3 has an invalid length. [ 1211.703861][T14391] __nla_validate_parse: 1 callbacks suppressed [ 1211.703881][T14391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19518'. [ 1212.155275][T12606] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1212.316520][T12606] usb 1-1: Using ep0 maxpacket: 32 [ 1212.329563][T12606] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 1212.351296][T12606] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 1212.388032][T12606] usb 1-1: string descriptor 0 read error: -22 [ 1212.394876][T12606] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1212.413362][T12606] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.443708][T14399] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1212.466105][T12606] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1212.487349][T12606] usb 1-1: MIDIStreaming interface descriptor not found [ 1212.768542][T12606] usb 1-1: USB disconnect, device number 122 [ 1213.485293][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1213.584048][T14455] sg_write: data in/out 487391/57 bytes for SCSI command 0x0-- guessing data in; [ 1213.584048][T14455] program syz.0.19552 not setting count and/or reply_len properly [ 1213.649274][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1213.665680][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1213.682943][ T10] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1213.700041][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 37, changing to 7 [ 1213.714739][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=8782, bcdDevice= 0.54 [ 1213.724702][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.733139][ T10] usb 5-1: Product: syz [ 1213.737874][ T10] usb 5-1: Manufacturer: syz [ 1213.744674][ T10] usb 5-1: SerialNumber: syz [ 1213.893030][T14470] binfmt_misc: register: failed to install interpreter file ./file0 [ 1213.976663][ T10] usb 5-1: Can't get UAC3 power state for id 11 [ 1213.999056][ T10] usb 5-1: 5:0: failed to get current value for ch 0 (-71) [ 1214.020015][ T10] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1214.030112][ T10] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1214.044961][ T10] usb 5-1: [5] FU [Generic In Capture Volume] ch = 1, val = 0/1/1 [ 1214.088428][T14479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19563'. [ 1214.137076][ T10] usb 5-1: USB disconnect, device number 6 [ 1214.245902][T14484] udevd[14484]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1214.259403][T14488] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1214.396814][T14494] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1214.419106][T14494] bond7 (unregistering): Released all slaves [ 1214.429534][T14499] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19572'. [ 1214.729752][T14517] xt_bpf: check failed: parse error [ 1215.051767][T14539] netlink: 4456 bytes leftover after parsing attributes in process `syz.4.19592'. [ 1215.125502][T12606] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1215.159449][T14544] netlink: 'syz.4.19594': attribute type 61 has an invalid length. [ 1215.176147][ T7899] Bluetooth: hci4: command 0x0406 tx timeout [ 1215.182552][ T7899] Bluetooth: hci1: command 0x0406 tx timeout [ 1215.290197][T12606] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1215.303358][T12606] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.311734][T12606] usb 3-1: Product: syz [ 1215.321396][T12606] usb 3-1: Manufacturer: syz [ 1215.326346][T12606] usb 3-1: SerialNumber: syz [ 1215.338326][T12606] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1215.374346][ T24] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1215.467070][T14557] m>e5n: entered promiscuous mode [ 1215.827456][T14581] gre1: entered promiscuous mode [ 1215.849136][T12606] usb 3-1: USB disconnect, device number 127 [ 1216.009757][T14591] nft_compat: unsupported protocol 5 [ 1216.455694][ T24] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1216.474281][ T24] ath9k_htc: Failed to initialize the device [ 1216.490356][T12606] usb 3-1: ath9k_htc: USB layer deinitialized [ 1216.596825][T14624] netlink: 'syz.3.19634': attribute type 30 has an invalid length. [ 1216.625440][T14624] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19634'. [ 1216.686550][T14624] bond3: option arp_missed_max: invalid value (0) [ 1216.693087][T14624] bond3: option arp_missed_max: allowed values 1 - 255 [ 1216.704345][T14624] bond3 (unregistering): Released all slaves [ 1217.222235][T14658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19650'. [ 1217.422201][T14670] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1217.433399][T12606] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1217.447579][T14670] bond1 (unregistering): Released all slaves [ 1217.585842][T12606] usb 5-1: Using ep0 maxpacket: 32 [ 1217.604894][T12606] usb 5-1: config 123 interface 0 has no altsetting 0 [ 1217.619139][T12606] usb 5-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 1217.638925][T12606] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.653432][T12606] usb 5-1: Product: syz [ 1217.659950][T12606] usb 5-1: Manufacturer: syz [ 1217.666284][T12606] usb 5-1: SerialNumber: syz [ 1217.705722][T14685] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19663'. [ 1217.887666][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 1217.914914][T12606] usb 5-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 1217.953302][T12606] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1217.972953][T12606] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 1217.993509][T14702] netlink: 1264 bytes leftover after parsing attributes in process `syz.3.19671'. [ 1218.002885][T12606] usb 5-1: media controller created [ 1218.037278][T12606] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1218.101934][T12606] set interface failed [ 1218.101993][T12606] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1218.122787][T12606] error writing reg: 0xff, val: 0x00 [ 1218.156503][T14710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19675'. [ 1218.224452][T12606] dvb_usb_mxl111sf 5-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 1218.247436][T12606] usb 5-1: USB disconnect, device number 7 [ 1218.629304][T14738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1218.650005][T14735] geneve4: entered promiscuous mode [ 1218.675510][T14735] geneve4: entered allmulticast mode [ 1218.816852][T14746] netlink: 56 bytes leftover after parsing attributes in process `syz.0.19693'. [ 1219.215309][T12606] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1219.240110][T14772] geneve4: entered promiscuous mode [ 1219.264225][T14772] geneve4: entered allmulticast mode [ 1219.405887][T12606] usb 3-1: Using ep0 maxpacket: 16 [ 1219.416488][T12606] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 1219.427736][T12606] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1219.455834][T12606] usb 3-1: config 0 has no interface number 0 [ 1219.478854][T12606] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1219.501957][T12606] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.530238][T12606] usb 3-1: Product: syz [ 1219.539152][T12606] usb 3-1: Manufacturer: syz [ 1219.544164][T12606] usb 3-1: SerialNumber: syz [ 1219.553582][T12606] usb 3-1: config 0 descriptor?? [ 1219.615542][T14793] openvswitch: netlink: IP tunnel dst address not specified [ 1219.776999][T14803] QAT: failed to copy from user cfg_data. [ 1219.788499][T12606] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1219.804826][T12606] uvcvideo 3-1:0.105: No valid video chain found. [ 1219.914627][T14811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19724'. [ 1219.916678][T12390] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1219.933381][T14811] netlink: 1 bytes leftover after parsing attributes in process `syz.4.19724'. [ 1219.955384][T14811] tc_dump_action: action bad kind [ 1220.023519][T12606] usb 3-1: USB disconnect, device number 2 [ 1220.095205][T12390] usb 2-1: Using ep0 maxpacket: 8 [ 1220.110808][T12390] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1220.124616][T12390] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1220.138763][T12390] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1220.151912][T12390] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.170177][T12390] usb 2-1: Product: syz [ 1220.177825][T12390] usb 2-1: Manufacturer: syz [ 1220.189534][T12390] usb 2-1: SerialNumber: syz [ 1220.207280][T12390] usb 2-1: config 0 descriptor?? [ 1220.450667][T14836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19737'. [ 1220.628997][T12390] usb 2-1: USB disconnect, device number 122 [ 1220.713086][T14848] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19743'. [ 1220.859238][ T30] audit: type=1326 audit(1777546253.766:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14855 comm="syz.3.19747" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 1220.905642][ T30] audit: type=1326 audit(1777546253.796:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14855 comm="syz.3.19747" exe="/root/syz-executor" sig=0 arch=40000003 syscall=217 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 1220.931503][ T30] audit: type=1326 audit(1777546253.796:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14855 comm="syz.3.19747" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 1220.954639][ T30] audit: type=1326 audit(1777546253.796:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14855 comm="syz.3.19747" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 1221.043007][T14864] netlink: 168 bytes leftover after parsing attributes in process `syz.3.19751'. [ 1221.188616][T14874] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1221.575499][ T24] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1221.701624][T14910] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1221.755421][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 1221.768026][ T24] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 1221.784573][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1221.804578][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1221.827170][ T24] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1221.836503][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.854844][ T24] usb 1-1: Product: syz [ 1221.875475][ T24] usb 1-1: Manufacturer: syz [ 1221.880131][ T24] usb 1-1: SerialNumber: syz [ 1221.893549][ T24] usb 1-1: config 0 descriptor?? [ 1222.115748][ T24] usb 1-1: USB disconnect, device number 123 [ 1222.392307][T14950] bridge0: entered promiscuous mode [ 1222.403260][T14950] bridge0: entered allmulticast mode [ 1222.420383][T14953] netlink: 'syz.3.19794': attribute type 10 has an invalid length. [ 1222.522690][T14958] netlink: 'syz.2.19796': attribute type 12 has an invalid length. [ 1222.542331][T14958] __nla_validate_parse: 3 callbacks suppressed [ 1222.542348][T14958] netlink: 132 bytes leftover after parsing attributes in process `syz.2.19796'. [ 1222.729742][T14969] netlink: 36 bytes leftover after parsing attributes in process `syz.4.19802'. [ 1223.211306][T15006] netlink: 'syz.3.19821': attribute type 10 has an invalid length. [ 1223.240551][T15006] vlan0: left promiscuous mode [ 1223.246769][T12382] usb 1-1: new full-speed USB device number 124 using dummy_hcd [ 1223.260156][T15010] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 1223.329370][T15012] netlink: 'syz.1.19824': attribute type 1 has an invalid length. [ 1223.429220][T12382] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 1223.438676][T12382] usb 1-1: config 0 has no interface number 0 [ 1223.459184][T12382] usb 1-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 1223.492950][T12382] usb 1-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1223.509760][T12382] usb 1-1: config 0 interface 200 has no altsetting 0 [ 1223.530491][T12382] usb 1-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 1223.541071][T12382] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.561319][T12382] usb 1-1: Product: syz [ 1223.567588][T12382] usb 1-1: Manufacturer: syz [ 1223.572841][T12382] usb 1-1: SerialNumber: syz [ 1223.580607][T12382] usb 1-1: config 0 descriptor?? [ 1223.803682][T12382] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.200/input/input174 [ 1223.848541][T12382] usb 1-1: USB disconnect, device number 124 [ 1224.662435][T15097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19866'. [ 1224.678310][T15097] netlink: 208 bytes leftover after parsing attributes in process `syz.4.19866'. [ 1224.818781][T15104] netlink: 'syz.1.19870': attribute type 5 has an invalid length. [ 1225.387547][T15138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19886'. [ 1225.631567][ T30] audit: type=1326 audit(1777546258.536:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15153 comm="syz.2.19894" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 1225.702744][ T30] audit: type=1326 audit(1777546258.536:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15153 comm="syz.2.19894" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 1225.738934][ T30] audit: type=1326 audit(1777546258.536:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15153 comm="syz.2.19894" exe="/root/syz-executor" sig=0 arch=40000003 syscall=11 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 1225.785239][ T30] audit: type=1326 audit(1777546258.536:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15153 comm="syz.2.19894" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 1225.819261][ T30] audit: type=1326 audit(1777546258.536:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15153 comm="syz.2.19894" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 1226.111124][T15183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19907'. [ 1226.122309][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1226.149144][T15183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19907'. [ 1226.287389][ T10] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 1226.308121][ T10] usb 3-1: config 0 has no interface number 0 [ 1226.328328][ T10] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1226.356747][ T10] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1226.366725][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.374846][ T10] usb 3-1: Product: syz [ 1226.394110][ T10] usb 3-1: Manufacturer: syz [ 1226.418528][ T10] usb 3-1: SerialNumber: syz [ 1226.441666][ T10] usb 3-1: config 0 descriptor?? [ 1226.468702][ T10] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 1226.785208][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1226.893574][T12382] usb 3-1: USB disconnect, device number 3 [ 1226.914507][T12382] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 1226.975443][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1226.989017][ T10] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1227.003510][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.022557][ T10] usb 5-1: config 0 descriptor?? [ 1227.035976][ T10] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1227.170358][ T30] audit: type=1326 audit(1777546260.076:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15238 comm="syz.3.19935" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 1227.192881][ T30] audit: type=1326 audit(1777546260.076:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15238 comm="syz.3.19935" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 1227.219119][ T30] audit: type=1326 audit(1777546260.076:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15238 comm="syz.3.19935" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 1227.242107][ T30] audit: type=1326 audit(1777546260.076:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15238 comm="syz.3.19935" exe="/root/syz-executor" sig=0 arch=40000003 syscall=275 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 1227.266426][ T30] audit: type=1326 audit(1777546260.076:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15238 comm="syz.3.19935" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 1227.305199][ T30] audit: type=1326 audit(1777546260.076:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15238 comm="syz.3.19935" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 1227.350775][ T30] audit: type=1326 audit(1777546260.076:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15238 comm="syz.3.19935" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 1227.358525][T15241] ip6erspan0: entered allmulticast mode [ 1227.378817][T12380] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1227.399471][ T30] audit: type=1326 audit(1777546260.076:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15238 comm="syz.3.19935" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 1227.427144][ T30] audit: type=1326 audit(1777546260.076:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15238 comm="syz.3.19935" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 1227.468543][ T10] gspca_sq930x: ucbus_write failed -71 [ 1227.487625][ T10] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 1227.514449][ T10] usb 5-1: USB disconnect, device number 8 [ 1227.535492][T12380] usb 1-1: Using ep0 maxpacket: 16 [ 1227.549697][T12380] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1227.556024][T15247] openvswitch: netlink: Key type 29 is not supported [ 1227.581308][T12380] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1227.592351][T12380] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 1227.604639][T12380] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 60930, setting to 1024 [ 1227.617614][T12380] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 1227.628648][T12380] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1227.643166][T12380] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1227.652816][T12380] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1227.670255][T12380] usb 1-1: SerialNumber: syz [ 1227.689627][T15235] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1227.702749][T15235] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1227.926682][T12380] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 1227.952551][T12380] usb 1-1: USB disconnect, device number 125 [ 1228.007643][T15267] Cannot find add_set index 32771 as target [ 1228.107351][T15273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19952'. [ 1228.458653][T12380] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1228.482584][T15297] netlink: 48 bytes leftover after parsing attributes in process `syz.4.19964'. [ 1228.599806][T15304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19968'. [ 1228.635261][T12380] usb 3-1: Using ep0 maxpacket: 8 [ 1228.645533][T12380] usb 3-1: config 0 has no interfaces? [ 1228.653553][T12380] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1228.664296][T12380] usb 3-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 1228.673485][T12380] usb 3-1: Product: syz [ 1228.677840][T12380] usb 3-1: Manufacturer: syz [ 1228.685873][T12380] usb 3-1: config 0 descriptor?? [ 1228.758589][T15311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19971'. [ 1228.819799][T15317] random: crng reseeded on system resumption [ 1228.923782][ T24] usb 3-1: USB disconnect, device number 4 [ 1229.030529][T15328] netlink: 'syz.3.19979': attribute type 1 has an invalid length. [ 1229.047859][T15332] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1229.200831][T15342] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 1229.330805][T15350] program syz.1.19989 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1229.347394][T15352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19990'. [ 1229.405264][ T24] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1229.501623][T12606] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1229.543785][T15363] netlink: 'syz.2.19996': attribute type 21 has an invalid length. [ 1229.551966][T15363] netlink: 128 bytes leftover after parsing attributes in process `syz.2.19996'. [ 1229.562138][T15363] netlink: 'syz.2.19996': attribute type 5 has an invalid length. [ 1229.565501][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 1229.577214][T15363] netlink: 'syz.2.19996': attribute type 6 has an invalid length. [ 1229.589581][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1229.595405][T15363] netlink: 3 bytes leftover after parsing attributes in process `syz.2.19996'. [ 1229.612061][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1229.634698][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1229.669803][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.32 [ 1229.683819][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.692331][T12606] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1229.702351][T12606] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.710477][ T24] usb 1-1: Product: syz [ 1229.714808][ T24] usb 1-1: Manufacturer: syz [ 1229.721712][ T24] usb 1-1: SerialNumber: syz [ 1229.727620][T12606] usb 5-1: config 0 descriptor?? [ 1229.760372][ T24] usb 1-1: config 0 descriptor?? [ 1229.771596][T15340] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1229.783421][ T24] mceusb 1-1:0.0: mceusb_dev_probe: device setup failed! [ 1229.801371][ T24] mceusb 1-1:0.0: probe with driver mceusb failed with error -12 [ 1229.995844][ T24] usb 1-1: USB disconnect, device number 126 [ 1230.145864][T12606] ath6kl: Failed to submit usb control message: -71 [ 1230.163443][T12606] ath6kl: unable to send the bmi data to the device: -71 [ 1230.178563][T12606] ath6kl: Unable to send get target info: -71 [ 1230.196714][T12606] ath6kl: Failed to init ath6kl core: -71 [ 1230.218228][T12606] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1230.245617][T12606] usb 5-1: USB disconnect, device number 9 [ 1230.465423][T12380] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1230.617366][T12380] usb 3-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 1230.634872][T12380] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1230.659064][T12380] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 1230.687611][T12380] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1230.705532][T12380] usb 3-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 1230.722181][T12380] usb 3-1: Product: syz [ 1230.731955][T12380] usb 3-1: Manufacturer: syz [ 1230.745400][T12380] usb 3-1: SerialNumber: syz [ 1230.766024][T12380] usb 3-1: config 0 descriptor?? [ 1230.793058][T12380] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1230.964456][ T30] audit: type=1326 audit(1777546263.866:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15434 comm="syz.0.20032" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff501c code=0x7ffc0000 [ 1231.092724][T12380] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1231.187488][T14278] udevd[14278]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1231.255686][T12606] usb 3-1: USB disconnect, device number 5 [ 1231.456099][T15463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1231.810227][T15486] bridge2: entered promiscuous mode [ 1231.945238][T12380] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1232.125284][T12380] usb 2-1: Using ep0 maxpacket: 32 [ 1232.139570][T12380] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1232.159561][T12380] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1232.177894][T15511] openvswitch: netlink: Tunnel attr 60 out of range max 16 [ 1232.182006][T12380] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1232.224070][T12380] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1232.254808][T12380] usb 2-1: config 1 has no interface number 0 [ 1232.262767][T12380] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1232.282915][T12380] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.317612][T12380] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1232.433877][T15523] netlink: 'syz.2.20075': attribute type 10 has an invalid length. [ 1232.510965][T12380] snd_usb_pod 2-1:1.1: set_interface failed [ 1232.517858][T12380] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1232.525509][T12380] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1232.536270][T12380] usb 2-1: USB disconnect, device number 123 [ 1232.543010][T15525] bond1: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 1232.799029][T15544] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.20085'. [ 1232.830525][T15544] veth0_to_bond: default FDB implementation only supports local addresses [ 1233.011721][T15558] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20094'. [ 1233.478846][T15588] netlink: 'syz.1.20108': attribute type 1 has an invalid length. [ 1233.541822][T15596] netlink: 16 bytes leftover after parsing attributes in process `syz.4.20111'. [ 1233.640416][T15601] random: crng reseeded on system resumption [ 1233.725676][T12606] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1233.888252][T12606] usb 3-1: Using ep0 maxpacket: 32 [ 1233.902969][T12606] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1233.916990][T12606] usb 3-1: config 0 has no interface number 0 [ 1233.928215][T12606] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1233.943279][T12606] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.951707][T12606] usb 3-1: Product: syz [ 1233.960154][T12606] usb 3-1: Manufacturer: syz [ 1233.965515][T12606] usb 3-1: SerialNumber: syz [ 1233.978294][T12606] usb 3-1: config 0 descriptor?? [ 1233.978448][T15622] set match dimension is over the limit! [ 1233.998755][T12606] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1234.021225][T12606] usb 3-1: selecting invalid altsetting 1 [ 1234.036012][T12606] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1234.041260][T12380] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1234.059141][T12606] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1234.072644][T12606] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1234.085243][T12606] usb 3-1: media controller created [ 1234.108585][T15624] ksmbd: Unknown IPC event: 3, ignore. [ 1234.119060][T12606] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1234.198910][T12606] usb 3-1: DVB: registering adapter 3 frontend 0 (Zarlink ZL10353 DVB-T)... [ 1234.214979][T12606] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 1234.228033][T12380] usb 1-1: Using ep0 maxpacket: 32 [ 1234.244110][T12380] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1234.269843][T12380] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1234.299971][T12380] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1234.322358][T12380] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.336815][T12606] DVB: Unable to find symbol mxl5005s_attach() [ 1234.339189][T12380] usb 1-1: config 0 descriptor?? [ 1234.387713][T12380] hub 1-1:0.0: USB hub found [ 1234.410714][T12606] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1234.500334][T12606] usb 3-1: USB disconnect, device number 6 [ 1234.575753][T12380] hub 1-1:0.0: 1 port detected [ 1234.778216][T12380] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 1234.793530][T12380] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 1234.816274][T12380] usbhid 1-1:0.0: can't add hid device: -71 [ 1234.828448][T12380] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1234.866135][T12380] usb 1-1: USB disconnect, device number 127 [ 1234.905226][ T24] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 1235.059053][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1235.059069][ T30] audit: type=1800 audit(1777546267.966:705): pid=15673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.20150" name="bus" dev="tmpfs" ino=3737 res=0 errno=0 [ 1235.069099][ T24] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1235.127758][ T24] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1235.165872][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1235.182889][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.199670][ T24] hub 5-1:4.0: USB hub found [ 1235.406503][ T24] hub 5-1:4.0: 8 ports detected [ 1235.422802][ T24] usb 5-1: selecting invalid altsetting 1 [ 1235.438442][ T24] hub 5-1:4.0: Using single TT (err -22) [ 1235.453396][ T24] hub 5-1:4.0: insufficient power available to use all downstream ports [ 1235.607056][ T24] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 1235.616312][ T24] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 1235.674680][ T24] usb 5-1: USB disconnect, device number 10 [ 1235.765796][T15709] [U] [ 1235.768566][T15709] [U] [ 1235.771338][T15709] [U] [ 1235.774078][T15709] [U] [ 1235.807243][T15709] [U] [ 1235.810009][T15709] [U] [ 1235.812739][T15709] [U] [ 1235.815464][T15709] [U] [ 1235.829001][T15709] [U] [ 1235.831746][T15709] [U] [ 1235.834475][T15709] [U] [ 1235.842554][T15708] [U] [ 1235.949713][T15722] netlink: 'syz.3.20174': attribute type 16 has an invalid length. [ 1235.957873][T15722] netlink: 156 bytes leftover after parsing attributes in process `syz.3.20174'. [ 1236.019501][T15726] netlink: 'syz.1.20176': attribute type 2 has an invalid length. [ 1236.126868][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1236.163023][ T30] audit: type=1326 audit(1777546269.066:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15735 comm="syz.0.20181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff501c code=0x7ffc0000 [ 1236.212961][ T30] audit: type=1326 audit(1777546269.066:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15735 comm="syz.0.20181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff501c code=0x7ffc0000 [ 1236.240723][ T30] audit: type=1326 audit(1777546269.106:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15735 comm="syz.0.20181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7ff501c code=0x7ffc0000 [ 1236.268349][ T30] audit: type=1326 audit(1777546269.106:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15735 comm="syz.0.20181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff501c code=0x7ffc0000 [ 1236.287066][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1236.313275][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1236.322488][ T24] usb 3-1: config 7 has an invalid interface number: 187 but max is 0 [ 1236.343197][ T24] usb 3-1: config 7 has no interface number 0 [ 1236.346995][ T30] audit: type=1326 audit(1777546269.106:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15735 comm="syz.0.20181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff501c code=0x7ffc0000 [ 1236.368557][ T24] usb 3-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1236.401062][ T24] usb 3-1: config 7 interface 187 has no altsetting 0 [ 1236.424778][ T24] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1236.448793][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.474444][ T24] usb 3-1: Product: syz [ 1236.489564][ T24] usb 3-1: Manufacturer: syz [ 1236.506740][ T24] usb 3-1: SerialNumber: syz [ 1236.734897][ T24] usb 3-1: Unknown endpoint type found, address 0x07 [ 1236.752066][ T24] usb 3-1: Unknown endpoint type found, address 0x03 [ 1236.768320][ T24] usb 3-1: Not enough endpoints found in device, aborting! [ 1236.895230][T12390] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 1236.925784][T15769] netlink: 'syz.3.20197': attribute type 1 has an invalid length. [ 1236.943406][T12380] usb 3-1: USB disconnect, device number 7 [ 1237.068922][T12390] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1237.087256][T12390] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1237.105373][T12390] usb 1-1: Product: syz [ 1237.112665][T12390] usb 1-1: Manufacturer: syz [ 1237.122470][T12390] usb 1-1: SerialNumber: syz [ 1237.146323][T12390] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1237.550496][T12390] vp7045: USB control message 'in' went wrong. [ 1237.577572][T12390] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1237.599452][T12390] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1237.622413][T12390] usb 1-1: USB disconnect, device number 2 [ 1237.655271][T15810] netlink: 'syz.4.20217': attribute type 11 has an invalid length. [ 1237.800430][T15819] libceph: resolve '0.' (ret=-3): failed [ 1238.186532][T15845] SET target dimension over the limit! [ 1238.410371][T15860] netlink: 830 bytes leftover after parsing attributes in process `syz.3.20243'. [ 1238.678850][T15881] fuse: Unknown parameter 'nd' [ 1238.696566][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.703086][T15880] openvswitch: netlink: IP tunnel dst address not specified [ 1238.712113][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.414280][T15925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20276'. [ 1239.942270][T15961] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1240.206716][T15980] PKCS8: Unsupported PKCS#8 version [ 1240.253940][T15983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20304'. [ 1240.270836][T15983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20304'. [ 1240.758951][T16019] program syz.4.20322 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1241.161611][T16037] bond7: option all_slaves_active: invalid value (8) [ 1241.189644][T16037] bond7 (unregistering): Released all slaves [ 1241.341744][T16056] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1241.516062][T16067] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1241.534499][T16071] random: crng reseeded on system resumption [ 1241.674116][T16079] netlink: 'syz.4.20350': attribute type 21 has an invalid length. [ 1241.686844][T16079] netlink: 'syz.4.20350': attribute type 1 has an invalid length. [ 1241.686865][T16079] netlink: 144 bytes leftover after parsing attributes in process `syz.4.20350'. [ 1241.705578][T12380] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 1241.857238][T12380] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 1241.876008][T12380] usb 2-1: config 0 has no interface number 0 [ 1241.895375][T12380] usb 2-1: config 0 interface 251 altsetting 0 endpoint 0x82 has invalid maxpacket 65535, setting to 64 [ 1241.917547][T12380] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1241.935214][T12380] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.948189][T12380] usb 2-1: Product: syz [ 1241.964536][T12380] usb 2-1: Manufacturer: syz [ 1241.969345][T12380] usb 2-1: SerialNumber: syz [ 1241.976934][T12380] usb 2-1: config 0 descriptor?? [ 1241.990119][T16062] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1242.045271][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1242.118273][T16102] netlink: 'syz.2.20361': attribute type 27 has an invalid length. [ 1242.123019][T16101] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 1242.195414][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1242.203442][ T24] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1242.225007][ T24] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1242.234484][T12380] asix 2-1:0.251: probe with driver asix failed with error -71 [ 1242.253073][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1242.269224][T12380] usb 2-1: USB disconnect, device number 124 [ 1242.278291][ T24] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1242.301295][ T24] usb 5-1: Product: syz [ 1242.314169][ T24] usb 5-1: Manufacturer: syz [ 1242.319077][T12606] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 1242.349525][ T24] hub 5-1:4.0: USB hub found [ 1242.487583][T12606] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1242.499451][T12606] usb 1-1: not running at top speed; connect to a high speed hub [ 1242.513504][T12606] usb 1-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 1242.523656][T12606] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.532018][T12606] usb 1-1: Product: syz [ 1242.536831][T12606] usb 1-1: Manufacturer: syz [ 1242.541547][T12606] usb 1-1: SerialNumber: syz [ 1242.556825][ T24] hub 5-1:4.0: 2 ports detected [ 1242.575231][T12382] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1242.588087][T12606] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 1242.652234][T12606] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1242.745283][T12382] usb 3-1: Using ep0 maxpacket: 16 [ 1242.757642][T12382] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 1242.760379][ T24] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 1242.778167][T12382] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1242.795438][ T24] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 1242.812817][T12382] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.827724][T12606] snd-usb-hiface 1-1:1.0: probe with driver snd-usb-hiface failed with error -22 [ 1242.833397][T12382] usb 3-1: Product: syz [ 1242.853582][T12382] usb 3-1: Manufacturer: syz [ 1242.866751][ T24] usb 5-1: USB disconnect, device number 11 [ 1242.874302][T12382] usb 3-1: SerialNumber: syz [ 1242.891657][T12382] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1242.908842][T12382] r8152-cfgselector 3-1: config 0 descriptor?? [ 1242.931581][T16128] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1243.007029][T12606] usb 1-1: can't set first interface for hiFace device. [ 1243.033905][T12606] snd-usb-hiface 1-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 1243.063408][T12606] usb 1-1: can't set first interface for hiFace device. [ 1243.071146][T12606] snd-usb-hiface 1-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 1243.085970][T12606] usb 1-1: USB disconnect, device number 3 [ 1243.129742][T16065] udevd[16065]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1243.341247][T12380] r8152-cfgselector 3-1: USB disconnect, device number 8 [ 1243.608257][T16165] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.20391'. [ 1243.619367][T16165] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1244.127667][T16192] bridge10: the hash_elasticity option has been deprecated and is always 16 [ 1244.155907][T16199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20406'. [ 1244.761766][T16233] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1244.936761][T16246] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 1245.187600][T16263] netlink: 'syz.0.20437': attribute type 61 has an invalid length. [ 1245.204526][T16263] netlink: 'syz.0.20437': attribute type 62 has an invalid length. [ 1245.475404][T16280] bond3: option all_slaves_active: invalid value (8) [ 1245.492170][T16280] bond3 (unregistering): Released all slaves [ 1245.856851][T16306] netlink: set zone limit has 8 unknown bytes [ 1245.925824][T16313] netlink: 'syz.3.20461': attribute type 3 has an invalid length. [ 1246.069578][T16324] trusted_key: encrypted_key: insufficient parameters specified [ 1246.595255][T12606] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1246.742257][T16371] netlink: 28 bytes leftover after parsing attributes in process `syz.2.20489'. [ 1246.754113][T12606] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1246.763136][T12606] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 1246.791361][T12606] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1246.816795][T12606] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1246.836010][T12606] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1246.844668][T12606] usb 5-1: Manufacturer: syz [ 1246.852543][T12606] usb 5-1: config 0 descriptor?? [ 1246.867841][T12606] igorplugusb 5-1:0.0: endpoint incorrect [ 1246.875244][T12390] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1247.035445][T12390] usb 1-1: Using ep0 maxpacket: 32 [ 1247.042063][T12390] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1247.054489][T12390] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1247.077032][T12606] usb 5-1: USB disconnect, device number 12 [ 1247.095419][T12390] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1247.128370][T12390] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1247.140482][T12390] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1247.163219][T12390] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1247.166543][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1247.174271][T12390] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.193942][T12390] usb 1-1: Product: syz [ 1247.198617][T12390] usb 1-1: Manufacturer: syz [ 1247.203274][T12390] usb 1-1: SerialNumber: syz [ 1247.213717][T12390] usb 1-1: config 0 descriptor?? [ 1247.301599][T16393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20500'. [ 1247.361510][ T10] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1247.377250][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.395558][ T10] usb 4-1: Product: syz [ 1247.406309][ T10] usb 4-1: Manufacturer: syz [ 1247.416939][ T10] usb 4-1: SerialNumber: syz [ 1247.428724][ T10] usb 4-1: config 0 descriptor?? [ 1247.439865][ T10] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1247.492452][T16401] netlink: 'syz.2.20503': attribute type 21 has an invalid length. [ 1247.500907][T16401] netlink: 'syz.2.20503': attribute type 6 has an invalid length. [ 1247.510811][T16401] netlink: 132 bytes leftover after parsing attributes in process `syz.2.20503'. [ 1247.650510][T12390] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1247.679839][T12390] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1247.700668][T12390] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1247.725774][T12390] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1247.734969][T12390] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1247.741808][T12390] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1247.750164][T12390] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1247.756844][T12390] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1247.763575][T12390] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1247.771151][T12390] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1247.778272][T12390] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1247.785771][T12390] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1247.798870][T12390] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1247.815369][T12390] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1247.828544][T12390] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1247.841189][T12390] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1247.844208][ T10] sonixb 4-1:0.0: Error writing register 01: -71 [ 1247.859346][ T10] sonixb 4-1:0.0: probe with driver sonixb failed with error -71 [ 1247.865005][T12390] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1247.884982][ T10] usb 4-1: USB disconnect, device number 6 [ 1247.899152][T12390] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1247.919120][T12390] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1247.938563][T12390] input input176: Timeout waiting for response from device. [ 1247.970493][T12390] usb 1-1: USB disconnect, device number 4 [ 1248.235263][T12382] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1248.243028][T12380] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1248.303304][T16438] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20521'. [ 1248.406383][T12380] usb 2-1: Using ep0 maxpacket: 16 [ 1248.418492][T12380] usb 2-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 1248.431257][T12382] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1248.458848][T12380] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1248.474237][T12382] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1248.505366][T12382] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1248.515421][T12380] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1248.530758][T12382] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1248.540712][T12380] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1248.552265][T12382] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1248.562469][T12382] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.572944][T12380] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1248.582698][T12380] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.593514][T12382] usb 5-1: config 0 descriptor?? [ 1248.599571][T12380] usb 2-1: Product: syz [ 1248.604428][T12380] usb 2-1: Manufacturer: syz [ 1248.613779][T12380] usb 2-1: SerialNumber: syz [ 1248.629478][T12380] usb 2-1: config 0 descriptor?? [ 1248.785937][T16458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20530'. [ 1248.813649][T12382] hdpvr 5-1:0.0: firmware version 0x12 dated ¾@µ2Ì7ÔB½•ËDŠ^jvi0ì [ 1248.813649][T12382] †Ã›‘êpY [ 1248.827582][ T30] audit: type=1326 audit(1777546281.716:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16459 comm="syz.2.20532" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 1248.884950][ T30] audit: type=1326 audit(1777546281.726:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16459 comm="syz.2.20532" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 1248.890432][T12380] appledisplay: Apple Cinema Display connected [ 1248.931015][ T30] audit: type=1326 audit(1777546281.756:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16459 comm="syz.2.20532" exe="/root/syz-executor" sig=0 arch=40000003 syscall=101 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 1249.018307][T12382] hdpvr 5-1:0.0: device init failed [ 1249.031086][ T30] audit: type=1326 audit(1777546281.756:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16459 comm="syz.2.20532" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 1249.053800][T12382] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 1249.087374][T12382] usb 5-1: USB disconnect, device number 13 [ 1249.112233][T16466] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1249.131359][ T30] audit: type=1326 audit(1777546281.756:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16459 comm="syz.2.20532" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 1249.217827][T12380] usb 2-1: USB disconnect, device number 125 [ 1249.223933][ C0] usb 2-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 1249.264827][T12380] appledisplay: Apple Cinema Display disconnected [ 1249.338010][T16473] xt_CONNSECMARK: invalid mode: 0 [ 1249.405831][T16476] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20540'. [ 1249.448115][T16480] netlink: 32 bytes leftover after parsing attributes in process `syz.0.20542'. [ 1249.806796][T16499] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1249.814219][T16499] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1249.910168][ T30] audit: type=1326 audit(1777546282.816:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16504 comm="syz.2.20554" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 1249.957559][ T30] audit: type=1326 audit(1777546282.816:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16504 comm="syz.2.20554" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 1249.986980][ T30] audit: type=1326 audit(1777546282.856:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16504 comm="syz.2.20554" exe="/root/syz-executor" sig=0 arch=40000003 syscall=264 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 1250.009639][ T30] audit: type=1326 audit(1777546282.856:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16504 comm="syz.2.20554" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 1250.016054][T12380] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1250.032455][ T30] audit: type=1326 audit(1777546282.856:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16504 comm="syz.2.20554" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 1250.128911][T16512] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20558'. [ 1250.186558][T12380] usb 1-1: too many configurations: 241, using maximum allowed: 8 [ 1250.211421][T12380] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1250.238891][T12380] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.251992][T12380] usb 1-1: Product: syz [ 1250.256517][T12380] usb 1-1: Manufacturer: syz [ 1250.261295][T12380] usb 1-1: SerialNumber: syz [ 1250.274295][T12380] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1250.292031][T16519] qrtr: Invalid version 164 [ 1250.299431][T12373] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1250.598995][ C0] usb 1-1: ath9k_htc: over RX MAX_PKT_NUM [ 1250.802000][T12390] usb 1-1: USB disconnect, device number 5 [ 1250.893355][T16546] netlink: 20 bytes leftover after parsing attributes in process `syz.1.20572'. [ 1251.290236][ T1024] syz_tun: tun_net_xmit 90 [ 1251.315654][ T24] syz_tun: tun_net_xmit 110 [ 1251.337888][T16575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20589'. [ 1251.340803][T12373] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1251.389595][T12373] ath9k_htc: Failed to initialize the device [ 1251.409790][T12390] usb 1-1: ath9k_htc: USB layer deinitialized [ 1251.670257][T16594] ipt_rpfilter: unknown options [ 1251.847893][T16608] netlink: 'syz.1.20605': attribute type 1 has an invalid length. [ 1251.857712][T16610] netlink: 'syz.0.20606': attribute type 1 has an invalid length. [ 1251.886906][T16610] __nla_validate_parse: 2 callbacks suppressed [ 1251.886922][T16610] netlink: 56 bytes leftover after parsing attributes in process `syz.0.20606'. [ 1252.044746][T16622] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1252.056911][T12390] syz_tun: tun_net_xmit 110 [ 1252.064064][T12390] syz_tun: tun_net_xmit 90 [ 1252.565459][T12390] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1252.605500][T12373] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 1252.737074][T12390] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1252.755288][T12390] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1252.771996][T12390] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1252.788058][T12373] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1252.795512][T12390] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1252.811212][T12373] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.832613][T12390] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1252.846508][T12373] usb 2-1: config 0 descriptor?? [ 1252.862928][T12390] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.868144][T12373] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1252.890922][T12390] usb 3-1: config 0 descriptor?? [ 1252.969955][T16669] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1253.066380][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1253.113887][T12390] hdpvr 3-1:0.0: firmware version 0xd dated —jl;™S11´Ôø!ºvOp³ [ 1253.113887][T12390] 4(r¥ý [ 1253.113887][T12390] d×Å2}±dæ~ýýŠÙ­^r¤ [ 1253.226108][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1253.236372][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1253.254862][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1253.276206][T12373] gp8psk: usb in 137 operation failed. [ 1253.282948][T16683] bond2: entered promiscuous mode [ 1253.284956][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1253.289785][T16683] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1253.301693][T12373] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1253.331009][T12390] hdpvr 3-1:0.0: device init failed [ 1253.336410][T12390] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 1253.354870][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1253.365294][T12390] usb 3-1: USB disconnect, device number 9 [ 1253.375331][T12373] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1253.401340][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 1253.414529][T12373] usb 2-1: USB disconnect, device number 126 [ 1253.431191][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1253.457916][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x75, changing to 0x5 [ 1253.469912][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1253.482132][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1253.499790][ T10] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1253.509608][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.518372][ T10] usb 5-1: Product: syz [ 1253.522738][ T10] usb 5-1: Manufacturer: syz [ 1253.527782][ T10] usb 5-1: SerialNumber: syz [ 1253.535834][ T10] usb 5-1: config 0 descriptor?? [ 1253.541793][T16664] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1253.554031][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1253.619718][ T10] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 1253.667543][T16064] udevd[16064]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1253.685992][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1253.792699][T12390] usb 5-1: USB disconnect, device number 14 [ 1253.847324][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 1253.863481][ T24] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 32 [ 1253.886965][ T24] usb 4-1: New USB device found, idVendor=0499, idProduct=105c, bcdDevice= 0.40 [ 1253.898613][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.907226][ T24] usb 4-1: Product: syz [ 1253.911490][ T24] usb 4-1: Manufacturer: syz [ 1253.923459][ T24] usb 4-1: SerialNumber: syz [ 1253.945793][T16686] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1254.064105][T16708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20650'. [ 1254.086676][T16708] ?`: entered promiscuous mode [ 1254.172831][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1254.268310][ T24] usb 4-1: USB disconnect, device number 7 [ 1254.335096][T16722] lo: entered promiscuous mode [ 1254.348444][T16064] udevd[16064]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1254.356857][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1254.548376][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1254.571067][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1254.581396][ T10] usb 3-1: config 0 has no interface number 0 [ 1254.601332][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1254.612848][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1254.645597][ T10] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 1254.659825][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.668243][ T10] usb 3-1: Product: syz [ 1254.672523][ T10] usb 3-1: Manufacturer: syz [ 1254.677853][ T10] usb 3-1: SerialNumber: syz [ 1254.686079][ T10] usb 3-1: config 0 descriptor?? [ 1254.718968][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1254.972536][ T10] usb 3-1: USB disconnect, device number 10 [ 1255.241358][T16758] "syz.0.20675" (16758) uses obsolete ecb(arc4) skcipher [ 1255.296289][T16767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20678'. [ 1255.665280][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1255.707063][T12390] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1255.826774][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 1255.837153][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1255.862317][ T24] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1255.883175][T12390] usb 5-1: Using ep0 maxpacket: 16 [ 1255.895604][ T24] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 6 [ 1255.913378][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1255.926731][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1255.945213][T12390] usb 5-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 1255.965243][T12390] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1255.978403][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.988449][T12390] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1256.000369][T12390] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1256.013968][T16773] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1256.022046][T16773] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1256.047665][ T24] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 1256.064943][T12390] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1256.074408][T12390] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.082573][T12390] usb 5-1: Product: syz [ 1256.087425][T12390] usb 5-1: Manufacturer: syz [ 1256.092449][T12390] usb 5-1: SerialNumber: syz [ 1256.111043][T12390] usb 5-1: config 0 descriptor?? [ 1256.210540][T16819] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1256.269729][T12388] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1256.281553][ T24] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 1256.312529][ T24] usb 4-1: USB disconnect, device number 8 [ 1256.358734][T12390] appledisplay: Apple Cinema Display connected [ 1256.439803][T12388] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1256.456770][T12388] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1256.468206][T12388] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1256.477918][T12388] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1256.488984][T12388] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1256.503001][T12388] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1256.516910][T12388] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1256.543761][T12388] usb 3-1: Product: syz [ 1256.555354][T12388] usb 3-1: Manufacturer: syz [ 1256.579718][T12388] cdc_wdm 3-1:1.0: skipping garbage [ 1256.595151][T12388] cdc_wdm 3-1:1.0: skipping garbage [ 1256.614120][T12388] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1256.624132][ T24] usb 5-1: USB disconnect, device number 15 [ 1256.630154][ C1] usb 5-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 1256.642553][T12388] cdc_wdm 3-1:1.0: Unknown control protocol [ 1256.657139][ T24] appledisplay: Apple Cinema Display disconnected [ 1256.789273][T16810] cdc_wdm 3-1:1.0: Error submitting int urb - -90 [ 1256.800821][T12388] usb 3-1: USB disconnect, device number 11 [ 1257.090947][T16859] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20723'. [ 1257.361577][T16876] netlink: 32 bytes leftover after parsing attributes in process `syz.1.20732'. [ 1257.638595][T16895] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 1257.905575][T12373] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 1258.076904][T12373] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1258.093842][T12373] usb 2-1: config 0 has no interface number 0 [ 1258.100914][T12373] usb 2-1: config 0 interface 41 has no altsetting 0 [ 1258.110999][T12373] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1258.123191][T12373] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.133874][T12373] usb 2-1: Product: syz [ 1258.155297][T12373] usb 2-1: Manufacturer: syz [ 1258.163909][T12373] usb 2-1: SerialNumber: syz [ 1258.174490][T12373] usb 2-1: config 0 descriptor?? [ 1258.231587][T16934] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.20761'. [ 1258.426006][T16947] netlink: ct family unspecified [ 1258.433697][T16948] netlink: 40 bytes leftover after parsing attributes in process `syz.0.20767'. [ 1258.443106][T16947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1258.445552][T12388] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 1258.596077][T16955] netlink: 'syz.4.20772': attribute type 27 has an invalid length. [ 1258.605630][T12373] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1258.615412][T16955] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 1258.635502][T12388] usb 4-1: config 230 has an invalid interface number: 217 but max is 0 [ 1258.637770][T12373] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 1258.666138][T12388] usb 4-1: config 230 has an invalid interface number: 236 but max is 0 [ 1258.677646][T12373] usb 2-1: USB disconnect, device number 127 [ 1258.690560][T12388] usb 4-1: config 230 has 2 interfaces, different from the descriptor's value: 1 [ 1258.708646][T16959] openvswitch: netlink: Missing key (keys=840, expected=2000) [ 1258.716746][T12388] usb 4-1: config 230 has no interface number 0 [ 1258.724187][T12388] usb 4-1: config 230 has no interface number 1 [ 1258.750111][T12388] usb 4-1: config 230 interface 217 altsetting 201 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1258.789339][T12388] usb 4-1: too many endpoints for config 230 interface 236 altsetting 175: 162, using maximum allowed: 30 [ 1258.813142][T12388] usb 4-1: config 230 interface 236 altsetting 175 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1258.840122][T12388] usb 4-1: config 230 interface 236 altsetting 175 has 1 endpoint descriptor, different from the interface descriptor's value: 162 [ 1258.867792][T12388] usb 4-1: config 230 interface 217 has no altsetting 0 [ 1258.884176][T12388] usb 4-1: config 230 interface 236 has no altsetting 0 [ 1258.905351][T12388] usb 4-1: New USB device found, idVendor=10b8, idProduct=1f9c, bcdDevice=6c.4c [ 1258.918838][T12388] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.936804][T12388] usb 4-1: Product: syz [ 1258.943969][T12388] usb 4-1: Manufacturer: syz [ 1258.949004][T12388] usb 4-1: SerialNumber: syz [ 1259.145860][T16979] netlink: 'syz.2.20783': attribute type 3 has an invalid length. [ 1259.188815][T12388] dvb-usb: found a 'DiBcom TFE8096P reference design' in cold state, will try to load a firmware [ 1259.285722][T12388] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1259.304526][T12388] dib0700: firmware download failed at 7 with -8 [ 1259.321620][T16988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20786'. [ 1259.339488][T12388] dvb-usb: found a 'DiBcom TFE8096P reference design' in cold state, will try to load a firmware [ 1259.377032][T12388] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1259.395368][T12388] dib0700: firmware download failed at 7 with -8 [ 1259.427635][T12388] usb 4-1: USB disconnect, device number 9 [ 1259.525805][T16992] bond7: option xmit_hash_policy: invalid value (6) [ 1259.541047][T16992] bond7 (unregistering): Released all slaves [ 1259.599184][T17001] netlink: 'syz.0.20793': attribute type 1 has an invalid length. [ 1259.610951][T17001] netlink: 'syz.0.20793': attribute type 1 has an invalid length. [ 1259.861114][T17017] libceph: resolve '0' (ret=-3): failed [ 1260.128919][T17037] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 1260.222868][T17041] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1260.285594][T17047] netlink: 'syz.4.20814': attribute type 21 has an invalid length. [ 1260.420243][T17055] netlink: 348 bytes leftover after parsing attributes in process `syz.4.20821'. [ 1260.714797][T17075] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1260.759852][T17080] x_tables: duplicate underflow at hook 2 [ 1260.846536][T17083] usb usb8: usbfs: process 17083 (syz.3.20834) did not claim interface 0 before use [ 1260.855574][T12388] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1261.027184][T12388] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1261.047109][T12388] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.073239][T12388] usb 3-1: config 220 has no interface number 2 [ 1261.087413][T12388] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1261.115206][T12388] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1261.129673][T12388] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1261.144854][T12388] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1261.173525][T12388] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1261.192795][T12388] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.215363][T12388] usb 3-1: Product: syz [ 1261.225269][T12388] usb 3-1: Manufacturer: syz [ 1261.235220][T12388] usb 3-1: SerialNumber: syz [ 1261.487602][T12388] usb 3-1: selecting invalid altsetting 0 [ 1261.521380][T12388] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1261.547760][T12388] uvcvideo 3-1:220.0: No valid video chain found. [ 1261.580961][T12388] usb 3-1: selecting invalid altsetting 0 [ 1261.594244][T17120] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1261.594710][T12388] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1261.640248][T12388] usb 3-1: USB disconnect, device number 12 [ 1262.047353][T17137] netlink: 'syz.3.20859': attribute type 61 has an invalid length. [ 1262.065495][T17137] netlink: 'syz.3.20859': attribute type 62 has an invalid length. [ 1262.156267][ T10] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 1262.361957][ T10] usb 5-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=c7.b3 [ 1262.393773][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.409839][ T10] usb 5-1: Product: syz [ 1262.424892][ T10] usb 5-1: Manufacturer: syz [ 1262.439114][ T10] usb 5-1: SerialNumber: syz [ 1262.457603][ T10] usb 5-1: config 0 descriptor?? [ 1262.478429][ T10] cypress_cy7c63 5-1:0.0: Cypress CY7C63xxx device now attached [ 1262.611008][T17157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20868'. [ 1262.699402][T12388] usb 5-1: USB disconnect, device number 16 [ 1262.721630][T12388] cypress_cy7c63 5-1:0.0: Cypress CY7C63xxx device now disconnected [ 1262.779719][T17165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20873'. [ 1263.158691][T17188] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1263.309356][T17198] m1Ie5n: entered promiscuous mode [ 1263.378233][T17205] netlink: 'syz.4.20892': attribute type 21 has an invalid length. [ 1263.406227][T17205] netlink: 128 bytes leftover after parsing attributes in process `syz.4.20892'. [ 1263.424650][T17205] netlink: 'syz.4.20892': attribute type 5 has an invalid length. [ 1263.434873][T17205] netlink: 'syz.4.20892': attribute type 6 has an invalid length. [ 1263.476977][T17205] netlink: 3 bytes leftover after parsing attributes in process `syz.4.20892'. [ 1264.277230][T17265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20922'. [ 1264.439384][T17277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20927'. [ 1264.717872][ T30] audit: type=1326 audit(1777546297.626:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17296 comm="syz.2.20938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 1264.779926][ T30] audit: type=1326 audit(1777546297.656:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17296 comm="syz.2.20938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 1264.813678][ T30] audit: type=1326 audit(1777546297.656:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17296 comm="syz.2.20938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 1264.860329][ T30] audit: type=1326 audit(1777546297.656:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17296 comm="syz.2.20938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 1264.923241][T17305] netlink: 830 bytes leftover after parsing attributes in process `syz.1.20939'. [ 1265.210181][T17323] netlink: 'syz.1.20950': attribute type 8 has an invalid length. [ 1265.231151][T17326] openvswitch: netlink: IP tunnel dst address not specified [ 1265.548316][T17347] netlink: 128 bytes leftover after parsing attributes in process `syz.4.20962'. [ 1265.576642][T17347] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1265.653409][T17356] netlink: 172 bytes leftover after parsing attributes in process `syz.3.20966'. [ 1265.663180][T17356] netlink: 172 bytes leftover after parsing attributes in process `syz.3.20966'. [ 1266.292707][T17398] mac80211_hwsim hwsim64 ..ãc¤±: renamed from wlan1 (while UP) [ 1267.125652][T12388] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1267.282468][T17458] dlm: no locking on control device [ 1267.287983][T12388] usb 2-1: Using ep0 maxpacket: 16 [ 1267.302389][T12388] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 1267.316128][T12388] usb 2-1: config 0 has no interface number 0 [ 1267.332497][T12388] usb 2-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 1267.360565][T12388] usb 2-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x69, changing to 0x9 [ 1267.396561][T12388] usb 2-1: config 0 interface 49 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 1267.417170][T12388] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 1267.428917][T12388] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.438488][T12388] usb 2-1: Product: syz [ 1267.442845][T12388] usb 2-1: Manufacturer: syz [ 1267.448882][T12388] usb 2-1: SerialNumber: syz [ 1267.458345][T12388] usb 2-1: config 0 descriptor?? [ 1267.464657][T17463] sg_write: data in/out 229343/136 bytes for SCSI command 0x2-- guessing data in; [ 1267.464657][T17463] program syz.0.21017 not setting count and/or reply_len properly [ 1267.488381][T17435] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1267.730094][T12388] usb 2-1: USB disconnect, device number 2 [ 1268.526679][T17535] netlink: 'syz.2.21052': attribute type 2 has an invalid length. [ 1269.042552][T17570] __nla_validate_parse: 2 callbacks suppressed [ 1269.042572][T17570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21069'. [ 1269.497824][ T30] audit: type=1326 audit(1777546302.406:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17604 comm="syz.0.21087" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff501c code=0x7ffc0000 [ 1269.573541][ T30] audit: type=1326 audit(1777546302.406:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17604 comm="syz.0.21087" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff501c code=0x7ffc0000 [ 1269.644228][ T30] audit: type=1326 audit(1777546302.406:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17604 comm="syz.0.21087" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff501c code=0x7ffc0000 [ 1269.699110][T17617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21092'. [ 1269.711822][ T30] audit: type=1326 audit(1777546302.406:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17604 comm="syz.0.21087" exe="/root/syz-executor" sig=0 arch=40000003 syscall=77 compat=1 ip=0xf7ff501c code=0x7ffc0000 [ 1269.790960][ T30] audit: type=1326 audit(1777546302.406:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17604 comm="syz.0.21087" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff501c code=0x7ffc0000 [ 1269.831331][ T30] audit: type=1326 audit(1777546302.406:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17604 comm="syz.0.21087" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff501c code=0x7ffc0000 [ 1269.899321][ T30] audit: type=1326 audit(1777546302.406:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17604 comm="syz.0.21087" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff501c code=0x7ffc0000 [ 1269.972489][ T30] audit: type=1326 audit(1777546302.406:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17604 comm="syz.0.21087" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7ff501c code=0x7ffc0000 [ 1270.005550][T12388] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1270.018969][ T30] audit: type=1326 audit(1777546302.406:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17604 comm="syz.0.21087" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7ff501c code=0x7ffc0000 [ 1270.172170][T12388] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1270.185222][T12388] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1270.193610][T17641] IPv6: NLM_F_CREATE should be specified when creating new route [ 1270.210759][T17641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21105'. [ 1270.212366][T12388] usb 4-1: Product: syz [ 1270.237223][T12388] usb 4-1: SerialNumber: syz [ 1270.251331][T12388] usb 4-1: config 0 descriptor?? [ 1270.468373][T12388] hso 4-1:0.0: Can't find BULK endpoints [ 1270.679436][T12388] usb 4-1: USB disconnect, device number 10 [ 1270.749598][T17677] misc userio: The device must be registered before sending interrupts [ 1270.920336][T17687] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1270.932775][T17687] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1270.958012][T17693] ip6gretap2: entered allmulticast mode [ 1271.142597][T17705] sg_write: data in/out 229343/136 bytes for SCSI command 0x2-- guessing data in; [ 1271.142597][T17705] program syz.2.21137 not setting count and/or reply_len properly [ 1271.652753][T17739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21150'. [ 1271.747304][T17745] netlink: 5 bytes leftover after parsing attributes in process `syz.3.21156'. [ 1271.855370][T17749] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 1271.903715][T17754] netlink: 32 bytes leftover after parsing attributes in process `syz.2.21161'. [ 1272.084639][T17767] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1272.648102][T17800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1272.760705][T17803] netlink: 'syz.2.21184': attribute type 1 has an invalid length. [ 1272.884205][T17812] netlink: 76 bytes leftover after parsing attributes in process `syz.4.21189'. [ 1272.895230][T12388] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1273.024124][T17820] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1273.068858][T12388] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1273.087097][T12388] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1273.108427][T12388] usb 4-1: config 220 has no interface number 2 [ 1273.114968][T12388] usb 4-1: config 220 interface 1 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 56 [ 1273.127127][T12388] usb 4-1: config 220 interface 1 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1023 [ 1273.167300][T12388] usb 4-1: config 220 interface 1 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1273.192093][T12388] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1273.202963][T12388] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1273.210086][T12388] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1273.219230][T12388] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1273.230916][T12388] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.239081][T12388] usb 4-1: Product: syz [ 1273.247166][T12388] usb 4-1: Manufacturer: syz [ 1273.251879][T12388] usb 4-1: SerialNumber: syz [ 1273.497611][T12388] usb 4-1: selecting invalid altsetting 0 [ 1273.529456][T12388] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1273.542664][T12388] uvcvideo 4-1:220.0: No valid video chain found. [ 1273.560985][T12388] usb 4-1: selecting invalid altsetting 0 [ 1273.569943][T12388] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1273.595189][T12388] usb 4-1: USB disconnect, device number 11 [ 1273.706398][T17857] ptrace attach of "./syz-executor exec"[6287] was attempted by "./syz-executor exec"[17857] [ 1273.826306][T17865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21215'. [ 1273.995292][T12373] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1274.160790][T12373] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1274.172492][T12373] usb 3-1: config 1 has an invalid interface number: 240 but max is 1 [ 1274.187842][T12373] usb 3-1: config 1 has no interface number 1 [ 1274.203762][T12373] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1274.234221][T12373] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1274.247391][T12373] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1274.265164][T12373] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.283462][T12373] usb 3-1: Product: syz [ 1274.287980][T12373] usb 3-1: Manufacturer: syz [ 1274.298287][T12373] usb 3-1: SerialNumber: syz [ 1274.366389][T17892] netlink: 'syz.4.21228': attribute type 61 has an invalid length. [ 1274.524270][T17904] kAFS: unable to lookup cell '(,c/ûL' [ 1274.543619][T12373] smsusb:smsusb_probe: board id=8, interface number 0 [ 1274.566019][T12373] smsusb:smsusb_probe: board id=8, interface number 240 [ 1274.593281][T12373] usb 3-1: USB disconnect, device number 13 [ 1275.006481][T17934] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21249'. [ 1275.210193][T17949] IPv6: NLM_F_CREATE should be specified when creating new route [ 1275.333125][T17955] SET target dimension over the limit! [ 1275.479834][T17964] netlink: 60 bytes leftover after parsing attributes in process `syz.4.21267'. [ 1275.548017][T17972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21268'. [ 1275.956504][T18001] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1276.245622][T18023] xt_TCPMSS: Only works on TCP SYN packets [ 1276.617281][T18051] netlink: 'syz.4.21305': attribute type 5 has an invalid length. [ 1276.645322][T12373] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1276.826827][T12373] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1276.843174][T12373] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.857654][T18065] €Â: renamed from virt_wifi0 [ 1276.874505][T12373] usb 4-1: config 0 descriptor?? [ 1276.898085][T12373] cp210x 4-1:0.0: cp210x converter detected [ 1276.923085][T18067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21316'. [ 1277.251430][T18089] netlink: 'syz.0.21327': attribute type 6 has an invalid length. [ 1277.302730][T12373] cp210x 4-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 1277.325206][T12373] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 1277.352704][T12373] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1277.382462][T12373] usb 4-1: USB disconnect, device number 12 [ 1277.421046][T12373] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1277.451099][T12373] cp210x 4-1:0.0: device disconnected [ 1277.494911][T18099] binder: 18098:18099 ioctl c018620c 800000c0 returned -22 [ 1277.582358][T18107] bridge0: port 3(netdevsim1) entered blocking state [ 1277.605370][T18107] bridge0: port 3(netdevsim1) entered disabled state [ 1277.614387][T18107] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 1277.632210][T18107] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 1278.208294][ T30] audit: type=1326 audit(1777546311.116:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18150 comm="syz.3.21357" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x0 [ 1278.591955][T18180] netlink: 32 bytes leftover after parsing attributes in process `syz.4.21371'. [ 1278.607893][T18179] program syz.0.21370 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1278.735328][T12373] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 1278.862007][T18198] x_tables: duplicate underflow at hook 1 [ 1278.898359][T12373] usb 3-1: config 2 has an invalid interface number: 211 but max is 0 [ 1278.914996][T12373] usb 3-1: config 2 has no interface number 0 [ 1278.933166][T12373] usb 3-1: config 2 interface 211 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1278.966260][T12373] usb 3-1: config 2 interface 211 altsetting 0 endpoint 0x82 has an invalid bInterval 97, changing to 4 [ 1278.980662][T12373] usb 3-1: config 2 interface 211 altsetting 0 endpoint 0x82 has invalid maxpacket 24929, setting to 1023 [ 1278.996001][T12373] usb 3-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=27.95 [ 1279.005712][T12373] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.013762][T12373] usb 3-1: Product: syz [ 1279.016547][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1279.026049][T12373] usb 3-1: Manufacturer: syz [ 1279.031003][T12373] usb 3-1: SerialNumber: syz [ 1279.043532][T18169] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1279.063452][T12373] em28xx 3-1:2.211: New device syz syz @ 12 Mbps (2040:8268, interface 211, class 211) [ 1279.078890][T12373] em28xx 3-1:2.211: Device initialization failed. [ 1279.085822][T12373] em28xx 3-1:2.211: Device must be connected to a high-speed USB 2.0 port. [ 1279.180898][T18212] netlink: 24 bytes leftover after parsing attributes in process `syz.3.21387'. [ 1279.205215][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 1279.218600][ T24] usb 2-1: config 1 interface 0 altsetting 211 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1279.245154][ T24] usb 2-1: config 1 interface 0 altsetting 211 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1279.267236][ T24] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1279.271150][ T30] audit: type=1326 audit(1777546312.176:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18213 comm="syz.3.21388" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 1279.297446][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.40 [ 1279.315502][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.317665][T12373] usb 3-1: USB disconnect, device number 14 [ 1279.341328][ T24] usb 2-1: Product: syz [ 1279.352274][ T24] usb 2-1: Manufacturer: syz [ 1279.368926][ T24] usb 2-1: SerialNumber: syz [ 1279.373225][ T30] audit: type=1326 audit(1777546312.216:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18213 comm="syz.3.21388" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 1279.429894][ T30] audit: type=1326 audit(1777546312.216:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18213 comm="syz.3.21388" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 1279.452634][ T30] audit: type=1326 audit(1777546312.216:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18213 comm="syz.3.21388" exe="/root/syz-executor" sig=0 arch=40000003 syscall=135 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 1279.492640][ T30] audit: type=1326 audit(1777546312.216:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18213 comm="syz.3.21388" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 1279.517809][ T30] audit: type=1326 audit(1777546312.216:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18213 comm="syz.3.21388" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 1279.557983][ T30] audit: type=1326 audit(1777546312.216:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18213 comm="syz.3.21388" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 1279.602659][ T30] audit: type=1326 audit(1777546312.216:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18213 comm="syz.3.21388" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 1279.638737][ T30] audit: type=1326 audit(1777546312.216:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18213 comm="syz.3.21388" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 1279.648318][ T24] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input179 [ 1279.677890][T18224] ªªªªªª: renamed from vlan0 [ 1279.687373][T18227] ================================================================== [ 1279.688174][ T4976] bcm5974 2-1:1.0: could not read from device [ 1279.695476][T18227] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1279.695511][T18227] Write of size 1440 at addr ffffc90019044a80 by task vivid-000-vid-c/18227 [ 1279.695528][T18227] [ 1279.695542][T18227] CPU: 1 UID: 0 PID: 18227 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) [ 1279.695612][T18227] Tainted: [L]=SOFTLOCKUP [ 1279.695644][T18227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1279.695685][T18227] Call Trace: [ 1279.695706][T18227] [ 1279.695734][T18227] dump_stack_lvl+0xe8/0x150 [ 1279.695798][T18227] print_address_description+0x55/0x1e0 [ 1279.695847][T18227] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1279.695902][T18227] print_report+0x58/0x70 [ 1279.695948][T18227] kasan_report+0x117/0x150 [ 1279.696021][T18227] ? trace_irq_disable+0x3b/0x140 [ 1279.696094][T18227] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1279.696153][T18227] kasan_check_range+0x264/0x2c0 [ 1279.696230][T18227] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1279.696285][T18227] __asan_memcpy+0x40/0x70 [ 1279.696347][T18227] tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1279.696487][T18227] vivid_thread_vid_cap_tick+0x1021/0x5fd0 [ 1279.696571][T18227] ? update_curr_dl_se+0x67d/0x1260 [ 1279.696665][T18227] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1279.696715][T18227] ? lockdep_hardirqs_on+0x7a/0x110 [ 1279.696772][T18227] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 1279.696864][T18227] ? vivid_thread_vid_cap+0x491/0x1190 [ 1279.696958][T18227] vivid_thread_vid_cap+0x909/0x1190 [ 1279.697025][T18227] ? __lock_acquire+0x6b5/0x2cf0 [ 1279.697119][T18227] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1279.697195][T18227] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1279.697237][T18227] ? __kthread_parkme+0x7a/0x1f0 [ 1279.697303][T18227] kthread+0x388/0x470 [ 1279.697359][T18227] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1279.697430][T18227] ? __pfx_kthread+0x10/0x10 [ 1279.697494][T18227] ret_from_fork+0x514/0xb70 [ 1279.697542][T18227] ? __pfx_ret_from_fork+0x10/0x10 [ 1279.697595][T18227] ? __switch_to+0xc79/0x1410 [ 1279.697667][T18227] ? __pfx_kthread+0x10/0x10 [ 1279.697726][T18227] ret_from_fork_asm+0x1a/0x30 [ 1279.697813][T18227] [ 1279.697835][T18227] [ 1279.912498][T18227] The buggy address belongs to a 4-page vmalloc region starting at 0xffffc90019041000 allocated at vb2_vmalloc_alloc+0xef/0x360 [ 1279.925721][T18227] The buggy address belongs to the physical page: [ 1279.932167][T18227] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x75653 [ 1279.942336][T18227] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1279.949461][T18227] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1279.958142][T18227] raw: ffff888000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1279.966730][T18227] page dumped because: kasan: bad access detected [ 1279.973168][T18227] page_owner tracks the page as allocated [ 1279.978889][T18227] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 18226, tgid 18225 (syz.4.21393), ts 1279680018384, free_ts 1279376729064 [ 1279.998975][T18227] post_alloc_hook+0x231/0x280 [ 1280.003765][T18227] get_page_from_freelist+0x24ba/0x2540 [ 1280.009342][T18227] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1280.015161][T18227] alloc_pages_mpol+0x235/0x490 [ 1280.020051][T18227] alloc_pages_noprof+0xac/0x2a0 [ 1280.025003][T18227] __vmalloc_node_range_noprof+0x7a7/0x1750 [ 1280.030917][T18227] vmalloc_user_noprof+0xad/0xe0 [ 1280.035869][T18227] vb2_vmalloc_alloc+0xef/0x360 [ 1280.040734][T18227] __vb2_queue_alloc+0x9c5/0x15a0 [ 1280.045790][T18227] vb2_core_reqbufs+0xc1f/0x1410 [ 1280.050746][T18227] __vb2_init_fileio+0x318/0xff0 [ 1280.055707][T18227] __vb2_perform_fileio+0x282/0x1620 [ 1280.061006][T18227] vb2_fop_read+0x273/0x360 [ 1280.065521][T18227] v4l2_read+0x19c/0x2c0 [ 1280.069772][T18227] vfs_readv+0x587/0x840 [ 1280.074028][T18227] __ia32_compat_sys_preadv+0x1c6/0x2c0 [ 1280.079591][T18227] page last free pid 7905 tgid 7905 stack trace: [ 1280.085935][T18227] __free_frozen_pages+0xbc7/0xd30 [ 1280.091058][T18227] __slab_free+0x274/0x2c0 [ 1280.095488][T18227] qlist_free_all+0x99/0x100 [ 1280.100093][T18227] kasan_quarantine_reduce+0x148/0x160 [ 1280.105676][T18227] __kasan_slab_alloc+0x22/0x80 [ 1280.110556][T18227] kmem_cache_alloc_noprof+0x2bc/0x650 [ 1280.116027][T18227] vm_area_dup+0x2b/0x680 [ 1280.120370][T18227] dup_mmap+0x8b1/0x1d90 [ 1280.124642][T18227] copy_mm+0x13b/0x4a0 [ 1280.128749][T18227] copy_process+0x1f1c/0x4450 [ 1280.133446][T18227] kernel_clone+0x284/0x8f0 [ 1280.137956][T18227] __ia32_compat_sys_ia32_clone+0x1b4/0x230 [ 1280.143870][T18227] __do_fast_syscall_32+0x229/0x6e0 [ 1280.149094][T18227] do_fast_syscall_32+0x33/0x70 [ 1280.153959][T18227] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1280.160310][T18227] [ 1280.162642][T18227] Memory state around the buggy address: [ 1280.168275][T18227] ffffc90019044f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1280.176339][T18227] ffffc90019044f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1280.184411][T18227] >ffffc90019045000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1280.192479][T18227] ^ [ 1280.196548][T18227] ffffc90019045080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1280.204622][T18227] ffffc90019045100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1280.212694][T18227] ================================================================== [ 1280.263014][ T4976] bcm5974 2-1:1.0: could not read from device [ 1280.269981][T18227] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1280.277221][T18227] CPU: 1 UID: 0 PID: 18227 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) [ 1280.288613][T18227] Tainted: [L]=SOFTLOCKUP [ 1280.292955][T18227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1280.303029][T18227] Call Trace: [ 1280.306327][T18227] [ 1280.309277][T18227] vpanic+0x56c/0xa60 [ 1280.313288][T18227] ? __pfx_vpanic+0x10/0x10 [ 1280.317814][T18227] ? __pfx___schedule+0x10/0x10 [ 1280.322694][T18227] panic+0xc5/0xd0 [ 1280.326434][T18227] ? __pfx_panic+0x10/0x10 [ 1280.330867][T18227] ? preempt_schedule_common+0x82/0xd0 [ 1280.336345][T18227] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1280.341988][T18227] check_panic_on_warn+0x89/0xb0 [ 1280.346943][T18227] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1280.352585][T18227] end_report+0x73/0x170 [ 1280.357022][T18227] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1280.362666][T18227] kasan_report+0x128/0x150 [ 1280.367181][T18227] ? trace_irq_disable+0x3b/0x140 [ 1280.372222][T18227] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1280.377870][T18227] kasan_check_range+0x264/0x2c0 [ 1280.382830][T18227] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1280.388492][T18227] __asan_memcpy+0x40/0x70 [ 1280.392941][T18227] tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1280.398431][T18227] vivid_thread_vid_cap_tick+0x1021/0x5fd0 [ 1280.404261][T18227] ? update_curr_dl_se+0x67d/0x1260 [ 1280.409505][T18227] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1280.415328][T18227] ? lockdep_hardirqs_on+0x7a/0x110 [ 1280.420549][T18227] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 1280.426727][T18227] ? vivid_thread_vid_cap+0x491/0x1190 [ 1280.432209][T18227] vivid_thread_vid_cap+0x909/0x1190 [ 1280.437509][T18227] ? __lock_acquire+0x6b5/0x2cf0 [ 1280.442471][T18227] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1280.448211][T18227] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1280.454029][T18227] ? __kthread_parkme+0x7a/0x1f0 [ 1280.458987][T18227] kthread+0x388/0x470 [ 1280.463079][T18227] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1280.468818][T18227] ? __pfx_kthread+0x10/0x10 [ 1280.473452][T18227] ret_from_fork+0x514/0xb70 [ 1280.478055][T18227] ? __pfx_ret_from_fork+0x10/0x10 [ 1280.483197][T18227] ? __switch_to+0xc79/0x1410 [ 1280.487895][T18227] ? __pfx_kthread+0x10/0x10 [ 1280.492504][T18227] ret_from_fork_asm+0x1a/0x30 [ 1280.497283][T18227] [ 1280.501172][T18227] Kernel Offset: disabled [ 1280.505500][T18227] Rebooting in 86400 seconds..