last executing test programs: 2m35.396823424s ago: executing program 2 (id=3845): r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000280)={0x0, [[0x7ff, 0x0, 0xffffffff, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x2], [0x0, 0x4, 0xfffffffd, 0x37d7, 0x3ff], [0xffffffff, 0x20000232, 0x9, 0x0, 0x1, 0x0, 0x1]], '\x00', [{0x0, 0x1, 0x1}, {0x8, 0x4}, {}, {0x0, 0x1}, {0x400000, 0xfffffffe}, {0xfffffffe}, {0x0, 0x3}, {0xf, 0x5}, {0x0, 0x405}, {}, {0x8}]}) 2m35.269236015s ago: executing program 2 (id=3847): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x1, 0x103000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000480)={{0x3, 0x3, 0x24000000, 0x3ff, '\x00', 0x6}, 0x1, [0x9, 0x11, 0xfffffffffffffff9, 0x5, 0xf, 0x1, 0x0, 0xff, 0xffffffffffffffff, 0x9, 0x1, 0x8, 0xfffffffffffffff7, 0x4, 0x3ff, 0x1, 0x36, 0x482, 0xc0010, 0x9, 0x1, 0x3ff, 0x7ff, 0x5, 0x80, 0x0, 0x4, 0x6, 0xffffffff, 0x9, 0x1, 0x71, 0xa, 0x2, 0x1ff, 0x7fffffff, 0x9, 0x4, 0x5, 0x10, 0xfffffffffffffff7, 0x16, 0x9db6, 0x7f, 0xfffffffffffffff2, 0x2, 0x5, 0x7, 0x0, 0x8, 0x3, 0x303, 0xa2, 0x8000, 0x3, 0x400, 0x9, 0x1fd, 0x3, 0x2, 0xc9a8, 0xffffffff, 0x3, 0x8, 0xffff, 0x0, 0x10000, 0xffffffffffffffff, 0x5, 0x3, 0x5, 0x9, 0xec, 0x7f, 0xffffffffffffffff, 0x100000000, 0x9f1a, 0xffffffffffffffff, 0xffffffff, 0x8, 0x0, 0x9, 0x3, 0x9, 0x1, 0x4, 0x3, 0xa, 0x8, 0x8, 0x1, 0x2, 0x4, 0xbf, 0xe70, 0xfffffffffffffff7, 0xb, 0x8000000000000000, 0x6, 0x9, 0x5, 0x639, 0x8000000000000000, 0x4, 0x400, 0x9a06, 0x9, 0xffffffff00000000, 0x3, 0xb3, 0x200080000001, 0x5, 0xd30, 0x7, 0x4, 0x256, 0x6ff, 0x3, 0x7, 0x1ff, 0x6, 0x9, 0x0, 0x1b485fe1, 0x7, 0x7, 0xfffffffffffffff7, 0x9]}) 2m35.121658305s ago: executing program 2 (id=3851): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) 2m34.94442337s ago: executing program 2 (id=3855): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read(r0, &(0x7f00000000c0)=""/7, 0x7) 2m34.790758436s ago: executing program 2 (id=3859): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000200)) 2m34.667694706s ago: executing program 2 (id=3862): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 2m19.632003079s ago: executing program 32 (id=3862): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 1.811366808s ago: executing program 0 (id=6788): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f58607703aeff0f64ebbee07962c22772e11b44e65d76600cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1f7f4c331f0000f7fc08fcd111fbdf23ef32db0e8f21d5bc27bde7bb958f86d7962ba41c", 0x25}], 0x2) 1.575587095s ago: executing program 0 (id=6793): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @raw_data="3ba64ef20e50eaf75247423328a35f692073376e6e8bc64df6b2fdf24368fa0b5ca5da9b3b40ce034e4d726edecb8038508002d6dc31050bf092312cecc3e766a24bf3714949327f8e0379dacebe19e48c604788bd8b1bdc89e8c3c7fd5e68c8b32f43aa3b108968b10015c2ea5e42412355eaae0f5755b65af797317dfe3808f93c22105dc99e4043654b348631be6e3d7ceb3fc86c1244f4208a3eeee6adc5bffef7581d0b6f2e6a5332b9fe290bf91504ee974b1aa05e138386e55f5b1232d202642f573eb60e"}) 1.346439744s ago: executing program 0 (id=6800): r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40084146, &(0x7f0000000300)) 1.186866487s ago: executing program 4 (id=6803): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r0, &(0x7f0000001080)=[{0xff, 0x9, 0x3, 0xfd, @time={0x0, 0x1}, {0x46, 0xfe}, {0xf}, @note={0x3, 0xb7, 0x10, 0xc2, 0x5}}], 0x1c) 1.151083523s ago: executing program 0 (id=6805): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) 1.043359339s ago: executing program 1 (id=6807): r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x54, &(0x7f0000000040)=0x80, 0x4) 1.008763365s ago: executing program 3 (id=6808): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x15, &(0x7f00000000c0), 0xb9) 1.003599319s ago: executing program 4 (id=6809): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x30, 0x0, 0x0, 0xfffff020}, {0x6, 0x0, 0x4}]}, 0x10) 953.390467ms ago: executing program 5 (id=6810): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000001000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x7d}], 0x1) 894.055636ms ago: executing program 0 (id=6811): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_MAP={0x24, 0xe, {0x9, 0x6, 0xf, 0x889, 0x2, 0xff}}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 869.091575ms ago: executing program 1 (id=6812): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00') getdents(r0, &(0x7f0000000000)=""/39, 0x27) 775.799449ms ago: executing program 3 (id=6813): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="273eebfecb7c0e923301b61c42cb1d11f41d00bdab2a3d983b065a56", 0x1c}, {&(0x7f0000000140)="10eba9fdb4cbab48929e1af15100"/28, 0x1c}], 0x2) 763.447533ms ago: executing program 5 (id=6814): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x3, 0x9fd, 0x84, 0x91}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, 0x0, 0x0}, 0x20) 714.767574ms ago: executing program 4 (id=6815): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003e0007012bbd700000000000017c00020000fc800f0001806d14314965356ee88b000000080002"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc040) 714.572821ms ago: executing program 1 (id=6816): set_mempolicy(0x1, 0x0, 0x7582) set_mempolicy(0x4000, 0x0, 0x1) 693.491191ms ago: executing program 0 (id=6817): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd1989660", 0x69}], 0x1}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12012002daf08d08981490a00f480102030109021b00010755e00109043a03024ed82c5c0905"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) 559.007196ms ago: executing program 5 (id=6818): r0 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b"], 0x30}, 0x4000010) 555.556469ms ago: executing program 3 (id=6819): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x8000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1ff}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'geneve1\x00'}]}, 0x58}}, 0x0) 489.160774ms ago: executing program 1 (id=6820): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000380), &(0x7f00000003c0)=0x4) 487.950076ms ago: executing program 4 (id=6821): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@dellink={0x28, 0x11, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1100, 0x200}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xffffff7f}, 0x84) 413.519403ms ago: executing program 3 (id=6822): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x800000001fe, 0x82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x23, 0x1, 0x200, 0x2004, 0x0, 0x400004, 0x0}) 390.078283ms ago: executing program 5 (id=6823): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xd, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0x0, 0xffff, 0x47524247, 0x7, 0x0, 0x4, 0xb}}) 335.677992ms ago: executing program 1 (id=6824): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000180)={@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x33}}, 0xc) 298.207642ms ago: executing program 4 (id=6825): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x18, 0x4932, 0x82, 0x1, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r0, &(0x7f0000002740), 0x0}, 0x20) 234.335431ms ago: executing program 3 (id=6826): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x15, 0x0, &(0x7f0000000040)) 197.912423ms ago: executing program 1 (id=6827): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 164.523001ms ago: executing program 5 (id=6828): r0 = syz_open_dev$video(&(0x7f00000000c0), 0x4, 0x8000) ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f00000006c0)={0x1, @pix={0x0, 0x0, 0x34565348, 0x0, 0x0, 0x0, 0x9, 0xfeedcafe, 0x0, 0xffffff80, 0x0, 0x7}}) 125.684621ms ago: executing program 4 (id=6829): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0xffff0018) 42.260596ms ago: executing program 3 (id=6830): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x8080, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0x541b, 0x0) 0s ago: executing program 5 (id=6831): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x800) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000180)) kernel console output (not intermixed with test programs): nd, idVendor=2201, idProduct=012c, bcdDevice=60.d9 [ 376.869632][ T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.869653][ T797] usb 5-1: Product: syz [ 376.869668][ T797] usb 5-1: Manufacturer: syz [ 376.869684][ T797] usb 5-1: SerialNumber: syz [ 376.872571][ T797] usb 5-1: config 0 descriptor?? [ 376.873401][T13990] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 377.116288][ T797] usb 5-1: probing VID:PID(2201:012C) [ 377.120133][ T797] usb 5-1: vub300 testing BULK OUT EndPoint(0) 02 [ 377.120159][ T797] usb 5-1: vub300 testing BULK IN EndPoint(1) 82 [ 377.120178][ T797] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 377.120252][ T797] vub300 5-1:0.239: probe with driver vub300 failed with error -22 [ 377.129643][ T797] usb 5-1: USB disconnect, device number 113 [ 377.725483][T14045] Cannot find del_set index 3 as target [ 378.256224][T14068] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3861'. [ 378.483745][T14079] netlink: 'syz.0.3866': attribute type 1 has an invalid length. [ 378.551526][T14083] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3867'. [ 378.603442][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.610323][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.972865][T14099] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 378.990795][T14099] bond2 (unregistering): Released all slaves [ 379.222358][T14108] xt_TCPMSS: Only works on TCP SYN packets [ 379.862883][T14135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3894'. [ 380.089502][T14146] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3898'. [ 380.429405][T14160] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3904'. [ 380.583557][T14166] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3908'. [ 380.662159][T14171] ip6t_REJECT: ECHOREPLY is not supported [ 381.169729][T14193] openvswitch: netlink: IP tunnel TTL not specified. [ 381.183829][T14194] netlink: 'syz.3.3922': attribute type 10 has an invalid length. [ 381.247451][T14198] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 381.362872][T14204] netlink: 'syz.0.3927': attribute type 1 has an invalid length. [ 381.706972][T14222] netdevsim netdevsim3: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 382.038619][T14232] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3941'. [ 382.519179][T14253] faux_driver vkms: [drm] Unknown color mode 7; guessing buffer size. [ 382.595836][T14256] netlink: 'syz.4.3953': attribute type 3 has an invalid length. [ 382.813849][T14266] team_slave_1: entered allmulticast mode [ 383.011312][T14274] netlink: 'syz.0.3962': attribute type 10 has an invalid length. [ 383.036722][T14274] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3962'. [ 383.063584][T14274] dummy0: entered promiscuous mode [ 383.074732][T14274] bridge0: port 2(dummy0) entered blocking state [ 383.103707][T14274] bridge0: port 2(dummy0) entered disabled state [ 383.123975][T14274] dummy0: entered allmulticast mode [ 383.619813][T14299] Cannot find map_set index 135 as target [ 383.732490][T14305] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3978'. [ 383.745879][T14305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3978'. [ 383.869632][ T797] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 383.966933][T14313] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 384.072096][ T797] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 384.085026][ T797] usb 4-1: config 0 has no interface number 0 [ 384.103182][ T797] usb 4-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 384.129638][ T797] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 384.159381][ T797] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 384.184928][ T797] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 384.208828][T14320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3985'. [ 384.219519][ T797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.249488][ T797] usb 4-1: config 0 descriptor?? [ 384.267974][T14302] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 384.308086][ T797] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.120/input/input51 [ 384.575967][ T797] usb 4-1: USB disconnect, device number 113 [ 384.765337][T14333] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3991'. [ 384.840179][ T5928] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 385.001667][ T5928] usb 1-1: Using ep0 maxpacket: 16 [ 385.022703][ T5928] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 385.039986][ T5928] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 385.061808][ T5928] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 385.084593][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.114599][ T5928] usb 1-1: Product: syz [ 385.122355][ T5928] usb 1-1: Manufacturer: syz [ 385.126976][ T5928] usb 1-1: SerialNumber: syz [ 385.390297][ T5928] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 385.443747][ T5928] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 385.481855][ T5928] usb 1-1: USB disconnect, device number 111 [ 385.520542][ T5947] udevd[5947]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 386.228987][T14383] sg_write: data in/out 458975/136 bytes for SCSI command 0xc7-- guessing data in; [ 386.228987][T14383] program syz.0.4014 not setting count and/or reply_len properly [ 387.540837][T14439] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4042'. [ 387.798894][T14453] RDS: rds_bind could not find a transport for ::e0:0:0:0:1, load rds_tcp or rds_rdma? [ 388.067631][T14464] binder: 14463:14464 ioctl 400c620e 200000000100 returned -22 [ 388.868787][T14500] bond2: option updelay: invalid value (18446744073709510910) [ 388.879470][T14500] bond2: option updelay: allowed values 0 - 2147483647 [ 388.889627][ T5919] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 388.923408][T14500] bond2 (unregistering): Released all slaves [ 389.062366][ T5919] usb 1-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87 [ 389.092410][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.131498][ T5919] usb 1-1: config 0 descriptor?? [ 389.160090][ T5919] usb-storage 1-1:0.0: USB Mass Storage device detected [ 389.186855][ T5919] usb-storage 1-1:0.0: This device (090a,1200,2487 S 01 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 389.186855][ T5919] Please send a copy of this message to and [ 389.367867][T14517] openvswitch: netlink: Key type 31 is not supported [ 389.415441][ T5919] usb 1-1: USB disconnect, device number 112 [ 389.487452][T14521] bond2: Removing last arp target with arp_interval on [ 389.512099][T14521] bond2: entered promiscuous mode [ 389.530869][ T5827] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 389.549726][T14521] bond2: entered allmulticast mode [ 389.555882][T14521] 8021q: adding VLAN 0 to HW filter on device bond2 [ 389.701644][ T5827] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.739505][ T5827] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 389.748450][ T5827] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 389.811987][ T5827] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 389.839407][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.847437][ T5827] usb 5-1: Product: syz [ 389.859378][ T5919] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 389.899362][ T5827] usb 5-1: Manufacturer: syz [ 389.903998][ T5827] usb 5-1: SerialNumber: syz [ 389.933017][ T5827] usb 5-1: config 0 descriptor?? [ 389.962563][ T5827] uvcvideo 5-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 389.999556][ T5827] uvcvideo 5-1:0.0: No valid video chain found. [ 390.080818][ T5919] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 390.090538][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.139980][ T5919] usb 4-1: config 0 descriptor?? [ 390.178133][ T5924] usb 5-1: USB disconnect, device number 114 [ 390.359546][ T5919] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 390.559616][ T5919] [drm:udl_init] *ERROR* Selecting channel failed [ 390.590303][T14564] netlink: 'syz.1.4102': attribute type 21 has an invalid length. [ 390.601819][ T5919] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 390.608531][ T5919] [drm] Initialized udl on minor 2 [ 390.649567][ T5919] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 390.678913][ T5919] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 390.701904][ T10] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 390.720741][ T5919] usb 4-1: USB disconnect, device number 114 [ 390.727569][ T10] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 391.198205][ T30] audit: type=1326 audit(1769647240.117:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14583 comm="syz.3.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8779aeb9 code=0x7ffc0000 [ 391.279483][ T30] audit: type=1326 audit(1769647240.117:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14583 comm="syz.3.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8779aeb9 code=0x7ffc0000 [ 391.369687][ T30] audit: type=1326 audit(1769647240.157:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14583 comm="syz.3.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fba8779aeb9 code=0x7ffc0000 [ 391.459515][ T30] audit: type=1326 audit(1769647240.157:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14583 comm="syz.3.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8779aeb9 code=0x7ffc0000 [ 391.541564][ T30] audit: type=1326 audit(1769647240.157:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14583 comm="syz.3.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8779aeb9 code=0x7ffc0000 [ 391.715729][ T30] audit: type=1326 audit(1769647240.637:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.0.4125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce5f9aeb9 code=0x7ffc0000 [ 391.808370][ T30] audit: type=1326 audit(1769647240.637:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.0.4125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce5f9aeb9 code=0x7ffc0000 [ 391.883815][ T30] audit: type=1326 audit(1769647240.667:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.0.4125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7efce5f9aeb9 code=0x7ffc0000 [ 391.947655][ T30] audit: type=1326 audit(1769647240.667:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.0.4125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce5f9aeb9 code=0x7ffc0000 [ 391.985287][ T30] audit: type=1326 audit(1769647240.667:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.0.4125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce5f9aeb9 code=0x7ffc0000 [ 392.149718][ T5928] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 392.330125][ T5928] usb 1-1: config 2 has an invalid interface number: 255 but max is 0 [ 392.349449][ T5928] usb 1-1: config 2 has no interface number 0 [ 392.355602][ T5928] usb 1-1: config 2 interface 255 has no altsetting 0 [ 392.397554][ T5928] usb 1-1: New USB device found, idVendor=07c4, idProduct=a103, bcdDevice=4f.0b [ 392.422666][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.440618][ T5928] usb 1-1: Product: syz [ 392.449568][ T5928] usb 1-1: Manufacturer: syz [ 392.454551][T14649] SET target dimension over the limit! [ 392.460385][ T5924] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 392.480966][ T5928] usb 1-1: SerialNumber: syz [ 392.596265][T14654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4143'. [ 392.631874][ T5924] usb 4-1: Using ep0 maxpacket: 32 [ 392.663880][ T5924] usb 4-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 392.700355][ T5924] usb 4-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 392.716321][ T5928] ums-sddr55 1-1:2.255: USB Mass Storage device detected [ 392.731337][ T5924] usb 4-1: config 1 interface 0 has no altsetting 0 [ 392.743222][ T5924] usb 4-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 392.756111][ T5928] ums-sddr55 1-1:2.255: Quirks match for vid 07c4 pid a103: 8 [ 392.763940][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.773134][ T5924] usb 4-1: Product: syz [ 392.777826][ T5924] usb 4-1: Manufacturer: syz [ 392.782882][ T5924] usb 4-1: SerialNumber: syz [ 392.831932][ T5928] usb 1-1: USB disconnect, device number 113 [ 392.986371][T14678] SET target dimension over the limit! [ 393.012981][ T5924] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input52 [ 393.065886][ T5924] usb 4-1: USB disconnect, device number 115 [ 393.125815][ T5924] appletouch 4-1:1.0: input: appletouch disconnected [ 393.850582][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 393.871248][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 393.885427][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 393.895519][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 393.895840][T14722] dlm: no locking on control device [ 393.932719][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 394.064897][T14730] binder: 14728:14730 ioctl c0306201 2000000021c0 returned -22 [ 394.175140][T14744] netlink: 'syz.3.4164': attribute type 13 has an invalid length. [ 394.223364][T14744] erspan0: refused to change device tx_queue_len [ 394.605398][T14805] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4171'. [ 394.692614][T14727] chnl_net:caif_netlink_parms(): no params data found [ 394.976795][T14727] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.986584][T14727] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.006876][T14727] bridge_slave_0: entered allmulticast mode [ 395.059169][T14727] bridge_slave_0: entered promiscuous mode [ 395.091802][T14727] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.113728][T14727] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.141510][T14727] bridge_slave_1: entered allmulticast mode [ 395.182064][T14727] bridge_slave_1: entered promiscuous mode [ 395.370495][T14727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.433710][T14727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.608849][T14727] team0: Port device team_slave_0 added [ 395.638930][T14727] team0: Port device team_slave_1 added [ 395.787074][T14727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.816565][T14727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.919141][T14727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.965640][T14727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.991291][T14727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.043221][ T5836] Bluetooth: hci5: command tx timeout [ 396.074278][T14727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.203269][T14727] hsr_slave_0: entered promiscuous mode [ 396.216092][T14727] hsr_slave_1: entered promiscuous mode [ 396.234441][T14727] debugfs: 'hsr0' already exists in 'hsr' [ 396.247842][T14727] Cannot create hsr debugfs directory [ 397.172552][T14727] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 397.249240][T14727] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 397.276051][T14727] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 397.296706][T14727] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 397.470411][T15130] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4224'. [ 397.792442][T14727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.862304][T14727] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.904063][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.911238][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.969910][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.977076][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.012594][T15149] --map-set only usable from mangle table [ 398.109354][ T5836] Bluetooth: hci5: command tx timeout [ 398.111083][T14727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 398.303814][T14727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.472119][T14727] veth0_vlan: entered promiscuous mode [ 398.512278][T15165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.518645][T14727] veth1_vlan: entered promiscuous mode [ 398.632651][T14727] veth0_macvtap: entered promiscuous mode [ 398.676803][T14727] veth1_macvtap: entered promiscuous mode [ 398.753320][T14727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.792333][T14727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.852558][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.862466][T15177] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 398.892080][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.945196][ T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.013345][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.247281][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.291502][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.382768][ T1176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.420934][ T1176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.052130][ T797] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 400.087477][T15264] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.4267'. [ 400.189850][ T5836] Bluetooth: hci5: command tx timeout [ 400.230649][ T797] usb 4-1: Using ep0 maxpacket: 8 [ 400.240530][ T797] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 400.266827][ T797] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 400.307094][ T797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.318320][ T5928] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 400.362172][T15274] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4271'. [ 400.375050][ T797] usb 4-1: Product: syz [ 400.379251][ T797] usb 4-1: Manufacturer: syz [ 400.404151][ T797] usb 4-1: SerialNumber: syz [ 400.417237][ T797] usb 4-1: config 0 descriptor?? [ 400.454718][ T797] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 400.509520][ T5928] usb 5-1: Using ep0 maxpacket: 16 [ 400.538019][ T5928] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 400.561333][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.573930][ T5928] usb 5-1: Product: syz [ 400.578798][ T5928] usb 5-1: Manufacturer: syz [ 400.583673][ T5928] usb 5-1: SerialNumber: syz [ 400.607216][ T5928] r8152-cfgselector 5-1: Unknown version 0x0000 [ 400.629869][ T5928] r8152-cfgselector 5-1: config 0 descriptor?? [ 400.655902][ T797] gspca_zc3xx: reg_w_i err -71 [ 401.036568][T15306] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4282'. [ 401.068590][T15306] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4282'. [ 401.103221][ T5928] r8152-cfgselector 5-1: USB disconnect, device number 115 [ 401.269877][ T797] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 401.283293][ T797] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 401.319611][ T797] usb 4-1: USB disconnect, device number 116 [ 401.702820][T15342] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4291'. [ 401.712613][ T5924] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 401.906015][ T5924] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 401.953807][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.976094][ T5924] usb 6-1: Product: syz [ 401.985775][ T5924] usb 6-1: Manufacturer: syz [ 401.996972][ T5924] usb 6-1: SerialNumber: syz [ 402.044689][ T5924] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 402.067548][ T5928] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 402.269476][ T5836] Bluetooth: hci5: command tx timeout [ 402.731277][ T797] usb 6-1: USB disconnect, device number 2 [ 403.162311][ T5928] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 403.194256][ T5928] ath9k_htc: Failed to initialize the device [ 403.237902][ T797] usb 6-1: ath9k_htc: USB layer deinitialized [ 403.734287][ T5928] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 403.948977][ T5928] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 403.981457][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.031626][ T5928] usb 4-1: config 0 descriptor?? [ 404.087153][ T5928] cp210x 4-1:0.0: cp210x converter detected [ 404.093204][ T30] audit: type=1326 audit(1769647253.007:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15459 comm="syz.4.4328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786739aeb9 code=0x7ffc0000 [ 404.146711][ T30] audit: type=1326 audit(1769647253.007:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15459 comm="syz.4.4328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786739aeb9 code=0x7ffc0000 [ 404.242191][ T30] audit: type=1326 audit(1769647253.077:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15459 comm="syz.4.4328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f786739aeb9 code=0x7ffc0000 [ 404.343286][ T5928] usb 4-1: cp210x converter now attached to ttyUSB0 [ 404.359644][ T30] audit: type=1326 audit(1769647253.077:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15459 comm="syz.4.4328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786739aeb9 code=0x7ffc0000 [ 404.444496][ T30] audit: type=1326 audit(1769647253.077:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15459 comm="syz.4.4328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786739aeb9 code=0x7ffc0000 [ 404.512186][ T5928] usb 4-1: USB disconnect, device number 117 [ 404.536647][ T5928] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 404.568776][ T5928] cp210x 4-1:0.0: device disconnected [ 404.620349][ T10] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 404.708054][T15501] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 404.725555][T15501] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 404.745941][T15501] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 404.779666][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 404.802857][ T10] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 404.834221][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.863353][T15503] bond2 (unregistering): Released all slaves [ 404.874886][ T10] usb 1-1: config 0 has no interface number 0 [ 404.896017][ T10] usb 1-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 404.938687][ T10] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 404.969347][ T10] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 405.001490][ T10] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 405.045380][ T10] usb 1-1: config 0 interface 52 has no altsetting 0 [ 405.065530][ T10] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 405.096061][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.138751][ T10] usb 1-1: config 0 descriptor?? [ 405.562205][ T10] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input54 [ 405.899635][ T5919] usb 1-1: USB disconnect, device number 114 [ 406.223798][T15635] bridge_slave_0: left allmulticast mode [ 406.259983][T15635] bridge_slave_0: left promiscuous mode [ 406.290520][T15635] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.351960][T15635] bridge_slave_1: left allmulticast mode [ 406.357648][T15635] bridge_slave_1: left promiscuous mode [ 406.395571][T15635] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.442253][T15635] bond0: (slave bond_slave_0): Releasing backup interface [ 406.492089][T15635] bond0: (slave bond_slave_1): Releasing backup interface [ 406.556216][T15635] team0: Port device team_slave_0 removed [ 406.614617][T15635] team0: Port device team_slave_1 removed [ 406.630644][T15635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.658852][T15635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.729989][T15635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.758483][T15635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.791839][T15635] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 406.819794][T15647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4363'. [ 407.021411][T15656] netlink: 'syz.3.4367': attribute type 29 has an invalid length. [ 407.384468][T15672] netlink: 'syz.0.4372': attribute type 27 has an invalid length. [ 407.486651][T15676] Cannot find add_set index 0 as target [ 407.732364][T15672] bridge0: port 3(syz_tun) entered disabled state [ 407.814788][T15672] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.874251][T15693] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 408.064489][T15672] 0ªX¹¦À: left allmulticast mode [ 408.237041][T15672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.288912][T15672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.490683][T15672] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 408.548982][T15672] ip6tnl1: left promiscuous mode [ 408.617611][T15672] veth3: left promiscuous mode [ 408.643101][T15672] gre1: left allmulticast mode [ 408.656683][T15672] gtp0: left promiscuous mode [ 408.670029][T15672] gtp0: left allmulticast mode [ 408.750379][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.796077][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.864631][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.922580][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.133818][T15722] program syz.5.4393 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 409.868920][T15762] netlink: 'syz.1.4411': attribute type 10 has an invalid length. [ 409.898405][T15762] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4411'. [ 410.334861][ T30] audit: type=1326 audit(1769647259.257:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15789 comm="syz.4.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786739aeb9 code=0x7ffc0000 [ 410.424986][ T30] audit: type=1326 audit(1769647259.287:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15789 comm="syz.4.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786739aeb9 code=0x7ffc0000 [ 410.515531][ T30] audit: type=1326 audit(1769647259.297:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15789 comm="syz.4.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f786739aeb9 code=0x7ffc0000 [ 410.623285][ T30] audit: type=1326 audit(1769647259.297:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15789 comm="syz.4.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786739aeb9 code=0x7ffc0000 [ 410.959452][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 411.141637][ T24] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 411.167668][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.203879][ T24] usb 6-1: config 0 descriptor?? [ 411.230763][T15838] ip6t_rpfilter: unknown options [ 411.238214][ T24] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 411.659807][ T5924] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 411.675957][ T24] gspca_sunplus: reg_w_riv err -71 [ 411.693070][ T24] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 411.712600][ T24] usb 6-1: USB disconnect, device number 3 [ 411.887018][ T5924] usb 1-1: Using ep0 maxpacket: 32 [ 411.903648][ T5924] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 411.912179][ T5924] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.922523][ T5924] usb 1-1: config 0 has no interface number 0 [ 411.930267][ T5924] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 411.955532][ T5924] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 411.974933][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.999426][ T5924] usb 1-1: Product: syz [ 412.006587][ T5924] usb 1-1: Manufacturer: syz [ 412.016962][ T5924] usb 1-1: SerialNumber: syz [ 412.053194][ T5924] usb 1-1: config 0 descriptor?? [ 412.094710][ T5924] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 412.126703][ T5924] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5 [ 412.299447][ T5924] radio-raremono 1-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 412.497126][ T5924] radio-raremono 1-1:0.35: raremono_cmd_main failed (-71) [ 412.552916][ T5924] radio-raremono 1-1:0.35: V4L2 device registered as radio48 [ 412.591691][ T5924] usb 1-1: USB disconnect, device number 115 [ 412.598849][ T5924] radio-raremono 1-1:0.35: Thanko's Raremono disconnected [ 413.369793][T15959] netlink: 'syz.4.4486': attribute type 11 has an invalid length. [ 413.450262][T15964] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4489'. [ 413.477041][T15966] xt_hashlimit: size too large, truncated to 1048576 [ 413.495831][T15966] xt_hashlimit: max too large, truncated to 1048576 [ 415.447249][T16078] __vm_enough_memory: pid: 16078, comm: syz.4.4532, bytes: 4503599627366400 not enough memory for the allocation [ 415.698133][T16097] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.810283][ T48] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 415.888049][T16105] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4542'. [ 415.934679][T16105] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4542'. [ 415.992263][ T48] usb 6-1: Using ep0 maxpacket: 8 [ 416.020642][ T48] usb 6-1: unable to get BOS descriptor or descriptor too short [ 416.045110][ T48] usb 6-1: config 4 has an invalid interface number: 147 but max is 0 [ 416.072720][ T48] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 416.116665][ T48] usb 6-1: config 4 has no interface number 0 [ 416.137875][ T48] usb 6-1: string descriptor 0 read error: -22 [ 416.158406][ T48] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 416.204346][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.292653][ T48] uvcvideo 6-1:4.147: Found multiple Units with ID 6 [ 416.310029][T16126] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4550'. [ 416.329377][ T48] uvcvideo 6-1:4.147: Found UVC 0.02 device (04f2:b746) [ 416.337424][ T48] uvcvideo 6-1:4.147: No valid video chain found. [ 416.507368][ T5919] usb 6-1: USB disconnect, device number 4 [ 416.565644][T16148] delete_channel: no stack [ 416.717988][ T30] audit: type=1326 audit(1769647265.637:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16164 comm="syz.0.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce5f9aeb9 code=0x7ffc0000 [ 416.758155][ T30] audit: type=1326 audit(1769647265.637:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16164 comm="syz.0.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce5f9aeb9 code=0x7ffc0000 [ 416.791801][ T30] audit: type=1326 audit(1769647265.677:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16164 comm="syz.0.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7efce5f9aeb9 code=0x7ffc0000 [ 416.816621][ T30] audit: type=1326 audit(1769647265.677:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16164 comm="syz.0.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce5f9aeb9 code=0x7ffc0000 [ 416.880736][ T30] audit: type=1326 audit(1769647265.677:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16164 comm="syz.0.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce5f9aeb9 code=0x7ffc0000 [ 417.939736][ T48] usb 4-1: new full-speed USB device number 118 using dummy_hcd [ 418.131267][ T48] usb 4-1: not running at top speed; connect to a high speed hub [ 418.144500][ T48] usb 4-1: config 95 has an invalid interface number: 1 but max is 0 [ 418.158207][ T48] usb 4-1: config 95 has no interface number 0 [ 418.169876][ T48] usb 4-1: config 95 interface 1 has no altsetting 0 [ 418.185614][ T48] usb 4-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 418.216820][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.242937][ T48] usb 4-1: Product: syz [ 418.257783][ T48] usb 4-1: Manufacturer: syz [ 418.263897][ T48] usb 4-1: SerialNumber: syz [ 418.329550][ T5924] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 418.489663][ T5924] usb 5-1: Using ep0 maxpacket: 16 [ 418.541384][ T5924] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 418.569491][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.588274][ T5924] usb 5-1: Product: syz [ 418.593347][T16265] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4586'. [ 418.598131][ T5924] usb 5-1: Manufacturer: syz [ 418.618839][ T5924] usb 5-1: SerialNumber: syz [ 418.630831][ T5924] usb 5-1: config 0 descriptor?? [ 418.652287][ T5924] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 418.691346][ T48] usb 4-1: USB disconnect, device number 118 [ 418.793567][T16278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.846224][ T5924] usb 5-1: clie_3_5_startup: get config number bad return length: 0 [ 418.865883][ T5947] udevd[5947]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 418.882544][ T5924] visor 5-1:0.0: probe with driver visor failed with error -5 [ 419.107487][ T48] usb 5-1: USB disconnect, device number 116 [ 419.379057][T16308] netlink: 'syz.3.4595': attribute type 1 has an invalid length. [ 420.136053][T16337] bond1: entered allmulticast mode [ 421.352762][T16443] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4639'. [ 421.397812][T16443] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4639'. [ 421.423534][T16443] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4639'. [ 421.466272][T16443] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4639'. [ 421.480640][T16451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4641'. [ 421.490476][T16443] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4639'. [ 421.500495][T16443] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4639'. [ 421.509778][T16443] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4639'. [ 421.518976][T16443] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4639'. [ 421.541250][T16451] [†’Ì: entered promiscuous mode [ 421.709571][ T48] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 421.753633][T16466] openvswitch: netlink: IP tunnel dst address not specified [ 421.908188][ T48] usb 1-1: Using ep0 maxpacket: 32 [ 421.923826][ T48] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.956393][ T48] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.999322][ T48] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 422.041970][ T48] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 422.051769][ T48] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 422.087243][ T48] usb 1-1: Product: syz [ 422.110309][ T48] usb 1-1: Manufacturer: syz [ 422.139444][ T48] usb 1-1: SerialNumber: syz [ 422.195838][ T48] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input55 [ 422.496935][ T24] usb 1-1: USB disconnect, device number 116 [ 422.576105][ T24] appletouch 1-1:1.0: input: appletouch disconnected [ 423.096190][T16544] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 423.427646][ T30] audit: type=1326 audit(1769647272.347:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16560 comm="syz.0.4680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce5f9aeb9 code=0x7ffc0000 [ 423.541130][ T30] audit: type=1326 audit(1769647272.377:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16560 comm="syz.0.4680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7efce5f9aeb9 code=0x7ffc0000 [ 423.596206][T16570] netlink: 'syz.3.4684': attribute type 1 has an invalid length. [ 423.615641][T16571] program syz.5.4685 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 423.649346][ T30] audit: type=1326 audit(1769647272.387:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16560 comm="syz.0.4680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce5f9aeb9 code=0x7ffc0000 [ 423.682704][T16576] __nla_validate_parse: 46 callbacks suppressed [ 423.682726][T16576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4688'. [ 423.753345][ T30] audit: type=1326 audit(1769647272.387:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16560 comm="syz.0.4680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce5f9aeb9 code=0x7ffc0000 [ 423.870109][T16583] usb usb8: usbfs: process 16583 (syz.1.4690) did not claim interface 0 before use [ 424.139494][ T5827] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 424.329358][ T5827] usb 6-1: Using ep0 maxpacket: 8 [ 424.359813][ T5827] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.402436][ T5827] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 424.450161][ T5827] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 424.479410][ T5827] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 424.501349][T16616] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4705'. [ 424.529697][ T5827] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 424.569418][ T5827] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 424.623351][ T5827] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 424.639695][T16621] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4708'. [ 424.659641][ T5827] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.667667][ T5827] usb 6-1: Product: syz [ 424.709775][ T5827] usb 6-1: Manufacturer: syz [ 424.714419][ T5827] usb 6-1: SerialNumber: syz [ 424.745963][ T5827] usb 6-1: config 0 descriptor?? [ 424.771340][T16587] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 424.909683][ T48] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 425.103341][ T48] usb 4-1: Using ep0 maxpacket: 16 [ 425.121580][T16650] macvtap0: entered allmulticast mode [ 425.127091][T16650] veth0_macvtap: entered allmulticast mode [ 425.153962][ T48] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 17408, setting to 1024 [ 425.174325][ T48] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 425.204955][ T48] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 425.238028][ T48] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 425.269329][ T48] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 425.300720][ T48] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 425.312457][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 425.329239][ T48] usb 4-1: SerialNumber: syz [ 425.356059][T16625] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 425.375539][T16625] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 425.678084][ T48] usb 4-1: USB disconnect, device number 119 [ 425.871045][T16686] netlink: 'syz.4.4729': attribute type 9 has an invalid length. [ 426.192717][ T5827] rc_core: IR keymap rc-snapstream-firefly not found [ 426.219358][ T5827] Registered IR keymap rc-empty [ 426.233855][ T5827] rc rc0: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 426.279070][ T5827] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input57 [ 426.333295][T16714] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 426.385347][ T5827] input: syz syz mouse as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input58 [ 426.525254][ T5827] usb 6-1: USB disconnect, device number 5 [ 426.531182][ C0] ati_remote 6-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 426.742963][T16743] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 427.672744][T16800] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 427.771215][ T30] audit: type=1326 audit(1769647276.697:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16805 comm="syz.1.4772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374279aeb9 code=0x7ffc0000 [ 427.881153][ T30] audit: type=1326 audit(1769647276.697:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16805 comm="syz.1.4772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374279aeb9 code=0x7ffc0000 [ 427.963362][ T30] audit: type=1326 audit(1769647276.727:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16805 comm="syz.1.4772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f374279aeb9 code=0x7ffc0000 [ 428.059731][ T30] audit: type=1326 audit(1769647276.727:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16805 comm="syz.1.4772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374279aeb9 code=0x7ffc0000 [ 428.169423][ T30] audit: type=1326 audit(1769647276.727:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16805 comm="syz.1.4772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374279aeb9 code=0x7ffc0000 [ 428.356508][ T10] IPVS: starting estimator thread 0... [ 428.491099][T16836] IPVS: using max 30 ests per chain, 72000 per kthread [ 428.788247][ T1176] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.802449][ T1176] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.841159][ T1176] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.891406][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.192507][T16882] netlink: 'syz.0.4803': attribute type 15 has an invalid length. [ 429.383580][T16888] veth3: entered promiscuous mode [ 429.390033][ T5827] usb 5-1: new low-speed USB device number 117 using dummy_hcd [ 429.576115][ T5827] usb 5-1: config 1 interface 0 altsetting 250 endpoint 0x1 is Bulk; changing to Interrupt [ 429.606536][ T5827] usb 5-1: config 1 interface 0 altsetting 250 endpoint 0x82 is Bulk; changing to Interrupt [ 429.650748][ T5827] usb 5-1: config 1 interface 0 has no altsetting 0 [ 429.684401][ T5827] usb 5-1: string descriptor 0 read error: -22 [ 429.690940][ T5827] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 429.730199][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.783851][T16877] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 429.802592][T16877] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 430.055839][T16938] usb usb8: usbfs: process 16938 (syz.3.4818) did not claim interface 0 before use [ 430.140549][ T5924] usb 5-1: USB disconnect, device number 117 [ 430.210916][T16945] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 430.256343][T16953] netlink: 200 bytes leftover after parsing attributes in process `syz.1.4821'. [ 430.761310][T16976] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4832'. [ 431.035592][T16991] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.489998][T17016] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 431.499473][ T10] usb 5-1: new full-speed USB device number 118 using dummy_hcd [ 431.697561][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.739497][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 431.753754][T17032] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 431.765394][T17035] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 431.789779][ T10] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 431.827326][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 431.870442][ T10] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 431.889509][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.919580][ T10] usb 5-1: Product: syz [ 431.923788][ T10] usb 5-1: Manufacturer: syz [ 431.928390][ T10] usb 5-1: SerialNumber: syz [ 431.980902][ T10] usb 5-1: config 0 descriptor?? [ 432.023009][ T10] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 432.194614][ T10] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 432.222284][ T10] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 432.261868][ T10] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 432.406645][ T5827] usb 5-1: USB disconnect, device number 118 [ 432.729895][ T10] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 432.744967][T17092] netlink: 'syz.1.4877': attribute type 1 has an invalid length. [ 432.780302][T17092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4877'. [ 432.910043][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 432.931040][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 432.962266][ T10] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 432.979438][ T10] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 433.014414][ T10] usb 4-1: Product: syz [ 433.029685][ T10] usb 4-1: Manufacturer: syz [ 433.034355][ T10] usb 4-1: SerialNumber: syz [ 433.230956][T17114] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4885'. [ 433.299621][ T10] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 433.307943][ T10] usb 4-1: Handspring Visor / Palm OS: port 82, is for unknown use [ 433.346875][ T10] usb 4-1: Handspring Visor / Palm OS: port 223, is for HotSync use [ 433.368982][ T10] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 433.504024][ T10] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 433.539447][ T10] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 433.569689][ T10] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 433.609938][ T10] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 433.649783][ T10] usb 4-1: USB disconnect, device number 120 [ 433.681587][ T10] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 433.731258][ T10] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 433.772067][ T10] visor 4-1:1.0: device disconnected [ 433.843056][ T30] audit: type=1326 audit(1769647282.767:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17160 comm="syz.1.4898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374279aeb9 code=0x7ffc0000 [ 433.939597][ T30] audit: type=1326 audit(1769647282.767:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17160 comm="syz.1.4898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374279aeb9 code=0x7ffc0000 [ 434.024649][ T30] audit: type=1326 audit(1769647282.767:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17160 comm="syz.1.4898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374279aeb9 code=0x7ffc0000 [ 434.100551][ T30] audit: type=1326 audit(1769647282.767:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17160 comm="syz.1.4898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374279aeb9 code=0x7ffc0000 [ 434.199405][ T30] audit: type=1326 audit(1769647282.767:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17160 comm="syz.1.4898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f374279aeb9 code=0x7ffc0000 [ 434.289363][ T30] audit: type=1326 audit(1769647282.767:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17160 comm="syz.1.4898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374279aeb9 code=0x7ffc0000 [ 434.390706][ T30] audit: type=1326 audit(1769647282.767:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17160 comm="syz.1.4898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374279aeb9 code=0x7ffc0000 [ 434.459543][ T30] audit: type=1326 audit(1769647282.767:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17160 comm="syz.1.4898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374279aeb9 code=0x7ffc0000 [ 434.529457][ T30] audit: type=1326 audit(1769647282.767:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17160 comm="syz.1.4898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f374279aeb9 code=0x7ffc0000 [ 434.629802][ T30] audit: type=1326 audit(1769647282.767:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17160 comm="syz.1.4898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f374279aeb9 code=0x7ffc0000 [ 434.656392][T17198] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4912'. [ 434.661349][ T5827] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 434.869797][ T5827] usb 5-1: Using ep0 maxpacket: 16 [ 434.882082][ T5827] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 434.910456][ T5827] usb 5-1: config 0 has no interface number 0 [ 434.916602][ T5827] usb 5-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 434.969347][ T5827] usb 5-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 435.009482][ T5827] usb 5-1: config 0 interface 49 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 435.040478][ T5827] usb 5-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 435.083936][ T5827] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 435.119478][ T5827] usb 5-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 435.127613][ T5827] usb 5-1: Product: syz [ 435.165237][ T5827] usb 5-1: Manufacturer: syz [ 435.189981][ T5827] usb 5-1: SerialNumber: syz [ 435.221802][ T5827] usb 5-1: config 0 descriptor?? [ 435.225991][T17223] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4923'. [ 435.236828][T17184] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 435.500424][ T5827] usb 5-1: USB disconnect, device number 119 [ 435.773291][T17254] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 436.079946][T17270] netlink: 'syz.1.4941': attribute type 1 has an invalid length. [ 436.088113][T17270] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4941'. [ 436.538616][T17295] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 436.701478][T17303] program syz.5.4953 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 437.196471][T17333] netlink: 'syz.0.4966': attribute type 2 has an invalid length. [ 437.214724][T17333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4966'. [ 437.293710][T17338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.002045][T17367] netlink: 'syz.3.4980': attribute type 10 has an invalid length. [ 438.044559][T17367] batman_adv: batadv0: Adding interface: netdevsim0 [ 438.049358][T17373] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4982'. [ 438.069473][T17367] batman_adv: batadv0: Interface activated: netdevsim0 [ 438.239443][T17376] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4984'. [ 438.670385][T17401] fuse: Invalid rootmode [ 439.789687][ T5827] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 440.000052][ T5827] usb 6-1: unable to get BOS descriptor or descriptor too short [ 440.009021][ T5827] usb 6-1: not running at top speed; connect to a high speed hub [ 440.034080][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.040548][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.060699][ T5827] usb 6-1: config 2 has an invalid interface number: 226 but max is 1 [ 440.068923][ T5827] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 440.104028][ T5827] usb 6-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 440.112581][T17481] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5032'. [ 440.139318][ T5827] usb 6-1: config 2 has no interface number 0 [ 440.161491][ T5827] usb 6-1: config 2 interface 226 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 440.219608][ T5827] usb 6-1: config 2 interface 226 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 440.236271][T17481] bond3: option arp_interval: invalid value (18446744071947943938) [ 440.259631][ T5827] usb 6-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 440.285140][T17481] bond3: option arp_interval: allowed values 0 - 2147483647 [ 440.296918][ T5827] usb 6-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 440.317462][T17481] bond3 (unregistering): Released all slaves [ 440.319465][ T5827] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.359531][ T5827] usb 6-1: Product: syz [ 440.363728][ T5827] usb 6-1: Manufacturer: syz [ 440.368358][ T5827] usb 6-1: SerialNumber: syz [ 440.435575][ T50] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.680880][ T5827] usb 6-1: USB disconnect, device number 6 [ 440.891538][T17579] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5044'. [ 441.531715][T17613] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5058'. [ 441.698632][T17624] IPv6: NLM_F_CREATE should be specified when creating new route [ 441.741415][T17624] IPv6: Can't replace route, no match found [ 441.880495][T17632] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5066'. [ 441.948890][T17637] xt_cluster: node mask cannot exceed total number of nodes [ 442.128680][T17642] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5071'. [ 442.155153][T17644] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5072'. [ 442.334997][T17655] xt_CT: You must specify a L4 protocol and not use inversions on it [ 442.771504][T17677] delete_channel: no stack [ 443.553901][T17725] batadv1: entered promiscuous mode [ 443.579013][T17725] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 444.480460][T17782] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 444.487733][T17782] IPv6: NLM_F_CREATE should be set when creating new route [ 444.495036][T17782] IPv6: NLM_F_CREATE should be set when creating new route [ 444.502283][T17782] IPv6: NLM_F_CREATE should be set when creating new route [ 444.595643][T17788] netlink: 'syz.1.5134': attribute type 1 has an invalid length. [ 444.824821][T17800] netlink: 464 bytes leftover after parsing attributes in process `syz.5.5140'. [ 445.625976][T17834] vivid-000: disconnect [ 445.660782][T17833] vivid-000: reconnect [ 446.286796][T17880] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 446.462987][ T5924] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 446.684914][ T5924] usb 6-1: Using ep0 maxpacket: 32 [ 446.716725][ T5924] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 446.739588][ T5924] usb 6-1: config 0 has no interface number 0 [ 446.762675][T17900] netlink: 'syz.3.5183': attribute type 1 has an invalid length. [ 446.779387][ T5924] usb 6-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 446.821030][ T5924] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 446.862943][ T5924] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 446.905131][ T5924] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 446.947240][ T5924] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 446.982440][ T5924] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 447.009537][ T5924] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 447.021731][ T5924] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 447.040441][ T5924] usb 6-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 447.128339][ T5924] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 447.138003][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.168756][ T5924] usb 6-1: Product: syz [ 447.176278][T17918] dummy0: left allmulticast mode [ 447.182647][ T5924] usb 6-1: Manufacturer: syz [ 447.187268][ T5924] usb 6-1: SerialNumber: syz [ 447.192074][T17918] dummy0: left promiscuous mode [ 447.203750][T17918] bridge0: port 2(dummy0) entered disabled state [ 447.228946][ T5924] usb 6-1: config 0 descriptor?? [ 447.240387][T17921] netlink: 'syz.3.5192': attribute type 21 has an invalid length. [ 447.257331][T17869] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 447.271238][ T5924] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 447.291683][ T5924] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 447.310865][T17918] syz_tun: left allmulticast mode [ 447.318892][T17918] syz_tun: left promiscuous mode [ 447.337602][T17918] bridge0: port 3(syz_tun) entered disabled state [ 447.410811][T17918] bridge_slave_0: left allmulticast mode [ 447.416529][T17918] bridge_slave_0: left promiscuous mode [ 447.433991][T17918] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.539633][ T5924] usb 6-1: USB disconnect, device number 7 [ 447.904668][T17958] netlink: 112 bytes leftover after parsing attributes in process `syz.3.5204'. [ 447.962266][T17958] netlink: 'syz.3.5204': attribute type 1 has an invalid length. [ 448.413947][T17987] openvswitch: netlink: IP tunnel dst address not specified [ 448.591313][T17997] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5219'. [ 448.619439][ T5919] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 448.675048][T18000] netlink: 'syz.0.5222': attribute type 11 has an invalid length. [ 448.780061][T18006] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5224'. [ 448.799599][ T5919] usb 5-1: Using ep0 maxpacket: 32 [ 448.829656][ T5919] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 448.879778][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 448.919649][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 448.959515][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 448.992501][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 449.032713][ T5919] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 449.059909][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.067946][ T5919] usb 5-1: Product: syz [ 449.109321][ T5919] usb 5-1: Manufacturer: syz [ 449.114055][ T5919] usb 5-1: SerialNumber: syz [ 449.160360][ T5919] usb 5-1: config 0 descriptor?? [ 449.572638][ T5919] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 449.579657][ T5919] input input60: Device does not respond to id packet M [ 449.599545][ T5919] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 449.605590][ T5919] input input60: Device does not respond to id packet P [ 449.640125][ T5919] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 449.659680][ T5919] input input60: Device does not respond to id packet B [ 449.699374][ T5919] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 449.705549][ T5919] input input60: Device does not respond to id packet N [ 449.749977][ T5919] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 449.769481][ T5919] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 449.789687][ T5919] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 449.796312][ T5919] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 449.823551][ T5919] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input60 [ 449.886927][ T5919] usb 5-1: USB disconnect, device number 120 [ 450.484668][T18090] netlink: del zone limit has 8 unknown bytes [ 451.353968][T18128] IPv6: NLM_F_CREATE should be specified when creating new route [ 451.824836][T18153] netlink: 'syz.3.5274': attribute type 30 has an invalid length. [ 451.825313][T18157] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5275'. [ 452.872849][T18217] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 453.342399][T18245] xt_addrtype: ipv6 does not support BROADCAST matching [ 454.870682][T18322] sit1: entered promiscuous mode [ 456.407559][T18414] netlink: 'syz.4.5382': attribute type 11 has an invalid length. [ 456.609928][T18426] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5384'. [ 456.809897][T18433] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 456.848685][T18433] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 457.063110][T18448] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5393'. [ 458.099776][ T5924] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 458.289950][ T5924] usb 1-1: Using ep0 maxpacket: 16 [ 458.313407][ T5924] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.347949][ T5924] usb 1-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 458.391925][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.419365][ T5924] usb 1-1: Product: syz [ 458.433800][ T5924] usb 1-1: Manufacturer: syz [ 458.438426][ T5924] usb 1-1: SerialNumber: syz [ 458.475631][T18521] netlink: 'syz.4.5422': attribute type 10 has an invalid length. [ 458.484819][ T5924] usb 1-1: config 0 descriptor?? [ 458.499545][T18521] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 458.515721][ T5924] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 458.540548][ T5924] gspca_stv06xx: st6422 sensor detected [ 458.891676][T18544] netlink: 'syz.5.5432': attribute type 3 has an invalid length. [ 459.023716][ T5924] STV06xx 1-1:0.0: probe with driver STV06xx failed with error -71 [ 459.046645][ T5924] usb 1-1: USB disconnect, device number 117 [ 459.609984][T18589] xt_nat: multiple ranges no longer supported [ 459.932939][T18605] netlink: 'syz.0.5456': attribute type 1 has an invalid length. [ 460.081981][T18614] netlink: 'syz.5.5460': attribute type 41 has an invalid length. [ 460.179455][T18611] xt_CT: No such helper "snmp_trap" [ 460.321409][T18625] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5465'. [ 460.592097][T18640] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5472'. [ 460.909545][T18658] xt_cgroup: xt_cgroup: no path or classid specified [ 461.551928][T18685] geneve4: entered promiscuous mode [ 461.572548][T18685] geneve4: entered allmulticast mode [ 461.615157][T18693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5496'. [ 461.673485][T18693] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 461.979472][T18712] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5502'. [ 462.738048][T18754] binfmt_misc: register: failed to install interpreter file ./file0 [ 463.299367][T18785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5532'. [ 463.308654][T18785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5532'. [ 463.382477][T18788] netlink: 'syz.1.5536': attribute type 275 has an invalid length. [ 464.010630][T18823] kAFS: unable to lookup cell '(' [ 464.929729][ T5924] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 464.959603][ T5827] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 464.989568][ T10] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 465.101789][ T5924] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 465.112059][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.119664][ T5827] usb 4-1: Using ep0 maxpacket: 16 [ 465.139420][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 465.144201][ T5924] usb 6-1: config 0 descriptor?? [ 465.156672][ T5827] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 465.183001][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 465.199476][ T5827] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 465.219313][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 465.249330][ T5827] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 465.271239][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 465.289501][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.298177][ T5827] usb 4-1: config 1 interface 2 has no altsetting 0 [ 465.318392][ T10] usb 1-1: Product: syz [ 465.328603][ T10] usb 1-1: Manufacturer: syz [ 465.349013][ T5827] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 465.358228][ T10] usb 1-1: SerialNumber: syz [ 465.381497][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.396855][ T5924] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 465.409325][ T5827] usb 4-1: Product: syz [ 465.424076][ T5827] usb 4-1: Manufacturer: syz [ 465.428742][ T5827] usb 4-1: SerialNumber: syz [ 465.596037][ T10] usb 1-1: 0:2 : does not exist [ 465.603133][ T5924] [drm:udl_init] *ERROR* Selecting channel failed [ 465.620704][ T10] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 465.675061][ T5924] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 465.696566][ T5827] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 465.700564][ T5924] [drm] Initialized udl on minor 2 [ 465.719005][ T10] usb 1-1: USB disconnect, device number 118 [ 465.746898][ T5827] usb 4-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 465.754501][ T5924] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 465.786027][ T5924] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 465.787210][ T5827] usb 4-1: found format II with max.bitrate = 3, frame size=7 [ 465.794433][ T797] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 465.835040][ T797] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 465.845477][ T5827] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 465.846863][ T5924] usb 6-1: USB disconnect, device number 8 [ 465.876871][ T797] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 465.878203][ T5827] usb 4-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 465.932927][ T5827] usb 4-1: found format II with max.bitrate = 3, frame size=7 [ 465.971094][ T5827] usb 4-1: selecting invalid altsetting 0 [ 465.999843][ T5827] usb 4-1: selecting invalid altsetting 0 [ 466.076842][T18955] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request [ 466.125699][ T5827] usb 4-1: USB disconnect, device number 121 [ 466.173209][ T5947] udevd[5947]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 466.264510][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 466.530187][T18994] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5597'. [ 468.479482][T19120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5636'. [ 468.680504][T19120] team0 (unregistering): Port device team_slave_0 removed [ 468.722520][T19120] team0 (unregistering): Port device team_slave_1 removed [ 469.319771][T19166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5654'. [ 469.543019][T19180] openvswitch: netlink: VXLAN extension message has 16 unknown bytes. [ 469.800924][T19203] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 469.999375][ T5827] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 470.199665][ T5827] usb 5-1: Using ep0 maxpacket: 8 [ 470.239405][ T5827] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 470.249320][ T5827] usb 5-1: config 0 has no interface number 0 [ 470.287202][ T5827] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 470.317011][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.339459][ T5827] usb 5-1: Product: syz [ 470.353868][ T5827] usb 5-1: Manufacturer: syz [ 470.358595][ T5827] usb 5-1: SerialNumber: syz [ 470.400097][ T5827] usb 5-1: config 0 descriptor?? [ 470.597256][T19241] binder: 19240:19241 ioctl c00c6211 0 returned -14 [ 470.638206][ T5827] uvcvideo 5-1:0.31: probe with driver uvcvideo failed with error -22 [ 470.694527][ T5827] usb 5-1: USB disconnect, device number 121 [ 471.364584][T19284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5697'. [ 471.445037][T19284] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 471.604629][T19284] bond2 (unregistering): Released all slaves [ 472.259379][ T10] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 472.439612][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 472.455171][ T10] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 472.483949][ T10] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 472.517025][ T10] usb 4-1: config 0 has no interface number 0 [ 472.540005][ T10] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 472.571475][ T10] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 472.600671][ T10] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 472.608690][ T10] usb 4-1: config 0 has no interface number 0 [ 472.649535][ T10] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 472.688124][ T10] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 472.739459][ T10] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 472.747503][ T10] usb 4-1: config 0 has no interface number 0 [ 472.789560][ T10] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 472.819395][ T10] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 472.850167][ T10] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 472.858290][ T10] usb 4-1: config 0 has no interface number 0 [ 472.899631][ T10] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 472.929317][ T10] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 472.969976][ T10] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 472.978370][ T10] usb 4-1: config 0 has no interface number 0 [ 473.009388][ T10] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 473.039335][ T10] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 473.070102][ T10] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 473.078475][ T10] usb 4-1: config 0 has no interface number 0 [ 473.109622][ T10] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 473.139545][ T10] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 473.171005][ T10] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 473.183780][ T10] usb 4-1: config 0 has no interface number 0 [ 473.219554][ T10] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 473.249409][ T10] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 473.307288][ T10] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 473.315905][ T10] usb 4-1: config 0 has no interface number 0 [ 473.342078][ T10] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 473.359394][ T30] audit: type=1326 audit(1769647322.277:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19439 comm="syz.5.5731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd5f9aeb9 code=0x7ffc0000 [ 473.399472][ T10] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 473.432142][ T10] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 473.449425][ T30] audit: type=1326 audit(1769647322.287:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19439 comm="syz.5.5731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7fdfd5f9aeb9 code=0x7ffc0000 [ 473.479302][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.487758][ T10] usb 4-1: Product: syz [ 473.525819][ T10] usb 4-1: Manufacturer: syz [ 473.539446][ T10] usb 4-1: SerialNumber: syz [ 473.546380][ T30] audit: type=1326 audit(1769647322.287:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19439 comm="syz.5.5731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd5f9aeb9 code=0x7ffc0000 [ 473.589541][ T10] usb 4-1: config 0 descriptor?? [ 473.610644][ T10] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 473.639442][ T30] audit: type=1326 audit(1769647322.287:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19439 comm="syz.5.5731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd5f9aeb9 code=0x7ffc0000 [ 473.809716][ T10] etas_es58x 4-1:0.2: could not parse product info: '424242424242' [ 474.014004][ T48] usb 4-1: USB disconnect, device number 122 [ 474.048347][ T48] etas_es58x 4-1:0.2: Disconnecting syz syz [ 474.077427][T19463] bond3: option all_slaves_active: invalid value (9) [ 474.135512][T19463] bond3 (unregistering): Released all slaves [ 474.429600][T19550] netlink: 'syz.5.5741': attribute type 4 has an invalid length. [ 474.437373][T19550] netlink: 17 bytes leftover after parsing attributes in process `syz.5.5741'. [ 474.937130][T19582] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5749'. [ 475.008212][T19582] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5749'. [ 475.179520][T19593] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5754'. [ 475.188506][T19593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5754'. [ 475.309031][T19598] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 475.458771][ T30] audit: type=1326 audit(1769647324.377:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19607 comm="syz.3.5759" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba8779aeb9 code=0x0 [ 476.202485][T19646] netlink: 'syz.4.5774': attribute type 23 has an invalid length. [ 477.095423][T19696] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 477.202452][ T30] audit: type=1326 audit(1769647326.127:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19700 comm="syz.3.5794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8779aeb9 code=0x7ffc0000 [ 477.302544][ T30] audit: type=1326 audit(1769647326.127:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19700 comm="syz.3.5794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fba8779aeb9 code=0x7ffc0000 [ 477.431799][ T30] audit: type=1326 audit(1769647326.127:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19700 comm="syz.3.5794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8779aeb9 code=0x7ffc0000 [ 477.534699][ T30] audit: type=1326 audit(1769647326.127:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19700 comm="syz.3.5794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8779aeb9 code=0x7ffc0000 [ 477.909998][T19733] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5805'. [ 478.129681][T19741] netlink: 'syz.1.5811': attribute type 2 has an invalid length. [ 478.208089][T19741] : entered promiscuous mode [ 478.994462][T19789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5829'. [ 479.156528][T19797] openvswitch: netlink: Message has 4 unknown bytes. [ 479.269470][ T5827] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 479.470458][ T5827] usb 6-1: config 0 has an invalid interface number: 95 but max is 0 [ 479.478581][ T5827] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.539290][ T5827] usb 6-1: config 0 has no interface number 0 [ 479.550313][ T5827] usb 6-1: config 0 interface 95 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 479.651379][T19810] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode 802.3ad(4) [ 479.681096][ T5827] usb 6-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 479.721225][ T5827] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.733771][T19810] bond3 (unregistering): Released all slaves [ 479.761252][ T5827] usb 6-1: Product: syz [ 479.765519][ T5827] usb 6-1: Manufacturer: syz [ 479.815317][ T5827] usb 6-1: SerialNumber: syz [ 479.843490][ T5827] usb 6-1: config 0 descriptor?? [ 479.929841][T19885] xt_time: unknown flags 0x4 [ 480.276773][ T5827] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 480.290541][ T5827] usb 6-1: MIDIStreaming interface descriptor not found [ 480.369914][ T5827] usb 6-1: USB disconnect, device number 9 [ 480.517617][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 480.907401][T19943] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 480.933272][T19945] netlink: 'syz.3.5860': attribute type 10 has an invalid length. [ 481.165307][T19957] AppArmor: change_hat: Invalid input '9' [ 481.739296][ T30] audit: type=1326 audit(1769647330.657:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19984 comm="syz.4.5877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786739aeb9 code=0x7ffc0000 [ 481.849594][ T30] audit: type=1326 audit(1769647330.687:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19984 comm="syz.4.5877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786739aeb9 code=0x7ffc0000 [ 481.939444][ T30] audit: type=1326 audit(1769647330.697:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19984 comm="syz.4.5877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f786739aeb9 code=0x7ffc0000 [ 482.049593][ T30] audit: type=1326 audit(1769647330.697:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19984 comm="syz.4.5877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786739aeb9 code=0x7ffc0000 [ 482.090129][T19999] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 482.149571][ T30] audit: type=1326 audit(1769647330.697:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19984 comm="syz.4.5877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786739aeb9 code=0x7ffc0000 [ 482.283531][T20009] binfmt_misc: register: failed to install interpreter file ./file0 [ 483.089481][ T5827] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 483.274278][ T5827] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 483.311032][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 483.369544][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 59391, setting to 1024 [ 483.411592][ T5827] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 483.440263][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.468267][ T5827] usb 5-1: config 0 descriptor?? [ 483.501543][T20040] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 483.524088][ T5827] gspca_main: spca561-2.14.0 probing abcd:cdee [ 483.758100][ T5827] spca561 5-1:0.0: probe with driver spca561 failed with error -22 [ 483.790597][ T5827] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 483.797718][ T5827] usb 5-1: MIDIStreaming interface descriptor not found [ 483.950599][ T5827] usb 5-1: USB disconnect, device number 122 [ 484.552795][T20149] netlink: 124 bytes leftover after parsing attributes in process `syz.5.5937'. [ 484.951200][T20171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5947'. [ 484.996806][T20174] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5948'. [ 485.799628][ T797] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 485.979395][ T797] usb 4-1: Using ep0 maxpacket: 32 [ 485.989602][T20229] netlink: 116 bytes leftover after parsing attributes in process `syz.0.5969'. [ 486.008723][ T797] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 486.032250][T20229] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5969'. [ 486.047487][ T797] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 486.058164][ T797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.077175][ T797] usb 4-1: Product: syz [ 486.095335][ T797] usb 4-1: Manufacturer: syz [ 486.112021][ T797] usb 4-1: SerialNumber: syz [ 486.157959][ T797] usb 4-1: config 0 descriptor?? [ 486.178832][T20201] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 486.215401][ T797] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input62 [ 486.492846][T20251] xt_hashlimit: size too large, truncated to 1048576 [ 486.537719][T20251] xt_hashlimit: overflow, try lower: 8/0 [ 486.597517][ T5919] usb 4-1: USB disconnect, device number 123 [ 486.597635][ C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 487.759401][ T797] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 487.881603][T20326] netlink: 'syz.0.6002': attribute type 16 has an invalid length. [ 487.910233][T20326] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6002'. [ 487.955636][ T797] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 487.979428][ T797] usb 6-1: config 0 has no interface number 0 [ 487.999171][ T797] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 488.024374][T20329] netlink: 'syz.4.6005': attribute type 11 has an invalid length. [ 488.031963][ T797] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 488.066801][ T797] usb 6-1: config 0 interface 255 has no altsetting 0 [ 488.076921][ T797] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 488.096842][ T797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.118645][ T797] usb 6-1: config 0 descriptor?? [ 488.157218][ T797] ums-realtek 6-1:0.255: USB Mass Storage device detected [ 488.392935][ T48] usb 6-1: USB disconnect, device number 10 [ 488.725026][T20377] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6018'. [ 489.229620][T20417] netlink: 'syz.3.6026': attribute type 49 has an invalid length. [ 489.448208][T20432] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 489.470201][T20431] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6032'. [ 489.634629][T20435] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6035'. [ 489.924107][T20448] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 490.572382][T20481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6054'. [ 490.625153][ T30] audit: type=1326 audit(1769647339.547:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20482 comm="syz.4.6053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786739aeb9 code=0x7ffc0000 [ 490.709738][ T24] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 490.719488][ T30] audit: type=1326 audit(1769647339.547:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20482 comm="syz.4.6053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786739aeb9 code=0x7ffc0000 [ 490.801664][ T30] audit: type=1326 audit(1769647339.617:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20482 comm="syz.4.6053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f786739aeb9 code=0x7ffc0000 [ 490.879354][ T30] audit: type=1326 audit(1769647339.617:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20482 comm="syz.4.6053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786739aeb9 code=0x7ffc0000 [ 490.939546][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 490.962257][ T24] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 490.969542][ T30] audit: type=1326 audit(1769647339.617:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20482 comm="syz.4.6053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786739aeb9 code=0x7ffc0000 [ 490.991646][T20492] netlink: 'syz.0.6058': attribute type 5 has an invalid length. [ 491.006933][ T24] usb 4-1: config 0 has no interface number 0 [ 491.027561][ T24] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 491.041997][T20492] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.6058'. [ 491.071405][ T24] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 491.115022][ T24] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 491.152878][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.188477][ T24] usb 4-1: Product: syz [ 491.199421][ T24] usb 4-1: Manufacturer: syz [ 491.230856][ T24] usb 4-1: SerialNumber: syz [ 491.252320][ T24] usb 4-1: config 0 descriptor?? [ 491.282021][T20473] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 491.293802][T20473] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 491.538917][T20473] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 491.621152][T20473] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 491.873128][ T24] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 491.901181][T20512] bond3: entered promiscuous mode [ 491.940705][ T24] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 491.969811][T20512] bond3: entered allmulticast mode [ 491.983430][ T24] asix 4-1:0.251: probe with driver asix failed with error -5 [ 491.997758][T20512] 8021q: adding VLAN 0 to HW filter on device bond3 [ 492.015545][ T24] usb 4-1: USB disconnect, device number 124 [ 493.029643][T20605] openvswitch: netlink: IP tunnel dst address not specified [ 493.683802][T20633] netlink: 'syz.0.6097': attribute type 8 has an invalid length. [ 493.739448][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 493.924347][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 493.946215][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 493.970147][ T24] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 494.015630][ T24] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 494.041401][ T24] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 494.069627][ T24] usb 6-1: config 128 has no interface number 0 [ 494.089320][ T24] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 494.132073][ T24] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 494.165908][ T24] usb 6-1: config 128 interface 127 has no altsetting 0 [ 494.186606][T20648] openvswitch: netlink: IP tunnel dst address not specified [ 494.207348][ T24] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 494.219559][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.249541][ T24] usb 6-1: Product: syz [ 494.261988][ T24] usb 6-1: Manufacturer: syz [ 494.273849][ T24] usb 6-1: SerialNumber: syz [ 494.517176][T20663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 494.595009][ T24] usb 6-1: USB disconnect, device number 11 [ 494.665529][ T5947] udevd[5947]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 494.823419][T20683] openvswitch: netlink: Message has 1 unknown bytes. [ 494.866229][T20683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.256866][T20704] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6122'. [ 495.534273][T20721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6129'. [ 495.699646][ T5919] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 495.712700][T20729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6132'. [ 495.768243][T20725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6130'. [ 495.869576][ T5919] usb 6-1: Using ep0 maxpacket: 16 [ 495.880622][ T5919] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 495.888743][ T5919] usb 6-1: config 0 has no interface number 0 [ 495.921983][ T5919] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 495.984271][ T5919] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 496.009724][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 496.018233][ T5919] usb 6-1: Product: syz [ 496.042835][ T5919] usb 6-1: SerialNumber: syz [ 496.067696][ T5919] usb 6-1: config 0 descriptor?? [ 496.124661][ T5919] cm109 6-1:0.8: invalid payload size 208, expected 4 [ 496.152715][ T5919] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input63 [ 496.418294][T20760] x_tables: duplicate entry at hook 1 [ 496.502514][T20764] xt_hashlimit: max too large, truncated to 1048576 [ 496.613366][ C0] cm109 6-1:0.8: cm109_urb_irq_callback: urb status -71 [ 496.617466][ T797] usb 6-1: USB disconnect, device number 12 [ 496.620547][ C0] cm109 6-1:0.8: cm109_submit_ctl: usb_submit_urb (urb_ctl) failed -19 [ 496.762926][ T797] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 497.420925][ T24] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 497.600633][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 497.642842][ T24] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 497.679081][ T24] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 497.701571][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 497.749340][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 497.789285][ T24] usb 1-1: config 1 has no interface number 0 [ 497.840180][ T24] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 497.870922][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.930917][ T24] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 498.116428][ T24] snd_usb_pod 1-1:1.1: set_interface failed [ 498.154967][ T24] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 498.181959][ T24] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 498.238842][ T24] usb 1-1: USB disconnect, device number 119 [ 498.495953][T20858] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6175'. [ 498.584037][ T30] audit: type=1326 audit(1769647347.507:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20861 comm="syz.4.6176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786739aeb9 code=0x7ffc0000 [ 498.680808][ T30] audit: type=1326 audit(1769647347.507:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20861 comm="syz.4.6176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786739aeb9 code=0x7ffc0000 [ 498.773872][ T30] audit: type=1326 audit(1769647347.507:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20861 comm="syz.4.6176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786739aeb9 code=0x7ffc0000 [ 498.868645][ T30] audit: type=1326 audit(1769647347.507:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20861 comm="syz.4.6176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f786739aeb9 code=0x7ffc0000 [ 498.952691][ T30] audit: type=1326 audit(1769647347.507:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20861 comm="syz.4.6176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786739aeb9 code=0x7ffc0000 [ 499.074507][ T30] audit: type=1326 audit(1769647347.507:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20861 comm="syz.4.6176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786739aeb9 code=0x7ffc0000 [ 499.227436][ T30] audit: type=1326 audit(1769647347.507:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20861 comm="syz.4.6176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786739aeb9 code=0x7ffc0000 [ 499.352135][ T30] audit: type=1326 audit(1769647347.507:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20861 comm="syz.4.6176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f786739aeb9 code=0x7ffc0000 [ 499.470866][ T30] audit: type=1326 audit(1769647347.507:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20861 comm="syz.4.6176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f786739aeb9 code=0x7ffc0000 [ 499.759412][ T30] audit: type=1326 audit(1769647348.677:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20936 comm="syz.1.6200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374279aeb9 code=0x7ffc0000 [ 499.809471][ T797] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 500.003327][ T797] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 500.019098][ T797] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 500.063608][ T797] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 500.094354][ T797] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 500.137222][ T797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 500.189314][ T797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 500.229696][ T797] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 500.245333][T20955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6207'. [ 500.262349][ T797] usb 6-1: string descriptor 0 read error: -22 [ 500.268933][ T797] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 500.295023][ T797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.318355][ T797] usb 6-1: config 0 descriptor?? [ 500.343453][ T797] hub 6-1:0.0: bad descriptor, ignoring hub [ 500.388429][ T797] hub 6-1:0.0: probe with driver hub failed with error -5 [ 500.503137][ T797] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input64 [ 500.704730][ T797] usb 6-1: USB disconnect, device number 13 [ 500.710964][T21005] usb usb8: usbfs: process 21005 (syz.1.6212) did not claim interface 0 before use [ 500.978207][T21018] xt_CT: You must specify a L4 protocol and not use inversions on it [ 501.380184][T21042] netlink: 'syz.0.6224': attribute type 10 has an invalid length. [ 501.440164][T21042] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 501.473485][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.485693][T21042] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 501.499449][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.833052][T21060] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6229'. [ 501.855002][T21066] netlink: 'syz.4.6233': attribute type 61 has an invalid length. [ 501.905480][T21066] netlink: 'syz.4.6233': attribute type 62 has an invalid length. [ 502.566689][T21099] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6248'. [ 502.827610][T21116] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 502.827610][T21116] The task syz.4.6254 (21116) triggered the difference, watch for misbehavior. [ 503.288521][T21140] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 504.359432][ T5919] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 504.571800][ T5919] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 504.589552][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.597844][ T5919] usb 6-1: Product: syz [ 504.629537][ T5919] usb 6-1: Manufacturer: syz [ 504.634266][ T5919] usb 6-1: SerialNumber: syz [ 504.680397][ T5919] usb 6-1: config 0 descriptor?? [ 504.709813][ T5919] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 505.095417][ T5919] gspca_sunplus: reg_w_riv err -71 [ 505.119369][ T5919] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 505.150356][ T5919] usb 6-1: USB disconnect, device number 14 [ 505.728303][T21232] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 505.806906][T21241] dlm: non-version read from control device 0 [ 506.541266][T21271] netlink: 'syz.1.6314': attribute type 11 has an invalid length. [ 507.487221][T21310] program syz.4.6330 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 507.628062][T21313] bond3: option arp_validate: invalid value (2048) [ 507.714800][T21313] bond3 (unregistering): Released all slaves [ 508.210468][T21404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6343'. [ 508.334262][T21404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6343'. [ 508.809481][T21441] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 508.816217][T21441] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 508.891309][T21441] vhci_hcd vhci_hcd.0: Device attached [ 508.924330][T21445] vhci_hcd vhci_hcd.0: port 0 already used [ 508.971676][T21442] vhci_hcd: connection closed [ 508.976199][ T13] vhci_hcd vhci_hcd.1: stop threads [ 508.998554][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 508.998569][ T30] audit: type=1400 audit(1769647357.917:194): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=21451 comm="syz.3.6363" [ 509.000318][ T13] vhci_hcd vhci_hcd.1: release socket [ 509.120680][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 509.189780][ T5919] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 509.349350][ T5919] usb 6-1: Using ep0 maxpacket: 8 [ 509.367095][ T5919] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 509.396669][ T5919] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.428550][ T5919] usb 6-1: config 0 has no interface number 0 [ 509.434771][ T30] audit: type=1326 audit(1769647358.347:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21472 comm="syz.4.6371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786739aeb9 code=0x7ffc0000 [ 509.489401][ T5919] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 509.498568][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.539353][ T30] audit: type=1326 audit(1769647358.347:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21472 comm="syz.4.6371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786739aeb9 code=0x7ffc0000 [ 509.562823][ T5919] usb 6-1: Product: syz [ 509.567009][ T5919] usb 6-1: Manufacturer: syz [ 509.598998][ T5919] usb 6-1: SerialNumber: syz [ 509.624211][ T5919] usb 6-1: config 0 descriptor?? [ 509.639326][ T30] audit: type=1326 audit(1769647358.347:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21472 comm="syz.4.6371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786739aeb9 code=0x7ffc0000 [ 509.729367][ T30] audit: type=1326 audit(1769647358.367:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21472 comm="syz.4.6371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f786739aeb9 code=0x7ffc0000 [ 509.809634][ T30] audit: type=1326 audit(1769647358.367:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21472 comm="syz.4.6371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786739aeb9 code=0x7ffc0000 [ 509.899661][ T30] audit: type=1326 audit(1769647358.367:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21472 comm="syz.4.6371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786739aeb9 code=0x7ffc0000 [ 509.939697][ T5919] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 509.947439][ T5919] uvcvideo 6-1:0.31: No valid video chain found. [ 510.000028][ T30] audit: type=1326 audit(1769647358.367:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21472 comm="syz.4.6371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f786739aeb9 code=0x7ffc0000 [ 510.069330][ T30] audit: type=1326 audit(1769647358.367:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21472 comm="syz.4.6371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f786739aeb9 code=0x7ffc0000 [ 510.129943][ T797] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 510.143999][ T24] usb 6-1: USB disconnect, device number 15 [ 510.299409][ T797] usb 1-1: Using ep0 maxpacket: 16 [ 510.311759][ T797] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 510.343273][ T797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.364763][ T797] usb 1-1: Product: syz [ 510.373036][ T797] usb 1-1: Manufacturer: syz [ 510.377657][ T797] usb 1-1: SerialNumber: syz [ 510.405925][ T797] usb 1-1: config 0 descriptor?? [ 510.427143][ T797] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 510.855675][ T797] ssu100 1-1:0.0: probe with driver ssu100 failed with error -71 [ 510.924684][ T797] usb 1-1: USB disconnect, device number 120 [ 511.562625][ T797] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 511.642844][T21586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 511.739786][ T797] usb 5-1: Using ep0 maxpacket: 16 [ 511.765977][ T797] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 511.789690][ T797] usb 5-1: config 0 has no interface number 0 [ 511.840803][ T797] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 511.859295][ T797] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 511.880188][ T797] usb 5-1: Product: syz [ 511.884388][ T797] usb 5-1: SerialNumber: syz [ 511.914995][ T797] usb 5-1: config 0 descriptor?? [ 511.963647][ T797] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input66 [ 512.218437][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 512.218557][ T5827] usb 5-1: USB disconnect, device number 123 [ 512.225416][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 512.338497][ T5827] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 512.399744][ T5919] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 512.561118][ T5919] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 512.601063][ T5919] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 512.633176][ T5919] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 512.672905][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.702057][ T5919] usb 1-1: Product: syz [ 512.706570][ T5919] usb 1-1: Manufacturer: syz [ 512.729395][ T5919] usb 1-1: SerialNumber: syz [ 512.750377][ T5919] usb 1-1: config 0 descriptor?? [ 512.756004][T21606] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 512.779530][T21606] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 513.010788][T21606] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 513.050126][T21606] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 513.273861][ T5919] Error reading MAC address [ 513.314558][ T5919] usb 1-1: USB disconnect, device number 121 [ 513.639947][ T797] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 513.808644][ T797] usb 6-1: Using ep0 maxpacket: 16 [ 513.819069][ T797] usb 6-1: config 253 has an invalid interface number: 184 but max is 0 [ 513.859344][ T797] usb 6-1: config 253 has no interface number 0 [ 513.865665][ T797] usb 6-1: config 253 interface 184 has no altsetting 0 [ 513.906305][ T797] usb 6-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 513.928173][ T797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.960377][ T797] usb 6-1: Product: syz [ 513.964670][ T797] usb 6-1: Manufacturer: syz [ 513.993716][ T797] usb 6-1: SerialNumber: syz [ 514.040550][ T797] go7007 6-1:253.184: probe with driver go7007 failed with error -12 [ 514.285480][ T24] usb 6-1: USB disconnect, device number 16 [ 516.012888][T21812] SET target dimension over the limit! [ 516.969138][T21865] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6514'. [ 517.004947][T21865] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6514'. [ 518.353551][T21936] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.463488][T21941] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 518.917955][T21855] Bluetooth: hci5: command 0x0406 tx timeout [ 518.985243][ T30] audit: type=1326 audit(1769647367.907:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21972 comm="syz.5.6561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd5f9aeb9 code=0x7ffc0000 [ 519.125168][ T30] audit: type=1326 audit(1769647367.907:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21972 comm="syz.5.6561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd5f9aeb9 code=0x7ffc0000 [ 519.239339][ T30] audit: type=1326 audit(1769647367.947:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21972 comm="syz.5.6561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fdfd5f9aeb9 code=0x7ffc0000 [ 519.329533][T21994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.358347][ T30] audit: type=1326 audit(1769647367.947:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21972 comm="syz.5.6561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd5f9aeb9 code=0x7ffc0000 [ 519.434996][ T30] audit: type=1326 audit(1769647367.947:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21972 comm="syz.5.6561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd5f9aeb9 code=0x7ffc0000 [ 519.729523][ T48] usb 5-1: new full-speed USB device number 124 using dummy_hcd [ 519.911315][ T48] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 519.954081][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 384, setting to 64 [ 519.991255][ T48] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 520.020991][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.048014][ T48] usb 5-1: Product: syz [ 520.069529][ T48] usb 5-1: Manufacturer: syz [ 520.091734][ T48] usb 5-1: SerialNumber: syz [ 520.119925][ T48] usb 5-1: config 0 descriptor?? [ 520.126125][T22003] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 520.160916][T22042] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6588'. [ 520.202487][T22042] netlink: 12296 bytes leftover after parsing attributes in process `syz.3.6588'. [ 520.252741][T22042] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6588'. [ 520.305262][ T48] rc_core: IR keymap rc-streamzap not found [ 520.320701][ T48] Registered IR keymap rc-empty [ 520.342093][ T48] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 520.386201][ T48] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input68 [ 520.468384][ T48] usb 5-1: USB disconnect, device number 124 [ 520.719515][ T5827] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 520.871216][ T5827] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 520.895587][ T5827] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.925943][ T5827] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 520.955487][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.968756][T22093] dlm: no locking on control device [ 520.996330][ T5827] hub 4-1:4.0: USB hub found [ 521.200337][ T5827] hub 4-1:4.0: 2 ports detected [ 521.215616][ T5827] usb 4-1: selecting invalid altsetting 1 [ 521.239368][ T5827] hub 4-1:4.0: Using single TT (err -22) [ 521.337398][T22110] openvswitch: netlink: Actions may not be safe on all matching packets [ 521.411078][ T5827] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 521.417735][ T5827] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 521.420091][T22113] netlink: 'syz.4.6607': attribute type 1 has an invalid length. [ 521.502484][ T5827] usb 4-1: USB disconnect, device number 125 [ 521.760932][ T30] audit: type=1326 audit(1769647370.687:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22131 comm="syz.5.6612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd5f9aeb9 code=0x7ffc0000 [ 521.823675][ T30] audit: type=1326 audit(1769647370.707:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22131 comm="syz.5.6612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7fdfd5f9aeb9 code=0x7ffc0000 [ 521.911069][ T30] audit: type=1326 audit(1769647370.707:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22131 comm="syz.5.6612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd5f9aeb9 code=0x7ffc0000 [ 521.968338][ T30] audit: type=1326 audit(1769647370.707:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22131 comm="syz.5.6612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd5f9aeb9 code=0x7ffc0000 [ 522.603289][T22174] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6630'. [ 523.123355][T22204] netlink: 388 bytes leftover after parsing attributes in process `syz.5.6640'. [ 523.177709][T22209] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6644'. [ 524.002441][T22255] netlink: 196 bytes leftover after parsing attributes in process `syz.0.6664'. [ 524.743779][T22289] binder: 22288:22289 ioctl c018620c 2000000002c0 returned -22 [ 524.860756][T22293] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6681'. [ 525.129446][ T24] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 525.311026][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 525.332035][ T24] usb 1-1: config 254 has an invalid interface number: 235 but max is 0 [ 525.358923][ T24] usb 1-1: config 254 has no interface number 0 [ 525.383962][ T24] usb 1-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 525.417979][ T24] usb 1-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xA2, changing to 0x82 [ 525.467028][ T24] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 525.509385][ T24] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 525.544615][ T24] usb 1-1: config 254 interface 235 has no altsetting 0 [ 525.581494][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 525.612260][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.638017][ T24] usb 1-1: Product: syz [ 525.643744][ T24] usb 1-1: Manufacturer: syz [ 525.648365][ T24] usb 1-1: SerialNumber: syz [ 525.673903][T22295] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 525.922943][T22295] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 525.964043][ T24] usbtest 1-1:254.235: Linux gadget zero [ 525.990796][ T24] usbtest 1-1:254.235: high-speed {control in/out bulk-out iso-in} tests (+alt) [ 526.224123][ T10] usb 1-1: USB disconnect, device number 122 [ 526.261997][T22360] IPv6: sit1: Disabled Multicast RS [ 526.292815][T22360] sit1: entered allmulticast mode [ 526.341155][T22373] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6707'. [ 526.353702][T22373] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6707'. [ 526.833320][T22392] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6715'. [ 526.888382][T22392] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6715'. [ 527.312237][T22417] netlink: 'syz.4.6725': attribute type 4 has an invalid length. [ 527.442909][T22422] netlink: 'syz.5.6726': attribute type 30 has an invalid length. [ 527.518498][T22422] bond2: option arp_missed_max: invalid value (0) [ 527.525234][T22422] bond2: option arp_missed_max: allowed values 1 - 255 [ 527.537240][T22422] bond2 (unregistering): Released all slaves [ 527.858523][T22507] CIFS: VFS: Malformed UNC in devname [ 527.954584][ T10] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 528.039446][ T24] usb 5-1: new full-speed USB device number 125 using dummy_hcd [ 528.129418][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 528.151226][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 528.179620][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.198068][ T10] usb 4-1: Product: syz [ 528.218539][ T10] usb 4-1: Manufacturer: syz [ 528.228703][ T10] usb 4-1: SerialNumber: syz [ 528.247615][ T10] usb 4-1: config 0 descriptor?? [ 528.273194][ T24] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 528.290174][ T24] usb 5-1: config 0 has no interface number 0 [ 528.304158][ T24] usb 5-1: config 0 interface 29 has no altsetting 0 [ 528.327435][ T24] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 528.348698][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.369176][ T24] usb 5-1: Product: syz [ 528.382657][ T24] usb 5-1: Manufacturer: syz [ 528.387379][ T24] usb 5-1: SerialNumber: syz [ 528.428445][ T24] usb 5-1: config 0 descriptor?? [ 528.487639][ T10] snd-usb-6fire 4-1:0.0: unknown device firmware state received from device: [ 528.517271][ T10] eb aa 3b 80 9b e4 7a f0 [ 528.532831][ T10] snd-usb-6fire 4-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 528.680893][ T24] peak_usb 5-1:0.29: PEAK-System PCAN-USB X6 v65 fw v224.204.25 (2 channels) [ 528.702652][ T797] usb 4-1: USB disconnect, device number 126 [ 528.886734][ T24] peak_usb 5-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 528.927267][ T24] peak_usb 5-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 528.960396][T22575] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6744'. [ 529.134558][ T24] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -71 [ 529.181662][ T24] usb 5-1: USB disconnect, device number 125 [ 529.521126][ T30] audit: type=1326 audit(1769647378.447:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22603 comm="syz.3.6752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8779aeb9 code=0x50000 [ 529.565968][T22606] netlink: 'syz.5.6753': attribute type 1 has an invalid length. [ 529.598477][ T30] audit: type=1326 audit(1769647378.467:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22603 comm="syz.3.6752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8779aeb9 code=0x50000 [ 529.622640][T22606] netlink: 5 bytes leftover after parsing attributes in process `syz.5.6753'. [ 529.657372][ T30] audit: type=1326 audit(1769647378.467:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22603 comm="syz.3.6752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8779aeb9 code=0x50000 [ 529.696131][ T30] audit: type=1326 audit(1769647378.467:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22603 comm="syz.3.6752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8779aeb9 code=0x50000 [ 529.800018][ T30] audit: type=1326 audit(1769647378.467:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22603 comm="syz.3.6752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8779aeb9 code=0x50000 [ 529.873388][ T30] audit: type=1326 audit(1769647378.467:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22603 comm="syz.3.6752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8779aeb9 code=0x50000 [ 529.967315][ T30] audit: type=1326 audit(1769647378.467:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22603 comm="syz.3.6752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8779aeb9 code=0x50000 [ 530.064784][ T30] audit: type=1326 audit(1769647378.467:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22603 comm="syz.3.6752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8779aeb9 code=0x50000 [ 530.180941][ T30] audit: type=1326 audit(1769647378.467:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22603 comm="syz.3.6752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8779aeb9 code=0x50000 [ 530.249916][ T30] audit: type=1326 audit(1769647378.467:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22603 comm="syz.3.6752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8779aeb9 code=0x50000 [ 530.696578][T22662] netlink: 'syz.0.6776': attribute type 10 has an invalid length. [ 530.767775][T22662] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6776'. [ 530.803802][T22662] batadv0: entered promiscuous mode [ 530.809063][T22662] batadv0: entered allmulticast mode [ 530.870406][T22662] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 532.016185][T22766] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 532.202738][ T5905] kworker/1:3 (5905) used greatest stack depth: 14840 bytes left [ 532.251351][T22775] m1Ie5nè‹: entered promiscuous mode [ 532.499782][ T24] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 532.598967][T22799] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 532.675572][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 532.749042][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 532.766668][ T24] usb 1-1: config 7 has an invalid interface number: 58 but max is 0 [ 532.780242][ T24] usb 1-1: config 7 has no interface number 0 [ 532.786367][ T24] usb 1-1: config 7 interface 58 altsetting 3 has an endpoint descriptor with address 0x98, changing to 0x88 [ 532.830316][ T31] INFO: task syz.2.3862:14073 blocked for more than 143 seconds. [ 532.836398][ T24] usb 1-1: config 7 interface 58 altsetting 3 bulk endpoint 0x88 has invalid maxpacket 96 [ 532.858648][ T31] Tainted: G L syzkaller #0 [ 532.873627][ T24] usb 1-1: config 7 interface 58 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 532.895689][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 532.914419][ T24] usb 1-1: config 7 interface 58 has no altsetting 0 [ 532.935157][ T31] task:syz.2.3862 state:D stack:28184 pid:14073 tgid:14070 ppid:5845 task_flags:0x400040 flags:0x00080002 [ 532.938395][ T24] usb 1-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f [ 532.978339][ T31] Call Trace: [ 532.993462][ T31] [ 532.997912][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.006783][ T31] __schedule+0x14ea/0x5050 [ 533.006842][ T31] ? __pfx___schedule+0x10/0x10 [ 533.006878][ T31] ? schedule+0x90/0x360 [ 533.006900][ T31] schedule+0x164/0x360 [ 533.006921][ T31] schedule_preempt_disabled+0x13/0x30 [ 533.006940][ T31] __mutex_lock+0x7fe/0x1300 [ 533.006965][ T31] ? __mutex_lock+0x5ac/0x1300 [ 533.006989][ T31] ? usbdev_open+0x182/0x770 [ 533.007019][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 533.007040][ T31] ? bus_find_device+0x27d/0x2d0 [ 533.007067][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 533.007090][ T31] ? __pfx_kobject_get_unless_zero+0x10/0x10 [ 533.007113][ T31] ? usbdev_open+0xa7/0x770 [ 533.007141][ T31] usbdev_open+0x182/0x770 [ 533.007167][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 533.007191][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 533.007219][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 533.007244][ T31] chrdev_open+0x4cd/0x5e0 [ 533.007267][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 533.007286][ T31] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 533.007312][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 533.007330][ T31] do_dentry_open+0x7ce/0x1420 [ 533.007362][ T31] vfs_open+0x3b/0x340 [ 533.007379][ T31] ? path_openat+0x346e/0x3e20 [ 533.007403][ T31] path_openat+0x3486/0x3e20 [ 533.007454][ T31] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 533.007476][ T31] ? getname_flags+0xb7/0x540 [ 533.020480][ T24] usb 1-1: Product: syz [ 533.065982][ T31] ? __pfx_path_openat+0x10/0x10 [ 533.087498][ T24] usb 1-1: Manufacturer: syz [ 533.142773][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 533.148268][ T24] usb 1-1: SerialNumber: syz [ 533.172323][ T31] do_filp_open+0x22d/0x490 [ 533.178787][T22781] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 533.186604][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 533.192275][ T31] ? _raw_spin_unlock+0x28/0x50 [ 533.197655][ T31] ? alloc_fd+0x64b/0x6c0 [ 533.203873][ T31] do_sys_openat2+0x12f/0x220 [ 533.208678][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 533.214431][ T31] ? exc_page_fault+0x6a/0xc0 [ 533.220310][ T31] ? do_user_addr_fault+0xc7c/0x1360 [ 533.225650][ T31] __x64_sys_openat+0x138/0x170 [ 533.231192][ T31] do_syscall_64+0xe2/0xf80 [ 533.235798][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.243114][ T31] ? trace_irq_disable+0x37/0x100 [ 533.248175][ T31] ? clear_bhb_loop+0x60/0xb0 [ 533.253989][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.260185][ T31] RIP: 0033:0x7f7aea15b78e [ 533.264707][ T31] RSP: 002b:00007f7ae83f5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 533.275141][ T31] RAX: ffffffffffffffda RBX: 00007f7ae83f66c0 RCX: 00007f7aea15b78e [ 533.285854][ T31] RDX: 0000000000000102 RSI: 00007f7ae83f5c00 RDI: ffffffffffffff9c [ 533.294563][ T31] RBP: 00007f7ae83f5c00 R08: 0000000000000000 R09: 0000000000000000 [ 533.303672][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 533.313126][ T31] R13: 00007f7aea416038 R14: 00007f7aea415fa0 R15: 00007f7aea53fa48 [ 533.321759][ T31] [ 533.324890][ T31] [ 533.324890][ T31] Showing all locks held in the system: [ 533.335777][ T31] 4 locks held by kworker/1:0/24: [ 533.341154][ T31] #0: ffff88801da8ed48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 533.368584][ T31] #1: ffffc900001e7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 533.381609][ T31] #2: ffff8881437dc198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 533.428981][ T24] usb 1-1: USB disconnect, device number 123 [ 533.435506][ T31] #3: ffff8880b873a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 533.461345][ T31] 1 lock held by khungtaskd/31: [ 533.466287][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 533.480462][ T31] 2 locks held by getty/5579: [ 533.485245][ T31] #0: ffff8880307840a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 533.496443][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 533.519816][ T31] 5 locks held by kworker/0:6/5906: [ 533.525055][ T31] 1 lock held by syz.2.3862/14073: [ 533.530594][ T31] #0: ffff888028366198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 533.540340][ T31] [ 533.542679][ T31] ============================================= [ 533.542679][ T31] [ 533.551735][ T31] NMI backtrace for cpu 1 [ 533.551758][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 533.551786][ T31] Tainted: [L]=SOFTLOCKUP [ 533.551793][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 533.551804][ T31] Call Trace: [ 533.551811][ T31] [ 533.551819][ T31] dump_stack_lvl+0xe8/0x150 [ 533.551844][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 533.551867][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 533.551892][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 533.551917][ T31] sys_info+0x135/0x170 [ 533.551935][ T31] watchdog+0xf90/0xfe0 [ 533.551958][ T31] ? watchdog+0x209/0xfe0 [ 533.551982][ T31] kthread+0x726/0x8b0 [ 533.552003][ T31] ? __pfx_watchdog+0x10/0x10 [ 533.552028][ T31] ? __pfx_kthread+0x10/0x10 [ 533.552049][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 533.552072][ T31] ? __pfx_kthread+0x10/0x10 [ 533.552091][ T31] ret_from_fork+0x51b/0xa40 [ 533.552118][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 533.552139][ T31] ? __switch_to+0xc82/0x1410 [ 533.552163][ T31] ? __pfx_kthread+0x10/0x10 [ 533.552182][ T31] ret_from_fork_asm+0x1a/0x30 [ 533.552216][ T31] [ 533.552224][ T31] Sending NMI from CPU 1 to CPUs 0: [ 533.678982][ C0] NMI backtrace for cpu 0 [ 533.679001][ C0] CPU: 0 UID: 0 PID: 22777 Comm: syz.0.6817 Tainted: G L syzkaller #0 PREEMPT(full) [ 533.679022][ C0] Tainted: [L]=SOFTLOCKUP [ 533.679027][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 533.679037][ C0] RIP: 0033:0x7efce5e6b440 [ 533.679054][ C0] Code: 0f 7e c1 66 48 0f 7e ca 48 39 c2 73 65 48 39 f0 0f 82 2a 01 00 00 48 39 f2 72 65 66 0f c6 c0 01 0f 11 45 00 4c 89 e6 eb 09 90 <48> 8b 4b 08 48 83 c3 08 48 39 d1 72 f3 48 8d 46 f8 48 8b 76 f8 48 [ 533.679067][ C0] RSP: 002b:00007efce633fa50 EFLAGS: 00000287 [ 533.679081][ C0] RAX: 00007efce49fe188 RBX: 00007efce49fcee8 RCX: ffffffff817761eb [ 533.679093][ C0] RDX: ffffffff81776282 RSI: 00007efce49fe188 RDI: 00007efce49fd4c0 [ 533.679104][ C0] RBP: 00007efce49fc100 R08: 00007efce6200000 R09: 00007efce6215f40 [ 533.679115][ C0] R10: 0000000000000000 R11: 00000000000000ff R12: 00007efce49fe880 [ 533.679125][ C0] R13: 0000000000000017 R14: 00000000000004f0 R15: 0000000000000000 [ 533.679136][ C0] FS: 00005555757fe500 GS: 0000000000000000 [ 533.680651][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 533.680669][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 533.680693][ T31] Tainted: [L]=SOFTLOCKUP [ 533.680701][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 533.680711][ T31] Call Trace: [ 533.680719][ T31] [ 533.680728][ T31] vpanic+0x1e0/0x670 [ 533.680755][ T31] panic+0xc5/0xd0 [ 533.680774][ T31] ? __pfx_panic+0x10/0x10 [ 533.680796][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 533.680825][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 533.680852][ T31] watchdog+0xfda/0xfe0 [ 533.680874][ T31] ? watchdog+0x209/0xfe0 [ 533.680898][ T31] kthread+0x726/0x8b0 [ 533.680920][ T31] ? __pfx_watchdog+0x10/0x10 [ 533.680937][ T31] ? __pfx_kthread+0x10/0x10 [ 533.680959][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 533.680982][ T31] ? __pfx_kthread+0x10/0x10 [ 533.681001][ T31] ret_from_fork+0x51b/0xa40 [ 533.681034][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 533.681056][ T31] ? __switch_to+0xc82/0x1410 [ 533.681082][ T31] ? __pfx_kthread+0x10/0x10 [ 533.681101][ T31] ret_from_fork_asm+0x1a/0x30 [ 533.681137][ T31] [ 533.905130][ T31] Kernel Offset: disabled [ 533.909451][ T31] Rebooting in 86400 seconds..