last executing test programs: 5.293156779s ago: executing program 1 (id=4028): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x2, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFQA_CFG_MASK={0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x18}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x11}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x90) 5.194808449s ago: executing program 1 (id=4030): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@local}, 0x1}) 4.969591892s ago: executing program 1 (id=4034): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b/\\/o/\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}, {@access_any}], [], 0x6b}}) 2.816876304s ago: executing program 4 (id=4051): r0 = inotify_init() mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) 2.606404008s ago: executing program 4 (id=4053): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9", 0x0, 0x0, 0x0}, 0x38) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000060000000000000100000a0900010073797a31000000000900030073797a3000000000a4000300"], 0x118}, 0x1, 0x0, 0x0, 0x240401d4}, 0x240408d0) 2.485354201s ago: executing program 4 (id=4054): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x812}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000440)={0x40, 0x31, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.343968389s ago: executing program 2 (id=4056): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000202000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000008000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000500000000020000000000000802000000000000000000000a0300000000005f0061"], 0x0, 0x52}, 0x28) 2.274691346s ago: executing program 3 (id=4057): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000004c0)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) 2.128923011s ago: executing program 2 (id=4058): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080)={0x0, 0xa7}, 0x2) preadv(r0, &(0x7f0000001980)=[{0x0}, {&(0x7f00000005c0)=""/241, 0xf1}], 0x2, 0x9, 0x4) 2.110942301s ago: executing program 3 (id=4059): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x181040, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x2) 1.879228588s ago: executing program 3 (id=4061): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0) splice(r0, 0x0, r2, 0x0, 0x7ffc, 0xd) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 1.364828592s ago: executing program 0 (id=4067): r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f0000000400)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f00000000c0), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000007c0)="3e12d23d346cfdeb1708e9b982bf3187ef6b10dac616f738274bc1c03bee4423fa20837e6e86b86592e9be8351aa0000000037d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8bb844bf127ee741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b0204dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc77a9b3df93199c796fa597f452bed6b6fbcc812df9be8e35d8d15086609c033a5d2a42d5dcb0d103098fa302c5b1d48f913f8b22a30a47d9ae02000000e2b855845f39806305f56d918cc5b4023fdbe9cae4147c84583ec9dd375031ba5ae65e31f00e641832d29ed658b91f33595b033222944765cb6a50d859f754ed83eefd480be0e3100965f081190bbb39a5965ceaa74775b88885041ff4e66e618d6c37c787f014eadb6c9f659ae43f57608e09d620830a3a9189603da1d8f0b721343051a9a4dcfdf8af5d0ae8f263d2b210619783173488fa07dde59cf50e0e72167125bf0d49572237", 0x189, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) 1.252308144s ago: executing program 0 (id=4068): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xf}, 0x94) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/xfrm_stat\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.215747419s ago: executing program 1 (id=4069): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000001c0)='P') 1.187792619s ago: executing program 2 (id=4070): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) 923.8427ms ago: executing program 0 (id=4071): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r0, r1, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r1, r1, 0x2f, 0x202c, 0x4}, 0x20) 869.945999ms ago: executing program 3 (id=4072): r0 = socket$inet6(0xa, 0x1, 0x84) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) sendto$inet6(r0, &(0x7f0000000180)='e', 0x1, 0x40, &(0x7f00000000c0)={0xa, 0x4e23, 0x5, @remote, 0x1}, 0x1c) close(r0) 815.37047ms ago: executing program 2 (id=4073): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 771.576423ms ago: executing program 0 (id=4074): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000001080)=0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r1, 0x808000}, 0xfffffffffffffd15) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 670.790708ms ago: executing program 0 (id=4075): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a01011d000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r0) 568.869096ms ago: executing program 3 (id=4076): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0xfa, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="1c351790a0c2", 0x0, 0x0, 0x0, 0x0, 0x0}) 503.141943ms ago: executing program 4 (id=4077): capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x3, 0x9, 0x2, 0x8a56}) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendmmsg$sock(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}}], 0x1, 0x20000000) 491.064818ms ago: executing program 0 (id=4078): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x800000, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 350.213417ms ago: executing program 3 (id=4079): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x44, r1, 0x852dd6c070cd7e4d, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x44}, 0x4, 0x700000000000000, 0x0, 0x4}, 0x8850) 239.80373ms ago: executing program 4 (id=4080): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0xdd, 0x0, 0x7ffffdbd}]}) r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, 0x0, 0x0, 0x0) semop(r0, &(0x7f0000000300)=[{0x2, 0x400, 0x1000}], 0x1) 0s ago: executing program 4 (id=4081): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0xee00) keyctl$setperm(0x5, r0, 0x21081c22) keyctl$get_security(0x11, r0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 294.488253][T10992] [U] [ 294.488495][T10992] [U] [ 294.488548][T10992] [U] [ 294.488577][T10992] [U] [ 294.490119][T10992] [U] [ 294.490159][T10992] [U] [ 294.491431][T10992] [U] [ 294.491464][T10992] [U] [ 294.491495][T10992] [U] [ 294.493226][T10992] [U] [ 294.493281][T10992] [U] [ 294.493312][T10992] [U] [ 294.500694][T10992] [U] [ 294.500731][T10992] [U] [ 294.502331][T10992] [U] [ 294.502369][T10992] [U] [ 294.507952][T10992] [U] [ 294.507996][T10992] [U] [ 294.512630][T10992] [U] [ 294.512666][T10992] [U] [ 294.512696][T10992] [U] [ 294.514298][T10992] [U] [ 294.515975][T10992] [U] [ 294.516009][T10992] [U] [ 294.518560][T10992] [U] [ 294.518595][T10992] [U] [ 294.521336][T10992] [U] [ 294.521370][T10992] [U] [ 294.521401][T10992] [U] [ 294.521491][T10992] [U] [ 294.521565][T10992] [U] [ 294.523467][T10992] [U] [ 294.523500][T10992] [U] [ 294.523908][T10992] [U] [ 294.523960][T10992] [U] [ 294.523990][T10992] [U] [ 294.526698][T10992] [U] [ 294.526733][T10992] [U] [ 294.526863][T10992] [U] [ 294.526895][T10992] [U] [ 294.529256][T10992] [U] [ 294.529289][T10992] [U] [ 294.529723][T10992] [U] [ 294.529756][T10992] [U] [ 294.529786][T10992] [U] [ 294.530405][T10992] [U] [ 294.531027][T10992] [U] [ 294.531061][T10992] [U] [ 294.531091][T10992] [U] [ 294.531523][T10992] [U] [ 294.531578][T10992] [U] [ 294.534465][T10992] [U] [ 294.534499][T10992] [U] [ 294.534529][T10992] [U] [ 294.534658][T10992] [U] [ 294.534688][T10992] [U] [ 294.535386][T10992] [U] [ 294.535478][T10992] [U] [ 294.535841][T10992] [U] [ 294.535874][T10992] [U] [ 294.537598][T10992] [U] [ 294.537631][T10992] [U] [ 294.537933][T10992] [U] [ 294.537966][T10992] [U] [ 294.539916][T10992] [U] [ 294.540351][T10992] [U] [ 294.542776][T10992] [U] [ 294.542810][T10992] [U] [ 294.542909][T10992] [U] [ 294.542943][T10992] [U] [ 294.544451][T10992] [U] [ 294.544485][T10992] [U] [ 294.544515][T10992] [U] [ 294.544772][T10992] [U] [ 294.544823][T10992] [U] [ 294.549942][T10992] [U] [ 294.549977][T10992] [U] [ 294.550008][T10992] [U] [ 294.550823][T10992] [U] [ 294.552719][T10992] [U] [ 294.552752][T10992] [U] [ 294.552784][T10992] [U] [ 294.557807][T10992] [U] [ 294.558072][T10992] [U] [ 294.558104][T10992] [U] [ 294.558136][T10992] [U] [ 294.560221][T10992] [U] [ 294.561767][T10992] [U] [ 294.561801][T10992] [U] [ 294.561833][T10992] [U] [ 294.563575][T10992] [U] [ 294.563609][T10992] [U] [ 294.563640][T10992] [U] [ 294.624393][T10989] [U] [ 294.628160][T10995] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2379'. [ 294.902240][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 294.917070][ T5797] usb 2-1: USB disconnect, device number 11 [ 294.987042][ T5797] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 295.026934][ T5797] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 295.028097][ T5797] quatech2 2-1:0.51: device disconnected [ 295.608101][T11019] vivid-000: disconnect [ 295.613184][T11017] vivid-000: reconnect [ 295.625211][ T5797] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 295.778014][ T5797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.778053][ T5797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.778095][ T5797] usb 5-1: New USB device found, idVendor=056a, idProduct=00f4, bcdDevice= 0.00 [ 295.778118][ T5797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.834519][ T5797] usb 5-1: config 0 descriptor?? [ 295.861737][T11026] hpfs: Bad value for 'gid' [ 295.861759][T11026] hpfs: Bad value for 'gid' [ 295.865306][ T5863] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 296.015414][ T5863] usb 2-1: Using ep0 maxpacket: 16 [ 296.024020][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.024055][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.024097][ T5863] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 296.024122][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.047936][ T5863] usb 2-1: config 0 descriptor?? [ 296.541362][ T5863] mcp2200 0003:04D8:00DF.0028: item fetching failed at offset 4/5 [ 296.544780][ T5863] mcp2200 0003:04D8:00DF.0028: can't parse reports [ 296.544906][ T5863] mcp2200 0003:04D8:00DF.0028: probe with driver mcp2200 failed with error -22 [ 296.559251][ T5779] usb 5-1: USB disconnect, device number 23 [ 296.704357][T11046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2406'. [ 296.704790][T11046] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2406'. [ 296.757617][ T5797] usb 2-1: USB disconnect, device number 12 [ 297.122294][T11057] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2411'. [ 298.584829][T11099] netlink: 'syz.3.2432': attribute type 10 has an invalid length. [ 298.642580][T11099] batman_adv: batadv0: Adding interface: team0 [ 298.642600][T11099] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.642631][T11099] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 298.657170][T11099] netlink: 'syz.3.2432': attribute type 10 has an invalid length. [ 298.657191][T11099] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2432'. [ 298.657360][T11099] team0: entered promiscuous mode [ 298.657375][T11099] team_slave_0: entered promiscuous mode [ 298.657607][T11099] team_slave_1: entered promiscuous mode [ 298.686318][T11099] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.686620][T11099] batman_adv: batadv0: Interface activated: team0 [ 298.686657][T11099] batman_adv: batadv0: Interface deactivated: team0 [ 298.686674][T11099] batman_adv: batadv0: Removing interface: team0 [ 298.687618][T11104] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2433'. [ 298.774819][T11103] ieee802154 phy0 wpan0: encryption failed: -22 [ 298.816984][T11099] bridge0: port 3(team0) entered blocking state [ 298.817085][T11099] bridge0: port 3(team0) entered disabled state [ 298.817199][T11099] team0: entered allmulticast mode [ 298.817210][T11099] team_slave_0: entered allmulticast mode [ 298.817221][T11099] team_slave_1: entered allmulticast mode [ 298.821853][T11099] bridge0: port 3(team0) entered blocking state [ 298.873636][T11099] bridge0: port 3(team0) entered forwarding state [ 299.625009][T11126] netlink: 'syz.3.2443': attribute type 3 has an invalid length. [ 299.626065][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 299.626082][ T37] audit: type=1326 audit(1763805091.737:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11124 comm="syz.4.2442" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd8c81ff749 code=0x0 [ 300.045926][ T5797] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 300.084032][ T5802] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 300.084061][ T5802] CPU: 0 UID: 0 PID: 5802 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 300.084086][ T5802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 300.084100][ T5802] Workqueue: hci0 hci_rx_work [ 300.084131][ T5802] Call Trace: [ 300.084140][ T5802] [ 300.084150][ T5802] dump_stack_lvl+0x189/0x250 [ 300.084190][ T5802] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.084224][ T5802] ? __pfx__printk+0x10/0x10 [ 300.084259][ T5802] ? kernfs_path_from_node+0x2c/0x280 [ 300.084283][ T5802] ? kernfs_path_from_node+0x243/0x280 [ 300.084304][ T5802] ? kernfs_path_from_node+0x2c/0x280 [ 300.084332][ T5802] sysfs_create_dir_ns+0x259/0x280 [ 300.084364][ T5802] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 300.084393][ T5802] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 300.084421][ T5802] ? rt_spin_unlock+0x161/0x200 [ 300.084451][ T5802] kobject_add_internal+0x5a5/0xb50 [ 300.084486][ T5802] kobject_add+0x155/0x220 [ 300.084515][ T5802] ? __pfx_kobject_add+0x10/0x10 [ 300.084547][ T5802] ? get_device_parent+0x370/0x3a0 [ 300.084582][ T5802] device_add+0x408/0xb50 [ 300.084616][ T5802] hci_conn_add_sysfs+0xd5/0x1e0 [ 300.084644][ T5802] le_conn_complete_evt+0xf39/0x1500 [ 300.084692][ T5802] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 300.084723][ T5802] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 300.084753][ T5802] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.084786][ T5802] ? skb_pull_data+0xfb/0x200 [ 300.084820][ T5802] hci_le_enh_conn_complete_evt+0x189/0x470 [ 300.084852][ T5802] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 300.084887][ T5802] hci_event_packet+0x78f/0x1200 [ 300.084916][ T5802] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 300.084949][ T5802] ? __pfx_hci_event_packet+0x10/0x10 [ 300.084987][ T5802] ? hci_send_to_monitor+0xe2/0x570 [ 300.085023][ T5802] hci_rx_work+0x46a/0xe80 [ 300.085063][ T5802] ? process_scheduled_works+0x9ef/0x17b0 [ 300.085090][ T5802] process_scheduled_works+0xae1/0x17b0 [ 300.085150][ T5802] ? __pfx_process_scheduled_works+0x10/0x10 [ 300.085197][ T5802] worker_thread+0x8a0/0xda0 [ 300.085256][ T5802] kthread+0x711/0x8a0 [ 300.085288][ T5802] ? __pfx_worker_thread+0x10/0x10 [ 300.085310][ T5802] ? __pfx_kthread+0x10/0x10 [ 300.085327][ T5802] ? rt_spin_unlock+0x150/0x200 [ 300.085343][ T5802] ? rt_spin_unlock+0x161/0x200 [ 300.085368][ T5802] ? __pfx_kthread+0x10/0x10 [ 300.085386][ T5802] ret_from_fork+0x4bc/0x870 [ 300.085403][ T5802] ? __pfx_ret_from_fork+0x10/0x10 [ 300.085423][ T5802] ? __switch_to_asm+0x39/0x70 [ 300.085435][ T5802] ? __switch_to_asm+0x33/0x70 [ 300.085445][ T5802] ? __pfx_kthread+0x10/0x10 [ 300.085462][ T5802] ret_from_fork_asm+0x1a/0x30 [ 300.085486][ T5802] [ 300.087007][ T5802] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 300.087041][ T5802] Bluetooth: hci0: failed to register connection device [ 300.355119][ T5797] usb 2-1: Using ep0 maxpacket: 32 [ 300.427921][ T5797] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 300.427954][ T5797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.464876][ T5797] usb 2-1: config 0 descriptor?? [ 300.491343][ T5797] as10x_usb: device has been detected [ 300.492624][ T5797] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 300.600913][ T5797] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 300.685571][ T5797] as10x_usb: error during firmware upload part1 [ 300.686428][ T5797] Registered device nBox DVB-T Dongle [ 300.690480][ T5797] usb 2-1: USB disconnect, device number 13 [ 300.770454][ T5797] Unregistered device nBox DVB-T Dongle [ 300.776802][ T5797] as10x_usb: device has been disconnected [ 301.915776][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 302.092234][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.092268][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 302.092314][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 302.092338][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.154174][ T10] usb 3-1: config 0 descriptor?? [ 302.717376][ T10] kovaplus 0003:1E7D:2D50.0029: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 302.805221][ T5868] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 302.864247][ T10] kovaplus 0003:1E7D:2D50.0029: couldn't init struct kovaplus_device [ 302.864320][ T10] kovaplus 0003:1E7D:2D50.0029: couldn't install mouse [ 302.877183][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 302.885496][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 302.916057][ T10] kovaplus 0003:1E7D:2D50.0029: probe with driver kovaplus failed with error -71 [ 302.955859][ T10] usb 3-1: USB disconnect, device number 26 [ 302.967614][ T5868] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 302.967643][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.024922][T11188] fido_id[11188]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 303.052521][ T5868] usb 5-1: config 0 descriptor?? [ 303.515508][ T5868] ath6kl: Failed to read usb control message: -32 [ 303.515572][ T5868] ath6kl: Unable to read the bmi data from the device: -32 [ 303.515588][ T5868] ath6kl: Unable to recv target info: -32 [ 303.537561][ T5868] ath6kl: Failed to init ath6kl core: -32 [ 303.539526][ T5868] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -32 [ 303.592530][ T5868] usb 5-1: USB disconnect, device number 24 [ 303.735732][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 303.824001][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 303.927448][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 303.927500][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.927513][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 303.927540][ T10] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 303.927553][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.949584][ T10] usb 4-1: config 0 descriptor?? [ 304.228398][ T5802] Bluetooth: hci4: command 0x0406 tx timeout [ 304.387844][ T10] hid_parser_main: 6 callbacks suppressed [ 304.387869][ T10] holtek_kbd 0003:04D9:A055.002A: unknown main item tag 0x0 [ 304.387902][ T10] holtek_kbd 0003:04D9:A055.002A: unknown main item tag 0x0 [ 304.387926][ T10] holtek_kbd 0003:04D9:A055.002A: unknown main item tag 0x0 [ 304.387948][ T10] holtek_kbd 0003:04D9:A055.002A: unknown main item tag 0x0 [ 304.387970][ T10] holtek_kbd 0003:04D9:A055.002A: unknown main item tag 0x0 [ 304.387993][ T10] holtek_kbd 0003:04D9:A055.002A: unknown main item tag 0x0 [ 304.388016][ T10] holtek_kbd 0003:04D9:A055.002A: unknown main item tag 0x0 [ 304.480747][ T10] holtek_kbd 0003:04D9:A055.002A: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.3-1/input0 [ 304.572711][ T5779] usb 4-1: USB disconnect, device number 23 [ 304.771842][T11214] fido_id[11214]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 304.815145][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 305.311067][T11226] netlink: 'syz.1.2489': attribute type 3 has an invalid length. [ 305.540773][T11232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2493'. [ 305.659427][T11232] veth0_macvtap: left promiscuous mode [ 305.884397][T11240] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2496'. [ 305.996847][T11244] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2498'. [ 306.246139][T11250] netlink: 'syz.2.2502': attribute type 16 has an invalid length. [ 306.246164][T11250] netlink: 'syz.2.2502': attribute type 3 has an invalid length. [ 306.246178][T11250] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.2502'. [ 306.545146][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 306.624417][T11261] netlink: 'syz.4.2506': attribute type 6 has an invalid length. [ 306.624442][T11261] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2506'. [ 306.855963][ T37] audit: type=1326 audit(1763805098.977:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11267 comm="syz.1.2510" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f42f3d9f749 code=0x0 [ 307.825291][ T5868] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 307.975207][ T5868] usb 4-1: Using ep0 maxpacket: 8 [ 307.977744][ T5868] usb 4-1: config 0 interface 0 altsetting 247 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 307.977779][ T5868] usb 4-1: config 0 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 307.977807][ T5868] usb 4-1: config 0 interface 0 has no altsetting 0 [ 307.977845][ T5868] usb 4-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 307.977871][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.984404][ T5868] usb 4-1: config 0 descriptor?? [ 308.335269][T11311] netlink: 'syz.1.2529': attribute type 10 has an invalid length. [ 308.356253][T11311] batman_adv: batadv0: Adding interface: team0 [ 308.358901][T11311] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.359016][T11311] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 308.366875][T11311] netlink: 'syz.1.2529': attribute type 10 has an invalid length. [ 308.366895][T11311] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2529'. [ 308.367063][T11311] team0: entered promiscuous mode [ 308.367078][T11311] team_slave_0: entered promiscuous mode [ 308.367330][T11311] team_slave_1: entered promiscuous mode [ 308.398783][T11311] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.399099][T11311] batman_adv: batadv0: Interface activated: team0 [ 308.399138][T11311] batman_adv: batadv0: Interface deactivated: team0 [ 308.399155][T11311] batman_adv: batadv0: Removing interface: team0 [ 308.506651][T11311] bridge0: port 4(team0) entered blocking state [ 308.506809][T11311] bridge0: port 4(team0) entered disabled state [ 308.507004][T11311] team0: entered allmulticast mode [ 308.507160][T11311] team_slave_0: entered allmulticast mode [ 308.507193][T11311] team_slave_1: entered allmulticast mode [ 308.510793][ T5868] playstation 0003:054C:09CC.002B: hidraw0: USB HID vff.ed Device [HID 054c:09cc] on usb-dummy_hcd.3-1/input0 [ 308.554598][T11311] bridge0: port 4(team0) entered blocking state [ 308.554763][T11311] bridge0: port 4(team0) entered forwarding state [ 308.687820][ T5868] playstation 0003:054C:09CC.002B: Failed to retrieve feature with reportID 18: -71 [ 308.687851][ T5868] playstation 0003:054C:09CC.002B: Failed to retrieve DualShock4 pairing info: -71 [ 308.687910][ T5868] playstation 0003:054C:09CC.002B: Failed to get MAC address from DualShock4 [ 308.687997][ T5868] playstation 0003:054C:09CC.002B: Failed to create dualshock4. [ 308.691267][ T5868] playstation 0003:054C:09CC.002B: probe with driver playstation failed with error -71 [ 308.750302][ T5868] usb 4-1: USB disconnect, device number 24 [ 308.822178][T11316] fido_id[11316]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 309.690339][ T37] audit: type=1326 audit(1763805101.807:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11320 comm="syz.1.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f3d9f749 code=0x7fc00000 [ 310.755431][ T5797] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 310.820362][T11393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2566'. [ 310.915929][ T5797] usb 5-1: Using ep0 maxpacket: 32 [ 310.918835][ T5797] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.918865][ T5797] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 310.918903][ T5797] usb 5-1: config 0 interface 0 has no altsetting 0 [ 310.918940][ T5797] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c08, bcdDevice= 0.00 [ 310.918965][ T5797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.944921][ T5797] usb 5-1: config 0 descriptor?? [ 310.945737][ T5813] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 311.098341][ T5813] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 311.098373][ T5813] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.098394][ T5813] usb 2-1: config 0 has no interface number 0 [ 311.098515][ T5813] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 311.098540][ T5813] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 311.101808][ T5813] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 311.101910][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.101929][ T5813] usb 2-1: Product: syz [ 311.101942][ T5813] usb 2-1: Manufacturer: syz [ 311.101956][ T5813] usb 2-1: SerialNumber: syz [ 311.218772][ T5813] usb 2-1: config 0 descriptor?? [ 311.282239][T11404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2573'. [ 311.502331][ T5797] corsair-psu 0003:1B1C:1C08.002C: item fetching failed at offset 2/5 [ 311.503431][ T5797] corsair-psu 0003:1B1C:1C08.002C: probe with driver corsair-psu failed with error -22 [ 311.658608][ T5868] usb 5-1: USB disconnect, device number 25 [ 311.889079][ T5863] usb 2-1: USB disconnect, device number 14 [ 312.072522][T11426] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2584'. [ 312.125586][ T5779] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 312.275310][ T5779] usb 3-1: Using ep0 maxpacket: 8 [ 312.278049][ T5779] usb 3-1: config 0 has an invalid interface number: 56 but max is 0 [ 312.278078][ T5779] usb 3-1: config 0 has no interface number 0 [ 312.283015][ T5779] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 312.283045][ T5779] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.283066][ T5779] usb 3-1: Product: syz [ 312.283081][ T5779] usb 3-1: Manufacturer: syz [ 312.283096][ T5779] usb 3-1: SerialNumber: syz [ 312.351240][ T5779] usb 3-1: config 0 descriptor?? [ 312.364150][ T5779] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 312.364206][ T5779] pctv452e: pctv452e_power_ctrl: 1 [ 312.364206][ T5779] [ 312.364256][ T5779] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 312.364256][ T5779] [ 312.364272][ T5779] dvb-usb: bulk message failed: -22 (5/0) [ 312.427529][ T5779] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 312.428734][ T5779] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 312.428798][ T5779] usb 3-1: media controller created [ 312.429519][ T5779] dvb-usb: bulk message failed: -22 (8/0) [ 312.429539][ T5779] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 312.429668][ T5779] dvb-usb: MAC address reading failed. [ 312.505472][ T5779] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 312.733930][ T5779] DVB: Unable to find symbol stb0899_attach() [ 312.733949][ T5779] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 312.875175][ T5779] rc_core: IR keymap rc-tt-1500 not found [ 312.875199][ T5779] Registered IR keymap rc-empty [ 312.879928][ T5779] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 312.920271][ T5779] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input27 [ 312.923105][ T5779] dvb-usb: schedule remote query interval to 100 msecs. [ 312.923128][ T5779] pctv452e: pctv452e_power_ctrl: 0 [ 312.923128][ T5779] [ 312.923139][ T5779] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 312.971313][ T5779] usb 3-1: USB disconnect, device number 27 [ 313.110257][ T5779] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 313.409356][T11455] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2596'. [ 314.003144][T11478] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2607'. [ 314.003213][T11478] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2607'. [ 314.003229][T11478] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2607'. [ 314.003244][T11478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2607'. [ 314.095253][ T5813] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 314.130986][T11484] fuse: Bad value for 'user_id' [ 314.131008][T11484] fuse: Bad value for 'user_id' [ 314.213067][ T5863] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 314.269065][ T5813] usb 2-1: Using ep0 maxpacket: 16 [ 314.271652][ T5813] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 314.271679][ T5813] usb 2-1: config 0 has no interface number 0 [ 314.271731][ T5813] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.271758][ T5813] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.271799][ T5813] usb 2-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 314.271823][ T5813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.291353][ T5813] usb 2-1: config 0 descriptor?? [ 314.358392][ T5863] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.383645][ T5863] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 314.383680][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.383702][ T5863] usb 3-1: Product: syz [ 314.383716][ T5863] usb 3-1: Manufacturer: syz [ 314.383730][ T5863] usb 3-1: SerialNumber: syz [ 314.471234][ T5863] usb 3-1: config 0 descriptor?? [ 314.499324][ T5863] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 314.798146][ T5813] holtek_mouse 0003:04D9:A081.002D: hidraw0: USB HID v0.00 Device [HID 04d9:a081] on usb-dummy_hcd.1-1/input1 [ 315.037114][ T5797] usb 2-1: USB disconnect, device number 15 [ 315.112227][ T5863] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 315.112341][ T5863] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 315.150268][ T5863] usb 3-1: USB disconnect, device number 28 [ 315.177443][T11498] fido_id[11498]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 315.306004][T11507] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.324588][T11506] ptrace attach of "./syz-executor exec"[5811] was attempted by ""[11506] [ 315.882690][T11525] dummy0: entered allmulticast mode [ 316.339064][T11547] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2641'. [ 317.414664][T11589] loop6: detected capacity change from 0 to 524288000 [ 317.513950][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.514036][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.745708][ T5797] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 317.916824][ T5797] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 317.916858][ T5797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.934755][ T5797] usb 4-1: config 0 descriptor?? [ 317.970045][T11603] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2666'. [ 318.041353][ T6125] udevd[6125]: symlink '../../loop6' '/dev/disk/by-diskseq/71.tmp-b7:6' failed: Read-only file system [ 318.336735][ T5847] udevd[5847]: symlink '../../loop6' '/dev/disk/by-diskseq/71.tmp-b7:6' failed: Read-only file system [ 318.364420][ T5797] [drm:udl_init] *ERROR* Selecting channel failed [ 318.504065][ T5847] udevd[5847]: symlink '../../loop6' '/dev/disk/by-diskseq/71.tmp-b7:6' failed: Read-only file system [ 318.520104][ T5797] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 318.520131][ T5797] [drm] Initialized udl on minor 2 [ 318.588081][ T5797] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 318.621452][ T5797] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 318.660552][T11623] mkiss: ax0: crc mode is auto. [ 318.668541][ T5881] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 318.692630][ T5797] usb 4-1: USB disconnect, device number 25 [ 318.716481][ T5881] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 318.719952][ T5881] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 319.176997][ T5863] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 319.327964][ T5863] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 319.328002][ T5863] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 319.328028][ T5863] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 319.331260][ T5863] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 319.331292][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.331313][ T5863] usb 3-1: Product: syz [ 319.331327][ T5863] usb 3-1: Manufacturer: syz [ 319.331342][ T5863] usb 3-1: SerialNumber: syz [ 319.411498][ T5863] usb 3-1: config 0 descriptor?? [ 319.412567][T11634] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 319.412803][T11634] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 319.434997][ T5863] usb 3-1: ucan: probing device on interface #0 [ 320.048175][ T5863] ucan 3-1:0.0: probe with driver ucan failed with error -71 [ 320.105019][ T5863] usb 3-1: USB disconnect, device number 29 [ 322.120992][T11740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2731'. [ 322.675238][T11762] ptrace attach of "./syz-executor exec"[5811] was attempted by ""[11762] [ 323.043707][ T37] audit: type=1326 audit(1763805115.157:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11774 comm="syz.3.2748" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f61a1c8f749 code=0x0 [ 323.510729][T11793] netlink: 'syz.2.2756': attribute type 8 has an invalid length. [ 323.681174][T11797] binder: 11796:11797 unknown command 224 [ 323.681199][T11797] binder: 11796:11797 ioctl c0306201 200000000080 returned -22 [ 324.389154][ T37] audit: type=1800 audit(1763805116.497:86): pid=11810 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.3.2766" name="/newroot/547/bus/#2779//deleted" dev="tmpfs" ino=2779 res=0 errno=0 [ 324.558437][T11821] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2770'. [ 325.135296][ T5868] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 325.211924][T11842] sp0: Synchronizing with TNC [ 325.227138][T11841] [U] ` [ 325.259661][ T5813] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 325.285270][ T5868] usb 3-1: Using ep0 maxpacket: 8 [ 325.288388][ T5868] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.288424][ T5868] usb 3-1: config 0 interface 0 has no altsetting 0 [ 325.288464][ T5868] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0a1f, bcdDevice= 0.00 [ 325.288485][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.344662][ T5868] usb 3-1: config 0 descriptor?? [ 325.428696][ T5813] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.428788][ T5813] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.428835][ T5813] usb 2-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x77, changing to 0x7 [ 325.428862][ T5813] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 325.428885][ T5813] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 325.433303][ T5813] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 325.433334][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.433355][ T5813] usb 2-1: Product: syz [ 325.433370][ T5813] usb 2-1: Manufacturer: syz [ 325.433384][ T5813] usb 2-1: SerialNumber: syz [ 325.796607][ T5868] hid-corsair-void 0003:1B1C:0A1F.002E: unknown main item tag 0x6 [ 325.816210][ T5868] hid-corsair-void 0003:1B1C:0A1F.002E: hidraw0: USB HID v0.00 Device [HID 1b1c:0a1f] on usb-dummy_hcd.2-1/input0 [ 326.024516][ T5868] hid-corsair-void 0003:1B1C:0A1F.002E: failed to request firmware (reason: -71) [ 326.024635][ T991] hid-corsair-void 0003:1B1C:0A1F.002E: failed to request battery (reason: -71) [ 326.031899][ T5881] usb 3-1: USB disconnect, device number 30 [ 326.096269][ T5813] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 326.096538][ T5813] cdc_ncm 2-1:1.0: bind() failure [ 326.141955][T11858] fido_id[11858]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 326.228178][ T5813] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 326.228230][ T5813] cdc_ncm 2-1:1.1: bind() failure [ 326.323152][ T5868] hid-generic 0003:0003:0800.002F: unknown main item tag 0x0 [ 326.323191][ T5868] hid-generic 0003:0003:0800.002F: unknown main item tag 0x0 [ 326.323215][ T5868] hid-generic 0003:0003:0800.002F: unknown main item tag 0x0 [ 326.323238][ T5868] hid-generic 0003:0003:0800.002F: unknown main item tag 0x0 [ 326.323261][ T5868] hid-generic 0003:0003:0800.002F: unknown main item tag 0x0 [ 326.323284][ T5868] hid-generic 0003:0003:0800.002F: unknown main item tag 0x0 [ 326.323307][ T5868] hid-generic 0003:0003:0800.002F: unknown main item tag 0x0 [ 326.323330][ T5868] hid-generic 0003:0003:0800.002F: unknown main item tag 0x0 [ 326.323353][ T5868] hid-generic 0003:0003:0800.002F: unknown main item tag 0x0 [ 326.438507][ T5868] hid-generic 0003:0003:0800.002F: hidraw0: USB HID v0.07 Device [syz0] on syz1 [ 326.447045][ T5813] usb 2-1: USB disconnect, device number 16 [ 326.574499][T11867] fido_id[11867]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 326.575237][ T5882] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 326.738914][ T5882] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 326.738944][ T5882] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 326.738965][ T5882] usb 5-1: config 0 has no interface number 0 [ 326.739017][ T5882] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 326.739048][ T5882] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 326.739090][ T5882] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 326.739114][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.791426][ T5882] usb 5-1: config 0 descriptor?? [ 326.993230][T11877] tipc: Cannot configure node identity twice [ 327.477328][ T5882] usb 5-1: USB disconnect, device number 26 [ 329.405270][ T5779] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 329.546526][T11955] netlink: 'syz.2.2830': attribute type 3 has an invalid length. [ 329.566860][ T5779] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 329.566933][ T5779] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.566961][ T5779] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.566982][ T5779] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 329.567029][ T5779] usb 2-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 329.567053][ T5779] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.647547][ T5779] usb 2-1: config 0 descriptor?? [ 330.108584][ T5779] kye 0003:0458:501B.0030: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 330.114414][ T5779] kye 0003:0458:501B.0030: hidraw0: USB HID v0.00 Device [HID 0458:501b] on usb-dummy_hcd.1-1/input0 [ 330.114557][ T5779] kye 0003:0458:501B.0030: tablet-enabling feature report not found [ 330.114575][ T5779] kye 0003:0458:501B.0030: tablet enabling failed [ 330.323463][ T5868] usb 2-1: USB disconnect, device number 17 [ 330.939319][T11980] fido_id[11980]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 330.975348][T11988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2847'. [ 333.335300][ T991] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 333.486973][ T991] usb 2-1: Using ep0 maxpacket: 32 [ 333.493414][ T991] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.493450][ T991] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.493493][ T991] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 333.493517][ T991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.560516][ T991] usb 2-1: config 0 descriptor?? [ 334.013135][ T991] logitech 0003:046D:C29C.0031: hidraw0: USB HID vb4.30 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0 [ 334.191219][ T991] logitech 0003:046D:C29C.0031: no inputs found [ 334.235916][ T5813] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 334.284649][ T991] usb 2-1: USB disconnect, device number 18 [ 334.339165][T12090] fido_id[12090]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 334.422776][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 334.422807][ T5813] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 334.422832][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 334.422854][ T5813] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 334.422894][ T5813] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 334.422917][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.494295][ T5813] usb 3-1: config 0 descriptor?? [ 334.727603][ T5813] hdpvr 3-1:0.0: firmware version 0x8 dated ) [ 335.012522][T12107] tmpfs: Bad value for 'mpol' [ 335.280900][ T5813] hdpvr 3-1:0.0: Could not setup controls [ 335.281822][ T5813] hdpvr 3-1:0.0: registering videodev failed [ 335.326856][ T5813] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -71 [ 335.356012][ T5813] usb 3-1: USB disconnect, device number 31 [ 335.769575][ T5114] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 336.817708][T12176] fuse: Bad value for 'user_id' [ 336.817731][T12176] fuse: Bad value for 'user_id' [ 336.885348][ T5813] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 337.041373][ T5813] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 337.041406][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.041426][ T5813] usb 3-1: Product: syz [ 337.041441][ T5813] usb 3-1: Manufacturer: syz [ 337.041455][ T5813] usb 3-1: SerialNumber: syz [ 337.082785][ T5813] usb 3-1: config 0 descriptor?? [ 337.101693][ T5813] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 337.129543][T12187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2941'. [ 337.150081][ T5813] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 337.159253][ T5813] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 337.159312][ T5813] usb 3-1: media controller created [ 337.308636][ T5813] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 337.471064][T12197] mkiss: ax0: crc mode is auto. [ 337.568783][T12202] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 337.568849][T12202] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 337.568914][T12202] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 337.569027][T12202] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 337.569139][T12202] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 337.569200][T12202] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 337.569255][T12202] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 337.638179][ T5813] DVB: Unable to find symbol mt352_attach() [ 337.880570][ T5813] DVB: Unable to find symbol nxt6000_attach() [ 337.880587][ T5813] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 337.901435][ T5813] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input30 [ 337.907563][ T5813] dvb-usb: schedule remote query interval to 1000 msecs. [ 337.907589][ T5813] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 337.907607][ T5813] dvb-usb: bulk message failed: -22 (7/0) [ 337.907624][ T5813] dvb-usb: bulk message failed: -22 (7/0) [ 337.925621][ T5813] usb 3-1: USB disconnect, device number 32 [ 338.320959][ T5813] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 338.459949][T12229] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2963'. [ 338.724949][T12239] devtmpfs: Too few inodes for current use [ 339.026675][T12251] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2973'. [ 339.026705][T12251] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2973'. [ 339.026722][T12251] netlink: 'syz.1.2973': attribute type 6 has an invalid length. [ 339.026736][T12251] netlink: 'syz.1.2973': attribute type 5 has an invalid length. [ 339.026749][T12251] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2973'. [ 340.625188][ T5868] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 340.745944][T12321] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3006'. [ 340.778197][ T5868] usb 3-1: Using ep0 maxpacket: 32 [ 340.797428][ T5868] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 340.797460][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.846097][ T5868] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 341.450867][ T5868] gspca_nw80x: reg_w err -71 [ 341.450975][ T5868] nw80x 3-1:3.0: probe with driver nw80x failed with error -71 [ 341.481699][ T5868] usb 3-1: USB disconnect, device number 33 [ 341.776391][ T5882] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 341.884639][T12354] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 341.946109][ T5882] usb 2-1: Using ep0 maxpacket: 32 [ 341.948959][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.949009][ T5882] usb 2-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 341.949026][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.974086][ T5882] usb 2-1: config 0 descriptor?? [ 342.444383][ T5882] lenovo 0003:17EF:60A3.0032: hidraw0: USB HID v0.80 Device [HID 17ef:60a3] on usb-dummy_hcd.1-1/input0 [ 342.631915][ T5868] usb 2-1: USB disconnect, device number 19 [ 342.772216][T12377] netlink: 'syz.0.3032': attribute type 2 has an invalid length. [ 342.822633][T12371] fido_id[12371]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 343.034592][ T37] audit: type=1326 audit(1763805135.127:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12382 comm="syz.4.3036" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd8c81ff749 code=0x0 [ 343.217902][T12392] program syz.3.3039 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 343.675248][ T5868] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 343.681308][T12409] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 343.684730][T12406] sp0: Synchronizing with TNC [ 343.837990][ T5868] usb 3-1: config 252 has an invalid interface number: 254 but max is 0 [ 343.838022][ T5868] usb 3-1: config 252 has no interface number 0 [ 343.838058][ T5868] usb 3-1: config 252 interface 254 has no altsetting 0 [ 343.841333][ T5868] usb 3-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=46.29 [ 343.841364][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.841384][ T5868] usb 3-1: Product: syz [ 343.841399][ T5868] usb 3-1: Manufacturer: syz [ 343.841415][ T5868] usb 3-1: SerialNumber: syz [ 343.921232][ T5868] bfusb 3-1:252.254: probe with driver bfusb failed with error -5 [ 344.069197][T12421] netlink: 'syz.3.3053': attribute type 4 has an invalid length. [ 344.069222][T12421] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3053'. [ 344.147327][ T5868] usb 3-1: USB disconnect, device number 34 [ 344.357622][T12430] tipc: Enabled bearer , priority 10 [ 344.451365][T12434] tuvҫ: renamed from lo (while UP) [ 344.760887][T12446] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3066'. [ 344.937697][T12454] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 345.499144][ T5863] tipc: Node number set to 4278255617 [ 345.535228][ T5779] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 345.696841][ T5779] usb 5-1: Using ep0 maxpacket: 8 [ 345.702439][ T5779] usb 5-1: unable to get BOS descriptor or descriptor too short [ 345.706512][ T5779] usb 5-1: config 4 has an invalid interface number: 30 but max is 0 [ 345.706540][ T5779] usb 5-1: config 4 has no interface number 0 [ 345.706576][ T5779] usb 5-1: config 4 interface 30 has no altsetting 0 [ 345.741989][ T5779] usb 5-1: string descriptor 0 read error: -22 [ 345.742177][ T5779] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 345.742201][ T5779] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.803347][ T5779] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 345.803404][ T5779] dw2102: su3000_power_ctrl: 1, initialized 0 [ 345.803426][ T5779] dvb-usb: bulk message failed: -22 (2/0) [ 345.840487][ T5779] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 345.841933][ T5779] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 345.841997][ T5779] usb 5-1: media controller created [ 345.842026][ T5779] dvb-usb: bulk message failed: -22 (6/0) [ 345.842042][ T5779] dw2102: i2c transfer failed. [ 345.842061][ T5779] dvb-usb: bulk message failed: -22 (6/0) [ 345.842076][ T5779] dw2102: i2c transfer failed. [ 345.842095][ T5779] dvb-usb: bulk message failed: -22 (6/0) [ 345.842109][ T5779] dw2102: i2c transfer failed. [ 345.842127][ T5779] dvb-usb: bulk message failed: -22 (6/0) [ 345.842142][ T5779] dw2102: i2c transfer failed. [ 345.842161][ T5779] dvb-usb: bulk message failed: -22 (6/0) [ 345.842175][ T5779] dw2102: i2c transfer failed. [ 345.842194][ T5779] dvb-usb: bulk message failed: -22 (6/0) [ 345.842207][ T5779] dw2102: i2c transfer failed. [ 345.842217][ T5779] dvb-usb: MAC address: 02:02:02:02:02:02 [ 345.969223][ T5779] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 346.019624][ T5779] dvb-usb: bulk message failed: -22 (3/0) [ 346.019648][ T5779] dw2102: command 0x0e transfer failed. [ 346.019657][ T5779] dvb-usb: bulk message failed: -22 (3/0) [ 346.019670][ T5779] dw2102: command 0x0e transfer failed. [ 346.198723][T12492] netlink: 356 bytes leftover after parsing attributes in process `syz.1.3088'. [ 346.243005][T12490] sp0: Synchronizing with TNC [ 346.279727][T12489] [U] ` [ 346.326201][ T5779] dvb-usb: bulk message failed: -22 (3/0) [ 346.326228][ T5779] dw2102: command 0x0e transfer failed. [ 346.326238][ T5779] dvb-usb: bulk message failed: -22 (3/0) [ 346.326253][ T5779] dw2102: command 0x0e transfer failed. [ 346.326262][ T5779] dvb-usb: bulk message failed: -22 (1/0) [ 346.326277][ T5779] dw2102: command 0x51 transfer failed. [ 346.326287][ T5779] dvb-usb: bulk message failed: -22 (5/0) [ 346.326301][ T5779] dw2102: i2c probe for address 0x68 failed. [ 346.326314][ T5779] dvb-usb: bulk message failed: -22 (5/0) [ 346.326329][ T5779] dw2102: i2c probe for address 0x69 failed. [ 346.326340][ T5779] dvb-usb: bulk message failed: -22 (5/0) [ 346.326354][ T5779] dw2102: i2c probe for address 0x6a failed. [ 346.326365][ T5779] dw2102: probing for demodulator failed. Is the external power switched on? [ 346.326373][ T5779] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 346.348832][ T37] audit: type=1326 audit(1763805138.467:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12494 comm="syz.1.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f3d9f749 code=0x7ffc0000 [ 346.352634][ T37] audit: type=1326 audit(1763805138.467:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12494 comm="syz.1.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f3d9f749 code=0x7ffc0000 [ 346.352933][ T37] audit: type=1326 audit(1763805138.467:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12494 comm="syz.1.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f42f3d9f749 code=0x7ffc0000 [ 346.353655][ T37] audit: type=1326 audit(1763805138.467:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12494 comm="syz.1.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f3d9f749 code=0x7ffc0000 [ 346.353942][ T37] audit: type=1326 audit(1763805138.467:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12494 comm="syz.1.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f3d9f749 code=0x7ffc0000 [ 346.355006][ T37] audit: type=1326 audit(1763805138.467:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12494 comm="syz.1.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f42f3d9f749 code=0x7ffc0000 [ 346.357781][ T37] audit: type=1326 audit(1763805138.477:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12494 comm="syz.1.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f3d9f749 code=0x7ffc0000 [ 346.358038][ T37] audit: type=1326 audit(1763805138.477:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12494 comm="syz.1.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f3d9f749 code=0x7ffc0000 [ 346.511215][ T37] audit: type=1326 audit(1763805138.627:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12498 comm="syz.1.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f3d9f749 code=0x7ffc0000 [ 346.582152][ T5779] rc_core: IR keymap rc-tt-1500 not found [ 346.582178][ T5779] Registered IR keymap rc-empty [ 346.584253][ T5779] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 346.657943][ T5779] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input31 [ 346.660724][ T5779] dvb-usb: schedule remote query interval to 250 msecs. [ 346.660747][ T5779] dw2102: su3000_power_ctrl: 0, initialized 1 [ 346.660761][ T5779] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 346.697634][ T5779] usb 5-1: USB disconnect, device number 27 [ 346.918381][T12505] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3094'. [ 346.963515][ T5779] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 348.045826][T12547] tipc: Enabled bearer , priority 10 [ 348.191566][T12551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3115'. [ 348.191593][T12551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3115'. [ 348.191619][T12551] netlink: 'syz.3.3115': attribute type 12 has an invalid length. [ 348.191635][T12551] netlink: 'syz.3.3115': attribute type 13 has an invalid length. [ 348.429306][ C0] vkms_vblank_simulate: vblank timer overrun [ 348.843574][T12567] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3124'. [ 349.236904][T12581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3131'. [ 350.433011][ T37] kauditd_printk_skb: 12 callbacks suppressed [ 350.433032][ T37] audit: type=1326 audit(1763805142.547:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12631 comm="syz.0.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98ff7f749 code=0x7ffc0000 [ 350.433364][ T37] audit: type=1326 audit(1763805142.547:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12631 comm="syz.0.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98ff7f749 code=0x7ffc0000 [ 350.443734][ T37] audit: type=1326 audit(1763805142.557:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12631 comm="syz.0.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fb98ff7f749 code=0x7ffc0000 [ 350.444045][ T37] audit: type=1326 audit(1763805142.557:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12631 comm="syz.0.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98ff7f749 code=0x7ffc0000 [ 350.444780][ T37] audit: type=1326 audit(1763805142.557:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12631 comm="syz.0.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98ff7f749 code=0x7ffc0000 [ 350.485224][ T5868] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 350.506132][ T5882] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 350.638374][ T5868] usb 5-1: config 0 interface 0 altsetting 87 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.638412][ T5868] usb 5-1: config 0 interface 0 altsetting 87 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.638435][ T5868] usb 5-1: config 0 interface 0 has no altsetting 0 [ 350.638472][ T5868] usb 5-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 350.638495][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.688709][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.688745][ T5882] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 350.688786][ T5882] usb 2-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 350.688818][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.707666][ T5882] usb 2-1: config 0 descriptor?? [ 350.765256][ T5868] usb 5-1: config 0 descriptor?? [ 350.945378][ T5114] Bluetooth: hci0: command 0x0406 tx timeout [ 351.184005][ T5882] asus 0003:048D:CE50.0033: item fetching failed at offset 3/5 [ 351.186359][ T5882] asus 0003:048D:CE50.0033: Asus hid parse failed: -22 [ 351.186476][ T5882] asus 0003:048D:CE50.0033: probe with driver asus failed with error -22 [ 351.233764][ T5868] hid_parser_main: 10 callbacks suppressed [ 351.233793][ T5868] logitech 0003:046D:C626.0034: unknown main item tag 0x0 [ 351.233824][ T5868] logitech 0003:046D:C626.0034: unknown main item tag 0x0 [ 351.233850][ T5868] logitech 0003:046D:C626.0034: unknown main item tag 0x0 [ 351.233876][ T5868] logitech 0003:046D:C626.0034: unknown main item tag 0x0 [ 351.233902][ T5868] logitech 0003:046D:C626.0034: unknown main item tag 0x0 [ 351.233927][ T5868] logitech 0003:046D:C626.0034: unknown main item tag 0x0 [ 351.233953][ T5868] logitech 0003:046D:C626.0034: unknown main item tag 0x0 [ 351.233977][ T5868] logitech 0003:046D:C626.0034: unknown main item tag 0x0 [ 351.234002][ T5868] logitech 0003:046D:C626.0034: unknown main item tag 0x0 [ 351.234026][ T5868] logitech 0003:046D:C626.0034: unknown main item tag 0x0 [ 351.324197][ T5868] logitech 0003:046D:C626.0034: hidraw0: USB HID v0.00 Device [HID 046d:c626] on usb-dummy_hcd.4-1/input0 [ 351.381924][ T5868] usb 2-1: USB disconnect, device number 20 [ 351.452897][ T5882] usb 5-1: USB disconnect, device number 28 [ 351.584450][T12651] fido_id[12651]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 351.983850][T12667] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3171'. [ 353.017463][ T5868] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 353.168241][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.168298][ T5868] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 353.168323][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.198632][ T5868] usb 4-1: config 0 descriptor?? [ 353.220198][T12715] macsec1: entered promiscuous mode [ 353.220228][T12715] macsec1: entered allmulticast mode [ 353.238080][T12717] comedi comedi2: s526: I/O port conflict (0x401,64) [ 353.646504][ T5868] steelseries 0003:1038:12B6.0035: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.3-1/input0 [ 353.857609][T12735] bond0: option min_links: invalid value (18446744073709551613) [ 353.857639][T12735] bond0: option min_links: allowed values 0 - 2147483647 [ 353.904225][ T5868] steelseries 0003:1038:12B6.0035: hid_hw_raw_request() failed with -71 [ 353.962818][ T5868] usb 4-1: USB disconnect, device number 26 [ 354.066459][T12737] fido_id[12737]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 354.875280][ T5813] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 355.030670][ T5813] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.030739][ T5813] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.030765][ T5813] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.030798][ T5813] usb 2-1: config 0 interface 0 has no altsetting 0 [ 355.030836][ T5813] usb 2-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 355.030861][ T5813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.079170][T12779] genirq: Flags mismatch irq 10. 00202000 (pcl812) vs. 00202080 (virtio2) [ 355.082383][ T5882] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 355.129517][ T5813] usb 2-1: config 0 descriptor?? [ 355.269544][ T5882] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 355.270468][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.283040][T12784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3223'. [ 355.330888][ T5882] usb 5-1: config 0 descriptor?? [ 355.359799][ T5882] cp210x 5-1:0.0: cp210x converter detected [ 355.494615][T12788] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3226'. [ 355.572372][ T5813] kye 0003:0458:5015.0036: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 355.623665][ T5813] kye 0003:0458:5015.0036: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.1-1/input0 [ 355.623702][ T5813] kye 0003:0458:5015.0036: tablet-enabling feature report not found [ 355.624118][ T5813] kye 0003:0458:5015.0036: tablet enabling failed [ 355.767660][ T5868] usb 2-1: USB disconnect, device number 21 [ 355.828732][ T5882] usb 5-1: cp210x converter now attached to ttyUSB0 [ 355.900493][T12795] fido_id[12795]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 355.971746][ T5779] usb 5-1: USB disconnect, device number 29 [ 356.026782][ T5779] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 356.165707][ T5779] cp210x 5-1:0.0: device disconnected [ 356.438120][T12811] syz_tun: entered promiscuous mode [ 356.440778][T12811] macvtap2: entered promiscuous mode [ 356.518885][T12811] syz_tun: left promiscuous mode [ 356.523987][T12816] program syz.0.3240 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 356.758095][T12813] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3238'. [ 356.758495][T12817] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3238'. [ 356.811105][ T5114] Bluetooth: hci3: unexpected event 0x06 length: 4 > 3 [ 356.827081][T12826] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3244'. [ 357.175273][ T5813] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 357.328015][ T5813] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 357.328049][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.355956][ T5813] usb 3-1: config 0 descriptor?? [ 357.365191][ T991] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 357.382376][ T5813] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 357.431279][T12846] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 357.530636][ T991] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.530669][ T991] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 357.530715][ T991] usb 4-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 357.530737][ T991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.538101][ T991] usb 4-1: config 0 descriptor?? [ 357.816504][ T5813] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 357.816557][ T5813] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 357.929997][T12854] overlayfs: workdir and upperdir must be separate subtrees [ 357.994537][ T991] megaworld 0003:07B5:0312.0037: ignoring exceeding usage max [ 358.018584][ T991] megaworld 0003:07B5:0312.0037: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.3-1/input0 [ 358.018621][ T991] megaworld 0003:07B5:0312.0037: no inputs found [ 358.053941][ T991] usb 3-1: USB disconnect, device number 35 [ 358.199555][ T5868] usb 4-1: USB disconnect, device number 27 [ 358.252600][T12859] fido_id[12859]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 358.342190][T12865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3262'. [ 358.865769][ T5114] Bluetooth: hci3: command 0x0406 tx timeout [ 358.954686][T12884] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3271'. [ 359.349221][ T5813] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 359.506189][ T5813] usb 5-1: Using ep0 maxpacket: 32 [ 359.508780][ T5813] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 359.508807][ T5813] usb 5-1: config 0 has no interface number 0 [ 359.512017][ T5813] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 359.512047][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.512067][ T5813] usb 5-1: Product: syz [ 359.512082][ T5813] usb 5-1: Manufacturer: syz [ 359.512096][ T5813] usb 5-1: SerialNumber: syz [ 359.581352][ T5813] usb 5-1: config 0 descriptor?? [ 359.592456][ T5813] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 359.592486][ T5813] usb 5-1: selecting invalid altsetting 1 [ 359.592503][ T5813] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 359.628105][ T5813] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 359.629100][ T5813] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 359.630190][ T5813] usb 5-1: media controller created [ 359.702748][ T5813] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 359.813668][ T5813] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 359.813735][ T5813] zl10353_read_register: readreg error (reg=127, ret==-71) [ 359.836509][ T5813] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 359.947869][ T5813] usb 5-1: USB disconnect, device number 30 [ 360.202162][T12891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.249197][T12906] netlink: 'syz.0.3282': attribute type 10 has an invalid length. [ 360.573628][T12902] bridge0: port 5(vlan2) entered blocking state [ 360.586442][T12902] bridge0: port 5(vlan2) entered disabled state [ 360.586726][T12902] vlan2: entered allmulticast mode [ 360.586745][T12902] bridge0: entered allmulticast mode [ 360.770165][T12902] vlan2: left allmulticast mode [ 360.770191][T12902] bridge0: left allmulticast mode [ 360.945967][ T5802] Bluetooth: hci3: command 0x0406 tx timeout [ 360.986724][T12906] team0: Port device netdevsim0 added [ 361.294749][T12925] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 361.441940][T12931] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3292'. [ 361.795231][ T5882] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 361.947990][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 361.948030][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.948075][ T5882] usb 5-1: New USB device found, idVendor=0c70, idProduct=f012, bcdDevice= 0.00 [ 361.948099][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.992075][T12955] sg_write: process 1356 (syz.3.3304) changed security contexts after opening file descriptor, this is not allowed. [ 362.012938][ T5882] usb 5-1: config 0 descriptor?? [ 362.512488][ T5882] hid_parser_main: 8 callbacks suppressed [ 362.512516][ T5882] aquacomputer_d5next 0003:0C70:F012.0038: unknown main item tag 0x0 [ 362.512548][ T5882] aquacomputer_d5next 0003:0C70:F012.0038: unknown main item tag 0x0 [ 362.512574][ T5882] aquacomputer_d5next 0003:0C70:F012.0038: unknown main item tag 0x0 [ 362.512608][ T5882] aquacomputer_d5next 0003:0C70:F012.0038: unknown main item tag 0x0 [ 362.512633][ T5882] aquacomputer_d5next 0003:0C70:F012.0038: unknown main item tag 0x0 [ 362.512659][ T5882] aquacomputer_d5next 0003:0C70:F012.0038: unknown main item tag 0x0 [ 362.512685][ T5882] aquacomputer_d5next 0003:0C70:F012.0038: unknown main item tag 0x0 [ 362.617601][ T5882] aquacomputer_d5next 0003:0C70:F012.0038: hidraw0: USB HID v0.00 Device [HID 0c70:f012] on usb-dummy_hcd.4-1/input0 [ 362.709721][ T5882] usb 5-1: USB disconnect, device number 31 [ 362.923319][T12972] fido_id[12972]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 363.292208][T12985] GUP no longer grows the stack in syz.1.3318 (12985): 200000005000-200000008000 (200000004000) [ 363.292248][T12985] CPU: 1 UID: 0 PID: 12985 Comm: syz.1.3318 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 363.292273][T12985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 363.292286][T12985] Call Trace: [ 363.292295][T12985] [ 363.292304][T12985] dump_stack_lvl+0x189/0x250 [ 363.292348][T12985] ? __pfx_dump_stack_lvl+0x10/0x10 [ 363.292392][T12985] ? __pfx__printk+0x10/0x10 [ 363.292415][T12985] ? find_vma+0xe7/0x160 [ 363.292460][T12985] fixup_user_fault+0x661/0x720 [ 363.292497][T12985] fault_in_user_writeable+0x72/0xe0 [ 363.292523][T12985] futex_lock_pi+0x765/0xa70 [ 363.292565][T12985] ? __pfx_futex_lock_pi+0x10/0x10 [ 363.292629][T12985] ? __pfx_futex_wake_mark+0x10/0x10 [ 363.292678][T12985] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 363.292709][T12985] do_futex+0x292/0x420 [ 363.292734][T12985] ? __pfx_do_futex+0x10/0x10 [ 363.292753][T12985] ? __vm_munmap+0x2c1/0x380 [ 363.292779][T12985] __se_sys_futex+0x36f/0x400 [ 363.292805][T12985] ? __pfx___se_sys_futex+0x10/0x10 [ 363.292831][T12985] ? __x64_sys_futex+0x21/0xf0 [ 363.292853][T12985] do_syscall_64+0xfa/0xfa0 [ 363.292875][T12985] ? lockdep_hardirqs_on+0x9c/0x150 [ 363.292897][T12985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.292913][T12985] ? clear_bhb_loop+0x60/0xb0 [ 363.292933][T12985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.292948][T12985] RIP: 0033:0x7f42f3d9f749 [ 363.292962][T12985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.292977][T12985] RSP: 002b:00007f42f2006038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 363.292996][T12985] RAX: ffffffffffffffda RBX: 00007f42f3ff5fa0 RCX: 00007f42f3d9f749 [ 363.293007][T12985] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 363.293018][T12985] RBP: 00007f42f3e23f91 R08: 0000000000000000 R09: 0000000000000000 [ 363.293028][T12985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.293038][T12985] R13: 00007f42f3ff6038 R14: 00007f42f3ff5fa0 R15: 00007ffe80955d48 [ 363.293067][T12985] [ 363.350060][ T991] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 363.385204][ T5882] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 363.500627][ T991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 363.500654][ T991] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 363.500677][ T991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 363.500696][ T991] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 363.500733][ T991] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 363.500753][ T991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.510719][ T991] usb 3-1: config 0 descriptor?? [ 363.598582][ T5882] usb 4-1: Using ep0 maxpacket: 32 [ 363.601384][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.601418][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.601457][ T5882] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 363.601480][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.666946][ T5882] usb 4-1: config 0 descriptor?? [ 363.754269][ T991] hdpvr 3-1:0.0: firmware version 0x4b dated ׯZZ[qkw$$DBύq5 [ 363.754292][ T991] hdpvr 3-1:0.0: untested firmware, the driver might not work. [ 364.105389][ T5882] kone 0003:1E7D:2CED.0039: unknown main item tag 0x0 [ 364.105436][ T5882] kone 0003:1E7D:2CED.0039: unknown main item tag 0x0 [ 364.105461][ T5882] kone 0003:1E7D:2CED.0039: unknown main item tag 0x0 [ 364.140240][ T5882] kone 0003:1E7D:2CED.0039: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.3-1/input0 [ 364.303722][ T5882] kone 0003:1E7D:2CED.0039: couldn't init struct kone_device [ 364.303791][ T5882] kone 0003:1E7D:2CED.0039: couldn't install mouse [ 364.328468][ T5882] kone 0003:1E7D:2CED.0039: probe with driver kone failed with error -5 [ 364.330403][ T991] hdpvr 3-1:0.0: Could not setup controls [ 364.337604][ T991] hdpvr 3-1:0.0: registering videodev failed [ 364.364896][ T5882] usb 4-1: USB disconnect, device number 28 [ 364.402350][ T991] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -71 [ 364.455751][ T991] usb 3-1: USB disconnect, device number 36 [ 364.505957][T13003] fido_id[13003]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 364.572620][T13008] netlink: 'syz.1.3339': attribute type 11 has an invalid length. [ 364.572648][T13008] netlink: 'syz.1.3339': attribute type 4 has an invalid length. [ 364.572660][T13008] netlink: 199768 bytes leftover after parsing attributes in process `syz.1.3339'. [ 366.298718][T13065] IPv6: sit1: Disabled Multicast RS [ 366.552505][T13076] devpts: Bad value for 'uid' [ 366.552527][T13076] devpts: Bad value for 'uid' [ 366.977203][ T37] audit: type=1326 audit(1763805159.098:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13089 comm="syz.4.3368" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd8c81ff749 code=0x0 [ 367.116949][T13098] xt_l2tp: invalid flags combination: 0 [ 367.942911][T13128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3386'. [ 368.675534][ T5813] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 368.832082][ T5813] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 368.832124][ T5813] usb 2-1: config 0 interface 0 has no altsetting 0 [ 368.832162][ T5813] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 368.832186][ T5813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.916283][ T5813] usb 2-1: config 0 descriptor?? [ 368.917230][T13147] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 369.341252][ T5813] hid_parser_main: 2 callbacks suppressed [ 369.341278][ T5813] ryos 0003:1E7D:3138.003A: unknown main item tag 0x0 [ 369.341307][ T5813] ryos 0003:1E7D:3138.003A: item fetching failed at offset 3/5 [ 369.342212][ T5813] ryos 0003:1E7D:3138.003A: parse failed [ 369.342313][ T5813] ryos 0003:1E7D:3138.003A: probe with driver ryos failed with error -22 [ 369.558758][ T5813] usb 2-1: USB disconnect, device number 22 [ 370.857462][T13209] netlink: 'syz.3.3425': attribute type 29 has an invalid length. [ 371.036642][T13218] netlink: 'syz.2.3429': attribute type 6 has an invalid length. [ 371.041551][T13218] netlink: 'syz.2.3429': attribute type 6 has an invalid length. [ 371.851236][T13248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3444'. [ 371.993299][T13248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3444'. [ 372.016135][ T5813] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 372.168919][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 372.168952][ T5813] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 372.168976][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 372.168998][ T5813] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 372.169040][ T5813] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 372.169064][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.182111][T13248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3444'. [ 372.206533][T13262] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 372.206533][T13262] The task syz.1.3449 (13262) triggered the difference, watch for misbehavior. [ 372.264749][ T5813] usb 4-1: config 0 descriptor?? [ 372.490828][ T5813] hdpvr 4-1:0.0: firmware version 0x4b dated ׯZZ[qkw$$DBύq5 [ 372.490854][ T5813] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 372.765388][ T991] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 372.917557][ T991] usb 3-1: Using ep0 maxpacket: 8 [ 372.920752][ T991] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 372.920780][ T991] usb 3-1: config 0 has no interface number 0 [ 372.954671][ T991] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 372.954692][ T991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.954704][ T991] usb 3-1: Product: syz [ 372.954712][ T991] usb 3-1: Manufacturer: syz [ 372.954720][ T991] usb 3-1: SerialNumber: syz [ 372.973190][ T37] audit: type=1326 audit(1763805165.088:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13267 comm="syz.4.3452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c81ff749 code=0x7ffc0000 [ 372.974335][ T37] audit: type=1326 audit(1763805165.088:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13267 comm="syz.4.3452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c81ff749 code=0x7ffc0000 [ 372.980454][ T37] audit: type=1326 audit(1763805165.098:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13267 comm="syz.4.3452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd8c81ff749 code=0x7ffc0000 [ 372.982038][ T37] audit: type=1326 audit(1763805165.098:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13267 comm="syz.4.3452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c81ff749 code=0x7ffc0000 [ 373.006682][ T37] audit: type=1326 audit(1763805165.098:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13267 comm="syz.4.3452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd8c81ff749 code=0x7ffc0000 [ 373.006735][ T37] audit: type=1326 audit(1763805165.128:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13267 comm="syz.4.3452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c81ff749 code=0x7ffc0000 [ 373.140736][ T5813] hdpvr 4-1:0.0: Could not setup controls [ 373.141617][ T5813] hdpvr 4-1:0.0: registering videodev failed [ 373.198225][ T991] usb 3-1: config 0 descriptor?? [ 373.202565][ T5813] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -71 [ 373.237948][ T5813] usb 4-1: USB disconnect, device number 29 [ 373.404883][ T991] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 373.404968][ T991] uvcvideo 3-1:0.31: Entity type for entity Output 6 was not initialized! [ 373.454248][ T991] usb 3-1: USB disconnect, device number 37 [ 373.857998][ T5813] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 373.915266][ T5868] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 374.015192][ T5813] usb 5-1: Using ep0 maxpacket: 8 [ 374.023159][ T5813] usb 5-1: unable to get BOS descriptor or descriptor too short [ 374.024859][ T5813] usb 5-1: config 4 interface 0 has no altsetting 0 [ 374.029965][ T5813] usb 5-1: string descriptor 0 read error: -22 [ 374.030159][ T5813] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 374.030184][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.093434][ T5813] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 374.098623][ T5868] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.098654][ T5868] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.098674][ T5868] usb 4-1: config 0 interface 0 has no altsetting 0 [ 374.098708][ T5868] usb 4-1: New USB device found, idVendor=044f, idProduct=b651, bcdDevice= 0.00 [ 374.098729][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.112926][ T5868] usb 4-1: config 0 descriptor?? [ 374.187568][ T5813] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 374.188055][ T5813] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 374.188114][ T5813] usb 5-1: media controller created [ 374.250651][ T5813] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 374.368950][ T5813] zl10353_read_register: readreg error (reg=127, ret==0) [ 374.499434][ T5813] usb 5-1: USB disconnect, device number 32 [ 374.626537][T13294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3461'. [ 374.626575][T13294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3461'. [ 374.636880][ T5868] thrustmaster 0003:044F:B651.003B: unknown main item tag 0x0 [ 374.636913][ T5868] thrustmaster 0003:044F:B651.003B: unknown main item tag 0x0 [ 374.636936][ T5868] thrustmaster 0003:044F:B651.003B: unknown main item tag 0x0 [ 374.636959][ T5868] thrustmaster 0003:044F:B651.003B: unknown main item tag 0x0 [ 374.636982][ T5868] thrustmaster 0003:044F:B651.003B: unknown main item tag 0x0 [ 374.637006][ T5868] thrustmaster 0003:044F:B651.003B: unknown main item tag 0x0 [ 374.637029][ T5868] thrustmaster 0003:044F:B651.003B: unknown main item tag 0x0 [ 374.665256][ T5868] thrustmaster 0003:044F:B651.003B: hidraw0: USB HID v0.00 Device [HID 044f:b651] on usb-dummy_hcd.3-1/input0 [ 374.665293][ T5868] thrustmaster 0003:044F:B651.003B: no inputs found [ 374.893079][ T991] usb 4-1: USB disconnect, device number 30 [ 375.163376][T13306] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3467'. [ 375.163496][T13306] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3467'. [ 375.195235][ T5868] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 375.345695][ T5868] usb 2-1: Using ep0 maxpacket: 8 [ 375.353389][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.353428][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.353451][ T5868] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 375.353498][ T5868] usb 2-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 375.353520][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.453271][ T5868] usb 2-1: config 0 descriptor?? [ 375.511870][T13311] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3470'. [ 375.815248][ T5882] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 375.816613][T13319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3474'. [ 375.963354][ T5868] nzxt-kraken2 0003:1E71:170E.003C: hidraw0: USB HID v0.04 Device [HID 1e71:170e] on usb-dummy_hcd.1-1/input0 [ 375.980295][ T5882] usb 5-1: Using ep0 maxpacket: 16 [ 375.982992][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.983027][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.983070][ T5882] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 375.983094][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.141464][ T5882] usb 5-1: config 0 descriptor?? [ 376.230093][ T5868] usb 2-1: USB disconnect, device number 23 [ 376.385932][ T991] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 376.414061][T13327] fido_id[13327]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 376.546108][ T991] usb 4-1: Using ep0 maxpacket: 16 [ 376.549962][ T991] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 376.550027][ T991] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.550055][ T991] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.550078][ T991] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 376.550105][ T991] usb 4-1: config 7 interface 0 has no altsetting 0 [ 376.550141][ T991] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 376.550166][ T991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.643133][ T5882] kye 0003:0458:5016.003D: control desc unexpectedly large [ 376.688442][ T5882] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.003D/input/input32 [ 376.742981][ T5882] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.003D/input/input33 [ 376.837083][ T5882] kye 0003:0458:5016.003D: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 376.880927][ T5882] usb 5-1: USB disconnect, device number 33 [ 377.312084][ T991] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.0/0003:0458:5010.003E/input/input34 [ 377.318962][T13336] fido_id[13336]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 377.568024][ T991] kye 0003:0458:5010.003E: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 377.595949][ T991] usb 4-1: USB disconnect, device number 31 [ 378.082284][T13355] dvmrp0: entered allmulticast mode [ 378.098053][T13353] fido_id[13353]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 378.105222][ T5863] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 378.265170][ T5863] usb 2-1: Using ep0 maxpacket: 16 [ 378.268144][ T5863] usb 2-1: config 0 has too many interfaces: 249, using maximum allowed: 32 [ 378.268174][ T5863] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.268203][ T5863] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 249 [ 378.268264][ T5863] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 378.268289][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.290680][ T5863] usb 2-1: config 0 descriptor?? [ 378.303889][ T5863] ums-sddr09 2-1:0.0: USB Mass Storage device detected [ 378.554572][ T5863] usb 2-1: USB disconnect, device number 24 [ 378.957316][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.957402][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.085217][ T5863] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 379.245581][ T5863] usb 3-1: Using ep0 maxpacket: 32 [ 379.248326][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.248361][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.248403][ T5863] usb 3-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 379.248427][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.258131][ T5863] usb 3-1: config 0 descriptor?? [ 379.718600][ T5863] macally 0003:060B:0001.003F: unknown main item tag 0x0 [ 379.718647][ T5863] macally 0003:060B:0001.003F: unknown main item tag 0x0 [ 379.756044][ T5863] macally 0003:060B:0001.003F: hidraw0: USB HID v0.00 Device [HID 060b:0001] on usb-dummy_hcd.2-1/input0 [ 379.944037][ T5863] usb 3-1: USB disconnect, device number 38 [ 380.174089][T13404] fido_id[13404]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 380.266023][ T5882] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 380.313112][T13417] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3519'. [ 380.417618][ T5882] usb 4-1: Using ep0 maxpacket: 8 [ 380.420226][ T5882] usb 4-1: config 0 has an invalid interface number: 88 but max is 3 [ 380.420250][ T5882] usb 4-1: config 0 has an invalid interface number: 250 but max is 3 [ 380.420270][ T5882] usb 4-1: config 0 has an invalid descriptor of length 101, skipping remainder of the config [ 380.420290][ T5882] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 4 [ 380.420309][ T5882] usb 4-1: config 0 has no interface number 0 [ 380.420326][ T5882] usb 4-1: config 0 has no interface number 1 [ 380.420370][ T5882] usb 4-1: config 0 interface 88 has no altsetting 0 [ 380.420387][ T5882] usb 4-1: config 0 interface 250 has no altsetting 0 [ 380.420431][ T5882] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=12.b3 [ 380.420455][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.438891][ T5882] usb 4-1: config 0 descriptor?? [ 380.677786][ T5882] usb 4-1: string descriptor 0 read error: -71 [ 380.781088][ T5882] usb 4-1: USB disconnect, device number 32 [ 381.055284][ T5813] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 381.207770][ T5813] usb 3-1: Using ep0 maxpacket: 32 [ 381.210605][ T5813] usb 3-1: config 0 interface 0 has no altsetting 0 [ 381.213774][ T5813] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 381.213804][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.213824][ T5813] usb 3-1: Product: syz [ 381.213839][ T5813] usb 3-1: Manufacturer: syz [ 381.213854][ T5813] usb 3-1: SerialNumber: syz [ 381.239930][ T5813] usb 3-1: config 0 descriptor?? [ 381.607895][T13445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3530'. [ 381.704870][ T5813] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 382.126141][ T5813] gs_usb 3-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 382.126906][ T5813] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 382.202990][ T5813] usb 3-1: USB disconnect, device number 39 [ 382.525210][ T5863] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 382.583511][T13468] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 382.643303][ C0] vkms_vblank_simulate: vblank timer overrun [ 382.677898][ T5863] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 382.681136][ T5863] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 382.681168][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.681188][ T5863] usb 5-1: Product: syz [ 382.681202][ T5863] usb 5-1: Manufacturer: syz [ 382.681225][ T5863] usb 5-1: SerialNumber: syz [ 382.767823][ T5863] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 383.087299][T13482] netlink: 'syz.1.3546': attribute type 4 has an invalid length. [ 383.421797][ T5863] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 383.450713][ T5863] usb 5-1: USB disconnect, device number 34 [ 383.810710][T13501] team_slave_0: entered promiscuous mode [ 383.810803][T13501] team_slave_1: entered promiscuous mode [ 383.814977][T13501] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 384.155211][ T991] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 384.305207][ T991] usb 2-1: Using ep0 maxpacket: 8 [ 384.323763][ T991] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 384.323796][ T991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.323817][ T991] usb 2-1: Product: syz [ 384.323832][ T991] usb 2-1: Manufacturer: syz [ 384.323847][ T991] usb 2-1: SerialNumber: syz [ 384.374224][ T991] usb 2-1: config 0 descriptor?? [ 384.404183][ T991] gspca_main: se401-2.14.0 probing 047d:5003 [ 384.785477][ T5813] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 384.915639][ T5868] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 384.946087][ T5813] usb 5-1: Using ep0 maxpacket: 16 [ 384.951257][ T5813] usb 5-1: unable to get BOS descriptor or descriptor too short [ 384.953208][ T5813] usb 5-1: config 5 has an invalid interface number: 118 but max is 0 [ 384.953233][ T5813] usb 5-1: config 5 has no interface number 0 [ 384.953308][ T5813] usb 5-1: config 5 interface 118 has no altsetting 0 [ 384.960427][ T5813] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=1c.96 [ 384.960457][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.960478][ T5813] usb 5-1: Product: syz [ 384.960492][ T5813] usb 5-1: Manufacturer: syz [ 384.960507][ T5813] usb 5-1: SerialNumber: syz [ 385.048100][ T991] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input35 [ 385.069814][ T991] usb 2-1: USB disconnect, device number 25 [ 385.105232][ T5868] usb 3-1: Using ep0 maxpacket: 16 [ 385.131701][ T5868] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 385.131735][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.131757][ T5868] usb 3-1: Product: syz [ 385.131773][ T5868] usb 3-1: Manufacturer: syz [ 385.131787][ T5868] usb 3-1: SerialNumber: syz [ 385.196078][ T5868] r8152-cfgselector 3-1: Unknown version 0x0000 [ 385.196107][ T5868] r8152-cfgselector 3-1: config 0 descriptor?? [ 385.303859][ T5813] imon_raw 5-1:5.118: IR endpoint missing [ 385.349808][ T5813] usb 5-1: USB disconnect, device number 35 [ 385.453247][ T5868] r8152-cfgselector 3-1: Needed 2 retries to read version [ 385.453306][ T5868] r8152-cfgselector 3-1: Unknown version 0x0cb0 [ 385.453965][ T5868] r8152-cfgselector 3-1: bad CDC descriptors [ 385.681638][ T5813] r8152-cfgselector 3-1: USB disconnect, device number 40 [ 385.825455][ T5863] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 385.975178][ T5863] usb 4-1: Using ep0 maxpacket: 32 [ 385.977714][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.977748][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.977790][ T5863] usb 4-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 385.977815][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.045324][ T5863] usb 4-1: config 0 descriptor?? [ 386.589789][ T5863] macally 0003:060B:0001.0040: unknown main item tag 0x0 [ 386.589833][ T5863] macally 0003:060B:0001.0040: unknown main item tag 0x0 [ 386.633968][ T5863] macally 0003:060B:0001.0040: hidraw0: USB HID v0.00 Device [HID 060b:0001] on usb-dummy_hcd.3-1/input0 [ 386.769067][ T991] usb 4-1: USB disconnect, device number 33 [ 387.037598][T13535] fido_id[13535]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 387.302082][T13543] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 387.307097][ T5114] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 387.307127][ T5114] CPU: 0 UID: 0 PID: 5114 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 387.307150][ T5114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 387.307163][ T5114] Workqueue: hci1 hci_rx_work [ 387.307192][ T5114] Call Trace: [ 387.307200][ T5114] [ 387.307210][ T5114] dump_stack_lvl+0x189/0x250 [ 387.307245][ T5114] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.307269][ T5114] ? __pfx__printk+0x10/0x10 [ 387.307297][ T5114] ? kernfs_path_from_node+0x2c/0x280 [ 387.307317][ T5114] ? kernfs_path_from_node+0x243/0x280 [ 387.307334][ T5114] ? kernfs_path_from_node+0x2c/0x280 [ 387.307358][ T5114] sysfs_create_dir_ns+0x259/0x280 [ 387.307386][ T5114] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 387.307410][ T5114] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 387.307434][ T5114] ? rt_spin_unlock+0x161/0x200 [ 387.307459][ T5114] kobject_add_internal+0x5a5/0xb50 [ 387.307489][ T5114] kobject_add+0x155/0x220 [ 387.307514][ T5114] ? __pfx_kobject_add+0x10/0x10 [ 387.307542][ T5114] ? get_device_parent+0x370/0x3a0 [ 387.307573][ T5114] device_add+0x408/0xb50 [ 387.307603][ T5114] hci_conn_add_sysfs+0xd5/0x1e0 [ 387.307628][ T5114] le_conn_complete_evt+0xf39/0x1500 [ 387.307670][ T5114] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 387.307696][ T5114] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 387.307723][ T5114] ? lockdep_hardirqs_on+0x9c/0x150 [ 387.307754][ T5114] ? skb_pull_data+0xfb/0x200 [ 387.307785][ T5114] hci_le_conn_complete_evt+0x187/0x450 [ 387.307818][ T5114] hci_event_packet+0x78f/0x1200 [ 387.307843][ T5114] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 387.307870][ T5114] ? __pfx_hci_event_packet+0x10/0x10 [ 387.307902][ T5114] ? hci_send_to_monitor+0xe2/0x570 [ 387.307932][ T5114] hci_rx_work+0x46a/0xe80 [ 387.307963][ T5114] ? process_scheduled_works+0x9ef/0x17b0 [ 387.307988][ T5114] process_scheduled_works+0xae1/0x17b0 [ 387.308044][ T5114] ? __pfx_process_scheduled_works+0x10/0x10 [ 387.308085][ T5114] worker_thread+0x8a0/0xda0 [ 387.308111][ T5114] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 387.308147][ T5114] ? __kthread_parkme+0x7b/0x200 [ 387.308182][ T5114] kthread+0x711/0x8a0 [ 387.308212][ T5114] ? __pfx_worker_thread+0x10/0x10 [ 387.308234][ T5114] ? __pfx_kthread+0x10/0x10 [ 387.308257][ T5114] ? rt_spin_unlock+0x150/0x200 [ 387.308283][ T5114] ? rt_spin_unlock+0x161/0x200 [ 387.308302][ T5114] ? __pfx_kthread+0x10/0x10 [ 387.308329][ T5114] ret_from_fork+0x4bc/0x870 [ 387.308355][ T5114] ? __pfx_ret_from_fork+0x10/0x10 [ 387.308392][ T5114] ? __switch_to_asm+0x39/0x70 [ 387.308409][ T5114] ? __switch_to_asm+0x33/0x70 [ 387.308425][ T5114] ? __pfx_kthread+0x10/0x10 [ 387.308452][ T5114] ret_from_fork_asm+0x1a/0x30 [ 387.308491][ T5114] [ 387.308523][ T5114] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 387.308563][ T5114] Bluetooth: hci1: failed to register connection device [ 387.508780][T13545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3572'. [ 387.762310][T13545] vlan2: entered promiscuous mode [ 387.762334][T13545] bond0: entered promiscuous mode [ 387.762350][T13545] bond_slave_0: entered promiscuous mode [ 387.762634][T13545] bond_slave_1: entered promiscuous mode [ 387.762878][T13545] dummy0: entered promiscuous mode [ 388.340160][T13561] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3579'. [ 389.261276][T13592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3592'. [ 390.326464][T13620] netlink: 'syz.2.3605': attribute type 10 has an invalid length. [ 390.332092][T13620] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 390.413445][T13622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3608'. [ 391.256424][T13638] input: syz0 as /devices/virtual/input/input36 [ 393.087372][T13691] program syz.2.3637 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 393.145240][ T5863] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 393.262469][T13698] vlan2: entered promiscuous mode [ 393.295176][ T5863] usb 4-1: Using ep0 maxpacket: 32 [ 393.297787][ T5863] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 393.297814][ T5863] usb 4-1: config 0 has no interface number 0 [ 393.297870][ T5863] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.297899][ T5863] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.297941][ T5863] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 393.297965][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.401665][ T5863] usb 4-1: config 0 descriptor?? [ 394.076017][ T5863] input: HID 28bd:0094 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0094.0041/input/input37 [ 394.121887][ T5863] uclogic 0003:28BD:0094.0041: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.3-1/input1 [ 394.275932][ T5868] usb 4-1: USB disconnect, device number 34 [ 394.427657][T13718] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 394.427729][T13718] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 394.505532][T13716] fido_id[13716]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 395.300262][T13749] Invalid ELF header len 1 [ 395.775259][ T5868] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 395.927030][ T5868] usb 3-1: Using ep0 maxpacket: 32 [ 395.945255][ T5868] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 395.945288][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.945308][ T5868] usb 3-1: Product: syz [ 395.945321][ T5868] usb 3-1: Manufacturer: syz [ 395.945335][ T5868] usb 3-1: SerialNumber: syz [ 396.002445][ T5868] usb 3-1: config 0 descriptor?? [ 396.267109][ T5868] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 041 [ 396.458567][ T5868] usb 3-1: USB disconnect, device number 41 [ 398.340326][T13822] loop2: detected capacity change from 0 to 7 [ 398.378013][T13822] Dev loop2: unable to read RDB block 7 [ 398.378051][T13822] loop2: AHDI p1 p2 p3 [ 398.378088][T13822] loop2: partition table partially beyond EOD, truncated [ 398.378747][T13822] loop2: p1 start 1601398130 is beyond EOD, truncated [ 398.378770][T13822] loop2: p2 start 1702059890 is beyond EOD, truncated [ 398.435546][ T5813] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 398.483165][ T37] audit: type=1326 audit(1763805190.598:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13817 comm="syz.2.3696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7facdbaeb829 code=0x7ffc0000 [ 398.483668][ T37] audit: type=1326 audit(1763805190.598:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13817 comm="syz.2.3696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7facdbaeb829 code=0x7ffc0000 [ 398.484185][ T37] audit: type=1326 audit(1763805190.598:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13817 comm="syz.2.3696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7facdbaeb829 code=0x7ffc0000 [ 398.484659][ T37] audit: type=1326 audit(1763805190.598:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13817 comm="syz.2.3696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7facdbaeb829 code=0x7ffc0000 [ 398.582936][ T5847] udevd[5847]: symlink '../../loop2' '/dev/disk/by-diskseq/73.tmp-b7:2' failed: Read-only file system [ 398.597878][ T37] audit: type=1326 audit(1763805190.598:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13817 comm="syz.2.3696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7facdbaeb829 code=0x7ffc0000 [ 398.598394][ T37] audit: type=1326 audit(1763805190.718:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13817 comm="syz.2.3696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7facdbaeb829 code=0x7ffc0000 [ 398.598849][ T37] audit: type=1326 audit(1763805190.718:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13817 comm="syz.2.3696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7facdbaeb829 code=0x7ffc0000 [ 398.599320][ T37] audit: type=1326 audit(1763805190.718:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13817 comm="syz.2.3696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7facdbaeb829 code=0x7ffc0000 [ 398.599788][ T37] audit: type=1326 audit(1763805190.718:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13817 comm="syz.2.3696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7facdbaeb829 code=0x7ffc0000 [ 398.600270][ T37] audit: type=1326 audit(1763805190.718:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13817 comm="syz.2.3696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7facdbaeb829 code=0x7ffc0000 [ 398.650737][ T5813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.650768][ T5813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.650806][ T5813] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 398.650826][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.684521][ T5813] usb 5-1: config 0 descriptor?? [ 398.711734][ T5847] udevd[5847]: symlink '../../loop2' '/dev/disk/by-diskseq/73.tmp-b7:2' failed: Read-only file system [ 398.818613][ T5847] udevd[5847]: symlink '../../loop2' '/dev/disk/by-diskseq/73.tmp-b7:2' failed: Read-only file system [ 398.857507][ T5847] udevd[5847]: symlink '../../loop2' '/dev/disk/by-diskseq/73.tmp-b7:2' failed: Read-only file system [ 398.890495][T13825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3698'. [ 399.197555][ T5813] konepure 0003:1E7D:2DBE.0042: unknown main item tag 0x2 [ 399.214513][ T5813] konepure 0003:1E7D:2DBE.0042: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.4-1/input0 [ 399.398267][ T5813] usb 5-1: USB disconnect, device number 36 [ 399.819877][ T6125] udevd[6125]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 399.822113][T13833] fido_id[13833]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 400.194078][T13848] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3708'. [ 400.196184][ T6125] udevd[6125]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 400.403006][ T6125] udevd[6125]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 400.833018][ T5847] udevd[5847]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 401.065204][ T5868] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 401.124394][ T5847] udevd[5847]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 401.217981][ T5868] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 401.218015][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.224342][ T5868] usb 4-1: config 0 descriptor?? [ 401.272174][ T5868] cp210x 4-1:0.0: cp210x converter detected [ 401.481844][ T5847] udevd[5847]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 401.686396][T13879] netlink: 'syz.4.3721': attribute type 1 has an invalid length. [ 401.686421][T13879] netlink: 'syz.4.3721': attribute type 2 has an invalid length. [ 401.874375][ T5868] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 401.874444][ T5868] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 401.900668][ T5868] usb 4-1: cp210x converter now attached to ttyUSB0 [ 401.914199][ T5868] usb 4-1: USB disconnect, device number 35 [ 401.962828][ T5868] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 401.963862][ T5868] cp210x 4-1:0.0: device disconnected [ 402.247246][T13896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3730'. [ 402.658157][T13906] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 402.875250][ T5868] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 403.054989][ T5868] usb 4-1: Using ep0 maxpacket: 16 [ 403.059545][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.059580][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.059624][ T5868] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 403.059649][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.117620][ T5868] usb 4-1: config 0 descriptor?? [ 403.575336][ T5868] itetech 0003:258A:6A88.0043: unknown main item tag 0x2 [ 403.575378][ T5868] itetech 0003:258A:6A88.0043: item fetching failed at offset 8/164 [ 403.576560][ T5868] itetech 0003:258A:6A88.0043: probe with driver itetech failed with error -22 [ 403.740046][ T5863] usb 4-1: USB disconnect, device number 36 [ 403.825955][ T6125] udevd[6125]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 403.982817][ T5847] udevd[5847]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 404.179800][ T5847] udevd[5847]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 404.410782][ T5847] udevd[5847]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 404.789843][ T5847] udevd[5847]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 405.074814][ T5847] udevd[5847]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 405.112138][ T5813] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 405.329284][ T5813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.329338][ T5813] usb 2-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 405.329364][ T5813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.348291][ T5813] usb 2-1: config 0 descriptor?? [ 405.431094][ T5847] udevd[5847]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 405.505563][ T5868] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 405.660313][ T5868] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 405.660370][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.660393][ T5868] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 405.660435][ T5868] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 405.660460][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.751559][ T5868] usb 3-1: config 0 descriptor?? [ 406.051814][ T5813] razer 0003:1532:010E.0044: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.1-1/input0 [ 406.191717][ T5868] holtek_kbd 0003:04D9:A055.0045: unknown main item tag 0x0 [ 406.191756][ T5868] holtek_kbd 0003:04D9:A055.0045: unknown main item tag 0x0 [ 406.191783][ T5868] holtek_kbd 0003:04D9:A055.0045: unknown main item tag 0x0 [ 406.191810][ T5868] holtek_kbd 0003:04D9:A055.0045: reserved main item tag 0xd [ 406.191835][ T5868] holtek_kbd 0003:04D9:A055.0045: unexpected long global item [ 406.192869][ T5868] holtek_kbd 0003:04D9:A055.0045: probe with driver holtek_kbd failed with error -22 [ 406.254352][ T5813] usb 2-1: USB disconnect, device number 26 [ 406.370934][T13990] fido_id[13990]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 406.400702][ T5863] usb 3-1: USB disconnect, device number 42 [ 406.715308][ T5868] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 406.885184][ T5868] usb 5-1: Using ep0 maxpacket: 8 [ 406.891973][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 406.892014][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 406.892037][ T5868] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 406.892062][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 406.892090][ T5868] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 406.892130][ T5868] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 406.892153][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.998300][ T5868] usb 5-1: config 0 descriptor?? [ 406.999499][T13994] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 407.375875][ T6125] udevd[6125]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 407.489169][ T5797] usb 5-1: USB disconnect, device number 37 [ 407.497021][ T5114] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 407.730313][ T6125] udevd[6125]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 408.212071][ T6125] udevd[6125]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 408.478556][T14034] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 408.478785][T14034] syzkaller1: linktype set to 823 [ 408.752561][T14049] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3797'. [ 408.901031][ T5847] udevd[5847]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 409.071538][T14059] input: syz0 as /devices/virtual/input/input38 [ 409.247986][T14065] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 409.489319][ T991] kernel read not supported for file /dsp1 (pid: 991 comm: kworker/1:2) [ 409.739573][T14083] netlink: 166 bytes leftover after parsing attributes in process `syz.1.3814'. [ 409.828525][ T5847] udevd[5847]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 410.062369][ T5847] udevd[5847]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 410.438827][ T6125] udevd[6125]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 410.612294][ T5847] udevd[5847]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 412.176513][ T5847] udevd[5847]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 412.282450][T14156] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3847'. [ 413.405184][ T5863] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 413.577764][ T5863] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 413.577799][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.583952][ T5863] usb 5-1: config 0 descriptor?? [ 413.828688][ T5863] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 414.016438][ T5847] udevd[5847]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 414.029498][ T5863] [drm:udl_init] *ERROR* Selecting channel failed [ 414.087533][ T5863] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 414.087562][ T5863] [drm] Initialized udl on minor 2 [ 414.091794][ T5863] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 414.092211][ T5863] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 414.129612][ T5868] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 414.157997][ T5868] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 414.158231][ T5868] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 414.163106][ T5863] usb 5-1: USB disconnect, device number 38 [ 414.360130][ T6125] udevd[6125]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 414.467796][ T6125] udevd[6125]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 414.772319][ T5847] udevd[5847]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 414.887858][T14212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3874'. [ 415.168740][ T5847] udevd[5847]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 415.356759][ T37] kauditd_printk_skb: 381 callbacks suppressed [ 415.356779][ T37] audit: type=1800 audit(1763805463.468:512): pid=14230 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.3882" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 415.415244][ T5882] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 415.445186][ T5863] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 415.575271][ T5882] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 415.575346][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.577304][ T5882] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 415.577334][ T5882] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 415.577355][ T5882] usb 2-1: Manufacturer: syz [ 415.597618][ T5882] usb 2-1: config 0 descriptor?? [ 415.605280][ T5863] usb 3-1: Using ep0 maxpacket: 8 [ 415.608170][ T5863] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 415.608197][ T5863] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.608217][ T5863] usb 3-1: config 0 has no interface number 0 [ 415.663470][ T5863] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 415.663503][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.663524][ T5863] usb 3-1: Product: syz [ 415.663537][ T5863] usb 3-1: Manufacturer: syz [ 415.663552][ T5863] usb 3-1: SerialNumber: syz [ 415.701360][ T5863] usb 3-1: config 0 descriptor?? [ 415.725992][ T5863] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 415.726029][ T5863] uvcvideo 3-1:0.31: No valid video chain found. [ 415.835277][ T5882] rc_core: IR keymap rc-hauppauge not found [ 415.835301][ T5882] Registered IR keymap rc-empty [ 415.860524][ T5882] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 415.880777][ T5882] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input39 [ 415.995569][ T5882] usb 2-1: USB disconnect, device number 27 [ 416.109051][ T5797] usb 3-1: USB disconnect, device number 43 [ 416.573535][T14261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3896'. [ 416.780930][ T6125] udevd[6125]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 416.969040][ T37] audit: type=1107 audit(1763805464.998:513): pid=14273 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 417.241086][ T5847] udevd[5847]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 419.040295][ T5847] udevd[5847]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 419.094251][T14326] sctp: [Deprecated]: syz.2.3926 (pid 14326) Use of int in max_burst socket option deprecated. [ 419.094251][T14326] Use struct sctp_assoc_value instead [ 419.193861][ T5847] udevd[5847]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 419.435365][T14336] netlink: 'syz.3.3930': attribute type 10 has an invalid length. [ 419.435516][T14336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.495504][T14336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.526639][ T5847] udevd[5847]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 419.609068][T14336] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 419.642408][T14344] blkio.reset_stats is deprecated [ 419.927025][T14358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3941'. [ 420.010615][ T5847] udevd[5847]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 420.268116][ T5847] udevd[5847]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 420.383428][ T5847] udevd[5847]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 420.798261][ T6125] udevd[6125]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 421.138041][ T6125] udevd[6125]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 421.177640][ C0] vkms_vblank_simulate: vblank timer overrun [ 421.354439][ T5847] udevd[5847]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 421.696357][ C0] vkms_vblank_simulate: vblank timer overrun [ 421.707053][ T5847] udevd[5847]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 421.728566][T14398] netlink: 'syz.2.3958': attribute type 9 has an invalid length. [ 421.728588][T14398] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3958'. [ 422.828687][T14434] veth1_virt_wifi: vlans aren't supported yet for dev_uc|mc_add() [ 423.586327][ T5868] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 423.745401][ T5868] usb 3-1: Using ep0 maxpacket: 32 [ 423.748112][ T5868] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 423.748145][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 423.748174][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 423.748220][ T5868] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 423.748243][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.819187][ T5868] usb 3-1: config 0 descriptor?? [ 423.820510][T14452] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 423.858608][ T5868] hub 3-1:0.0: USB hub found [ 424.042303][ T5868] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 424.253744][ T5868] usbhid 3-1:0.0: can't add hid device: -71 [ 424.253888][ T5868] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 424.306348][ T5868] usb 3-1: USB disconnect, device number 44 [ 424.913378][ T5847] udevd[5847]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 425.402781][ T5847] udevd[5847]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 425.784483][T14487] netlink: 16390 bytes leftover after parsing attributes in process `syz.3.4002'. [ 426.012222][ T5847] udevd[5847]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 426.433960][ T5847] udevd[5847]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 427.302961][T14515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4013'. [ 428.411711][ T5847] udevd[5847]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 428.533199][ T5847] udevd[5847]: symlink '../../loop7' '/dev/disk/by-diskseq/70.tmp-b7:7' failed: Read-only file system [ 428.624408][ T5847] udevd[5847]: symlink '../../loop7' '/dev/disk/by-diskseq/70.tmp-b7:7' failed: Read-only file system [ 428.751640][ T5847] udevd[5847]: symlink '../../loop7' '/dev/disk/by-diskseq/75.tmp-b7:7' failed: Read-only file system [ 429.397860][T14571] netlink: 'syz.1.4039': attribute type 1 has an invalid length. [ 429.397884][T14571] netlink: 'syz.1.4039': attribute type 3 has an invalid length. [ 429.397896][T14571] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4039'. [ 429.639826][ T5847] udevd[5847]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 429.695181][ T5868] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 429.845413][ T5868] usb 4-1: Using ep0 maxpacket: 16 [ 429.848236][ T5868] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.848269][ T5868] usb 4-1: config 0 interface 0 has no altsetting 0 [ 429.848307][ T5868] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 429.848331][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.854548][ T5868] usb 4-1: config 0 descriptor?? [ 429.945220][ T5863] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 430.100223][ T5863] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 430.100315][ T5863] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 430.100360][ T5863] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 430.100382][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.159553][T14579] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 430.159734][T14579] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 430.216513][ T5863] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 430.360334][ T5868] nzxt-smart2 0003:1E71:2009.0046: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 430.479455][ T37] audit: type=1800 audit(1763805478.578:514): pid=14590 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.4048" name="file0" dev="tmpfs" ino=4114 res=0 errno=0 [ 430.693909][ T5863] usb 2-1: USB disconnect, device number 28 [ 430.728887][ T5813] usb 4-1: USB disconnect, device number 37 [ 431.246075][T14596] Invalid/unusable pipe [ 431.271595][ T5847] udevd[5847]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 431.817921][ T5854] udevd[5854]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 431.906322][ T5813] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 431.967934][ T5847] udevd[5847]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 432.063433][ T5813] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 432.063466][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.092159][ T5813] usb 5-1: config 0 descriptor?? [ 432.140795][ T5813] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 432.216541][ T5114] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 432.881317][ T5847] udevd[5847]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 432.932824][ T5813] gspca_cpia1: usb_control_msg 02, error -71 [ 432.933283][ T5813] gspca_cpia1: usb_control_msg 05, error -71 [ 432.933698][ T5813] gspca_cpia1: usb_control_msg 04, error -71 [ 432.933887][ T5813] cpia1 5-1:0.0: probe with driver cpia1 failed with error -71 [ 432.946947][ T5813] usb 5-1: USB disconnect, device number 39 [ 432.961342][ T5882] kernel write not supported for file /1659/net/xfrm_stat (pid: 5882 comm: kworker/0:5) [ 433.175212][ T5797] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 433.242680][ T5847] udevd[5847]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 433.301808][T14645] sctp: [Deprecated]: syz.0.4074 (pid 14645) Use of int in max_burst socket option. [ 433.301808][T14645] Use struct sctp_assoc_value instead [ 433.346019][ T5797] usb 2-1: Using ep0 maxpacket: 16 [ 433.349956][ T5797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.350013][ T5797] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 433.350038][ T5797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.363435][ T5797] usb 2-1: config 0 descriptor?? [ 433.831781][ T5797] mcp2221 0003:04D8:00DD.0047: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 434.010334][ C0] ================================================================== [ 434.010355][ C0] BUG: KASAN: slab-out-of-bounds in mcp2221_raw_event+0x106a/0x1240 [ 434.010390][ C0] Read of size 1 at addr ffff88803943ffff by task ktimers/0/16 [ 434.010412][ C0] [ 434.010425][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 434.010451][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 434.010465][ C0] Call Trace: [ 434.010474][ C0] [ 434.010484][ C0] dump_stack_lvl+0x189/0x250 [ 434.010518][ C0] ? __kasan_check_byte+0x12/0x40 [ 434.010551][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.010583][ C0] ? lock_release+0x4b/0x3e0 [ 434.010617][ C0] ? __virt_addr_valid+0x4a5/0x5c0 [ 434.010652][ C0] print_report+0xca/0x240 [ 434.010692][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 434.010716][ C0] kasan_report+0x118/0x150 [ 434.010745][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 434.010774][ C0] mcp2221_raw_event+0x106a/0x1240 [ 434.010798][ C0] ? down_trylock+0x50/0xb0 [ 434.010818][ C0] hid_input_report+0x40f/0x530 [ 434.010848][ C0] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 434.010874][ C0] hid_irq_in+0x47e/0x6d0 [ 434.010903][ C0] __usb_hcd_giveback_urb+0x3b4/0x5e0 [ 434.010935][ C0] dummy_timer+0x8a0/0x4610 [ 434.010986][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 434.011020][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 434.011051][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 434.011078][ C0] __hrtimer_run_queues+0x552/0xd40 [ 434.011119][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 434.011149][ C0] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 434.011181][ C0] hrtimer_run_softirq+0x1a3/0x2e0 [ 434.011204][ C0] handle_softirqs+0x22f/0x710 [ 434.011236][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 434.011269][ C0] run_ktimerd+0xcf/0x190 [ 434.011294][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 434.011319][ C0] ? schedule+0x91/0x360 [ 434.011347][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 434.011373][ C0] smpboot_thread_fn+0x542/0xa60 [ 434.011401][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 434.011428][ C0] kthread+0x711/0x8a0 [ 434.011462][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 434.011490][ C0] ? __pfx_kthread+0x10/0x10 [ 434.011521][ C0] ? rt_spin_unlock+0x150/0x200 [ 434.011547][ C0] ? rt_spin_unlock+0x161/0x200 [ 434.011570][ C0] ? __pfx_kthread+0x10/0x10 [ 434.011600][ C0] ret_from_fork+0x4bc/0x870 [ 434.011627][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 434.011652][ C0] ? __switch_to_asm+0x39/0x70 [ 434.011683][ C0] ? __switch_to_asm+0x33/0x70 [ 434.011701][ C0] ? __pfx_kthread+0x10/0x10 [ 434.011729][ C0] ret_from_fork_asm+0x1a/0x30 [ 434.011759][ C0] [ 434.011767][ C0] [ 434.011772][ C0] Allocated by task 5810: [ 434.011784][ C0] kasan_save_track+0x3e/0x80 [ 434.011809][ C0] __kasan_kmalloc+0x93/0xb0 [ 434.011835][ C0] __kmalloc_node_noprof+0x398/0x7f0 [ 434.011861][ C0] qdisc_alloc+0x9c/0xac0 [ 434.011879][ C0] qdisc_create_dflt+0x8e/0x4e0 [ 434.011898][ C0] dev_activate+0x378/0x1150 [ 434.011915][ C0] __dev_open+0x69c/0x880 [ 434.011931][ C0] __dev_change_flags+0x1ea/0x6d0 [ 434.011952][ C0] netif_change_flags+0x88/0x1a0 [ 434.011972][ C0] do_setlink+0xc55/0x41c0 [ 434.011993][ C0] rtnl_newlink+0x1619/0x1c80 [ 434.012011][ C0] rtnetlink_rcv_msg+0x7cf/0xb70 [ 434.012029][ C0] netlink_rcv_skb+0x208/0x470 [ 434.012048][ C0] netlink_unicast+0x846/0xa10 [ 434.012065][ C0] netlink_sendmsg+0x805/0xb30 [ 434.012086][ C0] __sock_sendmsg+0x21c/0x270 [ 434.012114][ C0] __sys_sendto+0x3c7/0x520 [ 434.012134][ C0] __x64_sys_sendto+0xde/0x100 [ 434.012154][ C0] do_syscall_64+0xfa/0xfa0 [ 434.012183][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.012203][ C0] [ 434.012208][ C0] The buggy address belongs to the object at ffff88803943e000 [ 434.012208][ C0] which belongs to the cache kmalloc-4k of size 4096 [ 434.012227][ C0] The buggy address is located 5823 bytes to the right of [ 434.012227][ C0] allocated 2368-byte region [ffff88803943e000, ffff88803943e940) [ 434.012252][ C0] [ 434.012257][ C0] The buggy address belongs to the physical page: [ 434.012269][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x39438 [ 434.012291][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 434.012310][ C0] flags: 0x80000000000040(head|node=0|zone=1) [ 434.012329][ C0] page_type: f5(slab) [ 434.012349][ C0] raw: 0080000000000040 ffff88813ff27140 dead000000000100 dead000000000122 [ 434.012368][ C0] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 434.012389][ C0] head: 0080000000000040 ffff88813ff27140 dead000000000100 dead000000000122 [ 434.012408][ C0] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 434.012428][ C0] head: 0080000000000003 ffffea0000e50e01 00000000ffffffff 00000000ffffffff [ 434.012444][ C0] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 434.012455][ C0] page dumped because: kasan: bad access detected [ 434.012466][ C0] page_owner tracks the page as allocated [ 434.012474][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 160, tgid 160 (kworker/u8:5), ts 104467454300, free_ts 104408103796 [ 434.012514][ C0] post_alloc_hook+0x234/0x290 [ 434.012542][ C0] get_page_from_freelist+0x28c0/0x2960 [ 434.012572][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 434.012602][ C0] alloc_pages_mpol+0xd1/0x380 [ 434.012624][ C0] allocate_slab+0x96/0x350 [ 434.012642][ C0] ___slab_alloc+0xb10/0x1400 [ 434.012668][ C0] __slab_alloc+0xc6/0x1f0 [ 434.012685][ C0] __kmalloc_node_track_caller_noprof+0x2a8/0x7e0 [ 434.012711][ C0] kmalloc_reserve+0x136/0x290 [ 434.012731][ C0] __alloc_skb+0x142/0x2d0 [ 434.012748][ C0] nsim_dev_trap_report_work+0x29f/0xbc0 [ 434.012775][ C0] process_scheduled_works+0xae1/0x17b0 [ 434.012798][ C0] worker_thread+0x8a0/0xda0 [ 434.012820][ C0] kthread+0x711/0x8a0 [ 434.012845][ C0] ret_from_fork+0x4bc/0x870 [ 434.012866][ C0] ret_from_fork_asm+0x1a/0x30 [ 434.012887][ C0] page last free pid 5810 tgid 5810 stack trace: [ 434.012900][ C0] __free_frozen_pages+0xfb6/0x1140 [ 434.012926][ C0] __slab_free+0x2c6/0x370 [ 434.012948][ C0] qlist_free_all+0x97/0x140 [ 434.012971][ C0] kasan_quarantine_reduce+0x148/0x160 [ 434.012996][ C0] __kasan_slab_alloc+0x22/0x80 [ 434.013022][ C0] kmem_cache_alloc_node_noprof+0x23b/0x6e0 [ 434.013049][ C0] __alloc_skb+0x112/0x2d0 [ 434.013069][ C0] rtmsg_ifinfo_build_skb+0x84/0x260 [ 434.013097][ C0] rtnetlink_event+0x1b7/0x270 [ 434.013115][ C0] notifier_call_chain+0x1b6/0x3e0 [ 434.013141][ C0] netif_change_name+0x5e5/0x990 [ 434.013169][ C0] do_setlink+0x9f6/0x41c0 [ 434.013189][ C0] rtnl_newlink+0x1619/0x1c80 [ 434.013208][ C0] rtnetlink_rcv_msg+0x7cf/0xb70 [ 434.013226][ C0] netlink_rcv_skb+0x208/0x470 [ 434.013247][ C0] netlink_unicast+0x846/0xa10 [ 434.013265][ C0] [ 434.013270][ C0] Memory state around the buggy address: [ 434.013280][ C0] ffff88803943fe80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 434.013295][ C0] ffff88803943ff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 434.013309][ C0] >ffff88803943ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 434.013320][ C0] ^ [ 434.013333][ C0] ffff888039440000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 434.013347][ C0] ffff888039440080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 434.013359][ C0] ================================================================== [ 434.013953][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 434.013974][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 434.014001][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 434.014015][ C0] Call Trace: [ 434.014024][ C0] [ 434.014034][ C0] dump_stack_lvl+0x99/0x250 [ 434.014068][ C0] ? __asan_memcpy+0x40/0x70 [ 434.014094][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.014127][ C0] ? __pfx__printk+0x10/0x10 [ 434.014160][ C0] vpanic+0x237/0x6d0 [ 434.014182][ C0] ? __pfx_vpanic+0x10/0x10 [ 434.014201][ C0] ? preempt_schedule+0xae/0xc0 [ 434.014232][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 434.014265][ C0] panic+0xb9/0xc0 [ 434.014286][ C0] ? __pfx_panic+0x10/0x10 [ 434.014308][ C0] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 434.014345][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 434.014370][ C0] check_panic_on_warn+0x89/0xb0 [ 434.014391][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 434.014415][ C0] end_report+0x78/0x160 [ 434.014446][ C0] kasan_report+0x129/0x150 [ 434.014478][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 434.014507][ C0] mcp2221_raw_event+0x106a/0x1240 [ 434.014534][ C0] ? down_trylock+0x50/0xb0 [ 434.014556][ C0] hid_input_report+0x40f/0x530 [ 434.014586][ C0] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 434.014611][ C0] hid_irq_in+0x47e/0x6d0 [ 434.014640][ C0] __usb_hcd_giveback_urb+0x3b4/0x5e0 [ 434.014683][ C0] dummy_timer+0x8a0/0x4610 [ 434.014734][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 434.014768][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 434.014798][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 434.014824][ C0] __hrtimer_run_queues+0x552/0xd40 [ 434.014863][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 434.014895][ C0] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 434.014927][ C0] hrtimer_run_softirq+0x1a3/0x2e0 [ 434.014949][ C0] handle_softirqs+0x22f/0x710 [ 434.014976][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 434.015012][ C0] run_ktimerd+0xcf/0x190 [ 434.015038][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 434.015065][ C0] ? schedule+0x91/0x360 [ 434.015095][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 434.015120][ C0] smpboot_thread_fn+0x542/0xa60 [ 434.015147][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 434.015177][ C0] kthread+0x711/0x8a0 [ 434.015207][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 434.015234][ C0] ? __pfx_kthread+0x10/0x10 [ 434.015261][ C0] ? rt_spin_unlock+0x150/0x200 [ 434.015287][ C0] ? rt_spin_unlock+0x161/0x200 [ 434.015312][ C0] ? __pfx_kthread+0x10/0x10 [ 434.015344][ C0] ret_from_fork+0x4bc/0x870 [ 434.015368][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 434.015394][ C0] ? __switch_to_asm+0x39/0x70 [ 434.015415][ C0] ? __switch_to_asm+0x33/0x70 [ 434.015437][ C0] ? __pfx_kthread+0x10/0x10 [ 434.015469][ C0] ret_from_fork_asm+0x1a/0x30 [ 434.015502][ C0] [ 434.015671][ C0] Kernel Offset: disabled