last executing test programs: 4.287813544s ago: executing program 2 (id=3657): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fsetxattr(r1, &(0x7f0000000000)=@random={'osx.', '\x00'}, 0x0, 0x0, 0x3) 4.097041545s ago: executing program 2 (id=3660): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x3c, 0x0, 0x20, 0x70b92d, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0xc0000}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0xc2}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x10001}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x80}]}, 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x4014) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c0001800600060065580000200002801c0017800400ad0014"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 3.884019959s ago: executing program 2 (id=3663): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x60a3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)={0x0, 0x6, 0x7, {0x7, 0x30, "3d91419d00"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.638784381s ago: executing program 0 (id=3676): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x25, &(0x7f00000003c0)={0x2, 0x1, 0x0, 0xdf}) 2.43172883s ago: executing program 0 (id=3679): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, 0x0) 2.431598686s ago: executing program 1 (id=3680): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) 2.431502647s ago: executing program 3 (id=3681): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000002c0)={0xb96, 0x32314752, 0x1, @discrete={0x7bff, 0x3}}) 2.372096827s ago: executing program 3 (id=3682): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.303067107s ago: executing program 0 (id=3683): r0 = socket$kcm(0x10, 0x2, 0x4) capset(&(0x7f00000002c0)={0x20080522}, &(0x7f0000000300)) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000a080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x400dc) 2.284417513s ago: executing program 1 (id=3684): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006) 2.204258127s ago: executing program 0 (id=3685): syz_usb_connect(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x141, 0x3, 0xef, 0x92, 0x20, 0x557, 0x2021, 0x741a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x30, 0x0, [{{0x9, 0x4, 0x89, 0x4, 0x2, 0x8d, 0x80, 0xf7, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x12, 0x4, 0x5}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0xfe, 0x10}}]}}]}}]}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 2.139063645s ago: executing program 1 (id=3687): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x38) 2.073132385s ago: executing program 1 (id=3689): unshare(0x24020400) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x210080, 0x43) utimensat(r0, 0x0, 0x0, 0x0) 2.004876509s ago: executing program 2 (id=3690): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x5}, {0x0}, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1, 0x26, 0x9}}], 0x48, 0x4000}, 0x4000000) 1.998050209s ago: executing program 1 (id=3692): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.860045524s ago: executing program 2 (id=3693): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) 1.112072758s ago: executing program 2 (id=3700): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000080)={0x20, 0xa, 0x9, {0x9, 0x9, "0dd5caa8776609"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x4, {0xe0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.095765084s ago: executing program 1 (id=3701): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5005, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x89, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x80, 0x40, 0xa}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000000)={0x40, 0x2, 0x66, {0x66, 0x21, "17a934ae5c67d766bee3000000b6b96f75552ff51de1c5ad40e20b24442bd582596eed66a1e73aecdd455cb24ba859172e5c65fa93ec5c81d5a4008d425e2badf972d759a8449f441e89cd0c2dbe1427b74a2b8475351580bddcf1fc0000000000000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 928.034351ms ago: executing program 0 (id=3702): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x2}}}, 0x90) 892.601723ms ago: executing program 3 (id=3703): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x82002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x10000) close(0x3) 782.19133ms ago: executing program 3 (id=3704): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) write$binfmt_aout(r0, &(0x7f0000000840)=ANY=[], 0xff2e) 730.958314ms ago: executing program 3 (id=3705): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000002c0), 0x4) getsockopt$packet_buf(r0, 0x107, 0x12, 0x0, &(0x7f0000001040)) 688.907301ms ago: executing program 3 (id=3706): r0 = syz_clone(0x800200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffa}) 499.865337ms ago: executing program 4 (id=3707): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000a00)={0xf, {"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", 0xfffffffffffffd6a}}, 0x1006) 408.015844ms ago: executing program 4 (id=3708): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x30, 0x1c, 0xc07, 0x2000, 0x0, {0x2, 0x0, 0x0, r1, 0x8, 0x33}, [@NDA_DST_IPV6={0x14, 0x1, @loopback}]}, 0x30}}, 0x20024090) 355.763991ms ago: executing program 4 (id=3709): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) utimes(0x0, &(0x7f0000000080)={{}, {0x0, 0xfffffffffffffffd}}) 284.735788ms ago: executing program 4 (id=3710): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000680)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000}, 0x0, 0x6e6bc0}, [@tmpl={0x84, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d2, 0x6c}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4, 0x3, 0x9, 0x10001, 0x6, 0x7}, {{@in6=@empty, 0x4d6, 0x3c}, 0x2, @in6=@local, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x5}]}]}, 0x13c}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x8, 0x2b, 0x0, @private2, @local, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) 231.83207ms ago: executing program 4 (id=3711): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000007c0)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) 173.498571ms ago: executing program 4 (id=3712): sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040840}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000000)=""/126, &(0x7f0000000080)=0x7e) 0s ago: executing program 0 (id=3713): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0xff, 0x2}, 0x20) kernel console output (not intermixed with test programs): to Serial Driver converter now attached to ttyUSB0 [ 192.822834][ T5934] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 192.926478][ T5919] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 193.004068][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short [ 193.086852][ T5919] usb 1-1: Using ep0 maxpacket: 16 [ 193.100149][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.130732][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.146112][ T5919] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 193.196065][ T5919] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 193.212696][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 193.220812][ T5934] usb 4-1: USB disconnect, device number 16 [ 193.231682][ T5934] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 193.266061][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.295855][ T5934] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 193.310285][ T5919] usb 1-1: config 0 descriptor?? [ 193.341155][ T5934] quatech2 4-1:0.51: device disconnected [ 193.506369][ T3574] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 193.666397][ T3574] usb 5-1: Using ep0 maxpacket: 8 [ 193.681879][ T3574] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 193.691194][ T3574] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.705952][ T3574] usb 5-1: Product: syz [ 193.710255][ T3574] usb 5-1: Manufacturer: syz [ 193.714864][ T3574] usb 5-1: SerialNumber: syz [ 193.729361][ T3574] usb 5-1: config 0 descriptor?? [ 193.738487][ T3574] gspca_main: se401-2.14.0 probing 047d:5003 [ 193.766631][ T5919] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 193.780228][ T5919] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 193.792710][ T5919] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 193.819746][ T5919] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 193.843087][ T5919] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 193.865161][ T5919] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 193.903097][ T5919] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 193.931082][ T5919] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 193.949065][ T5919] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 193.973297][ T5919] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 194.005914][ T5919] microsoft 0003:045E:07DA.0022: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 194.043520][T10515] PKCS8: Unsupported PKCS#8 version [ 194.043862][ T5919] microsoft 0003:045E:07DA.0022: no inputs found [ 194.060726][ T5919] microsoft 0003:045E:07DA.0022: could not initialize ff, continuing anyway [ 194.073639][ T5919] usb 1-1: USB disconnect, device number 18 [ 194.181951][ T3574] gspca_se401: Wrong descriptor type [ 194.232172][T10518] fido_id[10518]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 194.285324][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.291778][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.398158][ T5911] usb 5-1: USB disconnect, device number 14 [ 194.496332][ T3574] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 194.660017][ T3574] usb 3-1: Using ep0 maxpacket: 16 [ 194.677366][ T3574] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.696291][ T3574] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 194.708316][ T3574] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 194.736072][ T3574] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.744124][ T3574] usb 3-1: Product: syz [ 194.766539][T10535] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2135'. [ 194.907105][ T3574] usb 3-1: Manufacturer: syz [ 194.911753][ T3574] usb 3-1: SerialNumber: syz [ 195.065508][T10545] tipc: Started in network mode [ 195.071135][T10545] tipc: Node identity 4, cluster identity 4711 [ 195.081262][T10545] tipc: Node number set to 4 [ 195.106182][ T5919] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 195.246307][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 195.276058][ T5919] usb 4-1: Using ep0 maxpacket: 8 [ 195.283859][ T5919] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 195.311886][ T5919] usb 4-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 195.321522][ T5919] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 195.331323][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.350338][ T3574] usb 3-1: cannot find UAC_HEADER [ 195.390103][ T3574] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 195.449180][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.493413][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 195.519053][ T7292] udevd[7292]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 195.535811][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.571457][ T3574] usb 3-1: USB disconnect, device number 17 [ 195.591942][ T10] usb 1-1: config 0 descriptor?? [ 195.619767][ T5918] usb 4-1: USB disconnect, device number 17 [ 196.042602][ T10] logitech 0003:046D:C50C.0023: unbalanced collection at end of report description [ 196.062765][ T10] logitech 0003:046D:C50C.0023: parse failed [ 196.069991][ T10] logitech 0003:046D:C50C.0023: probe with driver logitech failed with error -22 [ 196.272711][ T5934] usb 1-1: USB disconnect, device number 19 [ 196.358220][ T5858] Bluetooth: hci2: command 0x0406 tx timeout [ 196.366804][ T5853] Bluetooth: hci4: command 0x0406 tx timeout [ 196.366826][ T5857] Bluetooth: hci3: command 0x0406 tx timeout [ 196.372827][ T5853] Bluetooth: hci0: command 0x0406 tx timeout [ 196.372871][ T5853] Bluetooth: hci1: command 0x0406 tx timeout [ 196.474175][T10595] vim2m vim2m.0: vidioc_s_fmt queue busy [ 196.836398][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 196.967600][T10618] fuse: Bad value for 'user_id' [ 196.986605][T10618] fuse: Bad value for 'user_id' [ 197.007551][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 197.026102][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 197.044459][ T24] usb 2-1: config 0 has no interface number 0 [ 197.062462][ T24] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 197.082987][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.103236][ T24] usb 2-1: Product: syz [ 197.118589][ T24] usb 2-1: Manufacturer: syz [ 197.123237][ T24] usb 2-1: SerialNumber: syz [ 197.150566][ T24] usb 2-1: config 0 descriptor?? [ 197.156929][T10624] macvlan2: entered promiscuous mode [ 197.163777][T10624] macvlan2: entered allmulticast mode [ 197.174111][ T24] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 197.192503][ T24] usb 2-1: selecting invalid altsetting 1 [ 197.198903][ T24] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 197.214276][T10626] netlink: 19 bytes leftover after parsing attributes in process `syz.3.2179'. [ 197.255038][ T24] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 197.296479][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 197.306450][ T24] usb 2-1: media controller created [ 197.378329][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 197.483794][ T24] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 197.511763][ T24] zl10353_read_register: readreg error (reg=127, ret==-71) [ 197.527350][ T24] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 197.710286][ T24] usb 2-1: USB disconnect, device number 19 [ 197.980757][ T5945] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 198.057408][T10656] netlink: 'syz.1.2194': attribute type 64 has an invalid length. [ 198.065858][T10656] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2194'. [ 198.127924][ T3574] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 198.166168][ T5945] usb 3-1: Using ep0 maxpacket: 8 [ 198.181569][ T5945] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 198.209635][ T5945] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 198.236519][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.255782][ T5945] usb 3-1: config 0 descriptor?? [ 198.296481][ T3574] usb 4-1: Using ep0 maxpacket: 16 [ 198.313330][ T3574] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.330898][ T3574] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 198.343425][ T3574] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 198.353562][ T3574] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 198.364419][ T3574] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 198.421423][ T3574] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 198.440835][ T3574] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 198.457541][ T3574] usb 4-1: Manufacturer: syz [ 198.483658][ T3574] usb 4-1: config 0 descriptor?? [ 198.721611][ T5945] kye 0003:0458:4018.0024: unbalanced collection at end of report description [ 198.741214][ T5945] kye 0003:0458:4018.0024: parse failed [ 198.760101][ T5945] kye 0003:0458:4018.0024: probe with driver kye failed with error -22 [ 198.861144][T10689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2209'. [ 198.870560][ T3574] rc_core: IR keymap rc-hauppauge not found [ 198.877575][ T3574] Registered IR keymap rc-empty [ 198.882899][ T3574] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 198.924741][ T10] usb 3-1: USB disconnect, device number 18 [ 198.926453][ T3574] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 198.983803][ T3574] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 199.023324][ T3574] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input16 [ 199.063779][ T3574] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 199.116266][ T3574] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 199.136811][ T3574] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 199.158056][ T3574] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 199.187989][ T3574] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 199.207462][ T3574] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 199.237423][ T3574] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 199.266373][ T3574] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 199.306692][ T3574] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 199.330521][ T3574] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 199.358470][ T3574] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 199.370346][ T3574] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 199.387081][ T3574] usb 4-1: USB disconnect, device number 18 [ 199.604663][T10717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2221'. [ 199.632402][T10717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2221'. [ 199.892494][T10727] tipc: Enabling of bearer rejected, failed to enable media [ 200.146747][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 200.326896][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 200.339090][ T24] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 200.373115][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.406755][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.424249][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 200.427706][ T5918] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 200.486059][ T24] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 200.495239][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.531116][ T24] usb 2-1: config 0 descriptor?? [ 200.606815][ T5918] usb 5-1: Using ep0 maxpacket: 16 [ 200.623564][ T5918] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 200.642866][ T5918] usb 5-1: config 0 has no interface number 0 [ 200.649646][ T5918] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 200.679473][ T5918] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 200.716120][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 200.724252][ T5918] usb 5-1: Product: syz [ 200.733345][ T5918] usb 5-1: SerialNumber: syz [ 200.754385][ T5918] usb 5-1: config 0 descriptor?? [ 200.785957][ T5918] cm109 5-1:0.8: invalid payload size 208, expected 4 [ 200.816445][ T5918] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input17 [ 200.848925][ T30] audit: type=1326 audit(1752266413.940:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10764 comm="syz.3.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7674d8e929 code=0x7ffc0000 [ 200.949479][ T30] audit: type=1326 audit(1752266413.940:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10764 comm="syz.3.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7674d8e929 code=0x7ffc0000 [ 200.990295][ T24] hid (null): report_id 0 is invalid [ 200.991183][ T30] audit: type=1326 audit(1752266413.950:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10764 comm="syz.3.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f7674d8e929 code=0x7ffc0000 [ 201.049769][ T24] redragon 0003:0C45:760B.0025: report_id 0 is invalid [ 201.073718][ T24] redragon 0003:0C45:760B.0025: item 0 1 1 8 parsing failed [ 201.085852][ T30] audit: type=1326 audit(1752266414.040:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10764 comm="syz.3.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7674d8e929 code=0x7ffc0000 [ 201.107002][ T24] redragon 0003:0C45:760B.0025: probe with driver redragon failed with error -22 [ 201.170076][ T30] audit: type=1326 audit(1752266414.040:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10764 comm="syz.3.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7674d8e929 code=0x7ffc0000 [ 201.216452][ T30] audit: type=1326 audit(1752266414.040:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10768 comm="syz.3.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7674dc11e5 code=0x7ffc0000 [ 201.256679][ T24] usb 2-1: USB disconnect, device number 20 [ 201.325550][ T30] audit: type=1326 audit(1752266414.130:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10770 comm="syz.0.2249" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f96db78e929 code=0x0 [ 201.331228][ T5911] usb 5-1: USB disconnect, device number 15 [ 201.347710][ C0] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71 [ 201.347740][ C0] cm109 5-1:0.8: cm109_submit_ctl: usb_submit_urb (urb_ctl) failed -19 [ 201.405464][ T30] audit: type=1326 audit(1752266414.190:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10768 comm="syz.3.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f7674d8e929 code=0x7ffc0000 [ 201.444485][ T5911] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 202.053612][T10806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2264'. [ 202.086342][ T5911] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 202.250941][ T5911] usb 4-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 202.286104][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.307294][ T5911] usb 4-1: Product: syz [ 202.311505][ T5911] usb 4-1: Manufacturer: syz [ 202.346050][ T5911] usb 4-1: SerialNumber: syz [ 202.366717][ T5911] usb 4-1: config 0 descriptor?? [ 202.382569][ T5911] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 202.556141][ T3574] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 202.576499][ T5934] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 202.672718][T10825] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2274'. [ 202.732444][T10827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2275'. [ 202.750236][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.761967][ T3574] usb 1-1: Using ep0 maxpacket: 32 [ 202.762605][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.778395][ T5934] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 202.778925][ T3574] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 202.791398][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.808219][ T5911] input: sonixb as /devices/platform/dummy_hcd.3/usb4/4-1/input/input18 [ 202.821335][ T5934] usb 5-1: config 0 descriptor?? [ 202.823367][ T3574] usb 1-1: config 0 has no interface number 0 [ 202.840413][ T3574] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 202.855201][ T3574] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.863423][ T3574] usb 1-1: Product: syz [ 202.883201][ T3574] usb 1-1: Manufacturer: syz [ 202.886045][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 202.893005][ T3574] usb 1-1: SerialNumber: syz [ 202.934728][ T3574] usb 1-1: config 0 descriptor?? [ 202.954850][ T3574] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 203.027018][ T5911] usb 4-1: USB disconnect, device number 19 [ 203.059585][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 203.081342][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 203.098959][ T10] usb 3-1: config 4 interface 0 has no altsetting 0 [ 203.124374][ T10] usb 3-1: string descriptor 0 read error: -22 [ 203.143204][ T10] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 203.152968][ T10] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 203.180481][ T10] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 203.197095][ T3574] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 203.214017][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 203.231088][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 203.242704][ T10] usb 3-1: media controller created [ 203.244125][ T3574] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 203.259617][ T5934] cp2112 0003:10C4:EA90.0026: item fetching failed at offset 5/7 [ 203.277984][ T5934] cp2112 0003:10C4:EA90.0026: parse failed [ 203.283980][ T5934] cp2112 0003:10C4:EA90.0026: probe with driver cp2112 failed with error -22 [ 203.308991][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 203.459513][ T5919] usb 5-1: USB disconnect, device number 16 [ 203.661973][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 203.671548][ T5911] usb 1-1: USB disconnect, device number 20 [ 203.687267][ T5934] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 203.688511][ T5911] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 203.724318][ T5911] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 203.738903][ T5911] quatech2 1-1:0.51: device disconnected [ 203.867142][ T5934] usb 2-1: Using ep0 maxpacket: 8 [ 203.895232][ T5934] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 203.916141][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.924300][ T5934] usb 2-1: Product: syz [ 203.944586][ T5934] usb 2-1: Manufacturer: syz [ 203.950659][ T5934] usb 2-1: SerialNumber: syz [ 203.959375][ T5934] usb 2-1: config 0 descriptor?? [ 203.978246][ T5934] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 204.001981][ T5934] usb 2-1: setting power ON [ 204.016842][ T5934] dvb-usb: bulk message failed: -22 (2/0) [ 204.045593][ T5934] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 204.066931][ T5934] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 204.077414][ T5934] usb 2-1: media controller created [ 204.128648][ T5934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 204.162778][ T5934] usb 2-1: selecting invalid altsetting 6 [ 204.170953][ T5934] usb 2-1: digital interface selection failed (-22) [ 204.178381][ T5934] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 204.216868][ T5934] usb 2-1: setting power OFF [ 204.221894][ T5934] dvb-usb: bulk message failed: -22 (2/0) [ 204.245948][ T5934] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 204.272489][ T5934] (NULL device *): no alternate interface [ 204.368310][ T30] audit: type=1326 audit(1752266417.470:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10856 comm="syz.3.2289" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7674d8e929 code=0x0 [ 204.383011][ T5934] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 204.437191][T10823] usb 3-1: dvb_usb_au6610: wlen=3, aborting [ 204.449540][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 204.469812][T10838] usb 3-1: dvb_usb_au6610: wlen=0, aborting [ 204.604096][ T5919] usb 2-1: USB disconnect, device number 21 [ 204.632028][ T10] usb 3-1: USB disconnect, device number 19 [ 204.716138][ T3574] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 204.886326][ T3574] usb 5-1: Using ep0 maxpacket: 8 [ 204.901755][ T3574] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 204.910398][ T3574] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 204.936103][ T3574] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 204.956089][ T3574] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 204.986109][ T3574] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 205.004957][ T3574] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 205.026090][ T3574] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 205.046081][ T3574] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 205.067435][ T3574] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 205.096412][ T3574] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 205.109690][ T3574] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 205.117407][ T3574] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 205.136770][ T3574] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 205.148754][ T3574] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 205.178314][ T3574] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 205.209721][ T3574] usb 5-1: string descriptor 0 read error: -22 [ 205.217947][ T3574] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 205.238525][ T3574] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.273087][ T3574] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 205.454063][T10882] usb usb8: usbfs: process 10882 (syz.3.2301) did not claim interface 0 before use [ 205.506215][ T5919] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 205.539803][ T5934] usb 5-1: USB disconnect, device number 17 [ 205.698955][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.718056][T10890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2305'. [ 205.731785][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.745710][T10890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2305'. [ 205.761234][ T5919] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 205.771421][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.816302][ T5919] usb 2-1: config 0 descriptor?? [ 206.250218][ T5919] samsung 0003:0419:0600.0027: unknown main item tag 0x0 [ 206.274669][ T5919] samsung 0003:0419:0600.0027: unknown main item tag 0x0 [ 206.310626][ T5919] samsung 0003:0419:0600.0027: unknown main item tag 0x0 [ 206.349105][ T5919] samsung 0003:0419:0600.0027: unknown main item tag 0x0 [ 206.360324][ T5919] samsung 0003:0419:0600.0027: unknown main item tag 0x0 [ 206.367206][T10915] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2317'. [ 206.378179][ T5919] samsung 0003:0419:0600.0027: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.1-1/input0 [ 206.494897][ T3574] usb 2-1: USB disconnect, device number 22 [ 206.856649][ T5919] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 207.006444][ T5919] usb 5-1: device descriptor read/64, error -71 [ 207.122248][T10945] netlink: 'syz.1.2330': attribute type 7 has an invalid length. [ 207.131243][T10945] netlink: 'syz.1.2330': attribute type 8 has an invalid length. [ 207.217943][ T30] audit: type=1326 audit(1752266420.310:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10950 comm="syz.2.2333" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec5618e929 code=0x0 [ 207.239770][ C1] vkms_vblank_simulate: vblank timer overrun [ 207.277539][ T5919] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 207.426903][ T5919] usb 5-1: device descriptor read/64, error -71 [ 207.537128][ T5919] usb usb5-port1: attempt power cycle [ 207.566120][ T5934] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 207.736080][ T5934] usb 4-1: Using ep0 maxpacket: 8 [ 207.742771][ T5934] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.756023][ T5934] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 207.772206][ T5934] usb 4-1: config 0 interface 0 has no altsetting 0 [ 207.779080][ T5934] usb 4-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 207.788316][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.798224][ T5934] usb 4-1: config 0 descriptor?? [ 207.896167][ T5919] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 207.896308][ T5911] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 207.916879][ T5919] usb 5-1: device descriptor read/8, error -71 [ 208.066275][ T5911] usb 1-1: Using ep0 maxpacket: 8 [ 208.082215][ T5911] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 208.093498][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.103895][ T5911] usb 1-1: Product: syz [ 208.110930][ T5911] usb 1-1: Manufacturer: syz [ 208.115763][ T5911] usb 1-1: SerialNumber: syz [ 208.126849][ T5911] usb 1-1: config 0 descriptor?? [ 208.142872][ T5911] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244) [ 208.156398][ T5919] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 208.190059][ T5919] usb 5-1: device descriptor read/8, error -71 [ 208.216748][ T5934] chicony 0003:04F2:1421.0028: unbalanced delimiter at end of report description [ 208.230723][ T5934] chicony 0003:04F2:1421.0028: Chicony hid parse failed: -22 [ 208.238655][ T5934] chicony 0003:04F2:1421.0028: probe with driver chicony failed with error -22 [ 208.318849][ T5919] usb usb5-port1: unable to enumerate USB device [ 208.413635][ T5934] usb 4-1: USB disconnect, device number 20 [ 208.596501][ T5919] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 208.746126][ T5919] usb 2-1: Using ep0 maxpacket: 32 [ 208.754673][ T5919] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 208.766234][ T5919] usb 2-1: config 0 has no interface number 0 [ 208.772652][ T5911] radio-usb-si4713 1-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 208.783307][ T5911] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 208.786086][ T5919] usb 2-1: config 0 interface 2 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.806319][ T5919] usb 2-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.815879][ T5911] usb 1-1: USB disconnect, device number 21 [ 208.817707][ T5919] usb 2-1: config 0 interface 2 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.835521][ T5919] usb 2-1: config 0 interface 2 has no altsetting 0 [ 208.843415][ T5919] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 208.858416][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.881720][ T5919] usb 2-1: config 0 descriptor?? [ 208.915405][T10993] netlink: 'syz.2.2351': attribute type 3 has an invalid length. [ 209.332480][ T5919] uclogic 0003:5543:0781.0029: unknown main item tag 0x0 [ 209.341359][ T5919] uclogic 0003:5543:0781.0029: unknown main item tag 0x0 [ 209.362158][ T5919] uclogic 0003:5543:0781.0029: unknown main item tag 0x0 [ 209.382385][ T5919] uclogic 0003:5543:0781.0029: unknown main item tag 0x0 [ 209.392502][ T5919] uclogic 0003:5543:0781.0029: unknown main item tag 0x0 [ 209.409788][ T5919] uclogic 0003:5543:0781.0029: unknown main item tag 0x0 [ 209.430033][ T5919] uclogic 0003:5543:0781.0029: unknown main item tag 0x0 [ 209.453163][ T5919] uclogic 0003:5543:0781.0029: hidraw0: USB HID v0.07 Device [HID 5543:0781] on usb-dummy_hcd.1-1/input2 [ 209.633146][ T5934] usb 2-1: USB disconnect, device number 23 [ 209.692652][T11015] fido_id[11015]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 210.034602][T11034] CUSE: DEVNAME unspecified [ 210.034749][T11032] netlink: 'syz.3.2368': attribute type 63 has an invalid length. [ 210.076101][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 210.105484][T11032] netlink: 'syz.3.2368': attribute type 63 has an invalid length. [ 210.171705][T11038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2370'. [ 210.246998][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 210.254272][ T24] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 210.265872][ T24] usb 5-1: config 0 has no interface number 0 [ 210.287894][ T24] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 210.308723][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.326219][ T24] usb 5-1: Product: syz [ 210.343769][ T24] usb 5-1: Manufacturer: syz [ 210.371735][ T24] usb 5-1: SerialNumber: syz [ 210.395602][ T24] usb 5-1: config 0 descriptor?? [ 210.422705][ T24] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 210.442673][T11048] bridge0: entered promiscuous mode [ 210.449121][T11048] macsec1: entered promiscuous mode [ 210.616943][ T5934] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 210.629173][ T24] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 210.667409][ T24] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 210.789823][ T5934] usb 2-1: Using ep0 maxpacket: 16 [ 210.808865][ T5934] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.823995][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 49 [ 210.844182][ T5934] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 210.863536][T11063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2383'. [ 210.866908][ T5934] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 210.891743][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.907130][ T5934] usb 2-1: Product: syz [ 210.911439][ T5934] usb 2-1: Manufacturer: syz [ 210.919533][ T5934] usb 2-1: SerialNumber: syz [ 211.016517][T11065] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 211.034122][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 211.042704][ T24] usb 5-1: USB disconnect, device number 22 [ 211.062416][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 211.112258][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 211.141614][ T24] quatech2 5-1:0.51: device disconnected [ 211.154224][ T5934] usb 2-1: 0:2 : does not exist [ 211.190125][ T5934] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 211.255710][ T30] audit: type=1326 audit(1752266424.350:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11073 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7674d8e929 code=0x7ffc0000 [ 211.273223][ T5934] usb 2-1: USB disconnect, device number 24 [ 211.369069][ T30] audit: type=1326 audit(1752266424.380:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11073 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7674d8e929 code=0x7ffc0000 [ 211.391410][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.423224][ T7292] udevd[7292]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.504312][ T30] audit: type=1326 audit(1752266424.410:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11073 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f7674d8e929 code=0x7ffc0000 [ 211.526491][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.563451][ T30] audit: type=1326 audit(1752266424.410:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11073 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7674d8e929 code=0x7ffc0000 [ 211.605413][ T30] audit: type=1326 audit(1752266424.410:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11073 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7674d8e929 code=0x7ffc0000 [ 211.631016][ T30] audit: type=1326 audit(1752266424.410:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11073 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f7674d8e929 code=0x7ffc0000 [ 211.711331][ T30] audit: type=1326 audit(1752266424.420:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11073 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7674d8e929 code=0x7ffc0000 [ 212.229614][T11110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2404'. [ 212.697783][T11134] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.707345][T11134] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.716272][T11134] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.725448][T11134] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.798368][ T24] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 212.978154][ T24] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 213.006245][ T24] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 213.030590][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.069877][ T24] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 213.098045][T11147] netlink: 'syz.1.2421': attribute type 1 has an invalid length. [ 213.296150][ T5911] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 213.460464][ T5911] usb 1-1: Using ep0 maxpacket: 16 [ 213.478524][ T5911] usb 1-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.506140][ T5911] usb 1-1: config 0 interface 0 has no altsetting 0 [ 213.517781][ T5911] usb 1-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 213.548012][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.568179][T11164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.588499][ T5911] usb 1-1: config 0 descriptor?? [ 214.051286][ T5911] playstation 0003:054C:0BA0.002A: unknown main item tag 0x0 [ 214.083457][ T5911] playstation 0003:054C:0BA0.002A: hidraw0: USB HID v7d.d9 Device [HID 054c:0ba0] on usb-dummy_hcd.0-1/input0 [ 214.127558][ T24] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 214.145244][ T24] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 214.172123][ T24] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 214.222490][ T5911] playstation 0003:054C:0BA0.002A: Failed to retrieve feature with reportID 18: -71 [ 214.252924][ T5911] playstation 0003:054C:0BA0.002A: Failed to retrieve DualShock4 pairing info: -71 [ 214.289603][ T5911] playstation 0003:054C:0BA0.002A: Failed to get MAC address from DualShock4 [ 214.310267][ T5911] playstation 0003:054C:0BA0.002A: Failed to create dualshock4. [ 214.349402][ T5911] playstation 0003:054C:0BA0.002A: probe with driver playstation failed with error -71 [ 214.402818][ T24] usb 3-1: USB disconnect, device number 20 [ 214.433466][ T5911] usb 1-1: USB disconnect, device number 22 [ 214.465401][T11200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2447'. [ 214.478749][T11201] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.497315][T11200] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 214.505189][T11200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.951004][T11222] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 214.951004][T11222] The task syz.0.2456 (11222) triggered the difference, watch for misbehavior. [ 215.006434][ T5911] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 215.206740][ T5911] usb 4-1: Using ep0 maxpacket: 32 [ 215.218166][ T5911] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 215.246063][ T5911] usb 4-1: config 0 has no interface number 0 [ 215.261477][ T5911] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 215.279100][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.300511][ T5911] usb 4-1: Product: syz [ 215.315638][ T5911] usb 4-1: Manufacturer: syz [ 215.331609][ T5911] usb 4-1: SerialNumber: syz [ 215.352120][ T5911] usb 4-1: config 0 descriptor?? [ 215.380104][ T5911] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 215.400051][ T5911] usb 4-1: selecting invalid altsetting 1 [ 215.418558][ T5911] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 215.461372][ T5911] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 215.495714][ T5911] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 215.514997][ T5911] usb 4-1: media controller created [ 215.622179][ T5911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 215.753691][ T5911] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 215.779236][ T5911] zl10353_read_register: readreg error (reg=127, ret==-71) [ 215.816956][ T5911] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 215.915573][ T5911] usb 4-1: USB disconnect, device number 21 [ 216.088204][T11256] pimreg3: entered allmulticast mode [ 216.476422][T11272] tipc: Failed to obtain node identity [ 216.481970][T11272] tipc: Enabling of bearer rejected, failed to enable media [ 216.936346][ T5919] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 217.107448][ T5919] usb 5-1: Using ep0 maxpacket: 16 [ 217.118195][ T5919] usb 5-1: config 4 has an invalid interface number: 51 but max is 0 [ 217.134453][ T5919] usb 5-1: config 4 has no interface number 0 [ 217.149039][ T5919] usb 5-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 217.162926][T11307] Invalid logical block size (-1) [ 217.176275][ T5919] usb 5-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 217.198945][ T5919] usb 5-1: config 4 interface 51 has no altsetting 0 [ 217.232510][ T5919] usb 5-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 217.260215][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.306105][ T5919] usb 5-1: Product: syz [ 217.310421][ T5919] usb 5-1: Manufacturer: syz [ 217.315033][ T5919] usb 5-1: SerialNumber: syz [ 217.370742][T11284] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 217.382262][T11284] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 217.621663][ T5919] cdc_eem 5-1:4.51: probe with driver cdc_eem failed with error -71 [ 217.677547][ T5919] usb 5-1: USB disconnect, device number 23 [ 218.126355][ T5911] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 218.311183][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 218.335618][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.373443][ T5911] usb 4-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 218.395263][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.439493][ T5911] usb 4-1: config 0 descriptor?? [ 218.920864][ T5911] logitech-djreceiver 0003:046D:C52F.002B: hidraw0: USB HID v0.00 Device [HID 046d:c52f] on usb-dummy_hcd.3-1/input0 [ 219.109290][ T5919] usb 4-1: USB disconnect, device number 22 [ 219.411903][T11407] VFS: Mount too revealing [ 219.461469][T11409] netlink: 'syz.0.2544': attribute type 2 has an invalid length. [ 219.473826][T11409] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2544'. [ 220.248097][T11437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2558'. [ 220.891932][T11468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2571'. [ 220.904861][T11468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2571'. [ 221.438490][T11496] tipc: Enabling of bearer rejected, failed to enable media [ 222.074796][ T5919] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 222.140119][T11528] sg_read: process 1106 (syz.3.2600) changed security contexts after opening file descriptor, this is not allowed. [ 222.272155][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.329705][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.350057][ T5919] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 222.390407][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.471364][ T5919] usb 2-1: config 0 descriptor?? [ 222.757304][T11550] netlink: 'syz.3.2611': attribute type 5 has an invalid length. [ 222.776789][T11550] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2611'. [ 222.946549][ T5919] lg-g15 0003:046D:C222.002C: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 223.118524][ T5919] usb 2-1: USB disconnect, device number 25 [ 223.130007][ T5934] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 223.220893][T11565] fido_id[11565]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 223.304631][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 223.330738][ T5934] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 223.356769][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 223.378432][ T5934] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 223.409084][ T5934] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 223.428561][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.467108][ T5934] usb 1-1: config 0 descriptor?? [ 223.705188][ T5934] hdpvr 1-1:0.0: firmware version 0x8 dated ¥)†#´–¶jnÛý [ 224.147628][T11589] netlink: 'syz.3.2629': attribute type 5 has an invalid length. [ 224.216832][ T5934] hdpvr 1-1:0.0: Could not setup controls [ 224.223375][ T5934] hdpvr 1-1:0.0: registering videodev failed [ 224.258191][T11591] netlink: 'syz.4.2630': attribute type 3 has an invalid length. [ 224.301566][T11591] netlink: 'syz.4.2630': attribute type 1 has an invalid length. [ 224.304457][ T5934] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -71 [ 224.336792][T11591] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.2630'. [ 224.362509][ T5934] usb 1-1: USB disconnect, device number 23 [ 225.030087][ T5934] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 225.226485][ T5934] usb 5-1: Using ep0 maxpacket: 32 [ 225.279620][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.297990][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.316076][ T5934] usb 5-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 225.369094][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.461684][ T5934] usb 5-1: config 0 descriptor?? [ 225.555215][T11626] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 225.612923][T11626] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 225.924958][ T5934] saitek 0003:06A3:0621.002D: hidraw0: USB HID v0.00 Device [HID 06a3:0621] on usb-dummy_hcd.4-1/input0 [ 225.946261][T11636] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2652'. [ 225.998259][T11638] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2653'. [ 226.132474][ T5945] usb 5-1: USB disconnect, device number 24 [ 226.174148][T11642] fido_id[11642]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 226.320542][T11652] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 226.372949][T11652] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 226.478457][T11658] program syz.2.2662 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.711414][T11670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2668'. [ 226.766957][T11670] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 226.856076][ T5945] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 227.009778][ T5945] usb 3-1: Using ep0 maxpacket: 32 [ 227.025228][ T5945] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.067124][ T5945] usb 3-1: config 0 interface 0 has no altsetting 0 [ 227.073799][ T5945] usb 3-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 227.101877][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.126176][ T5919] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 227.139144][ T5945] usb 3-1: config 0 descriptor?? [ 227.318146][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 227.350907][ T5919] usb 2-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 227.386072][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.430688][ T5919] usb 2-1: config 0 descriptor?? [ 227.602975][ T5945] elecom 0003:056E:00FD.002E: unknown main item tag 0x0 [ 227.642385][ T5945] elecom 0003:056E:00FD.002E: unknown main item tag 0x0 [ 227.661347][ T5945] elecom 0003:056E:00FD.002E: unknown main item tag 0x0 [ 227.674390][ T5945] elecom 0003:056E:00FD.002E: unknown main item tag 0x0 [ 227.700220][ T5945] elecom 0003:056E:00FD.002E: unknown main item tag 0x0 [ 227.721574][ T5945] elecom 0003:056E:00FD.002E: hidraw0: USB HID v8.00 Device [HID 056e:00fd] on usb-dummy_hcd.2-1/input0 [ 227.809514][ T5945] usb 3-1: USB disconnect, device number 21 [ 227.882923][ T5919] aquacomputer_d5next 0003:0C70:F011.002F: hidraw0: USB HID v0.00 Device [HID 0c70:f011] on usb-dummy_hcd.1-1/input0 [ 227.897434][T11705] fido_id[11705]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 227.916242][ T5911] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 228.084202][ T5919] usb 2-1: USB disconnect, device number 26 [ 228.099252][ T5911] usb 5-1: Using ep0 maxpacket: 16 [ 228.127880][ T5911] usb 5-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.148625][ T5911] usb 5-1: config 0 interface 0 has no altsetting 0 [ 228.150259][T11708] fido_id[11708]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 228.170936][ T5911] usb 5-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 228.205925][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.246963][ T5911] usb 5-1: config 0 descriptor?? [ 228.676729][ T5919] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 228.691260][ T5911] microsoft 0003:045E:009D.0030: hidraw0: USB HID v0.07 Device [HID 045e:009d] on usb-dummy_hcd.4-1/input0 [ 228.730957][ T5911] microsoft 0003:045E:009D.0030: no inputs found [ 228.753612][ T5911] microsoft 0003:045E:009D.0030: could not initialize ff, continuing anyway [ 228.849872][ T5919] usb 1-1: Using ep0 maxpacket: 32 [ 228.892788][ T5919] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.898119][ T5911] usb 5-1: USB disconnect, device number 25 [ 228.924872][ T5919] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.941387][ T5919] usb 1-1: config 0 interface 0 has no altsetting 0 [ 228.952089][ T5919] usb 1-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 228.963365][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.007291][ T5919] usb 1-1: config 0 descriptor?? [ 229.465381][ T5919] macally 0003:060B:0001.0031: collection stack underflow [ 229.496219][ T5919] macally 0003:060B:0001.0031: item 0 1 0 12 parsing failed [ 229.504356][ T5919] macally 0003:060B:0001.0031: probe with driver macally failed with error -22 [ 229.599504][T11743] bridge0: Device is already in use. [ 229.716339][ T5919] usb 1-1: USB disconnect, device number 24 [ 229.744296][T11746] netlink: 'syz.4.2704': attribute type 29 has an invalid length. [ 229.775859][T11746] netlink: 'syz.4.2704': attribute type 29 has an invalid length. [ 230.179543][ T5919] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 230.351650][ T5919] usb 2-1: Using ep0 maxpacket: 16 [ 230.386970][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.411409][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.449816][ T5919] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 230.476185][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.538044][ T5919] usb 2-1: config 0 descriptor?? [ 230.939689][ T5918] IPVS: starting estimator thread 0... [ 230.967836][ T5919] lua 0003:1E7D:2C2E.0032: item fetching failed at offset 1/5 [ 230.993780][ T5919] lua 0003:1E7D:2C2E.0032: parse failed [ 231.006674][ T5919] lua 0003:1E7D:2C2E.0032: probe with driver lua failed with error -22 [ 231.046889][T11792] IPVS: using max 28 ests per chain, 67200 per kthread [ 231.108983][T11797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2727'. [ 231.129666][T11797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2727'. [ 231.169368][T11797] netlink: 'syz.0.2727': attribute type 15 has an invalid length. [ 231.192483][ T5919] usb 2-1: USB disconnect, device number 27 [ 232.389290][T11857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2755'. [ 232.409183][T11857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2755'. [ 232.429716][T11857] netlink: 'syz.3.2755': attribute type 7 has an invalid length. [ 232.954950][T11880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2767'. [ 233.426065][ T5918] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 233.621853][ T5918] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 233.630919][ T5918] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 233.650580][ T5918] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 233.678352][T11917] netlink: 'syz.4.2784': attribute type 24 has an invalid length. [ 233.691618][ T5918] usb 4-1: config 220 has no interface number 2 [ 233.710167][ T5918] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 233.730944][ T5918] usb 4-1: config 220 interface 0 has no altsetting 0 [ 233.740246][ T5918] usb 4-1: config 220 interface 76 has no altsetting 0 [ 233.753442][ T5918] usb 4-1: config 220 interface 1 has no altsetting 0 [ 233.763511][ T5918] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 233.785424][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.805252][ T5918] usb 4-1: Product: syz [ 233.810480][ T5918] usb 4-1: Manufacturer: syz [ 233.815946][ T5918] usb 4-1: SerialNumber: syz [ 234.063631][ T5918] usb 4-1: selecting invalid altsetting 0 [ 234.094232][ T5918] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 234.106053][ T5918] usb 4-1: No valid video chain found. [ 234.141161][ T5918] usb 4-1: selecting invalid altsetting 0 [ 234.161066][ T5918] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 234.190778][ T5918] usb 4-1: USB disconnect, device number 23 [ 234.976875][ T5911] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 235.149626][ T5911] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 235.179294][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.213171][ T5911] usb 4-1: Product: syz [ 235.222009][ T5911] usb 4-1: Manufacturer: syz [ 235.248372][ T5911] usb 4-1: SerialNumber: syz [ 235.273742][ T5911] usb 4-1: config 0 descriptor?? [ 235.635523][T11998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2821'. [ 235.671444][T11998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2821'. [ 235.687567][T12000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2822'. [ 235.929665][ T5911] usb 4-1: Firmware version (0.0) predates our first public release. [ 235.964556][ T5911] usb 4-1: Please update to version 0.2 or newer [ 236.061504][ T5911] usb 4-1: USB disconnect, device number 24 [ 236.254524][ T30] audit: type=1326 audit(1752266449.350:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12023 comm="syz.2.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5618e929 code=0x7ffc0000 [ 236.313786][ T30] audit: type=1326 audit(1752266449.350:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12023 comm="syz.2.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5618e929 code=0x7ffc0000 [ 236.402678][ T30] audit: type=1326 audit(1752266449.350:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12023 comm="syz.2.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fec5618e929 code=0x7ffc0000 [ 236.497231][ T30] audit: type=1326 audit(1752266449.350:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12023 comm="syz.2.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5618e929 code=0x7ffc0000 [ 236.582840][ T30] audit: type=1326 audit(1752266449.350:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12023 comm="syz.2.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5618e929 code=0x7ffc0000 [ 236.654865][ T30] audit: type=1326 audit(1752266449.350:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12023 comm="syz.2.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fec5618e929 code=0x7ffc0000 [ 236.729466][ T30] audit: type=1326 audit(1752266449.350:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12023 comm="syz.2.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5618e929 code=0x7ffc0000 [ 236.783626][ T30] audit: type=1326 audit(1752266449.350:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12023 comm="syz.2.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5618e929 code=0x7ffc0000 [ 237.634802][T12092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2864'. [ 237.686679][ T5918] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 237.873516][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 237.905584][ T5918] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 237.971325][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 238.019161][ T5918] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 238.042997][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.070084][ T5918] usb 1-1: Product: syz [ 238.085616][ T5918] usb 1-1: Manufacturer: syz [ 238.107784][ T5918] usb 1-1: SerialNumber: syz [ 238.127739][ T5918] usb 1-1: config 0 descriptor?? [ 238.133448][T12086] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 238.146289][T12086] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 238.173863][ T5918] usb 1-1: ucan: probing device on interface #0 [ 238.260392][ T30] audit: type=1800 audit(1752266451.340:137): pid=12118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2876" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 238.606180][ T5934] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 238.664148][ T5918] usb 1-1: ucan: device reported invalid tx-fifo size [ 238.681756][ T5918] usb 1-1: ucan: probe failed; try to update the device firmware [ 238.770292][ T5934] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 238.789959][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.806102][ T5934] usb 3-1: Product: syz [ 238.824269][ T5934] usb 3-1: Manufacturer: syz [ 238.842835][ T5934] usb 3-1: SerialNumber: syz [ 238.876267][ T5934] usb 3-1: config 0 descriptor?? [ 238.894262][ T10] usb 1-1: USB disconnect, device number 25 [ 238.907033][ T5934] ch341 3-1:0.0: ch341-uart converter detected [ 239.194916][T12143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.296215][ T5911] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 239.459546][ T5911] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 239.490751][ T5934] usb 3-1: failed to send control message: -71 [ 239.502980][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 239.508048][ T5934] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 239.535355][ T5911] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 239.540519][ T5934] usb 3-1: USB disconnect, device number 22 [ 239.569815][ T5911] usb 5-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 239.583473][ T5934] ch341 3-1:0.0: device disconnected [ 239.600558][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.616161][ T3574] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 239.661153][ T5911] usb 5-1: config 0 descriptor?? [ 239.797267][ T3574] usb 2-1: Using ep0 maxpacket: 32 [ 239.809913][ T3574] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.809942][ T3574] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 239.809993][ T3574] usb 2-1: config 0 interface 0 has no altsetting 0 [ 239.810027][ T3574] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 239.810049][ T3574] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.827712][ T3574] usb 2-1: config 0 descriptor?? [ 240.119113][ T5911] a4tech 0003:09DA:001A.0033: unknown main item tag 0x0 [ 240.133074][ T5911] a4tech 0003:09DA:001A.0033: unknown main item tag 0x0 [ 240.160996][ T5911] a4tech 0003:09DA:001A.0033: unknown main item tag 0x0 [ 240.184260][ T5911] a4tech 0003:09DA:001A.0033: unknown main item tag 0x0 [ 240.219695][ T5911] a4tech 0003:09DA:001A.0033: unknown main item tag 0x0 [ 240.239596][ T5911] a4tech 0003:09DA:001A.0033: unknown main item tag 0x0 [ 240.253874][ T5911] a4tech 0003:09DA:001A.0033: unknown main item tag 0x0 [ 240.280744][ T5911] a4tech 0003:09DA:001A.0033: hidraw0: USB HID v80.04 Device [HID 09da:001a] on usb-dummy_hcd.4-1/input0 [ 240.351476][ T3574] corsair-cpro 0003:1B1C:0C10.0034: hidraw1: USB HID v0.00 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 240.375960][ T5934] usb 5-1: USB disconnect, device number 26 [ 240.470688][T12174] fido_id[12174]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 240.502759][ T3574] corsair-cpro 0003:1B1C:0C10.0034: probe with driver corsair-cpro failed with error -38 [ 240.572274][ T3574] usb 2-1: USB disconnect, device number 28 [ 241.655117][T12233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.431126][ T30] audit: type=1326 audit(1752266455.520:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12260 comm="syz.2.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5618e929 code=0x7ffc0000 [ 242.515457][ T30] audit: type=1326 audit(1752266455.520:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12260 comm="syz.2.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5618e929 code=0x7ffc0000 [ 242.589297][ T30] audit: type=1326 audit(1752266455.520:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12260 comm="syz.2.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fec5618e929 code=0x7ffc0000 [ 242.687854][ T30] audit: type=1326 audit(1752266455.520:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12260 comm="syz.2.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5618e929 code=0x7ffc0000 [ 242.747326][ T30] audit: type=1326 audit(1752266455.520:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12260 comm="syz.2.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5618e929 code=0x7ffc0000 [ 242.968789][ T10] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 243.128818][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.145604][ T10] usb 1-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 243.155297][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.190564][T12286] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2953'. [ 243.217437][ T10] usb 1-1: config 0 descriptor?? [ 243.320014][ T30] audit: type=1326 audit(1752266456.420:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12292 comm="syz.2.2956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5618e929 code=0x7ffc0000 [ 243.389758][ T30] audit: type=1326 audit(1752266456.420:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12292 comm="syz.2.2956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5618e929 code=0x7ffc0000 [ 243.454911][ T30] audit: type=1326 audit(1752266456.420:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12292 comm="syz.2.2956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fec5618e929 code=0x7ffc0000 [ 243.482956][ T30] audit: type=1326 audit(1752266456.420:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12292 comm="syz.2.2956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5618e929 code=0x7ffc0000 [ 243.526367][ T30] audit: type=1326 audit(1752266456.420:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12292 comm="syz.2.2956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5618e929 code=0x7ffc0000 [ 243.649389][ T10] sony 0003:1345:3008.0035: unknown main item tag 0x0 [ 243.658968][ T10] sony 0003:1345:3008.0035: item fetching failed at offset 4/5 [ 243.667227][ T10] sony 0003:1345:3008.0035: parse failed [ 243.673835][ T10] sony 0003:1345:3008.0035: probe with driver sony failed with error -22 [ 243.696407][ T5911] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 243.849569][ T3574] usb 1-1: USB disconnect, device number 26 [ 243.859342][ T5911] usb 2-1: Using ep0 maxpacket: 16 [ 243.877030][ T5918] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 243.888503][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.901878][ T5911] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 243.918118][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.931669][ T5911] usb 2-1: config 0 descriptor?? [ 244.050317][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.072526][ T5918] usb 3-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 244.094376][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.118179][ T5918] usb 3-1: config 0 descriptor?? [ 244.358956][ T5911] apple 0003:05AC:024B.0036: unknown main item tag 0x6 [ 244.365884][ T5911] apple 0003:05AC:024B.0036: invalid report_size 24312 [ 244.397443][ T5911] apple 0003:05AC:024B.0036: item 0 2 1 7 parsing failed [ 244.405265][ T5911] apple 0003:05AC:024B.0036: parse failed [ 244.419325][ T5911] apple 0003:05AC:024B.0036: probe with driver apple failed with error -22 [ 244.538983][ T5918] logitech-hidpp-device 0003:046D:C262.0037: unknown global tag 0xd [ 244.554653][ T5918] logitech-hidpp-device 0003:046D:C262.0037: item 0 2 1 13 parsing failed [ 244.577950][ T5918] logitech-hidpp-device 0003:046D:C262.0037: hidpp_probe:parse failed [ 244.582498][ T5911] usb 2-1: USB disconnect, device number 29 [ 244.592152][ T5918] logitech-hidpp-device 0003:046D:C262.0037: probe with driver logitech-hidpp-device failed with error -22 [ 244.764556][ T5918] usb 3-1: USB disconnect, device number 23 [ 245.638449][T12369] hsr0: entered promiscuous mode [ 245.644163][T12369] macvtap1: entered promiscuous mode [ 245.666343][T12369] macvtap1: entered allmulticast mode [ 245.671770][T12369] hsr0: entered allmulticast mode [ 245.684508][T12369] hsr_slave_0: entered allmulticast mode [ 245.690816][T12369] hsr_slave_1: entered allmulticast mode [ 245.709579][T12371] netlink: 'syz.3.2993': attribute type 1 has an invalid length. [ 245.729641][T12371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.739330][T12369] hsr0: left allmulticast mode [ 245.745061][T12369] hsr_slave_0: left allmulticast mode [ 245.757948][T12369] hsr_slave_1: left allmulticast mode [ 245.826185][ T5918] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 246.018236][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.040848][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.067033][ T5918] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 246.088294][ T5945] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 246.095329][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.148740][ T5918] usb 3-1: config 0 descriptor?? [ 246.281317][ T5945] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 246.294352][ T5945] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 246.303664][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.315665][ T5945] usb 5-1: config 0 descriptor?? [ 246.350265][ T5934] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 246.437145][ T5911] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 246.507719][ T5934] usb 4-1: Using ep0 maxpacket: 32 [ 246.514780][ T5934] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 246.523079][ T5934] usb 4-1: config 0 has no interface number 0 [ 246.530221][ T6042] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 246.532826][ T5934] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 246.547894][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.555938][ T5934] usb 4-1: Product: syz [ 246.560175][ T5934] usb 4-1: Manufacturer: syz [ 246.564800][ T5934] usb 4-1: SerialNumber: syz [ 246.574715][ T5934] usb 4-1: config 0 descriptor?? [ 246.581405][ T5918] hid-rmi 0003:06CB:81A7.0038: unknown main item tag 0x0 [ 246.588787][ T5918] hid-rmi 0003:06CB:81A7.0038: unknown main item tag 0x0 [ 246.593604][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 246.596420][ T5918] hid-rmi 0003:06CB:81A7.0038: unknown main item tag 0x0 [ 246.608226][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.617401][ T5934] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 246.625385][ T5911] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 246.645413][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.646152][ T5918] hid-rmi 0003:06CB:81A7.0038: unknown main item tag 0x0 [ 246.664005][ T5934] usb 4-1: selecting invalid altsetting 1 [ 246.665624][ T5911] usb 1-1: config 0 descriptor?? [ 246.670042][ T5934] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 246.671911][ T5918] hid-rmi 0003:06CB:81A7.0038: unknown main item tag 0x0 [ 246.691128][ T5934] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 246.699468][ T6042] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 246.712775][ T5934] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 246.712790][ T6042] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 246.724719][ T5934] usb 4-1: media controller created [ 246.732463][ T6042] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 246.749309][ T6042] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.750068][ T5918] hid-rmi 0003:06CB:81A7.0038: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.2-1/input0 [ 246.787482][ T5945] aquacomputer_d5next 0003:0C70:F00B.0039: hidraw1: USB HID v1.01 Device [HID 0c70:f00b] on usb-dummy_hcd.4-1/input0 [ 246.800195][ T5918] usb 3-1: USB disconnect, device number 24 [ 246.831428][T12389] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 246.836402][ T5934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 246.860391][ T6042] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 246.933579][T12390] fido_id[12390]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 246.985694][ T5919] usb 5-1: USB disconnect, device number 27 [ 247.110574][T12391] fido_id[12391]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 247.141903][ T5911] steelseries 0003:1038:1410.003A: unbalanced collection at end of report description [ 247.182027][ T6042] usb 2-1: USB disconnect, device number 30 [ 247.190094][ T5911] steelseries 0003:1038:1410.003A: parse failed [ 247.201718][ T5911] steelseries 0003:1038:1410.003A: probe with driver steelseries failed with error -22 [ 247.343909][ T5911] usb 1-1: USB disconnect, device number 27 [ 247.621326][T12395] netlink: 'syz.4.3003': attribute type 2 has an invalid length. [ 247.638930][T12395] netlink: 1184 bytes leftover after parsing attributes in process `syz.4.3003'. [ 247.789730][T12402] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3007'. [ 247.871239][T12406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3010'. [ 247.886503][T12383] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 247.926446][ T5934] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 247.956469][ T5934] zl10353_read_register: readreg error (reg=127, ret==-71) [ 247.987108][ T5934] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 248.068457][T12413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3013'. [ 248.112203][ T5934] usb 4-1: USB disconnect, device number 25 [ 249.364723][T12458] netlink: 'syz.3.3035': attribute type 6 has an invalid length. [ 251.590058][T12536] netlink: 356 bytes leftover after parsing attributes in process `syz.3.3070'. [ 251.646101][T12536] netlink: 356 bytes leftover after parsing attributes in process `syz.3.3070'. [ 253.086921][ T10] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 253.146108][ T5919] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 253.172832][T12605] geneve2: entered promiscuous mode [ 253.280528][ T10] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 253.306202][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.322425][ T5919] usb 5-1: Using ep0 maxpacket: 32 [ 253.348966][ T5919] usb 5-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 253.360695][ T10] usb 1-1: config 0 descriptor?? [ 253.387704][ T10] cp210x 1-1:0.0: cp210x converter detected [ 253.393923][ T5919] usb 5-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.420985][ T5919] usb 5-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 253.441105][ T5919] usb 5-1: config 0 interface 0 has no altsetting 0 [ 253.441246][T12613] xt_CT: No such helper "snmp" [ 253.448686][ T5919] usb 5-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 253.462363][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.507380][ T5919] usb 5-1: config 0 descriptor?? [ 253.792761][ T10] usb 1-1: cp210x converter now attached to ttyUSB0 [ 253.935301][ T5919] zeroplus 0003:0C12:0030.003B: item fetching failed at offset 5/7 [ 253.966763][ T5919] zeroplus 0003:0C12:0030.003B: parse failed [ 253.972851][ T5919] zeroplus 0003:0C12:0030.003B: probe with driver zeroplus failed with error -22 [ 254.001797][ T10] usb 1-1: USB disconnect, device number 28 [ 254.037635][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 254.067309][ T10] cp210x 1-1:0.0: device disconnected [ 254.167691][ T5919] usb 5-1: USB disconnect, device number 28 [ 254.297484][T12648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3123'. [ 254.946171][ T5919] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 255.039492][ T10] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 255.126247][ T3574] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 255.130139][ T5919] usb 3-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.153811][ T5919] usb 3-1: config 0 interface 0 has no altsetting 0 [ 255.161264][ T5919] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 255.176508][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.189102][ T5919] usb 3-1: config 0 descriptor?? [ 255.244073][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.275515][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.278967][ T3574] usb 1-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.303096][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.320195][ T3574] usb 1-1: config 0 interface 0 has no altsetting 0 [ 255.321432][ T10] usb 5-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 255.337759][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.354242][ T3574] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 255.362287][ T10] usb 5-1: config 0 descriptor?? [ 255.386236][ T3574] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.410769][ T3574] usb 1-1: config 0 descriptor?? [ 255.624706][ T5919] kye 0003:0458:5013.003C: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 255.671115][ T5919] kye 0003:0458:5013.003C: hidraw0: USB HID v8.00 Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 255.740873][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.747547][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.755134][ T5919] kye 0003:0458:5013.003C: tablet-enabling feature report not found [ 255.775412][ T5919] kye 0003:0458:5013.003C: tablet enabling failed [ 255.853951][ T3574] kye 0003:0458:5013.003E: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 255.867875][ T5919] usb 3-1: USB disconnect, device number 25 [ 255.892631][ T3574] kye 0003:0458:5013.003E: hidraw0: USB HID v8.00 Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 255.924379][T12703] fido_id[12703]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 255.944226][ T3574] kye 0003:0458:5013.003E: tablet-enabling feature report not found [ 255.953711][ T3574] kye 0003:0458:5013.003E: tablet enabling failed [ 255.989201][ T10] usb 5-1: USB disconnect, device number 29 [ 256.094438][ T5919] usb 1-1: USB disconnect, device number 29 [ 256.151340][T12705] fido_id[12705]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 256.875959][T12719] vlan2: entered allmulticast mode [ 256.903210][T12719] vlan1: entered allmulticast mode [ 256.939858][T12719] veth0_vlan: entered allmulticast mode [ 257.295084][T12735] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3165'. [ 257.352839][T12735] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 257.718583][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 257.718600][ T30] audit: type=1326 audit(1752266470.810:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12750 comm="syz.4.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c1b8e929 code=0x7ffc0000 [ 257.845332][ T30] audit: type=1326 audit(1752266470.820:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12750 comm="syz.4.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fc3c1b8e929 code=0x7ffc0000 [ 257.918298][ T30] audit: type=1326 audit(1752266470.820:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12750 comm="syz.4.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c1b8e929 code=0x7ffc0000 [ 258.006630][ T30] audit: type=1326 audit(1752266470.820:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12750 comm="syz.4.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c1b8e929 code=0x7ffc0000 [ 258.101670][ T30] audit: type=1326 audit(1752266470.820:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12750 comm="syz.4.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7fc3c1b8e929 code=0x7ffc0000 [ 258.198684][ T30] audit: type=1326 audit(1752266470.820:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12750 comm="syz.4.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c1b8e929 code=0x7ffc0000 [ 258.242577][T12767] netlink: 'syz.4.3180': attribute type 2 has an invalid length. [ 258.306477][ T30] audit: type=1326 audit(1752266470.820:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12750 comm="syz.4.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c1b8e929 code=0x7ffc0000 [ 258.430904][ T30] audit: type=1326 audit(1752266471.490:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12770 comm="syz.3.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7674d8e929 code=0x7ffc0000 [ 258.487501][T12774] netlink: 'syz.4.3184': attribute type 12 has an invalid length. [ 258.492515][T12694] syz.1.3146 (12694): drop_caches: 1 [ 258.516161][T12774] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.3184'. [ 258.536061][ T30] audit: type=1326 audit(1752266471.520:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12770 comm="syz.3.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7674d8e929 code=0x7ffc0000 [ 258.629121][ T30] audit: type=1326 audit(1752266471.520:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12770 comm="syz.3.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7674d8e929 code=0x7ffc0000 [ 258.956371][ T5934] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 258.996075][ T5919] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 259.113351][T12800] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3196'. [ 259.124388][T12799] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3196'. [ 259.138028][ T5934] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.148895][ T5934] usb 3-1: config 0 interface 0 has no altsetting 0 [ 259.157875][ T5919] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 259.176159][ T5934] usb 3-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 259.185247][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.193913][ T5919] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 259.204976][ T5919] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 259.219144][ T5934] usb 3-1: config 0 descriptor?? [ 259.237032][ T5919] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 259.255539][ T5919] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 259.271462][ T5919] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 259.282937][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 259.287805][ T3574] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 259.293873][ T5919] usb 2-1: Product: syz [ 259.305473][ T5919] usb 2-1: Manufacturer: syz [ 259.325502][ T5919] cdc_wdm 2-1:1.0: skipping garbage [ 259.333833][ T5919] cdc_wdm 2-1:1.0: skipping garbage [ 259.346586][ T5919] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 259.352684][ T5919] cdc_wdm 2-1:1.0: Unknown control protocol [ 259.467999][ T3574] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.493335][ T3574] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.533548][T12807] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 259.533548][T12807] program syz.3.3199 not setting count and/or reply_len properly [ 259.535518][ T3574] usb 1-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 259.588541][ T10] usb 2-1: USB disconnect, device number 31 [ 259.596194][ T3574] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.633348][ T3574] usb 1-1: config 0 descriptor?? [ 259.690808][ T5934] kye 0003:0458:5015.003F: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 259.745747][ T5934] kye 0003:0458:5015.003F: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.2-1/input0 [ 259.764676][ T5934] kye 0003:0458:5015.003F: tablet-enabling feature report not found [ 259.773490][ T5934] kye 0003:0458:5015.003F: tablet enabling failed [ 259.853901][T12814] netlink: 'syz.3.3202': attribute type 5 has an invalid length. [ 259.919881][ T5934] usb 3-1: USB disconnect, device number 26 [ 260.119582][T12812] fido_id[12812]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 260.138410][ T3574] stadia 0003:18D1:9400.0040: unknown main item tag 0x0 [ 260.155862][ T3574] stadia 0003:18D1:9400.0040: unknown main item tag 0x0 [ 260.176610][ T3574] stadia 0003:18D1:9400.0040: unknown main item tag 0x0 [ 260.183738][ T3574] stadia 0003:18D1:9400.0040: unknown main item tag 0x0 [ 260.205109][ T3574] stadia 0003:18D1:9400.0040: unknown main item tag 0x0 [ 260.223759][ T3574] stadia 0003:18D1:9400.0040: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.0-1/input0 [ 260.264838][ T3574] stadia 0003:18D1:9400.0040: no inputs found [ 260.281407][ T3574] stadia 0003:18D1:9400.0040: force feedback init failed [ 260.319080][ T3574] usb 1-1: USB disconnect, device number 30 [ 260.351645][T12822] fido_id[12822]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 260.937149][ T6042] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 261.118010][ T6042] usb 5-1: Using ep0 maxpacket: 32 [ 261.135429][ T6042] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 261.155930][ T6042] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 261.175224][ T6042] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 261.195868][ T6042] usb 5-1: config 1 has no interface number 0 [ 261.214449][ T6042] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 261.233679][ T6042] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 261.285159][ T6042] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 261.304665][ T6042] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.352480][ T6042] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 261.491373][T12869] netlink: 'syz.0.3227': attribute type 27 has an invalid length. [ 261.542805][ T6042] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 261.582319][T12872] capability: warning: `syz.2.3229' uses 32-bit capabilities (legacy support in use) [ 261.827201][T12881] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3234'. [ 261.995788][ T6042] usb 5-1: USB disconnect, device number 30 [ 262.021099][ T6042] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 262.490413][T12905] syz.3.3245 (12905): drop_caches: 1 [ 263.356319][T12952] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 263.362885][T12952] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 263.406774][T12952] vhci_hcd vhci_hcd.0: Device attached [ 263.406814][T12958] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 263.418797][T12958] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 263.546218][T12958] vhci_hcd vhci_hcd.0: Device attached [ 263.569488][T12959] vhci_hcd: connection closed [ 263.569935][T12953] vhci_hcd: connection closed [ 263.575149][ T12] vhci_hcd: stop threads [ 263.592637][ T12] vhci_hcd: release socket [ 263.624806][ T12] vhci_hcd: disconnect device [ 263.649877][ T12] vhci_hcd: stop threads [ 263.656026][ T12] vhci_hcd: release socket [ 263.684669][ T12] vhci_hcd: disconnect device [ 263.697054][ T5919] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 263.711047][ T5919] usb 39-1: enqueue for inactive port 0 [ 263.746278][T12972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3275'. [ 263.787282][ T5919] vhci_hcd: vhci_device speed not set [ 263.902936][T12980] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3278'. [ 265.025278][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3297'. [ 265.620532][T13045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3309'. [ 265.896083][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 266.116351][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 266.123609][ T10] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 266.147205][ T10] usb 1-1: config 0 has no interface number 0 [ 266.153437][ T10] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 266.194157][ T10] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 266.220927][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.238260][ T10] usb 1-1: Product: syz [ 266.245829][ T10] usb 1-1: Manufacturer: syz [ 266.259897][ T10] usb 1-1: SerialNumber: syz [ 266.285609][ T10] usb 1-1: config 0 descriptor?? [ 266.307403][ T10] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 266.331871][ T10] em28xx 1-1:0.132: Video interface 132 found: [ 266.705417][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 266.705435][ T30] audit: type=1326 audit(1752266479.800:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13071 comm="syz.4.3323" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3c1b8e929 code=0x0 [ 266.756515][ T10] em28xx 1-1:0.132: chip ID is em2710/2820 [ 267.022112][ T10] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 267.052472][ T10] em28xx 1-1:0.132: board has no eeprom [ 267.135402][ T10] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 267.156235][ T10] em28xx 1-1:0.132: analog set to bulk mode. [ 267.178691][ T5934] em28xx 1-1:0.132: Registering V4L2 extension [ 267.206563][ T10] usb 1-1: USB disconnect, device number 31 [ 267.213894][ T10] em28xx 1-1:0.132: Disconnecting em28xx [ 267.367313][ T6042] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 267.546411][ T6042] usb 4-1: Using ep0 maxpacket: 16 [ 267.597893][ T6042] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.627104][ T6042] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.658670][ T6042] usb 4-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 267.676987][ T5934] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 267.684410][ T5934] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 267.686277][ T6042] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.717568][ T5934] em28xx 1-1:0.132: No AC97 audio processor [ 267.743845][T13110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.759509][ T6042] usb 4-1: config 0 descriptor?? [ 267.760870][T13110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.784626][ T5934] usb 1-1: Decoder not found [ 267.796084][ T5934] em28xx 1-1:0.132: failed to create media graph [ 267.810649][ T5934] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 267.827420][T13110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.853184][ T5934] em28xx 1-1:0.132: Remote control support is not available for this card. [ 267.876974][T13110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.886511][ T10] em28xx 1-1:0.132: Closing input extension [ 267.927284][ T10] em28xx 1-1:0.132: Freeing device [ 267.927695][T13117] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3341'. [ 268.220434][ T6042] lenovo 0003:17EF:6009.0041: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.3-1/input0 [ 268.441259][ T6042] usb 4-1: USB disconnect, device number 26 [ 268.462671][T13125] fido_id[13125]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 269.590150][T13184] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3371'. [ 271.756100][ T6042] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 271.896097][ T5918] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 271.906291][ T6042] usb 4-1: Using ep0 maxpacket: 16 [ 271.920861][ T6042] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 271.935850][ T6042] usb 4-1: config 0 interface 0 has no altsetting 0 [ 271.943158][ T6042] usb 4-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 271.952722][ T6042] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.964702][ T6042] usb 4-1: config 0 descriptor?? [ 271.986156][ T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 272.021935][T13286] CUSE: DEVNAME unspecified [ 272.058004][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.080583][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.095297][ T5918] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 272.112573][ T5918] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 272.122274][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.143511][ T5918] usb 5-1: config 0 descriptor?? [ 272.153196][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 272.164727][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.177532][ T5918] hub 5-1:0.0: USB hub found [ 272.189543][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.200098][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 272.213604][ T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 272.245269][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.271097][ T10] usb 2-1: config 0 descriptor?? [ 272.359390][ T5918] hub 5-1:0.0: 14 ports detected [ 272.376677][ T5918] hub 5-1:0.0: insufficient power available to use all downstream ports [ 272.425179][ T6042] waltop 0003:172F:0034.0042: item fetching failed at offset 1/3 [ 272.440387][ T6042] waltop 0003:172F:0034.0042: probe with driver waltop failed with error -22 [ 272.633548][ T6042] usb 4-1: USB disconnect, device number 27 [ 272.757830][ T10] hid-picolcd 0003:04D8:C002.0043: No report with id 0x11 found [ 272.784517][ T5918] usb 5-1: USB disconnect, device number 31 [ 272.915870][ T5934] usb 2-1: USB disconnect, device number 32 [ 274.102611][T13365] team0: Cannot enslave team device to itself [ 274.485515][T13385] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3463'. [ 274.515033][T13385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3463'. [ 274.550867][T13385] tipc: MTU too low for tipc bearer [ 275.423735][T13427] tipc: Started in network mode [ 275.443458][T13427] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 275.491203][T13427] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 275.539743][T13427] tipc: Enabled bearer , priority 10 [ 276.273437][T13447] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3492'. [ 276.326122][ T6042] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 276.506184][ T6042] usb 4-1: Using ep0 maxpacket: 16 [ 276.521248][ T6042] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 276.539933][ T6042] usb 4-1: config 0 has no interface number 0 [ 276.556125][ T6042] usb 4-1: config 0 interface 34 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.577546][ T6042] usb 4-1: config 0 interface 34 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.597410][ T6042] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 276.611105][ T6042] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.632073][ T6042] usb 4-1: config 0 descriptor?? [ 276.657860][ T5934] tipc: Node number set to 1 [ 277.269184][ T3574] usb 4-1: USB disconnect, device number 28 [ 277.476314][ T6042] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 277.890904][ T6042] usb 1-1: Using ep0 maxpacket: 16 [ 277.905883][ T6042] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.936206][ T6042] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.966170][ T6042] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 278.016147][ T6042] usb 1-1: config 0 interface 0 has no altsetting 0 [ 278.022823][ T6042] usb 1-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 278.060922][ T6042] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.108465][ T6042] usb 1-1: config 0 descriptor?? [ 278.397528][ T5945] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 278.526138][ T5911] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 278.540589][ T6042] hid-generic 0003:045E:05DA.0045: unknown main item tag 0x0 [ 278.553117][ T6042] hid-generic 0003:045E:05DA.0045: unknown main item tag 0x0 [ 278.563583][ T5945] usb 3-1: Using ep0 maxpacket: 16 [ 278.575666][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.595629][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.606245][ T6042] hid-generic 0003:045E:05DA.0045: unknown main item tag 0x0 [ 278.613687][ T6042] hid-generic 0003:045E:05DA.0045: ignoring exceeding usage max [ 278.622329][ T5945] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 278.633856][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.642282][ T6042] hid-generic 0003:045E:05DA.0045: unknown main item tag 0x0 [ 278.652181][ T6042] hid-generic 0003:045E:05DA.0045: unknown main item tag 0x0 [ 278.660977][ T5945] usb 3-1: config 0 descriptor?? [ 278.666742][ T6042] hid-generic 0003:045E:05DA.0045: unbalanced collection at end of report description [ 278.697119][ T6042] hid-generic 0003:045E:05DA.0045: probe with driver hid-generic failed with error -22 [ 278.717541][ T5911] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 278.727396][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.741428][ T6042] usb 1-1: USB disconnect, device number 32 [ 278.749665][ T5911] usb 5-1: Product: syz [ 278.753900][ T5911] usb 5-1: Manufacturer: syz [ 278.759844][ T5911] usb 5-1: SerialNumber: syz [ 278.780306][ T5911] usb 5-1: config 0 descriptor?? [ 278.810034][ T5911] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 279.090461][ T5945] playstation 0003:054C:05C4.0046: invalid report_count 1553694380 [ 279.111041][ T5945] playstation 0003:054C:05C4.0046: item 0 4 1 9 parsing failed [ 279.139161][ T5945] playstation 0003:054C:05C4.0046: Parse failed [ 279.166776][ T5945] playstation 0003:054C:05C4.0046: probe with driver playstation failed with error -22 [ 279.293336][ T5945] usb 3-1: USB disconnect, device number 27 [ 279.396902][ T5911] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 279.411538][ T5911] sq905c 5-1:0.0: probe with driver sq905c failed with error -71 [ 279.448842][ T5911] usb 5-1: USB disconnect, device number 32 [ 279.656191][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 279.796147][ T6042] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 279.825090][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.862084][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.883434][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 279.893125][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.914555][ T10] usb 1-1: config 0 descriptor?? [ 279.987263][ T6042] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 280.006136][ T6042] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 280.038460][ T6042] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.073792][T13557] dummy0: entered allmulticast mode [ 280.080956][ T6042] usb 4-1: config 0 descriptor?? [ 280.379527][ T10] pyra 0003:1E7D:2CF6.0047: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 280.496746][ T5911] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 280.537618][ T6042] aquacomputer_d5next 0003:0C70:F0BD.0048: hidraw1: USB HID v0.00 Device [HID 0c70:f0bd] on usb-dummy_hcd.3-1/input0 [ 280.570897][ T10] pyra 0003:1E7D:2CF6.0047: couldn't init struct pyra_device [ 280.605612][ T10] pyra 0003:1E7D:2CF6.0047: couldn't install mouse [ 280.616183][ T5945] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 280.640938][ T10] pyra 0003:1E7D:2CF6.0047: probe with driver pyra failed with error -71 [ 280.697547][ T10] usb 1-1: USB disconnect, device number 33 [ 280.716508][ T5911] usb 2-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.736632][ T5911] usb 2-1: config 0 interface 0 has no altsetting 0 [ 280.763877][ T5918] usb 4-1: USB disconnect, device number 29 [ 280.775269][ T5911] usb 2-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 280.807355][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.830080][ T5945] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 280.840405][ T5945] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 280.857805][ T5911] usb 2-1: config 0 descriptor?? [ 280.879039][ T5945] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 280.906063][ T5945] usb 5-1: config 220 has no interface number 2 [ 280.922666][ T5945] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 280.956144][ T5945] usb 5-1: config 220 interface 0 has no altsetting 0 [ 280.966123][ T5945] usb 5-1: config 220 interface 76 has no altsetting 0 [ 280.973439][ T5945] usb 5-1: config 220 interface 1 has no altsetting 0 [ 280.996749][ T5945] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 281.016184][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.024253][ T5945] usb 5-1: Product: syz [ 281.028665][ T5945] usb 5-1: Manufacturer: syz [ 281.033583][ T5945] usb 5-1: SerialNumber: syz [ 281.267107][ T5945] usb 5-1: selecting invalid altsetting 0 [ 281.287125][ T5945] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 281.332352][ T5945] usb 5-1: No valid video chain found. [ 281.361966][ T5911] apple 0003:05AC:027A.0049: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.1-1/input0 [ 281.417048][ T5945] usb 5-1: selecting invalid altsetting 0 [ 281.422903][ T5945] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 281.470316][ T5945] usb 5-1: USB disconnect, device number 33 [ 281.554757][ T5911] usb 2-1: USB disconnect, device number 33 [ 281.685234][T13591] bridge1: entered promiscuous mode [ 281.703075][T13591] bridge1: entered allmulticast mode [ 281.736163][ T6042] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 281.750510][T13591] team0: Port device bridge1 added [ 281.939517][ T6042] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.955375][ T6042] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 281.965813][ T6042] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.983874][ T6042] usb 1-1: config 0 descriptor?? [ 282.408533][T13615] futex_wake_op: syz.2.3570 tries to shift op by -1; fix this program [ 282.476643][ T6042] lg-g15 0003:046D:C222.004A: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.0-1/input0 [ 282.656577][ T6042] usb 1-1: USB disconnect, device number 34 [ 282.663318][T13626] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3576'. [ 282.683493][T13619] fido_id[13619]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 282.709303][T13626] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3576'. [ 282.767631][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 282.816311][ T5918] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 282.936188][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 282.974147][ T10] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 282.984743][ T10] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 282.999491][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 283.011501][ T10] usb 4-1: config 1 has no interface number 0 [ 283.017948][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 283.026190][ T5911] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 283.038050][ T10] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 283.052373][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 283.065250][ T10] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 283.086110][ T5918] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 283.106063][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.115662][ T10] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 283.129679][ T5918] usb 2-1: config 0 descriptor?? [ 283.134882][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.143370][T13622] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 283.166929][ T10] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 283.203564][ T5911] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 283.230299][ T5911] usb 5-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 283.250663][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.264544][ T5911] usb 5-1: Product: syz [ 283.286119][ T5911] usb 5-1: Manufacturer: syz [ 283.290765][ T5911] usb 5-1: SerialNumber: syz [ 283.379314][ T10] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 283.517797][ T5911] usb 5-1: selecting invalid altsetting 1 [ 283.583495][ T5918] creative-sb0540 0003:041E:3100.004B: item fetching failed at offset 1/5 [ 283.611086][ T5918] creative-sb0540 0003:041E:3100.004B: parse failed [ 283.635006][ T5918] creative-sb0540 0003:041E:3100.004B: probe with driver creative-sb0540 failed with error -22 [ 283.729709][ T5911] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 283.729823][ T5911] dvb_usb_lmedm04 5-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 283.787750][ T5911] usb 2-1: USB disconnect, device number 34 [ 283.826453][ T5918] usb 4-1: USB disconnect, device number 30 [ 283.833966][ T5918] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 283.901821][T13662] program syz.2.3593 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 283.960882][ T10] usb 5-1: USB disconnect, device number 34 [ 283.985307][T13664] program syz.0.3594 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 284.366141][ T5918] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 284.560703][ T5918] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.591266][ T5918] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 284.617485][ T5918] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 284.630656][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.644058][ T5918] usb 1-1: config 0 descriptor?? [ 284.656582][ T5918] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 284.663536][ T5918] dvb-usb: bulk message failed: -22 (3/0) [ 284.685328][ T5918] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 284.705202][ T5918] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 284.715612][ T5918] usb 1-1: media controller created [ 284.731461][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 284.762083][ T5918] dvb-usb: bulk message failed: -22 (6/0) [ 284.774169][ T5918] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 284.788315][ T5918] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input21 [ 284.808640][ T5918] dvb-usb: schedule remote query interval to 150 msecs. [ 284.815912][ T5918] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 284.837142][ T5911] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 284.860425][T13672] dvb-usb: bulk message failed: -22 (2/0) [ 284.868337][ T10] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 284.890088][T13672] dvb-usb: bulk message failed: -22 (4/0) [ 284.932987][ T5918] usb 1-1: USB disconnect, device number 35 [ 284.990367][ T5918] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 284.996728][ T5911] usb 3-1: Using ep0 maxpacket: 16 [ 285.009669][ T5911] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.030280][ T5911] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 285.051239][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.069217][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 285.073297][ T5911] usb 3-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 285.082611][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.127576][ T5911] usb 3-1: config 0 interface 0 has no altsetting 0 [ 285.140236][ T5911] usb 3-1: New USB device found, idVendor=1e71, idProduct=2010, bcdDevice= 0.00 [ 285.145037][ T10] usb 4-1: config 0 descriptor?? [ 285.173053][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.185158][ T5911] usb 3-1: config 0 descriptor?? [ 285.587178][ T10] magicmouse 0003:05AC:0265.004C: unbalanced delimiter at end of report description [ 285.619627][ T5911] nzxt-smart2 0003:1E71:2010.004D: unknown main item tag 0x0 [ 285.619666][ T5911] nzxt-smart2 0003:1E71:2010.004D: unknown main item tag 0x0 [ 285.619701][ T5911] nzxt-smart2 0003:1E71:2010.004D: unknown main item tag 0x0 [ 285.619727][ T5911] nzxt-smart2 0003:1E71:2010.004D: unknown main item tag 0x0 [ 285.619754][ T5911] nzxt-smart2 0003:1E71:2010.004D: unknown main item tag 0x0 [ 285.620786][ T10] magicmouse 0003:05AC:0265.004C: magicmouse hid parse failed [ 285.620877][ T10] magicmouse 0003:05AC:0265.004C: probe with driver magicmouse failed with error -22 [ 285.633172][ T5911] nzxt-smart2 0003:1E71:2010.004D: hidraw0: USB HID v0.05 Device [HID 1e71:2010] on usb-dummy_hcd.2-1/input0 [ 285.849683][ T10] usb 4-1: USB disconnect, device number 31 [ 285.852557][ T5911] usb 3-1: USB disconnect, device number 28 [ 286.716650][ T5945] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 286.886374][ T5911] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 286.918087][ T5945] usb 5-1: config 0 has an invalid interface number: 217 but max is 0 [ 286.957015][ T5945] usb 5-1: config 0 has no interface number 0 [ 286.957692][T13737] netlink: 'syz.1.3629': attribute type 1 has an invalid length. [ 286.973576][ T5945] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 287.003841][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.025192][ T5945] usb 5-1: Product: syz [ 287.036149][ T5945] usb 5-1: Manufacturer: syz [ 287.048852][ T5945] usb 5-1: SerialNumber: syz [ 287.056084][ T5911] usb 3-1: Using ep0 maxpacket: 32 [ 287.065204][T13741] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3631'. [ 287.072469][ T5945] usb 5-1: config 0 descriptor?? [ 287.087511][ T5911] usb 3-1: config 0 has an invalid interface number: 247 but max is 0 [ 287.101184][ T5911] usb 3-1: config 0 has no interface number 0 [ 287.109387][ T5945] hub 5-1:0.217: bad descriptor, ignoring hub [ 287.116342][ T5945] hub 5-1:0.217: probe with driver hub failed with error -5 [ 287.125264][ T5911] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 287.137310][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 287.145509][ T5911] usb 3-1: Product: syz [ 287.149906][ T5911] usb 3-1: Manufacturer: syz [ 287.175092][ T5911] usb 3-1: config 0 descriptor?? [ 287.311965][ T5945] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 287.341707][ T5945] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 287.377267][ T5945] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 287.385896][ T5945] usb 5-1: media controller created [ 287.413621][ T5945] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 287.595401][ T10] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 287.624024][T13719] syz.0.3620 (13719): drop_caches: 2 [ 287.641839][ T5945] DVB: Unable to find symbol dib7000p_attach() [ 287.648804][T13750] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3635'. [ 287.657998][ T5945] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 287.768656][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 287.781827][T13755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3637'. [ 287.785855][ T10] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 287.792438][ T5945] rc_core: IR keymap rc-dib0700-rc5 not found [ 287.803906][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.817464][ T10] usb 2-1: Product: syz [ 287.821766][ T10] usb 2-1: Manufacturer: syz [ 287.828304][ T5945] Registered IR keymap rc-empty [ 287.831634][ T10] usb 2-1: SerialNumber: syz [ 287.833462][ T5945] dvb-usb: could not initialize remote control. [ 287.843179][ T10] usb 2-1: config 0 descriptor?? [ 287.874388][ T5945] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 288.158254][ T5934] usb 5-1: USB disconnect, device number 35 [ 288.237926][ T5934] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 288.440343][ T5918] usb 3-1: USB disconnect, device number 29 [ 288.461017][ T10] peak_usb 2-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 288.527840][ T10] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 288.541702][ T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 288.568684][ T10] usb 2-1: USB disconnect, device number 35 [ 288.696394][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 288.714222][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 288.732753][ T9] usb 1-1: config 0 has no interface number 0 [ 288.751345][ T9] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 288.774968][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.785102][ T9] usb 1-1: Product: syz [ 288.789515][ T9] usb 1-1: Manufacturer: syz [ 288.794208][ T9] usb 1-1: SerialNumber: syz [ 288.809808][ T9] usb 1-1: config 0 descriptor?? [ 288.822939][ T9] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 288.844774][ T9] usb 1-1: selecting invalid altsetting 1 [ 288.866303][ T9] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 288.876858][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 288.888248][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 288.898067][ T9] usb 1-1: media controller created [ 288.938494][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 289.110692][T13789] xt_CT: You must specify a L4 protocol and not use inversions on it [ 289.488243][T13803] openvswitch: netlink: nsh attribute has 124 unknown bytes. [ 289.518843][T13803] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.996157][ T5945] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 290.006266][ T6042] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 290.036983][ T9] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 290.056210][ T9] zl10353_read_register: readreg error (reg=127, ret==-110) [ 290.068340][ T9] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 290.151565][ T9] usb 1-1: USB disconnect, device number 36 [ 290.166186][ T5945] usb 5-1: Using ep0 maxpacket: 16 [ 290.179690][ T5945] usb 5-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 290.206196][ T6042] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.221403][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.236823][ T6042] usb 3-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 290.249157][ T5945] usb 5-1: Product: syz [ 290.258546][ T5945] usb 5-1: Manufacturer: syz [ 290.269681][ T6042] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.286424][ T5945] usb 5-1: SerialNumber: syz [ 290.294532][ T5945] usb 5-1: config 0 descriptor?? [ 290.303496][ T6042] usb 3-1: config 0 descriptor?? [ 290.319851][ T5945] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 290.525650][ T5945] gspca_sn9c2028: read1 error -32 [ 290.552721][T13826] netlink: 292 bytes leftover after parsing attributes in process `syz.1.3670'. [ 290.751489][ T5945] gspca_sn9c2028: read1 error -71 [ 290.765142][T13832] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3674'. [ 290.774777][ T5945] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -71 [ 290.782859][ T5945] usb 5-1: USB disconnect, device number 36 [ 290.793585][ T6042] lenovo 0003:17EF:60A3.004E: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.2-1/input0 [ 290.962593][ T9] usb 3-1: USB disconnect, device number 30 [ 291.416519][ T6042] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 291.576507][ T5934] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 291.588434][ T6042] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 291.616121][ T6042] usb 4-1: config 0 has no interface number 0 [ 291.622303][ T6042] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 291.655881][T13873] vivid-003: ================= START STATUS ================= [ 291.672449][T13873] vivid-003: Radio HW Seek Mode: Bounded [ 291.680396][T13873] vivid-003: Radio Programmable HW Seek: false [ 291.695196][ T6042] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 291.700706][T13873] vivid-003: RDS Rx I/O Mode: [ 291.718230][ T6042] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 291.722565][T13873] Block I/O [ 291.732120][ T6042] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.737439][ T6042] usb 4-1: config 0 descriptor?? [ 291.746205][T13873] [ 291.759908][T13851] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 291.766475][T13873] vivid-003: Generate RBDS Instead of RDS: false [ 291.768069][T13873] vivid-003: RDS Reception: true [ 291.768095][T13873] vivid-003: RDS Program Type: 0 inactive [ 291.768122][T13873] vivid-003: RDS PS Name: inactive [ 291.768147][T13873] vivid-003: RDS Radio Text: inactive [ 291.768171][T13873] vivid-003: RDS Traffic Announcement: false inactive [ 291.768196][T13873] vivid-003: RDS Traffic Program: false inactive [ 291.768219][T13873] vivid-003: RDS Music: false inactive [ 291.768268][T13873] vivid-003: ================== END STATUS ================== [ 291.776267][ T5934] usb 1-1: Using ep0 maxpacket: 32 [ 291.784649][ T5934] usb 1-1: config 1 has an invalid interface number: 137 but max is 0 [ 291.784677][ T5934] usb 1-1: config 1 has no interface number 0 [ 291.784722][ T5934] usb 1-1: config 1 interface 137 has no altsetting 0 [ 291.786314][ T6042] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 291.799901][ T5934] usb 1-1: New USB device found, idVendor=0557, idProduct=2021, bcdDevice=74.1a [ 291.799932][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.799951][ T5934] usb 1-1: Product: syz [ 291.799965][ T5934] usb 1-1: Manufacturer: syz [ 291.799979][ T5934] usb 1-1: SerialNumber: syz [ 292.017492][ T5934] pl2303 1-1:1.137: required interrupt-in endpoint missing [ 292.023940][ T5934] usb 1-1: USB disconnect, device number 37 [ 292.062683][T13880] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.081904][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 292.082997][ T5945] usb 4-1: USB disconnect, device number 32 [ 292.696419][ T5934] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 292.716354][ T10] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 292.848986][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 292.871524][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.881866][ T5934] usb 2-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 292.891250][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.901003][ T10] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 292.913198][ T10] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.924319][ T5934] usb 2-1: config 0 descriptor?? [ 292.946182][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 292.955297][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.974909][ T10] hub 3-1:4.0: USB hub found [ 293.181158][ T10] hub 3-1:4.0: 13 ports detected [ 293.199286][ T10] usb 3-1: selecting invalid altsetting 1 [ 293.209866][ T10] hub 3-1:4.0: Using single TT (err -22) [ 293.217162][ T10] hub 3-1:4.0: insufficient power available to use all downstream ports [ 293.349914][ T5934] kye 0003:0458:5005.004F: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 293.368377][ T5934] kye 0003:0458:5005.004F: hidraw0: USB HID v0.00 Device [HID 0458:5005] on usb-dummy_hcd.1-1/input0 [ 293.380913][ T5934] kye 0003:0458:5005.004F: tablet-enabling feature report not found [ 293.436152][ T5934] kye 0003:0458:5005.004F: tablet enabling failed [ 293.472934][T13914] ================================================================== [ 293.481041][T13914] BUG: KASAN: slab-use-after-free in report_descriptor_read+0xb5/0x100 [ 293.489289][T13914] Read of size 3 at addr ffff888034af8f60 by task fido_id/13914 [ 293.496922][T13914] [ 293.499267][T13914] CPU: 1 UID: 0 PID: 13914 Comm: fido_id Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 293.499285][T13914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 293.499301][T13914] Call Trace: [ 293.499310][T13914] [ 293.499318][T13914] dump_stack_lvl+0x189/0x250 [ 293.499339][T13914] ? rcu_is_watching+0x15/0xb0 [ 293.499356][T13914] ? __kasan_check_byte+0x12/0x40 [ 293.499374][T13914] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.499389][T13914] ? rcu_is_watching+0x15/0xb0 [ 293.499404][T13914] ? lock_release+0x4b/0x3e0 [ 293.499418][T13914] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 293.499439][T13914] ? __virt_addr_valid+0x1c8/0x5c0 [ 293.499460][T13914] ? __virt_addr_valid+0x4a5/0x5c0 [ 293.499478][T13914] print_report+0xd2/0x2b0 [ 293.499491][T13914] ? report_descriptor_read+0xb5/0x100 [ 293.499509][T13914] kasan_report+0x118/0x150 [ 293.499526][T13914] ? report_descriptor_read+0xb5/0x100 [ 293.499546][T13914] kasan_check_range+0x2b0/0x2c0 [ 293.499562][T13914] ? report_descriptor_read+0xb5/0x100 [ 293.499583][T13914] __asan_memcpy+0x29/0x70 [ 293.499599][T13914] report_descriptor_read+0xb5/0x100 [ 293.499617][T13914] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 293.499634][T13914] kernfs_fop_read_iter+0x3fe/0x640 [ 293.499651][T13914] vfs_read+0x4d0/0x980 [ 293.499669][T13914] ? __pfx_vfs_read+0x10/0x10 [ 293.499686][T13914] ? do_sys_openat2+0x154/0x1c0 [ 293.499705][T13914] ? kmem_cache_free+0x18f/0x400 [ 293.499730][T13914] ksys_read+0x145/0x250 [ 293.499746][T13914] ? __pfx_ksys_read+0x10/0x10 [ 293.499762][T13914] ? do_syscall_64+0xbe/0x3b0 [ 293.499777][T13914] do_syscall_64+0xfa/0x3b0 [ 293.499790][T13914] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.499809][T13914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.499822][T13914] ? clear_bhb_loop+0x60/0xb0 [ 293.499837][T13914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.499852][T13914] RIP: 0033:0x7fa4111d7407 [ 293.499872][T13914] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 293.499884][T13914] RSP: 002b:00007ffff4e191c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 293.499900][T13914] RAX: ffffffffffffffda RBX: 00007fa41114b880 RCX: 00007fa4111d7407 [ 293.499910][T13914] RDX: 0000000000001000 RSI: 00007ffff4e19210 RDI: 0000000000000004 [ 293.499926][T13914] RBP: 0000555a0abab730 R08: 0000000000000000 R09: 0000000000000000 [ 293.499934][T13914] R10: 0000000000000000 R11: 0000000000000202 R12: 0000555a0abaa930 [ 293.499943][T13914] R13: 00007ffff4e19210 R14: 0000000000000004 R15: 00005559d14c64d8 [ 293.499957][T13914] [ 293.499962][T13914] [ 293.759309][T13914] Allocated by task 5934: [ 293.763640][T13914] kasan_save_track+0x3e/0x80 [ 293.768335][T13914] __kasan_kmalloc+0x93/0xb0 [ 293.772927][T13914] __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 293.779342][T13914] kmemdup_noprof+0x2b/0x70 [ 293.783844][T13914] hid_open_report+0x208/0xee0 [ 293.788611][T13914] kye_probe+0x21/0x5f0 [ 293.792762][T13914] hid_device_probe+0x39d/0x710 [ 293.797615][T13914] really_probe+0x26a/0x9a0 [ 293.802110][T13914] __driver_probe_device+0x18c/0x2f0 [ 293.807401][T13914] driver_probe_device+0x4f/0x430 [ 293.812434][T13914] __device_attach_driver+0x2ce/0x530 [ 293.817883][T13914] bus_for_each_drv+0x251/0x2e0 [ 293.822738][T13914] __device_attach+0x2b8/0x400 [ 293.827519][T13914] bus_probe_device+0x185/0x260 [ 293.832381][T13914] device_add+0x7b6/0xb50 [ 293.836715][T13914] hid_add_device+0x398/0x540 [ 293.841394][T13914] usbhid_probe+0xe13/0x12a0 [ 293.845982][T13914] usb_probe_interface+0x641/0xbc0 [ 293.851097][T13914] really_probe+0x26a/0x9a0 [ 293.855599][T13914] __driver_probe_device+0x18c/0x2f0 [ 293.860966][T13914] driver_probe_device+0x4f/0x430 [ 293.865993][T13914] __device_attach_driver+0x2ce/0x530 [ 293.871369][T13914] bus_for_each_drv+0x251/0x2e0 [ 293.876213][T13914] __device_attach+0x2b8/0x400 [ 293.880977][T13914] bus_probe_device+0x185/0x260 [ 293.885819][T13914] device_add+0x7b6/0xb50 [ 293.890152][T13914] usb_set_configuration+0x1a87/0x20e0 [ 293.895627][T13914] usb_generic_driver_probe+0x8d/0x150 [ 293.901096][T13914] usb_probe_device+0x1c4/0x390 [ 293.905944][T13914] really_probe+0x26a/0x9a0 [ 293.910447][T13914] __driver_probe_device+0x18c/0x2f0 [ 293.915842][T13914] driver_probe_device+0x4f/0x430 [ 293.920865][T13914] __device_attach_driver+0x2ce/0x530 [ 293.926238][T13914] bus_for_each_drv+0x251/0x2e0 [ 293.931074][T13914] __device_attach+0x2b8/0x400 [ 293.935844][T13914] bus_probe_device+0x185/0x260 [ 293.940687][T13914] device_add+0x7b6/0xb50 [ 293.945012][T13914] usb_new_device+0xa39/0x16c0 [ 293.949775][T13914] hub_event+0x2941/0x4a00 [ 293.954189][T13914] process_scheduled_works+0xae1/0x17b0 [ 293.959734][T13914] worker_thread+0x8a0/0xda0 [ 293.964340][T13914] kthread+0x70e/0x8a0 [ 293.968434][T13914] ret_from_fork+0x3fc/0x770 [ 293.973035][T13914] ret_from_fork_asm+0x1a/0x30 [ 293.977803][T13914] [ 293.980120][T13914] The buggy address belongs to the object at ffff888034af8f60 [ 293.980120][T13914] which belongs to the cache kmalloc-8 of size 8 [ 293.993824][T13914] The buggy address is located 0 bytes inside of [ 293.993824][T13914] freed 8-byte region [ffff888034af8f60, ffff888034af8f68) [ 294.007271][T13914] [ 294.009593][T13914] The buggy address belongs to the physical page: [ 294.016006][T13914] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34af8 [ 294.024762][T13914] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 294.032314][T13914] page_type: f5(slab) [ 294.036291][T13914] raw: 00fff00000000000 ffff88801a441500 0000000000000000 dead000000000001 [ 294.044867][T13914] raw: 0000000000000000 0000000080800080 00000000f5000000 0000000000000000 [ 294.053443][T13914] page dumped because: kasan: bad access detected [ 294.059859][T13914] page_owner tracks the page as allocated [ 294.065575][T13914] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5217, tgid 5217 (udevd), ts 206914575493, free_ts 206907054595 [ 294.084423][T13914] post_alloc_hook+0x240/0x2a0 [ 294.089190][T13914] get_page_from_freelist+0x21e4/0x22c0 [ 294.094735][T13914] __alloc_frozen_pages_noprof+0x181/0x370 [ 294.100541][T13914] alloc_pages_mpol+0x232/0x4a0 [ 294.105385][T13914] allocate_slab+0x8a/0x3b0 [ 294.109884][T13914] ___slab_alloc+0xbfc/0x1480 [ 294.114553][T13914] __kmalloc_noprof+0x305/0x4f0 [ 294.119396][T13914] kernfs_fop_write_iter+0x158/0x4f0 [ 294.124680][T13914] vfs_write+0x54b/0xa90 [ 294.128962][T13914] ksys_write+0x145/0x250 [ 294.133283][T13914] do_syscall_64+0xfa/0x3b0 [ 294.137778][T13914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.143678][T13914] page last free pid 10934 tgid 10934 stack trace: [ 294.150170][T13914] __free_frozen_pages+0xc71/0xe70 [ 294.155278][T13914] tlb_finish_mmu+0x112/0x1d0 [ 294.159966][T13914] exit_mmap+0x44c/0xb50 [ 294.164210][T13914] __mmput+0x118/0x420 [ 294.168273][T13914] exit_mm+0x1da/0x2c0 [ 294.172337][T13914] do_exit+0x648/0x22e0 [ 294.176929][T13914] do_group_exit+0x21c/0x2d0 [ 294.181689][T13914] __x64_sys_exit_group+0x3f/0x40 [ 294.186721][T13914] x64_sys_call+0x21ba/0x21c0 [ 294.191405][T13914] do_syscall_64+0xfa/0x3b0 [ 294.195905][T13914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.201797][T13914] [ 294.204124][T13914] Memory state around the buggy address: [ 294.209748][T13914] ffff888034af8e00: 00 fc fc fc fa fc fc fc 00 fc fc fc fa fc fc fc [ 294.217804][T13914] ffff888034af8e80: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 294.225858][T13914] >ffff888034af8f00: fa fc fc fc fa fc fc fc fa fc fc fc fb fc fc fc [ 294.233909][T13914] ^ [ 294.241093][T13914] ffff888034af8f80: fa fc fc fc 05 fc fc fc fa fc fc fc fa fc fc fc [ 294.249146][T13914] ffff888034af9000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 294.257198][T13914] ================================================================== [ 294.265363][ C1] vkms_vblank_simulate: vblank timer overrun [ 294.328979][T13914] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 294.336214][T13914] CPU: 0 UID: 0 PID: 13914 Comm: fido_id Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 294.348038][T13914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 294.358200][T13914] Call Trace: [ 294.361510][T13914] [ 294.364492][T13914] dump_stack_lvl+0x99/0x250 [ 294.369107][T13914] ? __asan_memcpy+0x40/0x70 [ 294.373720][T13914] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.378941][T13914] ? __pfx__printk+0x10/0x10 [ 294.383549][T13914] panic+0x2db/0x790 [ 294.387476][T13914] ? __pfx_preempt_schedule+0x10/0x10 [ 294.392872][T13914] ? __pfx_panic+0x10/0x10 [ 294.397307][T13914] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 294.403220][T13914] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 294.409577][T13914] ? report_descriptor_read+0xb5/0x100 [ 294.415070][T13914] check_panic_on_warn+0x89/0xb0 [ 294.420038][T13914] ? report_descriptor_read+0xb5/0x100 [ 294.425531][T13914] end_report+0x78/0x160 [ 294.429795][T13914] kasan_report+0x129/0x150 [ 294.434321][T13914] ? report_descriptor_read+0xb5/0x100 [ 294.439821][T13914] kasan_check_range+0x2b0/0x2c0 [ 294.444788][T13914] ? report_descriptor_read+0xb5/0x100 [ 294.450278][T13914] __asan_memcpy+0x29/0x70 [ 294.454710][T13914] report_descriptor_read+0xb5/0x100 [ 294.460016][T13914] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 294.465499][T13914] kernfs_fop_read_iter+0x3fe/0x640 [ 294.470697][T13914] vfs_read+0x4d0/0x980 [ 294.474858][T13914] ? __pfx_vfs_read+0x10/0x10 [ 294.479964][T13914] ? do_sys_openat2+0x154/0x1c0 [ 294.484821][T13914] ? kmem_cache_free+0x18f/0x400 [ 294.489779][T13914] ksys_read+0x145/0x250 [ 294.494016][T13914] ? __pfx_ksys_read+0x10/0x10 [ 294.498771][T13914] ? do_syscall_64+0xbe/0x3b0 [ 294.503442][T13914] do_syscall_64+0xfa/0x3b0 [ 294.507937][T13914] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.513129][T13914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.519182][T13914] ? clear_bhb_loop+0x60/0xb0 [ 294.523853][T13914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.529757][T13914] RIP: 0033:0x7fa4111d7407 [ 294.534167][T13914] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 294.553771][T13914] RSP: 002b:00007ffff4e191c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 294.562180][T13914] RAX: ffffffffffffffda RBX: 00007fa41114b880 RCX: 00007fa4111d7407 [ 294.570152][T13914] RDX: 0000000000001000 RSI: 00007ffff4e19210 RDI: 0000000000000004 [ 294.578124][T13914] RBP: 0000555a0abab730 R08: 0000000000000000 R09: 0000000000000000 [ 294.586100][T13914] R10: 0000000000000000 R11: 0000000000000202 R12: 0000555a0abaa930 [ 294.594090][T13914] R13: 00007ffff4e19210 R14: 0000000000000004 R15: 00005559d14c64d8 [ 294.602058][T13914] [ 294.605222][T13914] Kernel Offset: disabled [ 294.609533][T13914] Rebooting in 86400 seconds..