last executing test programs: 3m19.968015077s ago: executing program 1 (id=185): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) 3m19.838927149s ago: executing program 1 (id=187): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r0, 0xe6905000) 3m19.696788112s ago: executing program 1 (id=188): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x50, r1, 0x1, 0x1fc, 0xfffffffe, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3m19.446616311s ago: executing program 1 (id=193): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8100, &(0x7f0000000000)={0x0, 0x0, 0x20000}, 0x20) 3m19.068020111s ago: executing program 1 (id=198): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) 3m17.667848846s ago: executing program 1 (id=209): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) execveat(r0, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0) 3m17.089054307s ago: executing program 32 (id=209): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) execveat(r0, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0) 58.012516401s ago: executing program 0 (id=1986): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22000092}, 0x10) 57.93913123s ago: executing program 0 (id=1988): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e000102"], 0x1c}}, 0x0) 57.787179001s ago: executing program 0 (id=1992): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0x1}], 0x1, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x4000081) 57.592910528s ago: executing program 0 (id=1995): r0 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), 0x0, 0x0, 0x2) 57.134909529s ago: executing program 0 (id=1998): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 56.958686907s ago: executing program 0 (id=1999): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20) sendto$inet(r0, &(0x7f0000000800)='-', 0x1, 0x240080d0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) 41.717341361s ago: executing program 33 (id=1999): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20) sendto$inet(r0, &(0x7f0000000800)='-', 0x1, 0x240080d0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) 3.762090269s ago: executing program 3 (id=2549): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x6e22, @broadcast}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') pread64(r1, &(0x7f0000000180)=""/109, 0x6d, 0x1000) 3.694800052s ago: executing program 3 (id=2550): r0 = io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x0, 0x3000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0xb, 0xfff}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x42}], 0x1, &(0x7f0000000200), 0x0, 0x0) 2.748574551s ago: executing program 3 (id=2557): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0xa, 0xfe, 0x8001}]}) write$ppp(r0, &(0x7f0000000000)="2cd6", 0x2) 2.651994455s ago: executing program 4 (id=2558): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="55c025bd7000fcdbdf251400000008000300", @ANYRES32=r2, @ANYBLOB="050029"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 2.375563708s ago: executing program 4 (id=2559): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) 2.360989255s ago: executing program 2 (id=2560): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r0) 2.348296963s ago: executing program 3 (id=2561): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x5) accept(r0, 0x0, 0x0) shutdown(r0, 0x1) 2.060067297s ago: executing program 2 (id=2562): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1, 0x559, 0x401, {}, {}, {}, 0x1, @can={{}, 0x0, 0x3, 0x0, 0x0, "ce2a4fa700aa108b"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x800) 1.903947736s ago: executing program 2 (id=2563): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.746464014s ago: executing program 6 (id=2564): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source', &(0x7f0000001bc0)='//\xf2/\x06\b///o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x1, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x2, 0x8002000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10000000, 0x1, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0xfffffffe, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffefffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x9, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x3fffc, 0x0, 0x0, 0xfffffffd, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xf, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) 1.511825257s ago: executing program 2 (id=2567): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005500)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="77167ead34cd1eaf2108c04de96e99fa44", 0x11}], 0x1, 0x0, 0x0, 0x40880}], 0x1, 0x4814) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = dup(r0) connect$inet(r1, &(0x7f0000000000)={0x27, 0x0, @private=0xa010101}, 0x60) 1.414669997s ago: executing program 5 (id=2568): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r1 = socket(0x10, 0x800000000080002, 0x2) unshare(0x400) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) 1.41425577s ago: executing program 2 (id=2569): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) inotify_init1(0x0) 1.362381144s ago: executing program 3 (id=2570): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) accept4(r0, 0x0, 0x0, 0x80800) 1.206043523s ago: executing program 5 (id=2571): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000d32a2e231001c0"]) 1.034101155s ago: executing program 4 (id=2572): syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x822b01) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x7}, &(0x7f00000000c0)={0x1f, 0x0, 0x8, 0x5, 0xfffffffffffffff8, 0x80000000000, 0x4000000000}, 0x0, 0x0, 0x0) 746.687246ms ago: executing program 6 (id=2573): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="100001800c0004"], 0x28}}, 0x0) 688.169054ms ago: executing program 5 (id=2574): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10000030) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 627.97152ms ago: executing program 4 (id=2575): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x21, 0x0, 0x4) 515.607097ms ago: executing program 5 (id=2576): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='sys_enter\x00', r1, 0x0, 0x5}, 0x18) get_mempolicy(0x0, 0x0, 0x1, &(0x7f0000ffd000/0x3000)=nil, 0x0) 504.579918ms ago: executing program 6 (id=2577): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x40, r0, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_SEQ={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "377ce8ed95"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, 0x40}}, 0x0) 392.061596ms ago: executing program 6 (id=2578): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="6c00238006000300570000000600040081000000050011000000000008001c00f9ffffff06000400ae00000005000e000000000008000b000600000008001a000200000005001e"], 0x88}}, 0x0) 391.734725ms ago: executing program 4 (id=2579): unshare(0x28040680) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) ioctl$RTC_ALM_READ(r0, 0x40187013, &(0x7f00000000c0)) 256.309404ms ago: executing program 5 (id=2580): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 203.325438ms ago: executing program 4 (id=2581): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x2f126000) io_uring_setup(0xb92, &(0x7f0000001fc0)={0x0, 0x88f7, 0x1000, 0x2, 0x90}) 144.046219ms ago: executing program 3 (id=2582): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000280)=ANY=[@ANYBLOB="c0000000190001000000000000000000fe880000000000000000000000000101ac1414aa000000000000000000000000000000004e2300000a00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012000007a18208"], 0x50}}, 0x0) 115.286669ms ago: executing program 6 (id=2583): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0x4}, 0x9c) 0s ago: executing program 5 (id=2584): r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001e0001000000003f00000000020000000100000000000000080001"], 0x24}}, 0x0) kernel console output (not intermixed with test programs): T1818] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 175.391138][ T1818] usb 6-1: USB disconnect, device number 5 [ 175.949638][ T7514] Invalid source name [ 175.949657][ T7514] UBIFS error (pid: 7514): cannot open "usrquota", error -22 [ 176.458543][ T7537] vivid-001: disconnect [ 176.463977][ T7535] vivid-001: reconnect [ 177.844668][ T5922] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 177.894747][ T5909] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 177.994738][ T5922] usb 6-1: Using ep0 maxpacket: 32 [ 178.014684][ T5922] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 178.014713][ T5922] usb 6-1: config 0 has no interface number 0 [ 178.030116][ T5922] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 178.030147][ T5922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.030167][ T5922] usb 6-1: Product: syz [ 178.030182][ T5922] usb 6-1: Manufacturer: syz [ 178.030196][ T5922] usb 6-1: SerialNumber: syz [ 178.073203][ T5909] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 178.073235][ T5909] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.073257][ T5909] usb 3-1: config 0 interface 0 has no altsetting 0 [ 178.073292][ T5909] usb 3-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 178.073314][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.129523][ T5922] usb 6-1: config 0 descriptor?? [ 178.150459][ T5922] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 178.151886][ T5909] usb 3-1: config 0 descriptor?? [ 178.161746][ T7597] [U] V3Fپ"S/4:XTZWTLW= [ 178.193799][ T7597] [U] J"E:" [ 178.431627][ T5922] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 178.468936][ T5922] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 178.651990][ T5909] lenovo 0003:17EF:60EE.0010: hidraw0: USB HID v0.01 Device [HID 17ef:60ee] on usb-dummy_hcd.2-1/input0 [ 178.801670][ T5909] lenovo 0003:17EF:60EE.0010: Failed to switch middle button: -71 [ 178.803268][ T5909] lenovo 0003:17EF:60EE.0010: Fn-lock setting failed: -71 [ 178.806270][ T5909] lenovo 0003:17EF:60EE.0010: Sensitivity setting failed: -71 [ 178.825261][ T5909] usb 3-1: USB disconnect, device number 11 [ 178.843864][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 178.846341][ T1818] usb 6-1: USB disconnect, device number 6 [ 178.872211][ T1818] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 178.878656][ T1818] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 178.879453][ T1818] quatech2 6-1:0.51: device disconnected [ 179.024713][ T5922] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 179.190014][ T5922] usb 4-1: Using ep0 maxpacket: 8 [ 179.193688][ T5922] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 179.219267][ T5922] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 179.219300][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.219322][ T5922] usb 4-1: Product: syz [ 179.219338][ T5922] usb 4-1: Manufacturer: syz [ 179.219353][ T5922] usb 4-1: SerialNumber: syz [ 179.257652][ T5922] usb 4-1: config 0 descriptor?? [ 179.280036][ T5922] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 179.280102][ T5922] usb 4-1: setting power ON [ 179.280123][ T5922] dvb-usb: bulk message failed: -22 (2/0) [ 179.305780][ T5922] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 179.316765][ T5922] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 179.316823][ T5922] usb 4-1: media controller created [ 179.374117][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 179.432083][ T5922] usb 4-1: selecting invalid altsetting 6 [ 179.432108][ T5922] usb 4-1: digital interface selection failed (-22) [ 179.432123][ T5922] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 179.432972][ T5922] usb 4-1: setting power OFF [ 179.432993][ T5922] dvb-usb: bulk message failed: -22 (2/0) [ 179.433011][ T5922] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 179.433024][ T5922] (NULL device *): no alternate interface [ 179.481967][ T7606] dvb-usb: bulk message failed: -22 (3/0) [ 179.535203][ T5922] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 179.540303][ T5922] usb 4-1: USB disconnect, device number 6 [ 180.168928][ T7640] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 180.215413][ T7642] netlink: 24 bytes leftover after parsing attributes in process `syz.4.753'. [ 180.356892][ T7647] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma? [ 181.148373][ T38] audit: type=1326 audit(1756055202.596:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7675 comm="syz.5.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639d73ebe9 code=0x7ffc0000 [ 181.148456][ T38] audit: type=1326 audit(1756055202.596:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7675 comm="syz.5.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639d73ebe9 code=0x7ffc0000 [ 181.155622][ T38] audit: type=1326 audit(1756055202.596:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7675 comm="syz.5.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f639d73ebe9 code=0x7ffc0000 [ 181.155674][ T38] audit: type=1326 audit(1756055202.596:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7675 comm="syz.5.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639d73ebe9 code=0x7ffc0000 [ 181.155738][ T38] audit: type=1326 audit(1756055202.596:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7675 comm="syz.5.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639d73ebe9 code=0x7ffc0000 [ 181.157352][ T38] audit: type=1326 audit(1756055202.606:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7675 comm="syz.5.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f639d73ebe9 code=0x7ffc0000 [ 181.225706][ T38] audit: type=1326 audit(1756055202.666:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7675 comm="syz.5.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639d73ebe9 code=0x7ffc0000 [ 181.225771][ T38] audit: type=1326 audit(1756055202.666:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7675 comm="syz.5.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639d73ebe9 code=0x7ffc0000 [ 181.471866][ T7683] netlink: 8 bytes leftover after parsing attributes in process `syz.5.772'. [ 181.471891][ T7683] netlink: 12 bytes leftover after parsing attributes in process `syz.5.772'. [ 181.904695][ T5922] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 182.068294][ T5922] usb 6-1: Using ep0 maxpacket: 16 [ 182.071209][ T5922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.071239][ T5922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.071261][ T5922] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 182.071303][ T5922] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 182.071327][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.077794][ T5922] usb 6-1: config 0 descriptor?? [ 182.498750][ T7712] netlink: 24 bytes leftover after parsing attributes in process `syz.4.783'. [ 182.572780][ T5922] hid-multitouch 0003:0457:07DA.0011: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.5-1/input0 [ 182.669674][ T7717] netlink: 277 bytes leftover after parsing attributes in process `syz.3.787'. [ 182.739094][ T5922] usb 6-1: USB disconnect, device number 7 [ 183.528934][ T7752] kAFS: unable to lookup cell 'sէKyy [ 183.528934][ T7752] [ 183.528934][ T7752] =6%*;eܲ5;Z*d{iElZSjUF/k!btF\_vfVnDPPB1%A)X\YT"8ώdJ_.5d#ۜhGp6"5ͺ*,ImI-(WA?WZ)n[qG jnڇ%(J-%ؘccʵ{|6ZA5k@a+oST;]5 !G3{K,' [ 183.753058][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.810'. [ 183.753081][ T7761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.810'. [ 183.753109][ T7761] netlink: 'syz.4.810': attribute type 6 has an invalid length. [ 183.930162][ T7767] program syz.5.813 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.188493][ T7775] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 184.562545][ T7788] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 184.681580][ T7788] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 184.836700][ T7795] IPVS: ip_vs_edit_dest(): server weight less than zero [ 185.024949][ T7800] netlink: 96 bytes leftover after parsing attributes in process `syz.4.826'. [ 185.416918][ T38] audit: type=1326 audit(1756055206.866:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7812 comm="syz.2.833" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f284c6debe9 code=0x0 [ 186.467472][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 186.552870][ T7854] sp0: Synchronizing with TNC [ 186.566387][ T7853] [U] [ 186.614747][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 186.638503][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 186.638534][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.638554][ T9] usb 4-1: Product: syz [ 186.638569][ T9] usb 4-1: Manufacturer: syz [ 186.638584][ T9] usb 4-1: SerialNumber: syz [ 186.690271][ T9] usb 4-1: config 0 descriptor?? [ 186.776670][ T7863] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 186.776732][ T7863] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 186.776828][ T7863] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 186.777094][ T7863] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 186.777147][ T7863] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 186.777218][ T7863] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 186.777361][ T7863] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 186.777414][ T7863] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 186.777467][ T7863] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 186.777574][ T7863] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 186.777627][ T7863] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 186.777684][ T7863] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 186.777780][ T7863] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 186.777834][ T7863] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 186.777891][ T7863] comedi comedi3: 8255: I/O port conflict (0x4000000,4) [ 186.777942][ T7863] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 186.778004][ T7863] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 186.778059][ T7863] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 186.778162][ T7863] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 186.778214][ T7863] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 186.778267][ T7863] comedi comedi3: 8255: I/O port conflict (0x8000000,4) [ 186.778318][ T7863] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4) [ 186.938987][ T9] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 187.309228][ T9] usb write operation failed. (-71) [ 187.337735][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 187.338367][ T9] dvbdev: DVB: registering new adapter (Terratec H7) [ 187.338421][ T9] usb 4-1: media controller created [ 187.338932][ T9] usb read operation failed. (-71) [ 187.340097][ T9] usb write operation failed. (-71) [ 187.344408][ T9] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 187.364771][ T6426] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 187.390148][ T7879] netlink: 'syz.4.864': attribute type 2 has an invalid length. [ 187.409569][ T9] usb 4-1: USB disconnect, device number 7 [ 187.527151][ T6426] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 187.527187][ T6426] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.527225][ T6426] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 187.527248][ T6426] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.542073][ T6426] usb 3-1: config 0 descriptor?? [ 187.940150][ T7887] netlink: 36 bytes leftover after parsing attributes in process `syz.4.868'. [ 188.011654][ T6426] bigben 0003:146B:0902.0012: unexpected rdesc, please submit for review [ 188.025825][ T6426] bigben 0003:146B:0902.0012: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.2-1/input0 [ 188.025857][ T6426] bigben 0003:146B:0902.0012: not enough fields in HID_OUTPUT_REPORT 0 [ 188.025874][ T6426] bigben 0003:146B:0902.0012: no output report found [ 188.225661][ T5922] usb 3-1: USB disconnect, device number 12 [ 188.299063][ T7899] IPVS: ip_vs_add_dest(): server weight less than zero [ 188.303838][ T5909] IPVS: starting estimator thread 0... [ 188.334762][ T6426] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 188.394815][ T7900] IPVS: using max 7 ests per chain, 16800 per kthread [ 188.487671][ T6426] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.487725][ T6426] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 188.487750][ T6426] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.515030][ T6426] usb 4-1: config 0 descriptor?? [ 188.717967][ T38] audit: type=1326 audit(1756055210.166:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7913 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a24c7ebe9 code=0x7ffc0000 [ 188.719469][ T38] audit: type=1326 audit(1756055210.166:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7913 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a24c7ebe9 code=0x7ffc0000 [ 188.721737][ T38] audit: type=1326 audit(1756055210.166:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7913 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f8a24c7ebe9 code=0x7ffc0000 [ 188.722234][ T38] audit: type=1326 audit(1756055210.166:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7913 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a24c7ebe9 code=0x7ffc0000 [ 188.723344][ T38] audit: type=1326 audit(1756055210.166:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7913 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f8a24c7ebe9 code=0x7ffc0000 [ 188.723778][ T38] audit: type=1326 audit(1756055210.166:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7913 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a24c7ebe9 code=0x7ffc0000 [ 188.724407][ T38] audit: type=1326 audit(1756055210.166:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7913 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a24c7ebe9 code=0x7ffc0000 [ 189.095076][ T6426] lua 0003:1E7D:2C2E.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.3-1/input0 [ 189.228804][ T38] audit: type=1326 audit(1756055210.676:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7919 comm="syz.4.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a24c7ebe9 code=0x7ffc0000 [ 189.228860][ T38] audit: type=1326 audit(1756055210.676:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7919 comm="syz.4.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a24c7ebe9 code=0x7ffc0000 [ 189.232150][ T38] audit: type=1326 audit(1756055210.676:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7919 comm="syz.4.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f8a24c7ebe9 code=0x7ffc0000 [ 189.265313][ T5922] usb 4-1: USB disconnect, device number 8 [ 189.744827][ T6426] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 189.770554][ T7928] program syz.5.885 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.910658][ T6426] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 189.910687][ T6426] usb 5-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 189.910704][ T6426] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 189.910722][ T6426] usb 5-1: config 8 has no interface number 0 [ 189.910769][ T6426] usb 5-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 189.910794][ T6426] usb 5-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 189.925677][ T6426] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 189.925713][ T6426] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.925737][ T6426] usb 5-1: Product: syz [ 189.925754][ T6426] usb 5-1: Manufacturer: syz [ 189.925769][ T6426] usb 5-1: SerialNumber: syz [ 190.234199][ T6426] usb 5-1: USB disconnect, device number 9 [ 190.744670][ T5909] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 190.795593][ T7917] syz.2.880 (7917): drop_caches: 2 [ 190.804725][ T6426] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 190.894635][ T5909] usb 4-1: Using ep0 maxpacket: 8 [ 190.897052][ T5909] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 190.897084][ T5909] usb 4-1: config 0 interface 0 has no altsetting 0 [ 190.897119][ T5909] usb 4-1: New USB device found, idVendor=044f, idProduct=b300, bcdDevice= 0.00 [ 190.897142][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.951713][ T5909] usb 4-1: config 0 descriptor?? [ 190.967788][ T6426] usb 6-1: Using ep0 maxpacket: 32 [ 190.970522][ T6426] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.970554][ T6426] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.970600][ T6426] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 190.970622][ T6426] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.988891][ T6426] usb 6-1: config 0 descriptor?? [ 191.460627][ T6426] ft260 0003:0403:6030.0015: unbalanced collection at end of report description [ 191.461472][ T6426] ft260 0003:0403:6030.0015: failed to parse HID [ 191.461575][ T6426] ft260 0003:0403:6030.0015: probe with driver ft260 failed with error -22 [ 191.461593][ T1818] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 191.497656][ T5909] thrustmaster 0003:044F:B300.0014: hidraw0: USB HID v0.03 Device [HID 044f:b300] on usb-dummy_hcd.3-1/input0 [ 191.497698][ T5909] thrustmaster 0003:044F:B300.0014: no inputs found [ 191.641275][ T6426] usb 4-1: USB disconnect, device number 9 [ 191.655264][ T1818] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 191.655291][ T1818] usb 3-1: config 1 has no interface number 0 [ 191.655343][ T1818] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 191.655368][ T1818] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 191.655394][ T1818] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.666035][ T1818] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 191.666063][ T1818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.666085][ T1818] usb 3-1: Product: syz [ 191.666101][ T1818] usb 3-1: Manufacturer: syz [ 191.666115][ T1818] usb 3-1: SerialNumber: syz [ 191.761013][ T5921] usb 6-1: USB disconnect, device number 8 [ 191.779123][ T7954] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 191.995075][ T7954] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 192.263779][ T1818] sierra_net 3-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 192.409478][ T1818] sierra_net 3-1:1.7 wwan0: Submit SYNC failed -71 [ 192.409509][ T1818] sierra_net 3-1:1.7 wwan0: Send SYNC failed, status -71 [ 192.413957][ T1818] sierra_net 3-1:1.7 wwan0: Submit SYNC failed -71 [ 192.413984][ T1818] sierra_net 3-1:1.7 wwan0: Send SYNC failed, status -71 [ 192.479890][ T1818] usb 3-1: USB disconnect, device number 13 [ 192.489526][ T1818] sierra_net 3-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem [ 192.638494][ T1818] sierra_net 3-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 192.904743][ T991] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 193.054723][ T991] usb 6-1: Using ep0 maxpacket: 32 [ 193.062230][ T991] usb 6-1: config 0 interface 0 has no altsetting 0 [ 193.085620][ T991] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 193.085651][ T991] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.085671][ T991] usb 6-1: Product: syz [ 193.085685][ T991] usb 6-1: Manufacturer: syz [ 193.085699][ T991] usb 6-1: SerialNumber: syz [ 193.137690][ T991] usb 6-1: config 0 descriptor?? [ 193.412484][ T8002] netlink: 56 bytes leftover after parsing attributes in process `syz.3.920'. [ 193.414518][ T8002] netlink: 16 bytes leftover after parsing attributes in process `syz.3.920'. [ 193.442877][ T7999] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 193.569858][ T991] gs_usb 6-1:0.0: Couldn't get device config: (err=-121) [ 193.569906][ T991] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -121 [ 193.775770][ T5921] usb 6-1: USB disconnect, device number 9 [ 195.073238][ T8056] netlink: 28 bytes leftover after parsing attributes in process `syz.2.947'. [ 195.261680][ T8062] netlink: 140 bytes leftover after parsing attributes in process `syz.0.949'. [ 195.261743][ T8062] netlink: 16 bytes leftover after parsing attributes in process `syz.0.949'. [ 195.261761][ T8062] netlink: 5 bytes leftover after parsing attributes in process `syz.0.949'. [ 196.022576][ T991] kernel write not supported for file /input/mice (pid: 991 comm: kworker/0:2) [ 196.064319][ T8090] UBIFS error (pid: 8090): cannot open "c:::", error -22 [ 196.167003][ T8044] mmap: syz.5.941 (8044) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 196.269098][ T8092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.963'. [ 196.269124][ T8092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.963'. [ 196.269151][ T8092] netlink: 'syz.2.963': attribute type 5 has an invalid length. [ 196.269166][ T8092] netlink: 'syz.2.963': attribute type 6 has an invalid length. [ 196.618244][ T5154] Bluetooth: to_multiplier 53684 > 3200 [ 196.890053][ T8116] netlink: 28 bytes leftover after parsing attributes in process `syz.0.975'. [ 196.951333][ T38] kauditd_printk_skb: 2 callbacks suppressed [ 196.951352][ T38] audit: type=1326 audit(1756055218.396:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8119 comm="syz.5.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639d73ebe9 code=0x7ffc0000 [ 196.954801][ T38] audit: type=1326 audit(1756055218.396:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8119 comm="syz.5.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639d73ebe9 code=0x7ffc0000 [ 197.007200][ T38] audit: type=1326 audit(1756055218.456:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8119 comm="syz.5.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f639d73ebe9 code=0x7ffc0000 [ 197.007252][ T38] audit: type=1326 audit(1756055218.456:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8119 comm="syz.5.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639d73ebe9 code=0x7ffc0000 [ 197.007296][ T38] audit: type=1326 audit(1756055218.456:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8119 comm="syz.5.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639d73ebe9 code=0x7ffc0000 [ 197.007816][ T38] audit: type=1326 audit(1756055218.456:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8119 comm="syz.5.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f639d73ebe9 code=0x7ffc0000 [ 197.007863][ T38] audit: type=1326 audit(1756055218.456:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8119 comm="syz.5.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639d73ebe9 code=0x7ffc0000 [ 197.325644][ T8128] netlink: 24 bytes leftover after parsing attributes in process `syz.2.980'. [ 197.513857][ T8133] netlink: 'syz.2.983': attribute type 6 has an invalid length. [ 197.674761][ T5921] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 197.777240][ T8142] netlink: 'syz.2.988': attribute type 6 has an invalid length. [ 197.827900][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 197.827937][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.830444][ T5921] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 197.830474][ T5921] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 197.830495][ T5921] usb 5-1: Manufacturer: syz [ 197.870189][ T5921] usb 5-1: config 0 descriptor?? [ 198.318279][ T5921] hid_parser_main: 1 callbacks suppressed [ 198.318304][ T5921] cougar 0003:060B:700A.0016: unknown main item tag 0x0 [ 198.318335][ T5921] cougar 0003:060B:700A.0016: unknown main item tag 0x0 [ 198.318362][ T5921] cougar 0003:060B:700A.0016: unknown main item tag 0x0 [ 198.318389][ T5921] cougar 0003:060B:700A.0016: unknown main item tag 0x0 [ 198.318415][ T5921] cougar 0003:060B:700A.0016: unknown main item tag 0x0 [ 198.355226][ T5921] cougar 0003:060B:700A.0016: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 198.502900][ T991] usb 5-1: USB disconnect, device number 10 [ 198.674675][ T5154] Bluetooth: hci4: command tx timeout [ 198.735611][ T8169] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1002'. [ 198.743215][ T8172] netlink: 'syz.3.1001': attribute type 1 has an invalid length. [ 198.743238][ T8172] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1001'. [ 198.743263][ T8172] netlink: 'syz.3.1001': attribute type 1 has an invalid length. [ 198.959172][ T8181] netlink: 'syz.3.1006': attribute type 2 has an invalid length. [ 199.137519][ T38] audit: type=1326 audit(1756055220.586:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8184 comm="syz.5.1009" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f639d73ebe9 code=0x0 [ 199.191169][ T8187] CUSE: DEVNAME unspecified [ 199.485620][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.485697][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.824761][ T5922] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 200.984720][ T5922] usb 5-1: Using ep0 maxpacket: 16 [ 200.987728][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.987759][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.987800][ T5922] usb 5-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00 [ 200.987823][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.047632][ T5922] usb 5-1: config 0 descriptor?? [ 201.481292][ T5922] apple 0003:05AC:0246.0017: unknown global tag 0xc [ 201.481316][ T5922] apple 0003:05AC:0246.0017: item 0 2 1 12 parsing failed [ 201.482176][ T5922] apple 0003:05AC:0246.0017: parse failed [ 201.482286][ T5922] apple 0003:05AC:0246.0017: probe with driver apple failed with error -22 [ 201.693728][ T9] usb 5-1: USB disconnect, device number 11 [ 201.774752][ T5922] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 201.937061][ T5922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.937092][ T5922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.937125][ T5922] usb 6-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 201.937147][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.986298][ T5922] usb 6-1: config 0 descriptor?? [ 202.449424][ T5922] dragonrise 0003:0079:0006.0018: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.5-1/input0 [ 202.449459][ T5922] dragonrise 0003:0079:0006.0018: no inputs found [ 202.449474][ T5922] dragonrise 0003:0079:0006.0018: force feedback init failed [ 202.621480][ T9] usb 6-1: USB disconnect, device number 10 [ 202.751317][ T8274] macsec1: entered promiscuous mode [ 202.751341][ T8274] team0: entered promiscuous mode [ 202.751356][ T8274] team_slave_0: entered promiscuous mode [ 202.751620][ T8274] team_slave_1: entered promiscuous mode [ 202.752202][ T8274] macsec1: entered allmulticast mode [ 202.752218][ T8274] team0: entered allmulticast mode [ 202.752231][ T8274] team_slave_0: entered allmulticast mode [ 202.752252][ T8274] team_slave_1: entered allmulticast mode [ 202.769743][ T8274] team0: Device macsec1 is already an upper device of the team interface [ 202.870994][ T8274] team0: left allmulticast mode [ 202.871021][ T8274] team_slave_0: left allmulticast mode [ 202.871045][ T8274] team_slave_1: left allmulticast mode [ 202.871076][ T8274] team0: left promiscuous mode [ 202.871088][ T8274] team_slave_0: left promiscuous mode [ 202.871367][ T8274] team_slave_1: left promiscuous mode [ 204.024628][ T991] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 204.034321][ T8319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1071'. [ 204.189759][ T991] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 204.189793][ T991] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.189814][ T991] usb 6-1: Product: syz [ 204.189829][ T991] usb 6-1: Manufacturer: syz [ 204.189844][ T991] usb 6-1: SerialNumber: syz [ 204.207319][ T991] usb 6-1: config 0 descriptor?? [ 204.229785][ T991] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 204.848856][ T991] gspca_sunplus: reg_r err -71 [ 204.848960][ T991] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 204.870283][ T991] usb 6-1: USB disconnect, device number 11 [ 205.407824][ T8357] binder: 8356:8357 ioctl 400c620e 200000000000 returned -22 [ 206.164640][ T991] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 206.344913][ T991] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 206.344940][ T991] usb 5-1: config 0 has no interface number 0 [ 206.344984][ T991] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 206.345007][ T991] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 206.345032][ T991] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 206.345056][ T991] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 206.345080][ T991] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 206.345103][ T991] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 206.345140][ T991] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 206.345158][ T991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.353663][ T991] usb 5-1: config 0 descriptor?? [ 206.361348][ T8377] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 206.361470][ T8377] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 206.397396][ T991] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 206.555276][ T6426] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 206.603263][ T5909] usb 5-1: USB disconnect, device number 12 [ 206.640410][ T5909] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 206.704702][ T6426] usb 4-1: Using ep0 maxpacket: 8 [ 206.712921][ T6426] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 206.712952][ T6426] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.713044][ T6426] usb 4-1: Product: syz [ 206.713061][ T6426] usb 4-1: Manufacturer: syz [ 206.713075][ T6426] usb 4-1: SerialNumber: syz [ 206.766735][ T6426] usb 4-1: config 0 descriptor?? [ 206.790371][ T6426] gspca_main: se401-2.14.0 probing 047d:5003 [ 207.197189][ T6426] gspca_se401: Wrong descriptor type [ 207.405563][ T5909] usb 4-1: USB disconnect, device number 10 [ 207.877203][ T8439] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1130'. [ 207.877245][ T8439] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1130'. [ 208.057875][ T38] audit: type=1326 audit(1756055229.506:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8442 comm="syz.5.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639d73ebe9 code=0x7ffc0000 [ 208.094770][ T38] audit: type=1326 audit(1756055229.506:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8442 comm="syz.5.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639d73ebe9 code=0x7ffc0000 [ 208.094838][ T38] audit: type=1326 audit(1756055229.536:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8442 comm="syz.5.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f639d73ebe9 code=0x7ffc0000 [ 208.094892][ T38] audit: type=1326 audit(1756055229.536:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8442 comm="syz.5.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639d73ebe9 code=0x7ffc0000 [ 208.094943][ T38] audit: type=1326 audit(1756055229.536:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8442 comm="syz.5.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639d73ebe9 code=0x7ffc0000 [ 208.094996][ T38] audit: type=1326 audit(1756055229.536:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8442 comm="syz.5.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f639d73ebe9 code=0x7ffc0000 [ 208.095885][ T38] audit: type=1326 audit(1756055229.546:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8442 comm="syz.5.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639d73ebe9 code=0x7ffc0000 [ 208.095940][ T38] audit: type=1326 audit(1756055229.546:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8442 comm="syz.5.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639d73ebe9 code=0x7ffc0000 [ 208.101002][ T8445] delete_channel: no stack [ 209.225411][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1153'. [ 209.225461][ T8487] netlink: 'syz.5.1153': attribute type 7 has an invalid length. [ 209.334853][ T5909] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 209.484761][ T5909] usb 5-1: Using ep0 maxpacket: 16 [ 209.490621][ T5909] usb 5-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 209.490651][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.490672][ T5909] usb 5-1: Product: syz [ 209.490686][ T5909] usb 5-1: Manufacturer: syz [ 209.490712][ T5909] usb 5-1: SerialNumber: syz [ 209.537200][ T5909] usb 5-1: config 0 descriptor?? [ 209.567222][ T5909] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 209.768665][ T5909] gspca_sn9c2028: read1 error -32 [ 209.972805][ T5909] gspca_sn9c2028: read1 error -71 [ 209.972904][ T5909] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -71 [ 209.999450][ T5909] usb 5-1: USB disconnect, device number 13 [ 210.559227][ T38] audit: type=1800 audit(1756055231.996:66): pid=8518 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.1169" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 211.795023][ T8558] netlink: 'syz.5.1189': attribute type 2 has an invalid length. [ 211.824807][ T1818] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 211.980567][ T1818] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 211.980598][ T1818] usb 4-1: config 8 has no interface number 0 [ 211.980648][ T1818] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 211.980677][ T1818] usb 4-1: config 8 interface 177 has no altsetting 0 [ 211.980713][ T1818] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 211.980744][ T1818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.054093][ T8555] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 212.153979][ T8570] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1194'. [ 212.317483][ T8574] tipc: Enabling of bearer rejected, failed to enable media [ 212.509812][ C0] ir_toy 4-1:8.177: out urb status: -71 [ 213.014757][ T1818] ir_toy 4-1:8.177: could not write reset command: -110 [ 213.015048][ T1818] ir_toy 4-1:8.177: probe with driver ir_toy failed with error -110 [ 213.044196][ T1818] usb 4-1: USB disconnect, device number 11 [ 213.714170][ T8610] syz.5.1212 (8610) used greatest stack depth: 18968 bytes left [ 213.876465][ T8620] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 213.886264][ T6426] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 214.047131][ T6426] usb 3-1: Using ep0 maxpacket: 16 [ 214.049906][ T6426] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 214.049955][ T6426] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.049982][ T6426] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.050005][ T6426] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 214.050049][ T6426] usb 3-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 214.050073][ T6426] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.057220][ T6426] usb 3-1: config 0 descriptor?? [ 214.563628][ T6426] logitech 0003:046D:C294.0019: hidraw0: USB HID v0.00 Device [HID 046d:c294] on usb-dummy_hcd.2-1/input0 [ 214.563674][ T6426] logitech 0003:046D:C294.0019: no inputs found [ 214.600272][ T8638] Bluetooth: MGMT ver 1.23 [ 214.760398][ T1818] usb 3-1: USB disconnect, device number 14 [ 215.934880][ T5921] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 216.013466][ T8631] syz.5.1224 (8631): drop_caches: 2 [ 216.090614][ T5921] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 216.090647][ T5921] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 216.090682][ T5921] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 216.093815][ T5921] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 216.093844][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.093867][ T5921] usb 3-1: Product: syz [ 216.093882][ T5921] usb 3-1: Manufacturer: syz [ 216.093897][ T5921] usb 3-1: SerialNumber: syz [ 216.181423][ T5921] hub 3-1:1.0: bad descriptor, ignoring hub [ 216.181464][ T5921] hub 3-1:1.0: probe with driver hub failed with error -5 [ 216.402764][ T5921] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 216.705265][ T991] usb 3-1: USB disconnect, device number 15 [ 216.736134][ T991] usblp0: removed [ 216.926363][ T8645] Bluetooth: hci0: command 0x0406 tx timeout [ 216.926400][ T8645] Bluetooth: hci2: command 0x0406 tx timeout [ 216.926427][ T8645] Bluetooth: hci3: command 0x0406 tx timeout [ 217.145322][ T8696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1253'. [ 217.145351][ T8696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1253'. [ 217.184774][ T5909] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 217.354319][ T5909] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.354347][ T5909] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 217.356376][ T5909] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 217.356410][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 217.356433][ T5909] usb 4-1: SerialNumber: syz [ 217.608680][ T5909] usb 4-1: 0:2 : does not exist [ 217.608804][ T5909] usb 4-1: unit 255 not found! [ 217.772864][ T5909] usb 4-1: USB disconnect, device number 12 [ 217.838432][ T8715] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1261'. [ 218.681922][ T8747] netlink: 'syz.0.1273': attribute type 12 has an invalid length. [ 218.681946][ T8747] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1273'. [ 218.984721][ T5909] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 219.108467][ T8764] tipc: Enabling of bearer rejected, failed to enable media [ 219.134644][ T5909] usb 5-1: Using ep0 maxpacket: 32 [ 219.137195][ T5909] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 219.137220][ T5909] usb 5-1: config 0 has no interface number 0 [ 219.137268][ T5909] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 219.137294][ T5909] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 219.137319][ T5909] usb 5-1: config 0 interface 85 has no altsetting 0 [ 219.154327][ T5909] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 219.154359][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.154381][ T5909] usb 5-1: Product: syz [ 219.154397][ T5909] usb 5-1: Manufacturer: syz [ 219.154412][ T5909] usb 5-1: SerialNumber: syz [ 219.178801][ T5909] usb 5-1: config 0 descriptor?? [ 219.424314][ T5909] appletouch 5-1:0.85: Failed to read mode from device. [ 219.425117][ T5909] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 219.516083][ T8778] netlink: 'syz.2.1288': attribute type 29 has an invalid length. [ 219.643512][ T8786] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1291'. [ 219.675724][ T6426] usb 5-1: USB disconnect, device number 14 [ 220.533596][ T8814] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 220.595428][ T5909] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 220.749946][ T5909] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.749985][ T5909] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 220.750045][ T5909] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 220.750069][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.762167][ T5909] usb 5-1: config 0 descriptor?? [ 220.769055][ T5909] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 220.769118][ T5909] dvb-usb: bulk message failed: -22 (3/0) [ 220.802702][ T5909] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 220.810506][ T5909] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 220.810573][ T5909] usb 5-1: media controller created [ 220.827291][ T5909] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 220.878845][ T5909] dvb-usb: bulk message failed: -22 (6/0) [ 220.879000][ T5909] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 220.906872][ T5909] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input14 [ 220.924721][ T5909] dvb-usb: schedule remote query interval to 150 msecs. [ 220.924748][ T5909] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 221.036207][ T8808] dvb-usb: bulk message failed: -22 (4/0) [ 221.038132][ T5909] usb 5-1: USB disconnect, device number 15 [ 221.202037][ T5909] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 221.481114][ T8845] sp0: Synchronizing with TNC [ 221.493609][ T8845] sp0: Found TNC [ 222.319053][ T8868] netlink: 'syz.0.1332': attribute type 1 has an invalid length. [ 222.319090][ T8868] NCSI netlink: No device for ifindex 0 [ 222.364719][ T991] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 222.520830][ T991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.520864][ T991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.520905][ T991] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 222.520928][ T991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.536175][ T991] usb 3-1: config 0 descriptor?? [ 222.704737][ T5921] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 222.764088][ T6426] kernel write not supported for file /media1 (pid: 6426 comm: kworker/1:6) [ 222.857593][ T5921] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.857626][ T5921] usb 6-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 222.857656][ T5921] usb 6-1: config 0 interface 0 has no altsetting 0 [ 222.857691][ T5921] usb 6-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 222.857717][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.915630][ T5921] usb 6-1: config 0 descriptor?? [ 222.979471][ T991] lg-g15 0003:046D:C222.001A: unknown main item tag 0x0 [ 222.983589][ T991] lg-g15 0003:046D:C222.001A: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 223.181530][ T991] usb 3-1: USB disconnect, device number 16 [ 223.205164][ T5909] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 223.346197][ T5921] kye 0003:0458:501A.001B: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 223.365906][ T5921] kye 0003:0458:501A.001B: hidraw0: USB HID v0.01 Device [HID 0458:501a] on usb-dummy_hcd.5-1/input0 [ 223.365942][ T5921] kye 0003:0458:501A.001B: tablet-enabling feature report not found [ 223.365971][ T5921] kye 0003:0458:501A.001B: tablet enabling failed [ 223.371701][ T5909] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.371727][ T5909] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 223.371750][ T5909] usb 4-1: config 1 has no interface number 0 [ 223.371802][ T5909] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.371838][ T5909] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 223.371874][ T5909] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 223.409745][ T5909] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 223.409779][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.409803][ T5909] usb 4-1: Product: syz [ 223.409825][ T5909] usb 4-1: Manufacturer: syz [ 223.409861][ T5909] usb 4-1: SerialNumber: syz [ 223.557938][ T5921] usb 6-1: USB disconnect, device number 12 [ 224.215028][ T5909] cdc_ncm 4-1:1.1: bind() failure [ 224.234886][ T5909] usb 4-1: USB disconnect, device number 13 [ 224.555496][ T8919] delete_channel: no stack [ 224.557318][ T8918] delete_channel: no stack [ 224.674693][ T5921] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 224.841882][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 224.841937][ T5921] usb 5-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 224.841962][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.886987][ T5921] usb 5-1: config 0 descriptor?? [ 224.910161][ T8932] tipc: Enabling of bearer rejected, failed to enable media [ 225.066492][ T5909] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 225.229378][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.229414][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.229454][ T5909] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 225.229480][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.238056][ T5909] usb 3-1: config 0 descriptor?? [ 225.346598][ T5921] asus 0003:0B05:17E0.001C: item fetching failed at offset 2/5 [ 225.347482][ T5921] asus 0003:0B05:17E0.001C: Asus hid parse failed: -22 [ 225.347610][ T5921] asus 0003:0B05:17E0.001C: probe with driver asus failed with error -22 [ 225.569871][ T45] usb 5-1: USB disconnect, device number 16 [ 225.883455][ T5909] hid-led 0003:27B8:01ED.001D: probe with driver hid-led failed with error -71 [ 225.896903][ T5909] usb 3-1: USB disconnect, device number 17 [ 227.964711][ T5909] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 228.075382][ T9009] syz.4.1391 (9009): drop_caches: 2 [ 228.129508][ T5909] usb 6-1: Using ep0 maxpacket: 16 [ 228.132089][ T5909] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.132114][ T5909] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 228.136161][ T5909] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 228.136194][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.136219][ T5909] usb 6-1: Product: syz [ 228.136235][ T5909] usb 6-1: Manufacturer: syz [ 228.136252][ T5909] usb 6-1: SerialNumber: syz [ 228.471295][ T5909] usb 6-1: USB disconnect, device number 13 [ 228.779451][ T9037] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 229.458250][ T9059] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1418'. [ 229.824664][ T5909] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 229.985184][ T5909] usb 4-1: Using ep0 maxpacket: 8 [ 229.988437][ T5909] usb 4-1: unable to get BOS descriptor or descriptor too short [ 229.990048][ T5909] usb 4-1: too many endpoints for config 4 interface 0 altsetting 102: 65, using maximum allowed: 30 [ 229.990111][ T5909] usb 4-1: config 4 interface 0 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 65 [ 229.990159][ T5909] usb 4-1: config 4 interface 0 has no altsetting 0 [ 230.009978][ T5909] usb 4-1: string descriptor 0 read error: -22 [ 230.010172][ T5909] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 230.010199][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.062297][ T5909] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 230.097273][ T5909] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 230.098929][ T5909] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 230.098984][ T5909] usb 4-1: media controller created [ 230.262284][ T5909] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 230.269315][ T9065] usb 4-1: dvb_usb_au6610: wlen=0, aborting [ 230.363845][ T5909] zl10353_read_register: readreg error (reg=127, ret==0) [ 230.503190][ T5909] usb 4-1: USB disconnect, device number 14 [ 231.384018][ T9120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1448'. [ 231.746990][ T9130] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 231.747020][ T9130] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 231.768970][ T9130] vhci_hcd vhci_hcd.0: Device attached [ 231.824681][ T5921] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 231.934814][ T9] vhci_hcd: vhci_device speed not set [ 231.976306][ T5921] usb 4-1: Using ep0 maxpacket: 8 [ 231.978727][ T5921] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 231.984122][ T5921] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 231.984152][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.984173][ T5921] usb 4-1: Product: syz [ 231.984188][ T5921] usb 4-1: Manufacturer: syz [ 231.984204][ T5921] usb 4-1: SerialNumber: syz [ 231.994778][ T9] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 232.014643][ T45] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 232.076879][ T5921] usb 4-1: config 0 descriptor?? [ 232.099054][ T5921] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 232.099108][ T5921] usb 4-1: setting power ON [ 232.099129][ T5921] dvb-usb: bulk message failed: -22 (2/0) [ 232.118477][ T9141] [U] N{st3 )Lbo7UюNQʈ tQZ4s [ 232.145767][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 232.155662][ T5921] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 232.155726][ T5921] usb 4-1: media controller created [ 232.190257][ T45] usb 6-1: config 0 has no interfaces? [ 232.190293][ T45] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 232.190318][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.219745][ T45] usb 6-1: config 0 descriptor?? [ 232.245411][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 232.288510][ T5921] usb 4-1: selecting invalid altsetting 6 [ 232.288538][ T5921] usb 4-1: digital interface selection failed (-22) [ 232.288554][ T5921] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 232.306198][ T9124] dvb-usb: bulk message failed: -22 (3/0) [ 232.306228][ T9124] dvb-usb: bulk message failed: -22 (3/0) [ 232.327769][ T5921] usb 4-1: setting power OFF [ 232.327795][ T5921] dvb-usb: bulk message failed: -22 (2/0) [ 232.327813][ T5921] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 232.327827][ T5921] (NULL device *): no alternate interface [ 232.381710][ T9147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1460'. [ 232.381880][ T9147] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1460'. [ 232.437403][ T9131] vhci_hcd: unknown pdu 2 [ 232.452708][ T991] usb 6-1: USB disconnect, device number 14 [ 232.457483][ T70] vhci_hcd: stop threads [ 232.458589][ T70] vhci_hcd: release socket [ 232.471160][ T70] vhci_hcd: disconnect device [ 232.484066][ T5921] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 232.510400][ T5921] usb 4-1: USB disconnect, device number 15 [ 232.520087][ T9] vhci_hcd: vhci_device speed not set [ 232.741487][ T9156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1463'. [ 232.864465][ T9162] netlink: 'syz.4.1467': attribute type 2 has an invalid length. [ 233.024649][ T5921] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 233.130610][ T9169] netlink: 'syz.4.1470': attribute type 3 has an invalid length. [ 233.195212][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.195244][ T5921] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 233.195290][ T5921] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 233.195314][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.256424][ T5921] usb 3-1: config 0 descriptor?? [ 233.547864][ T9182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1477'. [ 233.693147][ T5921] koneplus 0003:1E7D:2D51.001E: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 233.888543][ T9] usb 3-1: USB disconnect, device number 18 [ 233.945732][ T9197] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1483'. [ 233.945822][ T9197] netlink: 'syz.4.1483': attribute type 5 has an invalid length. [ 234.539876][ T38] audit: type=1326 audit(1756055255.986:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9223 comm="syz.0.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa898adebe9 code=0x7ffc0000 [ 234.546477][ T38] audit: type=1326 audit(1756055255.996:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9223 comm="syz.0.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa898adebe9 code=0x7ffc0000 [ 234.579856][ T38] audit: type=1326 audit(1756055256.026:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9223 comm="syz.0.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fa898adebe9 code=0x7ffc0000 [ 234.579926][ T38] audit: type=1326 audit(1756055256.026:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9223 comm="syz.0.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa898adebe9 code=0x7ffc0000 [ 234.579978][ T38] audit: type=1326 audit(1756055256.026:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9223 comm="syz.0.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa898adebe9 code=0x7ffc0000 [ 234.580039][ T38] audit: type=1326 audit(1756055256.026:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9223 comm="syz.0.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7fa898adebe9 code=0x7ffc0000 [ 234.580097][ T38] audit: type=1326 audit(1756055256.026:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9223 comm="syz.0.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa898adebe9 code=0x7ffc0000 [ 234.684693][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 234.844661][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 234.847672][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.847706][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.847748][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c343, bcdDevice= 0.00 [ 234.847774][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.871296][ T9] usb 6-1: config 0 descriptor?? [ 235.307756][ T9] logitech-hidpp-device 0003:046D:C343.001F: unbalanced delimiter at end of report description [ 235.308620][ T9] logitech-hidpp-device 0003:046D:C343.001F: hidpp_probe:parse failed [ 235.308725][ T9] logitech-hidpp-device 0003:046D:C343.001F: probe with driver logitech-hidpp-device failed with error -22 [ 235.505487][ T5909] usb 6-1: USB disconnect, device number 15 [ 236.202360][ T9258] netlink: 'syz.5.1510': attribute type 4 has an invalid length. [ 236.904785][ T5921] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 237.064718][ T5921] usb 4-1: Using ep0 maxpacket: 16 [ 237.072722][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.072760][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.072801][ T5921] usb 4-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 237.072827][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.121424][ T5921] usb 4-1: config 0 descriptor?? [ 237.552362][ T5921] waltop 0003:172F:0034.0020: item fetching failed at offset 0/2 [ 237.553236][ T5921] waltop 0003:172F:0034.0020: probe with driver waltop failed with error -22 [ 237.776358][ T5921] usb 4-1: USB disconnect, device number 16 [ 237.957872][ T9309] block nbd4: not configured, cannot reconfigure [ 238.384658][ T45] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 238.451451][ T9332] program syz.4.1546 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 238.544629][ T45] usb 6-1: Using ep0 maxpacket: 16 [ 238.551549][ T45] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 238.551575][ T45] usb 6-1: config 0 has no interface number 0 [ 238.551643][ T45] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 238.551669][ T45] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 238.596204][ T45] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 238.596235][ T45] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 238.596256][ T45] usb 6-1: Product: syz [ 238.596271][ T45] usb 6-1: SerialNumber: syz [ 238.647214][ T45] usb 6-1: config 0 descriptor?? [ 238.662618][ T45] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 238.677787][ T45] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input16 [ 238.959726][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 238.961722][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 238.961982][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 238.962378][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 238.962676][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 238.962922][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 238.963203][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 238.963886][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 238.963914][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 238.963968][ T45] usb 6-1: USB disconnect, device number 16 [ 239.077459][ T45] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 239.287298][ T9354] netlink: 'syz.3.1556': attribute type 2 has an invalid length. [ 239.364445][ T9354] : entered promiscuous mode [ 239.515653][ T9359] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1560'. [ 239.764664][ T9375] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1568'. [ 239.764721][ T9375] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1568'. [ 239.824752][ T5909] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 239.980300][ T5909] usb 5-1: Using ep0 maxpacket: 32 [ 239.982905][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.982938][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.982980][ T5909] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 239.983005][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.990195][ T5909] usb 5-1: config 0 descriptor?? [ 240.461873][ T5909] kone 0003:1E7D:2CED.0021: bogus close delimiter [ 240.461897][ T5909] kone 0003:1E7D:2CED.0021: item 0 0 2 10 parsing failed [ 240.462726][ T5909] kone 0003:1E7D:2CED.0021: parse failed [ 240.462799][ T5909] kone 0003:1E7D:2CED.0021: probe with driver kone failed with error -22 [ 240.685429][ T1818] usb 5-1: USB disconnect, device number 17 [ 241.580895][ T9433] netlink: 'syz.5.1595': attribute type 1 has an invalid length. [ 241.838164][ T9444] overlayfs: conflicting options: nfs_export=on,index=off [ 242.624962][ T1818] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 242.780708][ T1818] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.780788][ T1818] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 242.780857][ T1818] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 242.780887][ T1818] usb 4-1: config 1 interface 1 has no altsetting 0 [ 242.785935][ T1818] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 242.785971][ T1818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.785997][ T1818] usb 4-1: Product: syz [ 242.786014][ T1818] usb 4-1: Manufacturer: syz [ 242.786031][ T1818] usb 4-1: SerialNumber: syz [ 242.817678][ T1818] cdc_ncm 4-1:1.0: skipping garbage [ 242.817704][ T1818] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 242.835000][ T1818] cdc_ncm 4-1:1.0: bind() failure [ 243.080674][ T9465] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 243.303294][ T1818] usb 4-1: USB disconnect, device number 17 [ 243.719759][ T9503] program syz.0.1630 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.973963][ T38] audit: type=1326 audit(1756055265.416:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9508 comm="syz.0.1631" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa898adebe9 code=0x0 [ 244.215847][ T9507] syz.2.1633 (9507) used greatest stack depth: 16904 bytes left [ 244.224743][ T6426] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 244.374729][ T6426] usb 5-1: Using ep0 maxpacket: 32 [ 244.380649][ T6426] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.380688][ T6426] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.380727][ T6426] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 244.380752][ T6426] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.436934][ T6426] usb 5-1: config 0 descriptor?? [ 244.451974][ T6426] hub 5-1:0.0: USB hub found [ 244.491875][ T9527] netlink: 'syz.5.1641': attribute type 30 has an invalid length. [ 244.663174][ T6426] hub 5-1:0.0: 29 ports detected [ 244.663817][ T6426] hub 5-1:0.0: insufficient power available to use all downstream ports [ 244.676146][ T9531] xfs: Unexpected value for 'discard' [ 245.120199][ T6426] usb 5-1: USB disconnect, device number 18 [ 245.314693][ T1818] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 245.339232][ T9553] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 245.339376][ T9553] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 245.339935][ T9553] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 245.340017][ T9553] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 245.340325][ T9553] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 245.340399][ T9553] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 245.340687][ T9553] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 245.340769][ T9553] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 245.341485][ T9553] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 245.341566][ T9553] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 245.468462][ T1818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.468494][ T1818] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 245.468540][ T1818] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 245.468565][ T1818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.508703][ T1818] usb 3-1: config 0 descriptor?? [ 245.809628][ T9557] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 245.954314][ T1818] kye 0003:0458:5011.0022: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 245.964865][ T1818] kye 0003:0458:5011.0022: hidraw0: USB HID vff.fe Device [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 245.964909][ T1818] kye 0003:0458:5011.0022: tablet-enabling feature report not found [ 245.964928][ T1818] kye 0003:0458:5011.0022: tablet enabling failed [ 246.160660][ T45] usb 3-1: USB disconnect, device number 19 [ 246.199651][ T9567] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 246.199709][ T9567] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 246.199805][ T9567] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 246.199954][ T9567] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 246.200008][ T9567] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 246.200058][ T9567] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 246.200240][ T9567] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 246.200292][ T9567] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 246.200342][ T9567] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 246.200438][ T9567] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 246.200488][ T9567] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 246.200543][ T9567] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 246.203200][ T991] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 246.357183][ T991] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 246.357219][ T991] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 246.357245][ T991] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 246.361215][ T991] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 246.361245][ T991] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.361266][ T991] usb 6-1: Product: syz [ 246.361280][ T991] usb 6-1: Manufacturer: syz [ 246.361295][ T991] usb 6-1: SerialNumber: syz [ 246.399718][ T991] usb 6-1: config 0 descriptor?? [ 246.401384][ T9561] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 246.401678][ T9561] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 246.404370][ T991] usb 6-1: ucan: probing device on interface #0 [ 247.044230][ T991] ucan 6-1:0.0: probe with driver ucan failed with error -71 [ 247.080122][ T991] usb 6-1: USB disconnect, device number 17 [ 247.533781][ T9605] bridge1: entered promiscuous mode [ 247.533815][ T9605] bridge1: entered allmulticast mode [ 247.588449][ T9605] team0: Port device bridge1 added [ 248.328416][ T9636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1693'. [ 248.461408][ T9642] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1695'. [ 248.551156][ T9646] program syz.5.1697 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 248.893927][ T9660] program syz.4.1705 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 249.071511][ T9666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1707'. [ 249.959555][ T9700] mkiss: ax0: crc mode is auto. [ 250.287401][ T9716] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1730'. [ 251.254227][ T9755] net_ratelimit: 1053 callbacks suppressed [ 251.254248][ T9755] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.435627][ T9760] tmpfs: Bad value for 'mpol' [ 251.450863][ T9760] tmpfs: Bad value for 'mpol' [ 252.034699][ T5154] Bluetooth: hci1: command tx timeout [ 252.345960][ T9802] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1769'. [ 252.346016][ T9802] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 252.414643][ T9] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 252.567407][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 185: 33, using maximum allowed: 30 [ 252.567479][ T9] usb 3-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.567503][ T9] usb 3-1: config 0 interface 0 altsetting 185 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 252.567531][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 252.567583][ T9] usb 3-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 252.567608][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.573245][ T9] usb 3-1: config 0 descriptor?? [ 252.754720][ T5154] Bluetooth: hci4: command 0x0406 tx timeout [ 253.050218][ T9] nzxt-kraken2 0003:1E71:170E.0023: unknown main item tag 0x0 [ 253.050263][ T9] nzxt-kraken2 0003:1E71:170E.0023: unknown main item tag 0x0 [ 253.050290][ T9] nzxt-kraken2 0003:1E71:170E.0023: unknown main item tag 0x0 [ 253.050317][ T9] nzxt-kraken2 0003:1E71:170E.0023: unknown main item tag 0x0 [ 253.050344][ T9] nzxt-kraken2 0003:1E71:170E.0023: unknown main item tag 0x0 [ 253.094038][ T9] nzxt-kraken2 0003:1E71:170E.0023: hidraw0: USB HID v8.00 Device [HID 1e71:170e] on usb-dummy_hcd.2-1/input0 [ 253.244926][ T5922] usb 3-1: USB disconnect, device number 20 [ 254.129378][ T9859] netlink: 'syz.4.1798': attribute type 62 has an invalid length. [ 254.951517][ T9882] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1808'. [ 255.384776][ T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 255.534642][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 255.537104][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.537139][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.537164][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 255.537200][ T9] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 255.537224][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.542988][ T9] usb 6-1: config 0 descriptor?? [ 256.114667][ T991] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 256.257241][ T9] usb 6-1: USB disconnect, device number 18 [ 256.275072][ T991] usb 5-1: Using ep0 maxpacket: 8 [ 256.277456][ T991] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 256.277485][ T991] usb 5-1: config 0 has no interface number 0 [ 256.277623][ T991] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 256.277650][ T991] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 256.277678][ T991] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 256.277707][ T991] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 256.277751][ T991] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 256.277776][ T991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.372692][ T991] usb 5-1: config 0 descriptor?? [ 256.396631][ T991] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 256.614745][ T9934] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1833'. [ 256.614812][ T9934] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1833'. [ 256.619714][ T9] usb 5-1: USB disconnect, device number 19 [ 256.651927][ T9] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 257.035123][ T6426] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 257.189563][ T6426] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 257.189598][ T6426] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.189620][ T6426] usb 4-1: config 0 interface 0 has no altsetting 0 [ 257.189654][ T6426] usb 4-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 257.189677][ T6426] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.200212][ T6426] usb 4-1: config 0 descriptor?? [ 257.405075][ T5922] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 257.528192][ T9966] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1848'. [ 257.559486][ T5922] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 257.559516][ T5922] usb 6-1: config 0 has no interface number 0 [ 257.559611][ T5922] usb 6-1: too many endpoints for config 0 interface 2 altsetting 0: 129, using maximum allowed: 30 [ 257.559672][ T5922] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.559767][ T5922] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.559793][ T5922] usb 6-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 257.559840][ T5922] usb 6-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 257.559926][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.631178][ T5922] usb 6-1: config 0 descriptor?? [ 257.888513][ T5914] usb 4-1: USB disconnect, device number 18 [ 258.069527][ T5922] wacom 0003:056A:0084.0026: unknown main item tag 0x0 [ 258.069565][ T5922] wacom 0003:056A:0084.0026: unknown main item tag 0x0 [ 258.080335][ T5922] wacom 0003:056A:0084.0026: hidraw0: USB HID vff.ea Device [HID 056a:0084] on usb-dummy_hcd.5-1/input2 [ 258.253186][ T5914] usb 6-1: USB disconnect, device number 19 [ 258.562599][ T38] audit: type=1326 audit(1756055280.006:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9981 comm="syz.3.1856" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7e3dbebe9 code=0x0 [ 258.808147][ T9991] macsec1: entered promiscuous mode [ 258.808179][ T9991] macsec1: entered allmulticast mode [ 260.025271][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 260.175134][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 260.180127][ T9] usb 3-1: config 12 has an invalid interface number: 212 but max is 0 [ 260.180154][ T9] usb 3-1: config 12 has no interface number 0 [ 260.208008][ T9] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db98, bcdDevice=30.0c [ 260.208043][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.208064][ T9] usb 3-1: Product: syz [ 260.208079][ T9] usb 3-1: Manufacturer: syz [ 260.208094][ T9] usb 3-1: SerialNumber: syz [ 260.267001][ T9] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' in warm state. [ 260.267058][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 260.295110][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 260.297597][ T9] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)) [ 260.297659][ T9] usb 3-1: media controller created [ 260.356352][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 260.389173][ T9] cxusb: set interface failed [ 260.389195][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 260.389224][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 260.389245][ T9] usb 3-1: bluebird_gpio_write failed. [ 260.419490][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 260.419527][ T9] usb 3-1: bluebird_gpio_write failed. [ 260.491932][T10032] dvb-usb: bulk message failed: -22 (3/0) [ 260.494271][ T9] DVB: Unable to find symbol dib7000p_attach() [ 260.494285][ T9] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' [ 260.674646][ T9] rc_core: IR keymap rc-dvico-mce not found [ 260.674668][ T9] Registered IR keymap rc-empty [ 260.678333][ T9] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 260.681402][ T9] input: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input21 [ 260.733954][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 260.733979][ T9] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) successfully initialized and connected. [ 260.755388][ T9] usb 3-1: USB disconnect, device number 21 [ 260.823670][ T6426] IPVS: starting estimator thread 0... [ 260.890352][ T9] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 ( successfully deinitialized and disconnected. [ 260.906780][T10065] IPVS: using max 9 ests per chain, 21600 per kthread [ 260.922576][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.922667][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.945076][ T45] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 261.108303][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 261.109557][ T45] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 261.109596][ T45] usb 5-1: can't read configurations, error -71 [ 261.949808][T10102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1909'. [ 262.054416][T10106] comedi comedi3: 8255: I/O port conflict (0x10003,4) [ 262.073161][T10106] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 262.073226][T10106] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 262.073409][T10106] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 262.073455][T10106] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 262.073522][T10106] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 263.712373][T10150] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 263.712433][T10150] comedi comedi3: 8255: I/O port conflict (0x8000006,4) [ 263.712486][T10150] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 263.712537][T10150] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 263.712588][T10150] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 263.712704][T10150] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4) [ 263.712756][T10150] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 263.712813][T10150] comedi comedi3: 8255: I/O port conflict (0x3000000,4) [ 264.458074][T10168] sg_write: data in/out 10372/14 bytes for SCSI command 0x0-- guessing data in; [ 264.458074][T10168] program syz.4.1941 not setting count and/or reply_len properly [ 266.194844][ T6426] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 266.358864][ T6426] usb 5-1: Using ep0 maxpacket: 16 [ 266.363662][ T6426] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 266.363691][ T6426] usb 5-1: config 0 has no interface number 0 [ 266.363741][ T6426] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 266.370774][ T6426] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 266.370809][ T6426] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.370832][ T6426] usb 5-1: Product: syz [ 266.370850][ T6426] usb 5-1: Manufacturer: syz [ 266.370867][ T6426] usb 5-1: SerialNumber: syz [ 266.384673][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 266.412199][ T6426] usb 5-1: config 0 descriptor?? [ 266.534643][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 266.540443][ T9] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 266.540476][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.540498][ T9] usb 4-1: Product: syz [ 266.540514][ T9] usb 4-1: Manufacturer: syz [ 266.540529][ T9] usb 4-1: SerialNumber: syz [ 266.587389][ T9] usb 4-1: config 0 descriptor?? [ 266.600439][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 267.061123][ T6426] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 267.078225][ T6426] usb 5-1: USB disconnect, device number 22 [ 267.226866][ T9] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input23 [ 267.294971][ T9] usb 4-1: USB disconnect, device number 19 [ 267.920924][ T38] audit: type=1326 audit(1756055289.366:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10275 comm="syz.3.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e3dbebe9 code=0x7ffc0000 [ 267.920986][ T38] audit: type=1326 audit(1756055289.366:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10275 comm="syz.3.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e3dbebe9 code=0x7ffc0000 [ 267.925907][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 267.948502][ T38] audit: type=1326 audit(1756055289.396:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10275 comm="syz.3.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fd7e3dbebe9 code=0x7ffc0000 [ 267.950011][ T38] audit: type=1326 audit(1756055289.396:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10275 comm="syz.3.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e3dbebe9 code=0x7ffc0000 [ 267.951529][ T38] audit: type=1326 audit(1756055289.396:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10275 comm="syz.3.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fd7e3dbebe9 code=0x7ffc0000 [ 267.951587][ T38] audit: type=1326 audit(1756055289.396:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10275 comm="syz.3.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e3dbebe9 code=0x7ffc0000 [ 268.087198][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.087231][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 268.087281][ T9] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 268.087305][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.092636][ T9] usb 6-1: config 0 descriptor?? [ 268.525129][ T6426] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 268.556052][ T9] kovaplus 0003:1E7D:2D50.0027: item fetching failed at offset 2/5 [ 268.556870][ T9] kovaplus 0003:1E7D:2D50.0027: parse failed [ 268.556944][ T9] kovaplus 0003:1E7D:2D50.0027: probe with driver kovaplus failed with error -22 [ 268.684643][ T6426] usb 4-1: Using ep0 maxpacket: 32 [ 268.689241][ T6426] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.689290][ T6426] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 268.689321][ T6426] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.712724][ T6426] usb 4-1: config 0 descriptor?? [ 268.741989][ T9] usb 6-1: USB disconnect, device number 20 [ 269.190801][ T6426] mcp2200 0003:04D8:00DF.0028: USB HID v0.00 Device [HID 04d8:00df] on usb-dummy_hcd.3-1/input0 [ 269.409641][ T6426] usb 4-1: USB disconnect, device number 20 [ 269.763884][T10310] netlink: 'syz.5.2008': attribute type 1 has an invalid length. [ 269.763905][T10310] netlink: 212 bytes leftover after parsing attributes in process `syz.5.2008'. [ 269.763935][T10310] netlink: 'syz.5.2008': attribute type 1 has an invalid length. [ 270.965031][ T6426] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 271.115081][ T6426] usb 5-1: Using ep0 maxpacket: 8 [ 271.132364][ T6426] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 271.132396][ T6426] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.132418][ T6426] usb 5-1: Product: syz [ 271.132434][ T6426] usb 5-1: Manufacturer: syz [ 271.132450][ T6426] usb 5-1: SerialNumber: syz [ 271.151386][T10350] tipc: Started in network mode [ 271.151412][T10350] tipc: Node identity 7, cluster identity 4711 [ 271.151428][T10350] tipc: Node number set to 7 [ 271.200300][ T6426] usb 5-1: config 0 descriptor?? [ 271.215700][ T6426] gspca_main: se401-2.14.0 probing 047d:5003 [ 271.532210][T10358] trusted_key: encrypted_key: key trusted:syz not found [ 271.645386][ T6426] gspca_se401: Bayer format not supported! [ 271.890114][ T5914] usb 5-1: USB disconnect, device number 23 [ 272.579474][T10382] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 272.735779][ T5892] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 272.775277][T10386] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2045'. [ 272.885417][ T5892] usb 6-1: Using ep0 maxpacket: 16 [ 272.904790][ T5892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.904822][ T5892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.904844][ T5892] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 272.904893][ T5892] usb 6-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 272.904917][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.913372][ T5892] usb 6-1: config 0 descriptor?? [ 273.395135][ T5892] ryos 0003:1E7D:31CE.0029: hidraw0: USB HID v0.00 Device [HID 1e7d:31ce] on usb-dummy_hcd.5-1/input0 [ 273.576350][ T5892] usb 6-1: USB disconnect, device number 21 [ 273.803154][T10407] sctp: [Deprecated]: syz.2.2055 (pid 10407) Use of struct sctp_assoc_value in delayed_ack socket option. [ 273.803154][T10407] Use struct sctp_sack_info instead [ 274.545305][ T5892] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 274.727173][ T5892] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 274.727208][ T5892] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 274.727254][ T5892] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 274.727278][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.924869][T10433] dvmrp1: entered allmulticast mode [ 274.960411][T10433] dvmrp1: left allmulticast mode [ 275.078320][ T1818] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 275.082801][ T5892] usb 3-1: usb_control_msg returned -71 [ 275.082850][ T5892] usbtmc 3-1:16.0: can't read capabilities [ 275.121176][ T5892] usb 3-1: USB disconnect, device number 22 [ 275.226838][ T1818] usb 4-1: Using ep0 maxpacket: 32 [ 275.229187][ T1818] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 275.229214][ T1818] usb 4-1: config 0 has no interface number 0 [ 275.229247][ T1818] usb 4-1: config 0 interface 29 has no altsetting 0 [ 275.232369][ T1818] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 275.232397][ T1818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.232418][ T1818] usb 4-1: Product: syz [ 275.232433][ T1818] usb 4-1: Manufacturer: syz [ 275.232448][ T1818] usb 4-1: SerialNumber: syz [ 275.248155][ T1818] usb 4-1: config 0 descriptor?? [ 275.479794][ T1818] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 275.682383][ T1818] peak_usb 4-1:0.29 can0: sending command failure: -8 [ 275.682482][ T1818] peak_usb 4-1:0.29 can0: sending command failure: -8 [ 275.682569][ T1818] peak_usb 4-1:0.29 can0: sending command failure: -8 [ 275.946937][ T1818] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -8 [ 275.963753][ T1818] usb 4-1: USB disconnect, device number 21 [ 276.425066][T10463] netlink: 87 bytes leftover after parsing attributes in process `syz.5.2083'. [ 276.619117][T10469] netlink: 'syz.3.2085': attribute type 6 has an invalid length. [ 276.657730][ T5892] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 276.807159][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 276.807196][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 276.807239][ T5892] usb 3-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 276.807261][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.812841][ T5892] usb 3-1: config 0 descriptor?? [ 276.813900][T10465] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 277.271350][ T5892] logitech 0003:046D:CA04.002A: unknown main item tag 0x6 [ 277.294993][ T5892] logitech 0003:046D:CA04.002A: hidraw0: USB HID vff.fa Device [HID 046d:ca04] on usb-dummy_hcd.2-1/input0 [ 277.295044][ T5892] logitech 0003:046D:CA04.002A: no inputs found [ 277.499148][ T991] usb 3-1: USB disconnect, device number 23 [ 277.645325][ T5892] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 277.825553][ T5892] usb 5-1: Using ep0 maxpacket: 8 [ 277.829886][ T5892] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 277.833751][ T5892] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 277.833779][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.833800][ T5892] usb 5-1: Product: syz [ 277.833814][ T5892] usb 5-1: Manufacturer: syz [ 277.833828][ T5892] usb 5-1: SerialNumber: syz [ 277.889310][ T5892] usb 5-1: config 0 descriptor?? [ 277.902633][ T5892] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 277.902689][ T5892] usb 5-1: setting power ON [ 277.902709][ T5892] dvb-usb: bulk message failed: -22 (2/0) [ 277.933356][ T5892] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 277.935864][ T5892] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 277.935923][ T5892] usb 5-1: media controller created [ 277.995568][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 278.058131][ T5892] usb 5-1: selecting invalid altsetting 6 [ 278.058156][ T5892] usb 5-1: digital interface selection failed (-22) [ 278.058171][ T5892] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 278.059052][ T5892] usb 5-1: setting power OFF [ 278.059073][ T5892] dvb-usb: bulk message failed: -22 (2/0) [ 278.059092][ T5892] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 278.059104][ T5892] (NULL device *): no alternate interface [ 278.105165][T10489] dvb-usb: bulk message failed: -22 (3/0) [ 278.105195][T10489] cxusb: i2c wr: len=80 is too big! [ 278.105195][T10489] [ 278.198641][ T5892] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 278.202744][ T5892] usb 5-1: USB disconnect, device number 24 [ 278.434692][ T5922] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 278.587709][ T5922] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 278.587745][ T5922] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 278.587773][ T5922] usb 3-1: config 0 interface 0 has no altsetting 0 [ 278.587808][ T5922] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 278.587832][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.634791][ T1818] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 278.650243][ T5922] usb 3-1: config 0 descriptor?? [ 278.651461][T10500] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 278.816792][ T1818] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 278.816821][ T1818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.816840][ T1818] usb 6-1: Product: syz [ 278.816853][ T1818] usb 6-1: Manufacturer: syz [ 278.816868][ T1818] usb 6-1: SerialNumber: syz [ 278.840823][ T1818] usb 6-1: config 0 descriptor?? [ 278.876390][ T1818] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 279.099339][ T5922] logitech 0003:046D:C24F.002B: unbalanced collection at end of report description [ 279.100263][ T5922] logitech 0003:046D:C24F.002B: parse failed [ 279.100374][ T5922] logitech 0003:046D:C24F.002B: probe with driver logitech failed with error -22 [ 279.255445][ T6426] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 279.327771][ T991] usb 3-1: USB disconnect, device number 24 [ 279.424646][ T6426] usb 4-1: Using ep0 maxpacket: 8 [ 279.427087][ T6426] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.427122][ T6426] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.427148][ T6426] usb 4-1: config 0 interface 0 has no altsetting 0 [ 279.427184][ T6426] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 279.427209][ T6426] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.432780][ T6426] usb 4-1: config 0 descriptor?? [ 279.475936][ T1818] gspca_sunplus: reg_r err -71 [ 279.476052][ T1818] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 279.507237][ T1818] usb 6-1: USB disconnect, device number 22 [ 279.904395][ T6426] steelseries 0003:1038:1410.002C: unknown main item tag 0x0 [ 279.904433][ T6426] steelseries 0003:1038:1410.002C: unknown main item tag 0x0 [ 279.944625][ T6426] steelseries 0003:1038:1410.002C: unknown main item tag 0x0 [ 279.944673][ T6426] steelseries 0003:1038:1410.002C: unknown main item tag 0x0 [ 279.944699][ T6426] steelseries 0003:1038:1410.002C: unknown main item tag 0x0 [ 279.945470][ T6426] steelseries 0003:1038:1410.002C: missing HID_OUTPUT_REPORT 0 [ 280.146048][ T6426] usb 4-1: USB disconnect, device number 22 [ 281.268860][ T5922] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 281.399935][T10566] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 281.420923][ T5922] usb 3-1: Using ep0 maxpacket: 16 [ 281.423765][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.423800][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.423842][ T5922] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 281.423867][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.471575][ T5922] usb 3-1: config 0 descriptor?? [ 281.913939][ T5922] konepure 0003:1E7D:2DB4.002D: item fetching failed at offset 0/4 [ 281.947081][ T5922] konepure 0003:1E7D:2DB4.002D: parse failed [ 281.947164][ T5922] konepure 0003:1E7D:2DB4.002D: probe with driver konepure failed with error -22 [ 282.035934][T10583] tipc: Started in network mode [ 282.035968][T10583] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 282.036295][T10583] tipc: Enabled bearer , priority 10 [ 282.124590][ T9] usb 3-1: USB disconnect, device number 25 [ 283.164627][ T991] tipc: Node number set to 8432298 [ 283.460540][T10622] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2156'. [ 283.460577][T10622] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2156'. [ 283.460605][T10622] netlink: 'syz.5.2156': attribute type 15 has an invalid length. [ 283.502746][T10621] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2155'. [ 283.598848][T10621] gretap0: entered promiscuous mode [ 283.606996][T10621] gretap0: left promiscuous mode [ 284.675268][T10652] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2170'. [ 284.848242][ T5154] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 284.869693][ T5154] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 284.878841][ T5154] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 284.892936][ T5154] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 284.901770][ T5154] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 284.918519][T10660] 9pnet_fd: Insufficient options for proto=fd [ 284.942798][T10665] netlink: 18 bytes leftover after parsing attributes in process `syz.3.2176'. [ 285.945333][ T6426] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 286.108805][ T6426] usb 4-1: Using ep0 maxpacket: 8 [ 286.111450][ T6426] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 286.111487][ T6426] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 286.111514][ T6426] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 286.111542][ T6426] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 286.125254][ T6426] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 286.125291][ T6426] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.125317][ T6426] usb 4-1: Product: syz [ 286.125334][ T6426] usb 4-1: Manufacturer: syz [ 286.125352][ T6426] usb 4-1: SerialNumber: syz [ 286.184822][ T6426] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 286.186809][ T6426] usbtest 4-1:1.0: Linux user mode ISO test driver [ 286.186831][ T6426] usbtest 4-1:1.0: high-speed {control iso-in iso-out} tests (+alt) [ 286.304896][ T1042] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.388732][ T5892] usb 4-1: USB disconnect, device number 23 [ 286.789670][ T1042] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.831041][T10726] netlink: 'syz.2.2203': attribute type 1 has an invalid length. [ 286.994838][ T59] Bluetooth: hci5: command tx timeout [ 287.160743][ T1042] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.214776][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 287.374820][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 287.385101][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 287.388137][ T9] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 287.388166][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.388186][ T9] usb 3-1: Product: syz [ 287.388201][ T9] usb 3-1: Manufacturer: syz [ 287.388216][ T9] usb 3-1: SerialNumber: syz [ 287.435567][ T9] usb 3-1: config 0 descriptor?? [ 287.543420][T10742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2210'. [ 287.680784][ T1042] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.873975][ T9] gs_usb 3-1:0.0: Couldn't get device config: (err=-121) [ 287.874021][ T9] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 288.081620][ T5892] usb 3-1: USB disconnect, device number 26 [ 288.337785][T10657] chnl_net:caif_netlink_parms(): no params data found [ 288.390600][ T1042] bridge_slave_1: left allmulticast mode [ 288.390634][ T1042] bridge_slave_1: left promiscuous mode [ 288.390908][ T1042] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.483697][ T1042] bridge_slave_0: left allmulticast mode [ 288.483732][ T1042] bridge_slave_0: left promiscuous mode [ 288.484014][ T1042] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.044684][ T991] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 289.075087][ T59] Bluetooth: hci5: command tx timeout [ 289.134671][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 289.214790][ T991] usb 3-1: Using ep0 maxpacket: 32 [ 289.217169][ T991] usb 3-1: config 0 has an invalid interface number: 226 but max is 0 [ 289.217196][ T991] usb 3-1: config 0 has no interface number 0 [ 289.217242][ T991] usb 3-1: config 0 interface 226 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.217261][ T991] usb 3-1: config 0 interface 226 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.217290][ T991] usb 3-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 289.217307][ T991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.221344][ T991] usb 3-1: config 0 descriptor?? [ 289.296138][ T9] usb 5-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 289.296170][ T9] usb 5-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.296191][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 289.296280][ T9] usb 5-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 289.296305][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.322382][ T9] usb 5-1: config 0 descriptor?? [ 289.659548][ T991] uclogic 0003:5543:0081.002E: interface is invalid, ignoring [ 289.767837][ T9] pantherlord 0003:0810:0002.002F: hidraw0: USB HID v0.00 Device [HID 0810:0002] on usb-dummy_hcd.4-1/input0 [ 289.767864][ T9] pantherlord 0003:0810:0002.002F: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula [ 289.852568][ T9] usb 3-1: USB disconnect, device number 27 [ 290.005764][ T991] usb 5-1: USB disconnect, device number 25 [ 290.959266][ T1042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.017524][ T1042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.077076][ T1042] bond0 (unregistering): Released all slaves [ 291.156935][ T59] Bluetooth: hci5: command tx timeout [ 291.555760][T10814] max out of range [ 291.678666][T10816] xt_socket: unknown flags 0xd0 [ 291.704776][ T45] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 291.863155][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.863191][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.863233][ T45] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 291.863256][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.889545][ T45] usb 5-1: config 0 descriptor?? [ 292.333598][ T45] samsung 0003:0419:0600.0030: item fetching failed at offset 5/7 [ 292.348851][ T45] samsung 0003:0419:0600.0030: parse failed [ 292.348943][ T45] samsung 0003:0419:0600.0030: probe with driver samsung failed with error -22 [ 292.573604][ T991] usb 5-1: USB disconnect, device number 26 [ 292.609591][T10657] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.609798][T10657] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.610062][T10657] bridge_slave_0: entered allmulticast mode [ 292.613280][T10657] bridge_slave_0: entered promiscuous mode [ 292.633822][T10657] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.642469][T10657] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.642787][T10657] bridge_slave_1: entered allmulticast mode [ 292.654658][ T9] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 292.658800][T10657] bridge_slave_1: entered promiscuous mode [ 292.817282][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 292.817320][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.817360][ T9] usb 6-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 292.817384][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.863593][ T9] usb 6-1: config 0 descriptor?? [ 293.234865][ T59] Bluetooth: hci5: command tx timeout [ 293.241865][T10839] bad cache= option: no%e [ 293.241865][T10839] [ 293.242145][T10839] CIFS: VFS: bad cache= option: no%e [ 293.345546][ T9] hid-u2fzero 0003:10C4:8ACF.0031: unknown main item tag 0x3 [ 293.345610][ T9] hid-u2fzero 0003:10C4:8ACF.0031: item fetching failed at offset 4/5 [ 293.347006][ T9] hid-u2fzero 0003:10C4:8ACF.0031: probe with driver hid-u2fzero failed with error -22 [ 293.406145][T10657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.509371][T10847] ucma_write: process 1017 (syz.3.2258) changed security contexts after opening file descriptor, this is not allowed. [ 293.542177][T10657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.555282][ T9] usb 6-1: USB disconnect, device number 23 [ 294.038539][T10866] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 294.096208][ T1042] hsr_slave_0: left promiscuous mode [ 294.152237][ T1042] hsr_slave_1: left promiscuous mode [ 294.153258][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.153291][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.198266][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.198302][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.393881][ T1042] veth1_macvtap: left promiscuous mode [ 294.394012][ T1042] veth0_macvtap: left promiscuous mode [ 294.396810][ T1042] veth1_vlan: left promiscuous mode [ 294.397073][ T1042] veth0_vlan: left promiscuous mode [ 294.462390][T10881] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2274'. [ 294.542538][T10883] netlink: 'syz.5.2275': attribute type 1 has an invalid length. [ 294.665643][T10885] syz.4.2276 uses obsolete (PF_INET,SOCK_PACKET) [ 296.946216][ T1042] team0 (unregistering): Port device team_slave_1 removed [ 297.225870][ T1042] team0 (unregistering): Port device team_slave_0 removed [ 299.640849][T10874] veth0_to_bond: entered allmulticast mode [ 300.057162][T10657] team0: Port device team_slave_0 added [ 300.061677][T10657] team0: Port device team_slave_1 added [ 300.466896][T10657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.466916][T10657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.466947][T10657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.469371][T10657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.469384][T10657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.469408][T10657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.825265][T10924] ptrace attach of "./syz-executor exec"[5834] was attempted by ""[10924] [ 301.090077][T10657] hsr_slave_0: entered promiscuous mode [ 301.101284][T10657] hsr_slave_1: entered promiscuous mode [ 301.103579][T10657] debugfs: 'hsr0' already exists in 'hsr' [ 301.103604][T10657] Cannot create hsr debugfs directory [ 301.640493][T10933] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2297'. [ 302.208320][ T1042] IPVS: stop unused estimator thread 0... [ 303.025621][ T5892] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 303.137972][T10657] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 303.173870][T10657] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 303.177378][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.177414][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.177459][ T5892] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 303.177485][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.186788][ T5892] usb 3-1: config 0 descriptor?? [ 303.292024][T10657] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 303.295220][ T45] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 303.381547][T10657] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 303.466957][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 303.471720][ T45] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 303.471746][ T45] usb 4-1: config 0 has no interface number 0 [ 303.484983][ T45] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 303.485090][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.485116][ T45] usb 4-1: Product: syz [ 303.485133][ T45] usb 4-1: Manufacturer: syz [ 303.485151][ T45] usb 4-1: SerialNumber: syz [ 303.538139][ T45] usb 4-1: config 0 descriptor?? [ 303.575040][ T45] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 303.575079][ T45] usb 4-1: selecting invalid altsetting 1 [ 303.575094][ T45] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 303.649777][ T45] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 303.650289][ T45] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 303.650360][ T45] usb 4-1: media controller created [ 303.715322][ T5892] uclogic 0003:5543:0522.0032: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.2-1/input0 [ 303.837562][T10657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.843632][ T45] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 303.891871][T10657] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.909476][ T1209] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.909692][ T1209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.958859][ T1818] usb 3-1: USB disconnect, device number 28 [ 303.977438][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.977645][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.877960][T10657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.926808][T10969] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 304.968515][ T45] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 304.968573][ T45] zl10353_read_register: readreg error (reg=127, ret==-71) [ 304.976036][ T45] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 305.209930][ T45] usb 4-1: USB disconnect, device number 24 [ 305.318921][ T5921] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 305.485520][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 305.488052][ T5921] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.488113][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 305.488143][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 305.488165][ T5921] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 305.488189][ T5921] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 305.488233][ T5921] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 305.488255][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.509280][ T5921] usb 3-1: config 0 descriptor?? [ 305.837370][ T1818] usb 3-1: USB disconnect, device number 29 [ 306.160613][T10657] veth0_vlan: entered promiscuous mode [ 306.233583][T10657] veth1_vlan: entered promiscuous mode [ 306.416211][T10657] veth0_macvtap: entered promiscuous mode [ 306.449835][T10657] veth1_macvtap: entered promiscuous mode [ 306.479275][T10657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.594144][T10657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.686685][ T57] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.689083][ T57] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.734643][ T57] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.735932][ T57] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.354484][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.354509][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.604114][ T4531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.604135][ T4531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.791305][T11067] sp0: Synchronizing with TNC [ 309.134686][ T45] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 309.216801][T11089] program syz.4.2359 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 309.295401][ T45] usb 6-1: Using ep0 maxpacket: 16 [ 309.297890][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.297923][ T45] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 309.297967][ T45] usb 6-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 309.297991][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.311578][ T45] usb 6-1: config 0 descriptor?? [ 309.733182][ T45] logitech 0003:046D:C623.0033: unknown main item tag 0x6 [ 309.733221][ T45] logitech 0003:046D:C623.0033: collection stack underflow [ 309.733253][ T45] logitech 0003:046D:C623.0033: item 0 4 0 12 parsing failed [ 309.734095][ T45] logitech 0003:046D:C623.0033: parse failed [ 309.734213][ T45] logitech 0003:046D:C623.0033: probe with driver logitech failed with error -22 [ 309.927300][ T1818] usb 6-1: USB disconnect, device number 24 [ 309.956253][T11115] program syz.2.2372 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 310.355489][T11131] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2380'. [ 310.850170][T11147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2388'. [ 311.614905][ T45] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 311.768272][ T45] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 311.768303][ T45] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 311.768329][ T45] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 311.772315][ T45] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 311.772343][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.772363][ T45] usb 5-1: Product: syz [ 311.772377][ T45] usb 5-1: Manufacturer: syz [ 311.772390][ T45] usb 5-1: SerialNumber: syz [ 311.825260][ T45] hub 5-1:1.0: bad descriptor, ignoring hub [ 311.825308][ T45] hub 5-1:1.0: probe with driver hub failed with error -5 [ 312.057385][ T45] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 312.375481][ T45] usb 5-1: reset high-speed USB device number 27 using dummy_hcd [ 312.505096][ T1818] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 312.630767][T11211] tipc: Started in network mode [ 312.630798][T11211] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 312.647872][T11211] tipc: Enabled bearer , priority 10 [ 312.678028][ T1818] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 312.678066][ T1818] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 312.678095][ T1818] usb 6-1: config 0 interface 0 has no altsetting 0 [ 312.678130][ T1818] usb 6-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 312.678155][ T1818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.683192][ T1818] usb 6-1: config 0 descriptor?? [ 312.705146][T11199] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 312.967577][ T5892] usb 5-1: USB disconnect, device number 27 [ 312.986166][ T5892] usblp0: removed [ 313.147973][ T1818] microsoft 0003:045E:00F9.0034: unknown main item tag 0x0 [ 313.148012][ T1818] microsoft 0003:045E:00F9.0034: unknown main item tag 0x0 [ 313.148047][ T1818] microsoft 0003:045E:00F9.0034: unknown main item tag 0x0 [ 313.148075][ T1818] microsoft 0003:045E:00F9.0034: unknown main item tag 0x0 [ 313.148102][ T1818] microsoft 0003:045E:00F9.0034: unknown main item tag 0x0 [ 313.194139][ T1818] microsoft 0003:045E:00F9.0034: hidraw0: USB HID v0.05 Device [HID 045e:00f9] on usb-dummy_hcd.5-1/input0 [ 313.194175][ T1818] microsoft 0003:045E:00F9.0034: no inputs found [ 313.194190][ T1818] microsoft 0003:045E:00F9.0034: could not initialize ff, continuing anyway [ 313.361552][ T1818] usb 6-1: USB disconnect, device number 25 [ 313.637652][ T5892] tipc: Node number set to 10005162 [ 313.976182][ T1818] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 314.112791][T11255] netlink: 'syz.3.2439': attribute type 1 has an invalid length. [ 314.124634][ T1818] usb 5-1: Using ep0 maxpacket: 32 [ 314.134949][ T1818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 314.134979][ T1818] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 314.135001][ T1818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 314.135023][ T1818] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 314.135047][ T1818] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 314.135091][ T1818] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 314.135115][ T1818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.196674][ T1818] usb 5-1: config 0 descriptor?? [ 314.270626][T11259] random: crng reseeded on system resumption [ 314.424941][ T1818] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 314.695123][ T5892] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 314.851274][ T5892] usb 6-1: Using ep0 maxpacket: 32 [ 314.853809][ T5892] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 314.853838][ T5892] usb 6-1: config 0 has no interface number 0 [ 314.853887][ T5892] usb 6-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 314.853910][ T5892] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 314.853938][ T5892] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 314.853965][ T5892] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 314.853990][ T5892] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 314.854017][ T5892] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 314.854039][ T5892] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 314.854065][ T5892] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 314.854091][ T5892] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 314.854115][ T5892] usb 6-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 314.862068][ T5892] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 314.862100][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.862124][ T5892] usb 6-1: Product: syz [ 314.862141][ T5892] usb 6-1: Manufacturer: syz [ 314.862159][ T5892] usb 6-1: SerialNumber: syz [ 314.878915][ T5892] usb 6-1: config 0 descriptor?? [ 314.884166][T11260] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 314.885957][T11260] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 314.901506][ T5892] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 314.901529][ T5892] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 314.934284][ T5892] scsi host1: microtekX6 [ 315.079006][T11280] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2450'. [ 316.107436][T11306] vlan2: entered promiscuous mode [ 316.107460][T11306] bridge0: entered promiscuous mode [ 316.215923][ T5921] usb 6-1: USB disconnect, device number 26 [ 316.684740][T11324] netlink: 'syz.2.2470': attribute type 1 has an invalid length. [ 316.752095][ T1818] usb 5-1: USB disconnect, device number 28 [ 316.766425][ T1818] usblp0: removed [ 318.418133][T11382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2498'. [ 318.871541][T11400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2506'. [ 318.871725][T11400] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 318.871754][T11400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.162370][T11408] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2510'. [ 319.341993][T11417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2514'. [ 321.454731][ T5921] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 321.617943][ T5921] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 321.617982][ T5921] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 321.618021][ T5921] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 321.618044][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.638229][T11477] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 321.693451][ T5921] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 321.783833][ T38] audit: type=1326 audit(1756055343.226:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11495 comm="syz.3.2550" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7e3dbebe9 code=0x0 [ 322.366198][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.366263][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.518884][ T5892] usb 3-1: USB disconnect, device number 30 [ 324.359247][T11535] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 324.880320][T11554] netlink: 'syz.5.2574': attribute type 83 has an invalid length. [ 325.146561][T11560] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2578'. [ 325.405914][T11569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2582'. [ 325.556015][ C0] ------------[ cut here ]------------ [ 325.556039][ C0] WARNING: CPU: 0 PID: 16 at ./include/linux/seqlock.h:221 est_timer+0x6dc/0x9f0 [ 325.556077][ C0] Modules linked in: [ 325.556119][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 325.556142][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 325.556157][ C0] RIP: 0010:est_timer+0x6dc/0x9f0 [ 325.556177][ C0] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 7d 3b 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 95 03 e2 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 325.556192][ C0] RSP: 0018:ffffc900001577a0 EFLAGS: 00010246 [ 325.556208][ C0] RAX: ffffffff88dc58bb RBX: 0000000000000001 RCX: ffff88801c2cd940 [ 325.556222][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 325.556233][ C0] RBP: ffffc900001578b0 R08: 0000000000000000 R09: 0000000000000100 [ 325.556246][ C0] R10: dffffc0000000000 R11: fffff5200002af0a R12: 0000000000000005 [ 325.556260][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888023890e68 [ 325.556274][ C0] FS: 0000000000000000(0000) GS:ffff8881268c2000(0000) knlGS:0000000000000000 [ 325.556291][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 325.556305][ C0] CR2: 00007f639e4956c0 CR3: 00000000349f0000 CR4: 00000000003526f0 [ 325.556322][ C0] Call Trace: [ 325.556331][ C0] [ 325.556355][ C0] ? __pfx_est_timer+0x10/0x10 [ 325.556391][ C0] call_timer_fn+0x17b/0x5f0 [ 325.556422][ C0] ? __pfx_est_timer+0x10/0x10 [ 325.556443][ C0] ? call_timer_fn+0xbe/0x5f0 [ 325.556471][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 325.556510][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 325.556539][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.556565][ C0] ? __pfx_est_timer+0x10/0x10 [ 325.556588][ C0] __run_timer_base+0x648/0x970 [ 325.556632][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 325.556681][ C0] run_timer_softirq+0xb7/0x180 [ 325.556713][ C0] handle_softirqs+0x22c/0x710 [ 325.556756][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 325.556800][ C0] run_ktimerd+0xcf/0x190 [ 325.556836][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 325.556878][ C0] ? schedule+0x91/0x360 [ 325.556916][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 325.556946][ C0] smpboot_thread_fn+0x542/0xa60 [ 325.556978][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 325.557021][ C0] kthread+0x711/0x8a0 [ 325.557063][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 325.557093][ C0] ? __pfx_kthread+0x10/0x10 [ 325.557137][ C0] ? __pfx_kthread+0x10/0x10 [ 325.557175][ C0] ret_from_fork+0x3fc/0x770 [ 325.557211][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 325.557252][ C0] ? __switch_to_asm+0x39/0x70 [ 325.557274][ C0] ? __switch_to_asm+0x33/0x70 [ 325.557295][ C0] ? __pfx_kthread+0x10/0x10 [ 325.557343][ C0] ret_from_fork_asm+0x1a/0x30 [ 325.557387][ C0] [ 325.557399][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 325.557416][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 325.557444][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 325.557458][ C0] Call Trace: [ 325.557468][ C0] [ 325.557477][ C0] dump_stack_lvl+0x99/0x250 [ 325.557512][ C0] ? __asan_memcpy+0x40/0x70 [ 325.557537][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.557591][ C0] ? __pfx__printk+0x10/0x10 [ 325.557635][ C0] vpanic+0x281/0x750 [ 325.557670][ C0] ? __pfx__printk+0x10/0x10 [ 325.557696][ C0] ? __pfx_vpanic+0x10/0x10 [ 325.557730][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 325.557779][ C0] panic+0xb9/0xc0 [ 325.557813][ C0] ? __pfx_panic+0x10/0x10 [ 325.557874][ C0] __warn+0x31b/0x4b0 [ 325.557908][ C0] ? est_timer+0x6dc/0x9f0 [ 325.557937][ C0] ? est_timer+0x6dc/0x9f0 [ 325.557962][ C0] report_bug+0x2be/0x4f0 [ 325.557989][ C0] ? est_timer+0x6dc/0x9f0 [ 325.558015][ C0] ? est_timer+0x6dc/0x9f0 [ 325.558040][ C0] ? est_timer+0x6de/0x9f0 [ 325.558064][ C0] handle_bug+0x84/0x160 [ 325.558101][ C0] exc_invalid_op+0x1a/0x50 [ 325.558135][ C0] asm_exc_invalid_op+0x1a/0x20 [ 325.558158][ C0] RIP: 0010:est_timer+0x6dc/0x9f0 [ 325.558184][ C0] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 7d 3b 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 95 03 e2 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 325.558205][ C0] RSP: 0018:ffffc900001577a0 EFLAGS: 00010246 [ 325.558226][ C0] RAX: ffffffff88dc58bb RBX: 0000000000000001 RCX: ffff88801c2cd940 [ 325.558244][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 325.558259][ C0] RBP: ffffc900001578b0 R08: 0000000000000000 R09: 0000000000000100 [ 325.558276][ C0] R10: dffffc0000000000 R11: fffff5200002af0a R12: 0000000000000005 [ 325.558293][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888023890e68 [ 325.558320][ C0] ? est_timer+0x6db/0x9f0 [ 325.558374][ C0] ? __pfx_est_timer+0x10/0x10 [ 325.558414][ C0] call_timer_fn+0x17b/0x5f0 [ 325.558445][ C0] ? __pfx_est_timer+0x10/0x10 [ 325.558469][ C0] ? call_timer_fn+0xbe/0x5f0 [ 325.558501][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 325.558545][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 325.558576][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.558604][ C0] ? __pfx_est_timer+0x10/0x10 [ 325.558633][ C0] __run_timer_base+0x648/0x970 [ 325.558682][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 325.558735][ C0] run_timer_softirq+0xb7/0x180 [ 325.558766][ C0] handle_softirqs+0x22c/0x710 [ 325.558809][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 325.558865][ C0] run_ktimerd+0xcf/0x190 [ 325.558906][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 325.558935][ C0] ? schedule+0x91/0x360 [ 325.558971][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 325.558998][ C0] smpboot_thread_fn+0x542/0xa60 [ 325.559027][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 325.559067][ C0] kthread+0x711/0x8a0 [ 325.559106][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 325.559135][ C0] ? __pfx_kthread+0x10/0x10 [ 325.559177][ C0] ? __pfx_kthread+0x10/0x10 [ 325.559212][ C0] ret_from_fork+0x3fc/0x770 [ 325.559246][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 325.559285][ C0] ? __switch_to_asm+0x39/0x70 [ 325.559305][ C0] ? __switch_to_asm+0x33/0x70 [ 325.559325][ C0] ? __pfx_kthread+0x10/0x10 [ 325.559362][ C0] ret_from_fork_asm+0x1a/0x30 [ 325.559405][ C0] [ 325.559769][ C0] Kernel Offset: disabled