last executing test programs: 4m4.924889654s ago: executing program 4 (id=641): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x28, r1, 0x325, 0xfffffffe, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) 4m4.584528652s ago: executing program 4 (id=645): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="24000000220001060000000000020000000000000002"], 0x24}], 0x1}, 0x0) 4m4.371057417s ago: executing program 4 (id=648): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r0}, 0x38) 4m4.002448718s ago: executing program 4 (id=652): mkdir(&(0x7f0000000b80)='./file0\x00', 0xd6) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x28, &(0x7f0000000240)=ANY=[@ANYBLOB='max=0020000000000']) 4m3.705617182s ago: executing program 4 (id=655): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10) symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4m3.399744516s ago: executing program 4 (id=658): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x8}, 0x1c) 3m48.269165134s ago: executing program 32 (id=658): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x8}, 0x1c) 2m16.423509742s ago: executing program 1 (id=1554): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0xff, 0x4) 2m16.129974416s ago: executing program 1 (id=1559): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x701, 0xfffffffc, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x24044004}, 0x4000) 2m15.823416318s ago: executing program 1 (id=1564): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x80002, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, 0x0) 2m15.546465888s ago: executing program 1 (id=1568): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8100, &(0x7f0000000000)={0x0, 0x0, 0x20000}, 0x20) 2m15.247461888s ago: executing program 1 (id=1572): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'fl512\x00', [0x9e1, 0x2166, 0x0, 0x100000, 0x88d7, 0x8f, 0x1, 0x10, 0x1002, 0xffffffff, 0x200, 0x8, 0x20344, 0x1, 0x7, 0x1, 0x8, 0x3, 0x9, 0xe, 0x100, 0x3, 0x7, 0xa, 0x0, 0x1, 0xb0c4, 0x1, 0x7, 0x400007, 0x1]}) ioctl$COMEDI_DEVINFO(r0, 0x80b06401, &(0x7f0000000080)) 2m13.414280612s ago: executing program 1 (id=1587): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x146b, 0x902, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "76b808d4"}]}}, 0x0}, 0x0) 2m12.658807748s ago: executing program 33 (id=1587): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x146b, 0x902, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "76b808d4"}]}}, 0x0}, 0x0) 1m0.852293106s ago: executing program 6 (id=2078): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x8}]}}}]}, 0x44}}, 0x0) 1m0.624997905s ago: executing program 6 (id=2079): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x1080, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 1m0.195152927s ago: executing program 6 (id=2082): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x5, 0x4000, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0d}], @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}]]}, 0x30}}, 0x0) 59.943704353s ago: executing program 6 (id=2085): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000380)='./file0\x00', r0, 0x0, 0x40) 59.452353745s ago: executing program 6 (id=2087): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000380)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x40, 0x100, @void}}}}}}}, 0x0) recvfrom(r0, 0x0, 0x4000, 0x40, 0x0, 0x0) 58.212837621s ago: executing program 6 (id=2095): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 57.460344672s ago: executing program 34 (id=2095): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a034e200000040100000000000000000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d4000980"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 5.197702836s ago: executing program 2 (id=2430): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080065e00500000a0000001177fbac141416e000030a44079f03b180006000000000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 4.481542071s ago: executing program 2 (id=2436): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x70800}}, 0x20}}, 0x0) 4.087019351s ago: executing program 2 (id=2439): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) utimes(&(0x7f0000000080)='./cgroup\x00', 0x0) 3.721288836s ago: executing program 0 (id=2442): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8006, 0x425b}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r0, 0x6e2, 0x600, 0x1, 0x0, 0x0) 3.421761547s ago: executing program 7 (id=2445): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000000000)=[{0x47, 0x1, 0x39, &(0x7f00000001c0)="536dad24e3aa6d14c96ae4a6447752d4f78f3dbfc2c3caad320a1d4e7a5c950e6676bc8d0f47c744bc70b46e2639ddb2131b875a52e61faed5"}], 0x1}) 3.165068791s ago: executing program 0 (id=2448): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000940)=0x707987cd) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 3.021318467s ago: executing program 5 (id=2449): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r0, 0x0, 0x400000000000000, 0x2) 2.943968198s ago: executing program 3 (id=2450): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) 2.645648596s ago: executing program 5 (id=2451): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)) 2.645443628s ago: executing program 0 (id=2452): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='ns\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) getdents(r0, 0x0, 0x0) 2.348744543s ago: executing program 3 (id=2453): preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x2a, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) writev(r0, &(0x7f00000000c0), 0x1000000000000195) 1.717726919s ago: executing program 2 (id=2454): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x1) rt_sigtimedwait(&(0x7f0000000340)={[0x7]}, &(0x7f00000006c0), 0x0, 0x8) 1.537605093s ago: executing program 2 (id=2455): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000180)=0x80177, 0x4) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4c20, 0x80000, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, 0x1c, 0x0}}], 0x1, 0x0) 1.531428164s ago: executing program 5 (id=2456): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 1.519199979s ago: executing program 0 (id=2457): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0xffffffffffffffd8}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x6c}}, 0x0) 1.469508728s ago: executing program 7 (id=2458): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="09000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 1.229965542s ago: executing program 3 (id=2459): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000080)={&(0x7f0000000180)={{@host}, {@hyper, 0x2}, 0x400, "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"}, 0x418, 0x7}) 1.132592628s ago: executing program 7 (id=2460): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 1.085618499s ago: executing program 2 (id=2461): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x0, 0x44, 0x39, 0xdc, 0x40, 0x1660, 0x1921, 0x1f84, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3, 0x0, 0x2, 0xf6, 0x62, 0x70, 0x0, [], [{{0x9, 0x5, 0x7, 0x0, 0x10, 0x9, 0x6, 0x8}}, {{0x9, 0x5, 0xd, 0x3, 0x0, 0x68, 0x37, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x20, 0x0, 0x1, "f6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f00000000c0)={0x0, 0x18, 0x9, "dcf3390988dd7cac29"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) 1.085314271s ago: executing program 0 (id=2462): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d00000014000000"], 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x800) 927.643396ms ago: executing program 3 (id=2463): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005d00), 0x2a001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x28a, 0x0, 0x5}]}) 886.49317ms ago: executing program 7 (id=2464): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000200000000df0000000000100800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000003030101000000000000000005ffffff"], 0x20}}, 0x0) 684.273992ms ago: executing program 0 (id=2465): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000001c0)={&(0x7f0000000180)=[{0x1, 0x10, 0x1, &(0x7f0000000000)='F'}, {0x1, 0xd201, 0x0, 0x0}], 0x2}) 623.18583ms ago: executing program 5 (id=2466): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x40) 622.306174ms ago: executing program 7 (id=2467): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000680)=[@in6={0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0xa, 0x1ff, 0x2, 0xfffffff9, 0x8, 0x8001, 0x81, 0x0, r1}, &(0x7f0000000180)=0x20) 361.395047ms ago: executing program 5 (id=2468): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe0a, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xfffffffd, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 281.494988ms ago: executing program 7 (id=2469): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x18, 0x0, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 238.38025ms ago: executing program 3 (id=2470): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @name="ac2ad54970138065d4b1a10a14b7e65642722c3da99ba40f000026e78ffc1e0a"}) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="fef0eca86999a4a0c7cb5b0006000000", 0x10, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r1, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 12.761216ms ago: executing program 5 (id=2471): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0x10, 0x0, 0x8, 0x2, 0x0, 0x10, 0x0, 0x8, 0x9, 0x10}, {0x1, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}, {0x2000, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0x8000000, 0xe, 0xfe, 0x1, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee0000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x2}, {0x8080000, 0x3000, 0x4, 0x0, 0x0, 0x1, 0x10, 0xa, 0x26}, {0x80ac000}, {0x2}, 0xddf8ffdb, 0x0, 0x0, 0xf0, 0x5, 0xd101, 0x0, [0xe, 0x0, 0x1]}) 0s ago: executing program 3 (id=2472): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) kernel console output (not intermixed with test programs): s 0 [ 238.574223][ T45] usb 4-1: config 0 has no interface number 0 [ 238.574282][ T45] usb 4-1: config 0 interface 2 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.574309][ T45] usb 4-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.574332][ T45] usb 4-1: config 0 interface 2 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 238.574359][ T45] usb 4-1: config 0 interface 2 has no altsetting 0 [ 238.574395][ T45] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 238.574418][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.661568][ T45] usb 4-1: config 0 descriptor?? [ 238.707515][ T5977] usb 1-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 238.707549][ T5977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.707570][ T5977] usb 1-1: Product: syz [ 238.707585][ T5977] usb 1-1: Manufacturer: syz [ 238.707601][ T5977] usb 1-1: SerialNumber: syz [ 238.820086][ T5977] usb 1-1: config 0 descriptor?? [ 239.186334][ T45] uclogic 0003:5543:0781.001A: unknown main item tag 0x0 [ 239.186379][ T45] uclogic 0003:5543:0781.001A: unknown main item tag 0x0 [ 239.186404][ T45] uclogic 0003:5543:0781.001A: unknown main item tag 0x0 [ 239.186429][ T45] uclogic 0003:5543:0781.001A: unknown main item tag 0x0 [ 239.186452][ T45] uclogic 0003:5543:0781.001A: unknown main item tag 0x0 [ 239.186477][ T45] uclogic 0003:5543:0781.001A: unknown main item tag 0x0 [ 239.186502][ T45] uclogic 0003:5543:0781.001A: unknown main item tag 0x0 [ 239.271976][ T45] uclogic 0003:5543:0781.001A: hidraw0: USB HID v0.07 Device [HID 5543:0781] on usb-dummy_hcd.3-1/input2 [ 239.338353][ T8388] usb 4-1: USB disconnect, device number 8 [ 239.557488][ T5977] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 239.557812][ T5977] asix 1-1:0.0: probe with driver asix failed with error -71 [ 239.603033][ T5977] usb 1-1: USB disconnect, device number 20 [ 239.710837][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.710861][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.886204][ T8395] fido_id[8395]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 239.987632][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.987657][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.608710][ T5977] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 240.764657][ T5977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 240.764696][ T5977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 240.764724][ T5977] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 240.764771][ T5977] usb 3-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 240.764795][ T5977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.806276][ T5977] usb 3-1: config 0 descriptor?? [ 240.807346][ T8411] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 240.888699][ T977] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 240.898889][ T45] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 241.048908][ T977] usb 2-1: Using ep0 maxpacket: 32 [ 241.056944][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.057000][ T977] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 241.057026][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.062819][ T37] audit: type=1326 audit(1757116845.516:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8428 comm="syz.5.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a955ebe9 code=0x7ffc0000 [ 241.063576][ T37] audit: type=1326 audit(1757116845.516:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8428 comm="syz.5.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a955ebe9 code=0x7ffc0000 [ 241.066395][ T37] audit: type=1326 audit(1757116845.516:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8428 comm="syz.5.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7ff6a955ebe9 code=0x7ffc0000 [ 241.066756][ T37] audit: type=1326 audit(1757116845.516:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8428 comm="syz.5.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a955ebe9 code=0x7ffc0000 [ 241.067524][ T37] audit: type=1326 audit(1757116845.516:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8428 comm="syz.5.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a955ebe9 code=0x7ffc0000 [ 241.138726][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 241.138784][ T45] usb 4-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 241.138809][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.434625][ T5977] aureal 0003:0755:2626.001B: fixing Aureal Cy se W-01RN USB_V3.1 report descriptor. [ 241.435901][ T5977] aureal 0003:0755:2626.001B: unknown main item tag 0x6 [ 241.435935][ T5977] aureal 0003:0755:2626.001B: report_id 29495 is invalid [ 241.435953][ T5977] aureal 0003:0755:2626.001B: item 0 2 1 8 parsing failed [ 241.436970][ T5977] aureal 0003:0755:2626.001B: probe with driver aureal failed with error -22 [ 241.445957][ T977] usb 2-1: config 0 descriptor?? [ 241.541295][ T5977] usb 3-1: USB disconnect, device number 17 [ 241.602584][ T45] usb 4-1: config 0 descriptor?? [ 241.606045][ T8420] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 241.688002][ T8438] tipc: Enabling not permitted [ 241.688042][ T8438] tipc: Enabling of bearer rejected, failed to enable media [ 241.982126][ T977] mcp2200 0003:04D8:00DF.001C: USB HID v0.00 Device [HID 04d8:00df] on usb-dummy_hcd.1-1/input0 [ 242.099538][ T45] belkin 0003:050D:3201.001D: unbalanced collection at end of report description [ 242.100749][ T45] belkin 0003:050D:3201.001D: parse failed [ 242.100831][ T45] belkin 0003:050D:3201.001D: probe with driver belkin failed with error -22 [ 242.217540][ T977] usb 2-1: USB disconnect, device number 12 [ 242.248206][ T8444] tipc: Started in network mode [ 242.248244][ T8444] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 242.277267][ T8444] tipc: Enabled bearer , priority 10 [ 242.348034][ T5977] usb 4-1: USB disconnect, device number 9 [ 243.364255][ T5917] tipc: Node number set to 10398378 [ 244.425394][ T8489] ptrace attach of "./syz-executor exec"[5837] was attempted by ""[8489] [ 245.380541][ T5917] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 245.529537][ T5917] usb 4-1: Using ep0 maxpacket: 8 [ 245.532332][ T5917] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 245.532364][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.554016][ T5917] usb 4-1: config 0 descriptor?? [ 246.025594][ T5917] magicmouse 0003:05AC:0269.001E: reserved main item tag 0xd [ 246.025645][ T5917] magicmouse 0003:05AC:0269.001E: item fetching failed at offset 4/5 [ 246.027554][ T5917] magicmouse 0003:05AC:0269.001E: magicmouse hid parse failed [ 246.027680][ T5917] magicmouse 0003:05AC:0269.001E: probe with driver magicmouse failed with error -22 [ 246.209491][ T31] usb 4-1: USB disconnect, device number 10 [ 246.553093][ T8533] program syz.0.1100 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.953532][ T8544] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 247.213770][ T8551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1108'. [ 247.213804][ T8551] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1108'. [ 247.213820][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1108'. [ 247.404785][ T8549] 8021q: adding VLAN 0 to HW filter on device bond1 [ 247.407104][ T8549] team0: Port device bond1 added [ 247.714788][ T37] audit: type=1400 audit(1757116852.166:30): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=8559 comm="syz.3.1114" src=1 dest=20000 netif=gretap0 [ 248.353827][ T8583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1124'. [ 248.353874][ T8583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.539072][ T5917] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 248.578757][ T8585] usb usb8: usbfs: process 8585 (syz.1.1126) did not claim interface 63 before use [ 248.598729][ T45] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 248.699757][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.699826][ T5917] usb 3-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 248.699851][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.739926][ T5917] usb 3-1: config 0 descriptor?? [ 248.753785][ T45] usb 6-1: Using ep0 maxpacket: 8 [ 248.756735][ T45] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 248.791419][ T45] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 248.791455][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.791477][ T45] usb 6-1: Product: syz [ 248.791493][ T45] usb 6-1: Manufacturer: syz [ 248.791508][ T45] usb 6-1: SerialNumber: syz [ 248.858278][ T45] usb 6-1: config 0 descriptor?? [ 248.879491][ T45] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 248.879555][ T45] usb 6-1: setting power ON [ 248.879577][ T45] dvb-usb: bulk message failed: -22 (2/0) [ 248.910445][ T45] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 248.913352][ T45] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 248.913420][ T45] usb 6-1: media controller created [ 248.993392][ T45] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 249.044445][ T45] usb 6-1: selecting invalid altsetting 6 [ 249.044470][ T45] usb 6-1: digital interface selection failed (-22) [ 249.044487][ T45] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 249.047945][ T45] usb 6-1: setting power OFF [ 249.047970][ T45] dvb-usb: bulk message failed: -22 (2/0) [ 249.047990][ T45] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 249.048003][ T45] (NULL device *): no alternate interface [ 249.109256][ T8582] dvb-usb: bulk message failed: -22 (3/0) [ 249.109284][ T8582] cxusb: i2c wr: len=80 is too big! [ 249.109284][ T8582] [ 249.206657][ T45] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 249.231081][ T45] usb 6-1: USB disconnect, device number 2 [ 249.378654][ T5917] logitech 0003:046D:C295.001F: hidraw0: USB HID v0.00 Device [HID 046d:c295] on usb-dummy_hcd.2-1/input0 [ 249.378693][ T5917] logitech 0003:046D:C295.001F: no inputs found [ 249.483308][ T5917] usb 3-1: USB disconnect, device number 18 [ 249.902797][ T8599] fido_id[8599]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 250.841662][ T8635] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 250.841704][ T8635] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 250.841816][ T8635] vhci_hcd vhci_hcd.0: Device attached [ 250.892435][ T8636] vhci_hcd: connection closed [ 250.901675][ T1028] vhci_hcd: stop threads [ 250.901696][ T1028] vhci_hcd: release socket [ 250.901736][ T1028] vhci_hcd: disconnect device [ 251.779063][ T5916] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 251.943211][ T5916] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 251.943248][ T5916] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.943273][ T5916] usb 6-1: config 0 interface 0 has no altsetting 0 [ 251.943312][ T5916] usb 6-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 251.943335][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.967570][ T5916] usb 6-1: config 0 descriptor?? [ 252.030384][ T8669] netlink: 'syz.0.1162': attribute type 2 has an invalid length. [ 252.520554][ T5916] lenovo 0003:17EF:60EE.0020: hidraw0: USB HID v0.01 Device [HID 17ef:60ee] on usb-dummy_hcd.5-1/input0 [ 252.673148][ T5916] lenovo 0003:17EF:60EE.0020: Failed to switch middle button: -71 [ 252.673787][ T5916] lenovo 0003:17EF:60EE.0020: Fn-lock setting failed: -71 [ 252.675079][ T5916] lenovo 0003:17EF:60EE.0020: Sensitivity setting failed: -71 [ 252.769091][ T5916] usb 6-1: USB disconnect, device number 3 [ 252.788236][ T8678] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1166'. [ 254.836816][ T8725] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 254.836846][ T8725] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 254.836982][ T8725] vhci_hcd vhci_hcd.0: Device attached [ 255.091928][ T5917] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 255.168736][ T45] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 255.231294][ T8733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1189'. [ 255.373099][ T45] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 255.373133][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.373155][ T45] usb 6-1: Product: syz [ 255.373170][ T45] usb 6-1: Manufacturer: syz [ 255.373185][ T45] usb 6-1: SerialNumber: syz [ 255.446909][ T45] usb 6-1: config 0 descriptor?? [ 255.749253][ T45] usb 6-1: Firmware version (0.0) predates our first public release. [ 255.749283][ T45] usb 6-1: Please update to version 0.2 or newer [ 255.868731][ T8726] usb 43-1: recv xbuf, 0 [ 255.878625][ T12] vhci_hcd: stop threads [ 255.878646][ T12] vhci_hcd: release socket [ 255.878732][ T12] vhci_hcd: disconnect device [ 255.938755][ T5917] vhci_hcd: vhci_device speed not set [ 255.959535][ T45] usb 6-1: USB disconnect, device number 4 [ 257.168013][ T8781] rdma_op ffff8880313a9270 conn xmit_rdma 0000000000000000 [ 257.859232][ T8801] netlink: 'syz.3.1215': attribute type 27 has an invalid length. [ 259.268761][ T5884] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 259.430270][ T5884] usb 1-1: Using ep0 maxpacket: 8 [ 259.436465][ T5884] usb 1-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 259.436497][ T5884] usb 1-1: config 0 has an invalid interface number: 150 but max is 64 [ 259.436520][ T5884] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.436540][ T5884] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 65 [ 259.436562][ T5884] usb 1-1: config 0 has no interface number 0 [ 259.439272][ T5884] usb 1-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 259.439305][ T5884] usb 1-1: config 0 interface 150 has no altsetting 0 [ 259.439340][ T5884] usb 1-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 259.439363][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.445623][ T5884] usb 1-1: config 0 descriptor?? [ 259.518993][ T8834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1230'. [ 259.675592][ T8840] Invalid logical block size (8192) [ 259.808735][ T5977] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 259.968376][ T5977] usb 6-1: Using ep0 maxpacket: 16 [ 259.983811][ T5977] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 259.983869][ T5977] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 259.983915][ T5977] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 259.983940][ T5977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.032303][ T5884] usb 1-1: USB disconnect, device number 21 [ 260.043910][ T8848] netlink: 'syz.3.1234': attribute type 4 has an invalid length. [ 260.043934][ T8848] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1234'. [ 260.101943][ T5977] usb 6-1: config 0 descriptor?? [ 260.585367][ T5977] kye 0003:0458:5019.0021: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 260.586639][ T5977] kye 0003:0458:5019.0021: unexpected long global item [ 260.587588][ T5977] kye 0003:0458:5019.0021: parse failed [ 260.587667][ T5977] kye 0003:0458:5019.0021: probe with driver kye failed with error -22 [ 260.714443][ T8426] udevd[8426]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.150/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 260.869442][ T5884] usb 6-1: USB disconnect, device number 5 [ 261.300472][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.300576][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.529397][ T45] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 261.708620][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 261.717119][ T45] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 261.717151][ T45] usb 3-1: config 0 has no interface number 0 [ 261.745662][ T45] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 261.745701][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.745724][ T45] usb 3-1: Product: syz [ 261.745739][ T45] usb 3-1: Manufacturer: syz [ 261.745754][ T45] usb 3-1: SerialNumber: syz [ 261.799829][ T45] usb 3-1: config 0 descriptor?? [ 261.819185][ T45] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 262.075585][ T45] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 262.171784][ T45] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 262.499245][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 262.506005][ T8388] usb 3-1: USB disconnect, device number 19 [ 262.557307][ T8897] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 262.557375][ T8897] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 262.557430][ T8897] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 262.557561][ T8897] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 262.557617][ T8897] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 262.557723][ T8897] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 262.557788][ T8897] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 262.557845][ T8897] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 262.558029][ T8897] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 262.558085][ T8897] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 262.558146][ T8897] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 262.558251][ T8897] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 262.579925][ T8388] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 262.652354][ T8388] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 262.653336][ T8388] quatech2 3-1:0.51: device disconnected [ 263.413221][ T977] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 263.471320][ T977] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz0] on syz0 [ 264.087418][ T8915] fido_id[8915]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 264.088804][ T45] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 264.220436][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1264'. [ 264.245323][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 264.248458][ T45] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 264.262579][ T45] usb 3-1: config 0 has no interface number 0 [ 264.279269][ T45] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 264.279303][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.279325][ T45] usb 3-1: Product: syz [ 264.279340][ T45] usb 3-1: Manufacturer: syz [ 264.279355][ T45] usb 3-1: SerialNumber: syz [ 264.287772][ T45] usb 3-1: config 0 descriptor?? [ 264.343573][ T45] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 264.343604][ T45] usb 3-1: selecting invalid altsetting 1 [ 264.343621][ T45] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 264.419465][ T45] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 264.420016][ T45] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 264.420076][ T45] usb 3-1: media controller created [ 264.480032][ T45] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 264.708709][ T5916] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 264.866227][ T5916] usb 4-1: Using ep0 maxpacket: 16 [ 264.875393][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.875429][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.875452][ T5916] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 264.875498][ T5916] usb 4-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 264.875523][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.904535][ T5916] usb 4-1: config 0 descriptor?? [ 265.414884][ T5916] ryos 0003:1E7D:31CE.0023: hidraw0: USB HID v0.00 Device [HID 1e7d:31ce] on usb-dummy_hcd.3-1/input0 [ 265.612997][ T45] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 265.613093][ T45] zl10353_read_register: readreg error (reg=127, ret==-110) [ 265.613119][ T8919] usb 3-1: dvb_usb_ce6230: I2C read not implemented [ 265.674248][ T8957] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 265.698429][ T8959] binder_alloc: binder_alloc_mmap_handler: 8958 200000ffc000-200001000000 already mapped failed -16 [ 265.702551][ T5977] usb 4-1: USB disconnect, device number 11 [ 265.820125][ T45] usb 3-1: USB disconnect, device number 20 [ 266.362317][ T8968] fido_id[8968]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 266.951364][ T8989] program syz.1.1285 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 267.071600][ T8981] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.841130][ T9011] [U] N{st3 )Lbo7UюNQʈ tQZ4s [ 268.490403][ T9022] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.090045][ T9048] netlink: 'syz.0.1312': attribute type 2 has an invalid length. [ 269.090072][ T9048] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1312'. [ 269.262680][ T9053] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1315'. [ 269.801928][ T5916] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 269.948672][ T977] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 269.950916][ T5916] usb 6-1: Using ep0 maxpacket: 16 [ 269.956076][ T5916] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.956113][ T5916] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.956137][ T5916] usb 6-1: config 0 interface 0 has no altsetting 0 [ 269.956175][ T5916] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 269.956201][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.973534][ T5916] usb 6-1: config 0 descriptor?? [ 270.102318][ T977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 270.102367][ T977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.102411][ T977] usb 1-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 270.102435][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.161260][ T977] usb 1-1: config 0 descriptor?? [ 270.519858][ T5916] holtek_kbd 0003:04D9:A055.0024: hidraw0: USB HID v0.00 Device [HID 04d9:a055] on usb-dummy_hcd.5-1/input0 [ 270.540425][ T9080] futex_wake_op: syz.3.1328 tries to shift op by 32; fix this program [ 270.639142][ T977] hid-u2fzero 0003:10C4:8ACF.0025: unknown main item tag 0x3 [ 270.639205][ T977] hid-u2fzero 0003:10C4:8ACF.0025: item fetching failed at offset 4/5 [ 270.640295][ T977] hid-u2fzero 0003:10C4:8ACF.0025: probe with driver hid-u2fzero failed with error -22 [ 270.732024][ T977] usb 6-1: USB disconnect, device number 6 [ 270.778682][ T5916] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 270.885778][ T5977] usb 1-1: USB disconnect, device number 22 [ 270.969060][ T5916] usb 3-1: Using ep0 maxpacket: 32 [ 270.974253][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.974360][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.974411][ T5916] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 270.974436][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.129342][ T5916] usb 3-1: config 0 descriptor?? [ 271.135979][ T9086] fido_id[9086]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 271.607217][ T5916] uclogic 0003:28BD:0071.0026: interface is invalid, ignoring [ 271.868764][ T977] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 271.870516][ T5844] usb 3-1: USB disconnect, device number 21 [ 272.019015][ T977] usb 2-1: Using ep0 maxpacket: 16 [ 272.021820][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.021856][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.021880][ T977] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 272.021927][ T977] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 272.021951][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.091964][ T977] usb 2-1: config 0 descriptor?? [ 272.138692][ T45] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 272.288598][ T45] usb 6-1: Using ep0 maxpacket: 32 [ 272.292611][ T45] usb 6-1: config 0 has an invalid interface number: 66 but max is 0 [ 272.292650][ T45] usb 6-1: config 0 has no interface number 0 [ 272.335042][ T45] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 272.335079][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.335167][ T45] usb 6-1: Product: syz [ 272.335183][ T45] usb 6-1: Manufacturer: syz [ 272.335197][ T45] usb 6-1: SerialNumber: syz [ 272.444819][ T45] usb 6-1: config 0 descriptor?? [ 272.512941][ T45] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 272.513415][ T45] dvb-usb: bulk message failed: -22 (2/0) [ 272.571811][ T45] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 272.573827][ T45] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 272.574146][ T45] usb 6-1: media controller created [ 272.670138][ T977] ryos 0003:1E7D:31CE.0027: hidraw0: USB HID v0.00 Device [HID 1e7d:31ce] on usb-dummy_hcd.1-1/input0 [ 272.677027][ T45] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 272.754712][ T9105] cxusb: i2c wr: len=85 is too big! [ 272.754712][ T9105] [ 272.783693][ T45] cxusb: set interface failed [ 272.783717][ T45] dvb-usb: bulk message failed: -22 (1/0) [ 272.897421][ T37] audit: type=1326 audit(1757116877.346:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9111 comm="syz.2.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c882ebe9 code=0x7ffc0000 [ 272.918624][ T37] audit: type=1326 audit(1757116877.366:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9111 comm="syz.2.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f84c882ebe9 code=0x7ffc0000 [ 272.918688][ T37] audit: type=1326 audit(1757116877.366:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9111 comm="syz.2.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c882ebe9 code=0x7ffc0000 [ 272.918731][ T37] audit: type=1326 audit(1757116877.366:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9111 comm="syz.2.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c882ebe9 code=0x7ffc0000 [ 272.942451][ T5916] usb 2-1: USB disconnect, device number 13 [ 273.051764][ T9114] fido_id[9114]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 273.151851][ T9118] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1346'. [ 273.201232][ T45] DVB: Unable to find symbol lgdt330x_attach() [ 273.201251][ T45] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 273.509391][ T45] rc_core: IR keymap rc-dvico-portable not found [ 273.509416][ T45] Registered IR keymap rc-empty [ 273.540163][ T45] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 273.564644][ T45] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input20 [ 273.581508][ T45] dvb-usb: schedule remote query interval to 100 msecs. [ 273.581535][ T45] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 273.586735][ T45] usb 6-1: USB disconnect, device number 7 [ 273.945958][ T45] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 274.276152][ T9140] 9pnet_fd: Insufficient options for proto=fd [ 274.438768][ T45] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 274.541308][ T9146] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1358'. [ 274.590713][ T45] usb 6-1: Using ep0 maxpacket: 32 [ 274.612856][ T45] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 274.612891][ T45] usb 6-1: config 0 has no interface number 0 [ 274.612984][ T45] usb 6-1: config 0 interface 184 has no altsetting 0 [ 274.641033][ T45] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 274.641067][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.641089][ T45] usb 6-1: Product: syz [ 274.641104][ T45] usb 6-1: Manufacturer: syz [ 274.641118][ T45] usb 6-1: SerialNumber: syz [ 274.671181][ T45] usb 6-1: config 0 descriptor?? [ 274.691849][ T45] smsc75xx v1.0.0 [ 275.318712][ T977] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 275.370071][ T45] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 275.370107][ T45] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 275.370128][ T45] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 275.370522][ T45] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 275.462514][ T45] usb 6-1: USB disconnect, device number 8 [ 275.505043][ T977] usb 1-1: Using ep0 maxpacket: 16 [ 275.516464][ T977] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.516501][ T977] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.516526][ T977] usb 1-1: config 0 interface 0 has no altsetting 0 [ 275.516563][ T977] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 275.516589][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.584695][ T977] usb 1-1: config 0 descriptor?? [ 276.067014][ T977] apple 0003:05AC:0247.0028: unknown main item tag 0x0 [ 276.067057][ T977] apple 0003:05AC:0247.0028: unknown main item tag 0x0 [ 276.067084][ T977] apple 0003:05AC:0247.0028: unknown main item tag 0x0 [ 276.067110][ T977] apple 0003:05AC:0247.0028: unknown main item tag 0x0 [ 276.067136][ T977] apple 0003:05AC:0247.0028: unknown main item tag 0x0 [ 276.067162][ T977] apple 0003:05AC:0247.0028: unknown main item tag 0x0 [ 276.067189][ T977] apple 0003:05AC:0247.0028: unknown main item tag 0x0 [ 276.067215][ T977] apple 0003:05AC:0247.0028: unknown main item tag 0x0 [ 276.067242][ T977] apple 0003:05AC:0247.0028: unknown main item tag 0x0 [ 276.146527][ T977] apple 0003:05AC:0247.0028: unknown main item tag 0x0 [ 276.172365][ T977] apple 0003:05AC:0247.0028: unexpected long global item [ 276.173524][ T977] apple 0003:05AC:0247.0028: parse failed [ 276.173652][ T977] apple 0003:05AC:0247.0028: probe with driver apple failed with error -22 [ 276.292227][ T977] usb 1-1: USB disconnect, device number 23 [ 276.474138][ T37] audit: type=1326 audit(1757116880.926:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9177 comm="syz.2.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c882ebe9 code=0x7ffc0000 [ 276.474200][ T37] audit: type=1326 audit(1757116880.926:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9177 comm="syz.2.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c882ebe9 code=0x7ffc0000 [ 276.519060][ T37] audit: type=1326 audit(1757116880.966:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9177 comm="syz.2.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f84c882ebe9 code=0x7ffc0000 [ 276.520258][ T37] audit: type=1326 audit(1757116880.976:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9177 comm="syz.2.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c882ebe9 code=0x7ffc0000 [ 276.520307][ T37] audit: type=1326 audit(1757116880.976:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9177 comm="syz.2.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c882ebe9 code=0x7ffc0000 [ 276.533038][ T37] audit: type=1326 audit(1757116880.986:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9177 comm="syz.2.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f84c882ebe9 code=0x7ffc0000 [ 278.317571][ T9231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1397'. [ 279.369159][ T9248] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 279.939604][ T5977] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 280.076698][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 280.076720][ T37] audit: type=1326 audit(1757116884.526:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9271 comm="syz.3.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7f35ebe9 code=0x7ffc0000 [ 280.076777][ T37] audit: type=1326 audit(1757116884.526:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9271 comm="syz.3.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7f35ebe9 code=0x7ffc0000 [ 280.107669][ T37] audit: type=1326 audit(1757116884.556:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9271 comm="syz.3.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fcb7f35ebe9 code=0x7ffc0000 [ 280.107727][ T37] audit: type=1326 audit(1757116884.556:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9271 comm="syz.3.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcb7f35ec23 code=0x7ffc0000 [ 280.107770][ T37] audit: type=1326 audit(1757116884.556:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9271 comm="syz.3.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcb7f35ec23 code=0x7ffc0000 [ 280.107811][ T37] audit: type=1326 audit(1757116884.556:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9271 comm="syz.3.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7f35ebe9 code=0x7ffc0000 [ 280.107855][ T37] audit: type=1326 audit(1757116884.556:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9271 comm="syz.3.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7f35ebe9 code=0x7ffc0000 [ 280.135959][ T5977] usb 6-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 280.135992][ T5977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.136011][ T5977] usb 6-1: Product: syz [ 280.136025][ T5977] usb 6-1: Manufacturer: syz [ 280.136040][ T5977] usb 6-1: SerialNumber: syz [ 280.149787][ T37] audit: type=1326 audit(1757116884.606:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9271 comm="syz.3.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fcb7f35ebe9 code=0x7ffc0000 [ 280.149841][ T37] audit: type=1326 audit(1757116884.606:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9271 comm="syz.3.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7f35ebe9 code=0x7ffc0000 [ 280.153080][ T5977] usb 6-1: config 0 descriptor?? [ 280.877166][ T5977] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 280.877543][ T5977] asix 6-1:0.0: probe with driver asix failed with error -71 [ 280.905177][ T5977] usb 6-1: USB disconnect, device number 9 [ 281.249170][ T45] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 281.398670][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 281.401786][ T45] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 281.401819][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.434123][ T45] usb 1-1: config 0 descriptor?? [ 281.963562][ T45] magicmouse 0003:05AC:0269.0029: reserved main item tag 0xd [ 281.963603][ T45] magicmouse 0003:05AC:0269.0029: item fetching failed at offset 4/5 [ 281.964553][ T45] magicmouse 0003:05AC:0269.0029: magicmouse hid parse failed [ 281.967302][ T45] magicmouse 0003:05AC:0269.0029: probe with driver magicmouse failed with error -22 [ 282.126481][ T45] usb 1-1: USB disconnect, device number 24 [ 283.219986][ T5842] Bluetooth: hci1: unexpected event for opcode 0x0c46 [ 283.386609][ T9340] mkiss: ax0: crc mode is auto. [ 285.058959][ T9375] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 285.922292][ T37] audit: type=1326 audit(1757116890.376:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9376 comm="syz.3.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7f35ebe9 code=0x7fc00000 [ 286.318028][ T5842] Bluetooth: hci2: unexpected event for opcode 0x0c46 [ 286.538892][ T9408] mkiss: ax0: crc mode is auto. [ 286.672628][ T37] audit: type=1326 audit(1757116891.126:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9414 comm="syz.0.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c669ebe9 code=0x7ffc0000 [ 286.710543][ T37] audit: type=1326 audit(1757116891.166:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9414 comm="syz.0.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f53c669ebe9 code=0x7ffc0000 [ 286.718871][ T37] audit: type=1326 audit(1757116891.166:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9414 comm="syz.0.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c669ebe9 code=0x7ffc0000 [ 286.718929][ T37] audit: type=1326 audit(1757116891.166:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9414 comm="syz.0.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c669ebe9 code=0x7ffc0000 [ 286.718974][ T37] audit: type=1326 audit(1757116891.166:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9414 comm="syz.0.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f53c669ebe9 code=0x7ffc0000 [ 286.719017][ T37] audit: type=1326 audit(1757116891.166:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9414 comm="syz.0.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c669ebe9 code=0x7ffc0000 [ 287.865517][ T9440] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 288.358655][ T9452] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1499'. [ 288.438674][ T45] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 288.598702][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 288.608269][ T45] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 288.608307][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 288.608347][ T45] usb 1-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 288.608381][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.681429][ T45] usb 1-1: config 0 descriptor?? [ 289.069867][ T9465] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1504'. [ 289.069967][ T9465] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1504'. [ 289.274733][ T45] hid-u2fzero 0003:20A0:4287.002A: hidraw0: USB HID v0.03 Device [HID 20a0:4287] on usb-dummy_hcd.0-1/input0 [ 289.361965][ T45] hid-u2fzero 0003:20A0:4287.002A: NitroKey U2F LED initialised [ 289.362245][ T45] hid-u2fzero 0003:20A0:4287.002A: NitroKey U2F RNG initialised [ 289.493459][ T45] usb 1-1: USB disconnect, device number 25 [ 289.929056][ T9474] fido_id[9474]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 290.688763][ T5909] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 290.846180][ T5909] usb 6-1: Using ep0 maxpacket: 32 [ 290.855302][ T5909] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 290.855333][ T5909] usb 6-1: config 0 has no interface number 0 [ 290.864982][ T5909] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 290.865017][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.865038][ T5909] usb 6-1: Product: syz [ 290.865053][ T5909] usb 6-1: Manufacturer: syz [ 290.865069][ T5909] usb 6-1: SerialNumber: syz [ 290.903667][ T5909] usb 6-1: config 0 descriptor?? [ 290.963071][ T5909] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 291.238771][ T5909] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 291.275274][ T5909] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 291.629035][ T5884] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 291.650335][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 291.651133][ T5909] usb 6-1: USB disconnect, device number 10 [ 291.768181][ T5909] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 291.791655][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 291.791713][ T5884] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0a0f, bcdDevice= 0.00 [ 291.791739][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.845309][ T5909] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 291.846908][ T5884] usb 4-1: config 0 descriptor?? [ 291.861648][ T5909] quatech2 6-1:0.51: device disconnected [ 292.250231][ T9525] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 292.360392][ T5884] hid-corsair-void 0003:1B1C:0A0F.002B: item fetching failed at offset 0/3 [ 292.361301][ T5884] hid-corsair-void 0003:1B1C:0A0F.002B: parse failed (reason: -22) [ 292.361477][ T5884] hid-corsair-void 0003:1B1C:0A0F.002B: probe with driver hid-corsair-void failed with error -22 [ 292.567289][ T5916] usb 4-1: USB disconnect, device number 12 [ 292.659618][ T5884] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 292.811460][ T5884] usb 2-1: Using ep0 maxpacket: 8 [ 292.815380][ T5884] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 292.815412][ T5884] usb 2-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 292.815454][ T5884] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 292.815480][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.137129][ T45] usb 2-1: USB disconnect, device number 14 [ 294.711260][ T9583] [U]  [ 295.882726][ T9616] netlink: 'syz.3.1576': attribute type 29 has an invalid length. [ 295.911031][ T9616] netlink: 'syz.3.1576': attribute type 29 has an invalid length. [ 296.081407][ T9617] bridge0: entered promiscuous mode [ 296.125599][ T9617] bridge0: port 3(macsec1) entered blocking state [ 296.125789][ T9617] bridge0: port 3(macsec1) entered disabled state [ 296.126064][ T9617] macsec1: entered allmulticast mode [ 296.126083][ T9617] bridge0: entered allmulticast mode [ 296.222320][ T9617] macsec1: left allmulticast mode [ 296.222347][ T9617] bridge0: left allmulticast mode [ 296.360465][ T9617] bridge0: left promiscuous mode [ 296.455848][ T9626] netlink: 'syz.3.1580': attribute type 2 has an invalid length. [ 297.238700][ T5909] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 297.390744][ T5909] usb 1-1: Using ep0 maxpacket: 16 [ 297.407565][ T5909] usb 1-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 297.407600][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.407621][ T5909] usb 1-1: Product: syz [ 297.407637][ T5909] usb 1-1: Manufacturer: syz [ 297.407652][ T5909] usb 1-1: SerialNumber: syz [ 297.456583][ T5909] usb 1-1: config 0 descriptor?? [ 297.505021][ T5909] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 297.738219][ T5909] gspca_sn9c2028: read1 error -32 [ 297.952028][ T5909] gspca_sn9c2028: read1 error -71 [ 297.952212][ T5909] sn9c2028 1-1:0.0: probe with driver sn9c2028 failed with error -71 [ 297.958056][ T1028] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.051713][ T5909] usb 1-1: USB disconnect, device number 26 [ 298.359026][ T5884] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 298.524738][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 298.524779][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.524824][ T5884] usb 3-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 298.524849][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.628031][ T5884] usb 3-1: config 0 descriptor?? [ 298.739504][ T1028] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.902630][ T5909] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 299.052459][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 299.052517][ T5909] usb 4-1: New USB device found, idVendor=06a3, idProduct=0cd7, bcdDevice= 0.00 [ 299.052543][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.104654][ T5909] usb 4-1: config 0 descriptor?? [ 299.114621][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 299.125997][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 299.128381][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 299.134100][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 299.134894][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 299.192731][ T5884] hid_parser_main: 839 callbacks suppressed [ 299.192763][ T5884] sunplus 0003:04FC:05D8.002C: unknown main item tag 0x0 [ 299.192796][ T5884] sunplus 0003:04FC:05D8.002C: unknown main item tag 0x0 [ 299.192821][ T5884] sunplus 0003:04FC:05D8.002C: unknown main item tag 0x0 [ 299.192848][ T5884] sunplus 0003:04FC:05D8.002C: unknown main item tag 0x0 [ 299.192874][ T5884] sunplus 0003:04FC:05D8.002C: unknown main item tag 0x0 [ 299.220775][ T5884] sunplus 0003:04FC:05D8.002C: hidraw0: USB HID v0.79 Device [HID 04fc:05d8] on usb-dummy_hcd.2-1/input0 [ 299.347667][ T5884] usb 3-1: USB disconnect, device number 22 [ 299.473786][ T1028] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.597846][ T5909] saitek 0003:06A3:0CD7.002D: item fetching failed at offset 0/3 [ 299.618944][ T5909] saitek 0003:06A3:0CD7.002D: parse failed [ 299.619080][ T5909] saitek 0003:06A3:0CD7.002D: probe with driver saitek failed with error -22 [ 299.676761][ T9668] fido_id[9668]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 299.832993][ T5909] usb 4-1: USB disconnect, device number 13 [ 300.067221][ T1028] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.208867][ T5842] Bluetooth: hci0: command tx timeout [ 301.284105][ T1028] bridge_slave_1: left allmulticast mode [ 301.284138][ T1028] bridge_slave_1: left promiscuous mode [ 301.284398][ T1028] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.439559][ T1028] bridge_slave_0: left allmulticast mode [ 301.439598][ T1028] bridge_slave_0: left promiscuous mode [ 301.439890][ T1028] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.528606][ T5977] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 302.693687][ T5977] usb 3-1: Using ep0 maxpacket: 16 [ 302.696569][ T5977] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 302.696599][ T5977] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 302.696619][ T5977] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 302.702918][ T5977] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 302.702948][ T5977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.702968][ T5977] usb 3-1: Product: syz [ 302.702981][ T5977] usb 3-1: Manufacturer: syz [ 302.702995][ T5977] usb 3-1: SerialNumber: syz [ 303.145991][ T5977] usb 3-1: 0:2 : does not exist [ 303.251285][ T5977] usb 3-1: USB disconnect, device number 23 [ 303.289951][ T5842] Bluetooth: hci0: command tx timeout [ 303.392701][ T8426] udevd[8426]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 304.477722][ T37] audit: type=1326 audit(1757116908.926:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9751 comm="syz.0.1635" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f53c669ebe9 code=0x0 [ 305.369266][ T5842] Bluetooth: hci0: command tx timeout [ 305.559748][ T1028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.681775][ T1028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.741574][ T1028] bond0 (unregistering): Released all slaves [ 306.855569][ T9796] syz.0.1655 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 307.448572][ T5842] Bluetooth: hci0: command tx timeout [ 308.305307][ T9824] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1667'. [ 308.506635][ T9660] chnl_net:caif_netlink_parms(): no params data found [ 309.043625][ T1028] hsr_slave_0: left promiscuous mode [ 309.099547][ T1028] hsr_slave_1: left promiscuous mode [ 309.104858][ T1028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.104895][ T1028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.170609][ T1028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.170645][ T1028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.559850][ T1028] veth1_macvtap: left promiscuous mode [ 309.560243][ T1028] veth0_macvtap: left promiscuous mode [ 309.560576][ T1028] veth1_vlan: left promiscuous mode [ 309.565213][ T1028] veth0_vlan: left promiscuous mode [ 310.485053][ T9883] xt_limit: Overflow, try lower: 271964/0 [ 310.563551][ T1028] pim6reg (unregistering): left allmulticast mode [ 310.855288][ C1] vkms_vblank_simulate: vblank timer overrun [ 311.102426][ C1] vkms_vblank_simulate: vblank timer overrun [ 313.069029][ C1] vkms_vblank_simulate: vblank timer overrun [ 313.189572][ T1028] team0 (unregistering): Port device team_slave_1 removed [ 313.399518][ T1028] team0 (unregistering): Port device team_slave_0 removed [ 316.188921][ T9893] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1693'. [ 316.679269][ T5909] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 316.834709][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.834748][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.834802][ T5909] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 316.834827][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.893711][ T5909] usb 3-1: config 0 descriptor?? [ 317.031379][ T9660] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.086659][ T9660] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.087068][ T9660] bridge_slave_0: entered allmulticast mode [ 317.092828][ T9660] bridge_slave_0: entered promiscuous mode [ 317.134629][ T9660] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.134773][ T9660] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.135002][ T9660] bridge_slave_1: entered allmulticast mode [ 317.137986][ T9660] bridge_slave_1: entered promiscuous mode [ 317.623353][ T5909] hid-led 0003:1D34:000A.002E: probe with driver hid-led failed with error -71 [ 317.688990][ T5909] usb 3-1: USB disconnect, device number 24 [ 317.994054][ T9660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.091467][ T9660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.226954][ T5909] kernel write not supported for file /input/event0 (pid: 5909 comm: kworker/1:4) [ 318.902603][ T9660] team0: Port device team_slave_0 added [ 318.916991][ T9660] team0: Port device team_slave_1 added [ 318.937707][ T1028] IPVS: stop unused estimator thread 0... [ 319.700247][ T9660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.700268][ T9660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.700298][ T9660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.703109][ T9660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.703123][ T9660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.703147][ T9660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.978376][ T9987] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1726'. [ 320.957262][ T9660] hsr_slave_0: entered promiscuous mode [ 320.980215][ T9660] hsr_slave_1: entered promiscuous mode [ 320.981301][ T9660] debugfs: 'hsr0' already exists in 'hsr' [ 320.981329][ T9660] Cannot create hsr debugfs directory [ 321.539277][T10019] vlan2: entered allmulticast mode [ 321.539302][T10019] batadv0: entered allmulticast mode [ 321.619559][ T37] audit: type=1400 audit(1757116926.066:60): lsm=SMACK fn=smack_inode_setattr action=denied subject="y" object="_" requested=w pid=10022 comm="syz.5.1742" name="128" dev="tmpfs" ino=655 [ 322.738098][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.738189][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.811246][ T5917] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 322.998270][ T5917] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.998337][ T5917] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 322.998362][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.129004][ T5917] usb 6-1: config 0 descriptor?? [ 323.146195][ T5917] pwc: Askey VC010 type 2 USB webcam detected. [ 323.230737][ T9660] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 323.320076][ T9660] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 323.438224][ T9660] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 323.496175][ T9660] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 323.844235][ T5917] pwc: recv_control_msg error -71 req 02 val 2700 [ 323.863353][ T5917] pwc: recv_control_msg error -71 req 02 val 2c00 [ 323.871740][ T5917] pwc: recv_control_msg error -71 req 04 val 1000 [ 323.874063][ T5917] pwc: recv_control_msg error -71 req 04 val 1300 [ 323.886851][ T5917] pwc: recv_control_msg error -71 req 04 val 1400 [ 323.887511][ T5917] pwc: recv_control_msg error -71 req 02 val 2000 [ 323.888000][ T5917] pwc: recv_control_msg error -71 req 02 val 2100 [ 323.889170][ T5917] pwc: recv_control_msg error -71 req 04 val 1500 [ 323.889670][ T5917] pwc: recv_control_msg error -71 req 02 val 2500 [ 323.890159][ T5917] pwc: recv_control_msg error -71 req 02 val 2400 [ 323.896660][ T5917] pwc: recv_control_msg error -71 req 02 val 2600 [ 323.908613][ T5917] pwc: recv_control_msg error -71 req 02 val 2900 [ 323.919515][ T5917] pwc: recv_control_msg error -71 req 02 val 2800 [ 323.938827][ T5917] pwc: recv_control_msg error -71 req 04 val 1100 [ 323.939367][ T5917] pwc: recv_control_msg error -71 req 04 val 1200 [ 323.960239][ T5917] pwc: Registered as video103. [ 324.045243][ T5917] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input22 [ 324.129296][ T5917] usb 6-1: USB disconnect, device number 11 [ 324.233603][ T9660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.374198][ T9660] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.535393][ T9716] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.535615][ T9716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.906692][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.906962][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.926070][T10093] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1764'. [ 325.258932][ T5917] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 325.472207][ T5917] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 325.472243][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.472265][ T5917] usb 6-1: Product: syz [ 325.472281][ T5917] usb 6-1: Manufacturer: syz [ 325.472297][ T5917] usb 6-1: SerialNumber: syz [ 325.506941][ T5917] usb 6-1: config 0 descriptor?? [ 325.661162][ T37] audit: type=1326 audit(1757116930.116:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10101 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c669ebe9 code=0x7ffc0000 [ 325.661227][ T37] audit: type=1326 audit(1757116930.116:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10101 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c669ebe9 code=0x7ffc0000 [ 325.667054][ T37] audit: type=1326 audit(1757116930.116:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10101 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f53c669ebe9 code=0x7ffc0000 [ 325.667115][ T37] audit: type=1326 audit(1757116930.116:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10101 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c669ebe9 code=0x7ffc0000 [ 325.667162][ T37] audit: type=1326 audit(1757116930.116:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10101 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c669ebe9 code=0x7ffc0000 [ 325.704993][ T37] audit: type=1326 audit(1757116930.156:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10101 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f53c66a0b07 code=0x7ffc0000 [ 325.733472][ T37] audit: type=1326 audit(1757116930.186:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10101 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f53c66a0a7c code=0x7ffc0000 [ 325.752469][ T37] audit: type=1326 audit(1757116930.196:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10101 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f53c66a09b4 code=0x7ffc0000 [ 325.762373][ T37] audit: type=1326 audit(1757116930.206:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10101 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f53c66a09b4 code=0x7ffc0000 [ 325.868638][ T5917] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 326.170917][ T5916] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 326.268042][ T5917] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 326.290289][T10114] syzkaller1: tun_chr_ioctl cmd 35108 [ 326.299971][ T5917] usb 6-1: USB disconnect, device number 12 [ 326.330481][ T5916] usb 3-1: Using ep0 maxpacket: 8 [ 326.348949][ T5916] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 326.348981][ T5916] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 326.349001][ T5916] usb 3-1: config 0 has no interface number 0 [ 326.349057][ T5916] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 326.349082][ T5916] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 326.349110][ T5916] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 326.351075][ T5916] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 326.351106][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 326.351127][ T5916] usb 3-1: Product: syz [ 326.437795][ T5916] usb 3-1: config 0 descriptor?? [ 326.441613][T10108] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 326.967377][ T9660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.147133][ T5916] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input23 [ 327.375119][ C0] keyspan_remote 3-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 327.387430][ T5916] usb 3-1: USB disconnect, device number 25 [ 328.930793][ T9660] veth0_vlan: entered promiscuous mode [ 329.087988][ T9660] veth1_vlan: entered promiscuous mode [ 329.406020][ T9660] veth0_macvtap: entered promiscuous mode [ 329.467301][ T9660] veth1_macvtap: entered promiscuous mode [ 329.531634][ T9660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.582130][ T9660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.653738][T10181] netlink: 'syz.5.1792': attribute type 10 has an invalid length. [ 329.670389][ T4559] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.870774][T10181] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 329.871150][ T4559] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.874733][ T4559] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.875466][ T4559] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.929326][ T5835] Bluetooth: hci5: command 0x041b tx timeout [ 330.870000][T10197] syz_tun: entered allmulticast mode [ 330.877982][T10200] syz_tun: left allmulticast mode [ 330.960294][ T9716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.960321][ T9716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.194263][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.194288][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.158624][ T5977] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 332.325403][ T5977] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.325435][ T5977] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 332.328930][ T5977] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 332.328962][ T5977] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 332.328982][ T5977] usb 7-1: SerialNumber: syz [ 332.392542][ T5977] usb 7-1: 0:2 : does not exist [ 332.720446][ T5977] usb 7-1: USB disconnect, device number 2 [ 333.020661][ T5916] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 333.077500][ T9918] udevd[9918]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 333.169944][ T5916] usb 6-1: Using ep0 maxpacket: 32 [ 333.175745][ T5916] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 333.175781][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.200582][ T5916] usb 6-1: config 0 descriptor?? [ 333.484578][ T5916] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 333.534755][ T5916] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 333.539835][ T5916] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 333.539895][ T5916] usb 6-1: media controller created [ 333.707240][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 333.807082][T10256] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1821'. [ 333.950667][ T5916] az6027: usb out operation failed. (-71) [ 333.957208][ T5916] az6027: usb out operation failed. (-71) [ 333.957230][ T5916] stb0899_attach: Driver disabled by Kconfig [ 333.957241][ T5916] az6027: no front-end attached [ 333.957241][ T5916] [ 333.957890][ T5916] az6027: usb out operation failed. (-71) [ 333.957907][ T5916] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 333.961611][ T5916] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input24 [ 334.011965][ T5916] dvb-usb: schedule remote query interval to 400 msecs. [ 334.011990][ T5916] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 334.029118][ T5916] usb 6-1: USB disconnect, device number 13 [ 334.048659][ T5977] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 334.198781][ T5977] usb 4-1: Using ep0 maxpacket: 32 [ 334.201787][ T5977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.201824][ T5977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.201868][ T5977] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 334.202060][ T5977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.332631][ T5977] usb 4-1: config 0 descriptor?? [ 334.449429][ T5977] hub 4-1:0.0: USB hub found [ 334.544999][ T5916] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 334.738977][ T5977] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 334.948395][ T5977] usbhid 4-1:0.0: can't add hid device: -71 [ 334.948977][ T5977] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 334.993116][ T5977] usb 4-1: USB disconnect, device number 14 [ 335.169873][ T5842] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 335.371173][T10283] netlink: 'syz.5.1832': attribute type 25 has an invalid length. [ 335.371200][T10283] netlink: 'syz.5.1832': attribute type 1 has an invalid length. [ 335.371331][T10283] bridge0: port 1(bridge_slave_0) entered learning state [ 335.908937][T10295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1837'. [ 336.362247][T10304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1840'. [ 336.362283][T10304] netlink: 'syz.3.1840': attribute type 9 has an invalid length. [ 336.511648][T10304] macvlan2: entered allmulticast mode [ 336.511671][T10304] veth0_macvtap: entered allmulticast mode [ 336.995525][T10313] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 336.995767][T10313] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 336.995952][T10313] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 336.996139][T10313] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 336.996325][T10313] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 336.996527][T10313] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 336.996722][T10313] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 336.996911][T10313] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 336.997092][T10313] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 336.997269][T10313] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 337.007565][ C1] vkms_vblank_simulate: vblank timer overrun [ 337.143350][ T5916] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 337.268662][ T5977] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 337.311336][ T5916] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.311375][ T5916] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.311447][ T5916] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 337.311472][ T5916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.330910][ T5916] usb 7-1: config 0 descriptor?? [ 337.450174][ T5977] usb 3-1: Using ep0 maxpacket: 16 [ 337.457226][ T5977] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 337.457334][ T5977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 337.491372][ T5977] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 337.491700][ T5977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.491884][ T5977] usb 3-1: Product: syz [ 337.491903][ T5977] usb 3-1: Manufacturer: syz [ 337.491990][ T5977] usb 3-1: SerialNumber: syz [ 337.602646][ T5977] usb 3-1: config 0 descriptor?? [ 337.720598][ T5977] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 337.720638][ T5977] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 337.757307][T10318] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1846'. [ 337.903715][T10322] vxcan1: tx address claim with dest, not broadcast [ 337.966454][ T5916] hid-thrustmaster 0003:044F:B65D.002F: unknown main item tag 0x0 [ 337.985459][ T5916] hid-thrustmaster 0003:044F:B65D.002F: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.6-1/input0 [ 337.986303][ T5916] hid-thrustmaster 0003:044F:B65D.002F: Wrong number of endpoints? [ 338.289052][ C0] hid-thrustmaster 0003:044F:B65D.002F: Unknown packet type 0x0, unable to proceed further with wheel init [ 338.368711][ T5977] em28xx 3-1:0.0: chip ID is em28178 [ 338.523262][ T5909] usb 7-1: USB disconnect, device number 3 [ 338.623413][ T5844] usb 3-1: USB disconnect, device number 26 [ 338.663257][ T5844] em28xx 3-1:0.0: Disconnecting em28xx [ 338.740407][T10326] fido_id[10326]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 338.827992][ T5844] em28xx 3-1:0.0: Freeing device [ 339.030708][T10329] bond0: entered promiscuous mode [ 339.030733][T10329] bond_slave_0: entered promiscuous mode [ 339.031010][T10329] bond_slave_1: entered promiscuous mode [ 339.033876][T10329] batadv0: entered promiscuous mode [ 339.084341][T10329] hsr1: entered promiscuous mode [ 339.085378][T10329] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 339.087526][T10327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1849'. [ 340.090738][T10358] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1859'. [ 341.078841][ T5844] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 341.228612][ T5844] usb 4-1: Using ep0 maxpacket: 8 [ 341.235415][ T5844] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 341.235451][ T5844] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 341.235478][ T5844] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 341.235504][ T5844] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 341.235554][ T5844] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 341.235580][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.610399][ T5844] usb 4-1: GET_CAPABILITIES returned 0 [ 341.610468][ T5844] usbtmc 4-1:16.0: can't read capabilities [ 341.879478][ T31] usb 4-1: USB disconnect, device number 15 [ 342.536646][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 342.536667][ T37] audit: type=1326 audit(1757116946.986:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10410 comm="syz.6.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5286ebe9 code=0x7ffc0000 [ 342.536721][ T37] audit: type=1326 audit(1757116946.986:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10410 comm="syz.6.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5286ebe9 code=0x7ffc0000 [ 342.626085][ T37] audit: type=1326 audit(1757116947.066:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10410 comm="syz.6.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c5286ebe9 code=0x7ffc0000 [ 342.626150][ T37] audit: type=1326 audit(1757116947.066:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10410 comm="syz.6.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5286ebe9 code=0x7ffc0000 [ 342.627741][ T37] audit: type=1326 audit(1757116947.076:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10410 comm="syz.6.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c5286ebe9 code=0x7ffc0000 [ 342.627796][ T37] audit: type=1326 audit(1757116947.076:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10410 comm="syz.6.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5286ebe9 code=0x7ffc0000 [ 342.639899][ T37] audit: type=1326 audit(1757116947.096:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10410 comm="syz.6.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f8c5286ebe9 code=0x7ffc0000 [ 342.700088][ T37] audit: type=1326 audit(1757116947.156:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10410 comm="syz.6.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5286ebe9 code=0x7ffc0000 [ 342.703247][ T37] audit: type=1326 audit(1757116947.156:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10410 comm="syz.6.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5286ebe9 code=0x7ffc0000 [ 342.942246][T10419] loop8: detected capacity change from 0 to 1 [ 342.987507][T10419] Dev loop8: unable to read RDB block 1 [ 342.987566][T10419] loop8: unable to read partition table [ 342.987839][T10419] loop8: partition table beyond EOD, truncated [ 342.987860][T10419] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 343.199189][ T8388] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 343.370202][ T8388] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 343.370234][ T8388] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.370252][ T8388] usb 3-1: Product: syz [ 343.370265][ T8388] usb 3-1: Manufacturer: syz [ 343.370278][ T8388] usb 3-1: SerialNumber: syz [ 343.404524][ T8388] usb 3-1: config 0 descriptor?? [ 343.693729][ T8388] usb 3-1: USB disconnect, device number 27 [ 343.914858][T10250] udevd[10250]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 344.545664][T10449] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 345.012325][ T5909] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 345.136691][ T5842] Bluetooth: hci2: unknown advertising packet type: 0xcb [ 345.136718][ T5842] Bluetooth: hci2: unknown advertising packet type: 0x2b [ 345.136734][ T5842] Bluetooth: hci2: unknown advertising packet type: 0x21 [ 345.136748][ T5842] Bluetooth: hci2: unknown advertising packet type: 0x8e [ 345.136763][ T5842] Bluetooth: hci2: unknown advertising packet type: 0xae [ 345.136776][ T5842] Bluetooth: hci2: unknown advertising packet type: 0x2e [ 345.136790][ T5842] Bluetooth: hci2: unknown advertising packet type: 0x77 [ 345.188604][ T5909] usb 4-1: Using ep0 maxpacket: 16 [ 345.226516][ T5909] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.226555][ T5909] usb 4-1: config 0 interface 0 has no altsetting 0 [ 345.226603][ T5909] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 345.226628][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.341658][ T5909] usb 4-1: config 0 descriptor?? [ 345.937154][ T5909] nzxt-smart2 0003:1E71:2009.0030: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 346.624234][ T5909] usb 4-1: USB disconnect, device number 16 [ 346.797616][T10484] fido_id[10484]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 347.726122][T10508] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1909'. [ 348.468751][T10523] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1915'. [ 348.468880][T10523] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1915'. [ 351.128619][ T45] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 351.278627][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 351.302886][ T45] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 351.302923][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.338931][ T45] usb 4-1: config 0 descriptor?? [ 351.617757][ T45] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 351.651567][ T45] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 351.655049][ T45] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 351.675759][ T45] usb 4-1: media controller created [ 351.758748][ T45] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 351.838617][ T45] az6027: usb out operation failed. (-71) [ 351.839165][ T45] az6027: usb out operation failed. (-71) [ 351.839190][ T45] stb0899_attach: Driver disabled by Kconfig [ 351.839201][ T45] az6027: no front-end attached [ 351.839201][ T45] [ 351.839644][ T45] az6027: usb out operation failed. (-71) [ 351.839660][ T45] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 351.843733][ T45] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input27 [ 351.935208][ T45] dvb-usb: schedule remote query interval to 400 msecs. [ 351.935250][ T45] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 351.961806][ T45] usb 4-1: USB disconnect, device number 17 [ 352.276612][ T45] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 354.844302][T10610] netlink: 'syz.2.1949': attribute type 12 has an invalid length. [ 354.844329][T10610] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1949'. [ 356.369102][T10646] program syz.5.1965 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 356.603728][T10652] netlink: 172 bytes leftover after parsing attributes in process `syz.5.1967'. [ 356.603758][T10652] net_ratelimit: 44 callbacks suppressed [ 356.603771][T10652] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 357.139685][T10660] netlink: 'syz.5.1969': attribute type 3 has an invalid length. [ 357.139711][T10660] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1969'. [ 360.398760][ T45] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 360.571276][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.571315][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.571357][ T45] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 360.571383][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.640891][ T45] usb 1-1: config 0 descriptor?? [ 361.484403][ T45] hid-led 0003:0FC5:B080.0031: probe with driver hid-led failed with error -71 [ 361.509864][ T45] usb 1-1: USB disconnect, device number 27 [ 361.622862][T10736] sctp: [Deprecated]: syz.2.2001 (pid 10736) Use of struct sctp_assoc_value in delayed_ack socket option. [ 361.622862][T10736] Use struct sctp_sack_info instead [ 362.214924][T10742] support for cryptoloop has been removed. Use dm-crypt instead. [ 363.339956][T10764] Bluetooth: MGMT ver 1.23 [ 364.900658][T10792] mmap: syz.6.2028 (10792): VmData 37396480 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 365.117345][T10796] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2030'. [ 365.117371][T10796] netlink: 26 bytes leftover after parsing attributes in process `syz.5.2030'. [ 365.370756][T10804] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2034'. [ 366.482187][ T37] audit: type=1800 audit(1757116970.906:82): pid=10828 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.2046" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=27249 res=0 errno=0 [ 366.929022][T10837] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2050'. [ 367.227950][T10839] bond1 (unregistering): Released all slaves [ 367.288285][T10848] program syz.6.2055 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 368.018658][ T5917] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 368.170370][ T5917] usb 3-1: Using ep0 maxpacket: 8 [ 368.176987][ T5917] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 368.177020][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.177041][ T5917] usb 3-1: Product: syz [ 368.177057][ T5917] usb 3-1: Manufacturer: syz [ 368.177072][ T5917] usb 3-1: SerialNumber: syz [ 368.202748][ T45] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 368.241129][ T5917] usb 3-1: config 0 descriptor?? [ 368.248269][ T5917] gspca_main: se401-2.14.0 probing 047d:5003 [ 368.351712][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 368.354990][ T45] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 368.355025][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 368.359505][ T45] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 368.359542][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.359562][ T45] usb 4-1: Product: syz [ 368.359576][ T45] usb 4-1: Manufacturer: syz [ 368.359591][ T45] usb 4-1: SerialNumber: syz [ 368.376453][ T45] usb 4-1: config 0 descriptor?? [ 368.433379][ T45] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 368.433420][ T45] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 368.704922][ T5917] gspca_se401: ExtraFeatures: 24 [ 368.934761][ T5917] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input28 [ 368.982646][ T5917] usb 3-1: USB disconnect, device number 28 [ 369.073241][ T45] em28xx 4-1:0.0: chip ID is em28174 [ 369.314890][ T8388] usb 4-1: USB disconnect, device number 18 [ 369.317677][ T8388] em28xx 4-1:0.0: Disconnecting em28xx [ 369.361659][ T8388] em28xx 4-1:0.0: Freeing device [ 369.916389][ T45] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 370.076647][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.076684][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.076726][ T45] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 370.076750][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.093793][ T45] usb 1-1: config 0 descriptor?? [ 370.536631][ T45] cp2112 0003:10C4:EA90.0032: unknown main item tag 0x0 [ 370.547193][ T45] cp2112 0003:10C4:EA90.0032: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 370.712533][ T45] cp2112 0003:10C4:EA90.0032: error requesting version [ 370.767506][ T45] cp2112 0003:10C4:EA90.0032: probe with driver cp2112 failed with error -71 [ 370.814212][ T45] usb 1-1: USB disconnect, device number 28 [ 371.301348][T10918] fido_id[10918]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 373.312334][ T43] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.450562][T10941] debugfs: '!' already exists in 'ieee80211' [ 373.907983][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.924877][T10960] IPv6: NLM_F_CREATE should be specified when creating new route [ 374.033207][ T43] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.340358][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 374.358969][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 374.362496][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 374.363852][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 374.365010][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 374.577618][ T43] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.691071][T10967] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 374.719405][ T45] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 374.771565][ T45] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 374.979370][T10979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2114'. [ 375.032951][T10983] Bluetooth: MGMT ver 1.23 [ 375.196569][T10981] input: syz1 as /devices/virtual/input/input29 [ 375.385348][ T43] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.593099][T10995] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 375.635547][T10994] netlink: 'syz.5.2120': attribute type 11 has an invalid length. [ 375.998625][ T45] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 376.157016][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 376.165880][ T45] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 376.165917][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 376.170128][ T45] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 376.170169][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.170189][ T45] usb 4-1: Product: syz [ 376.170203][ T45] usb 4-1: Manufacturer: syz [ 376.170218][ T45] usb 4-1: SerialNumber: syz [ 376.212685][ T45] usb 4-1: config 0 descriptor?? [ 376.284677][ T45] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 376.284717][ T45] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 376.488769][ T5835] Bluetooth: hci0: command tx timeout [ 376.851241][ T45] em28xx 4-1:0.0: unknown em28xx chip ID (41) [ 377.052207][ T45] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 377.052701][ T45] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 377.052721][ T45] em28xx 4-1:0.0: No AC97 audio processor [ 377.158986][ T45] usb 4-1: USB disconnect, device number 19 [ 377.237971][ T45] em28xx 4-1:0.0: Disconnecting em28xx [ 377.263084][ T45] em28xx 4-1:0.0: Freeing device [ 377.382099][T11024] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2131'. [ 377.714611][ T43] bridge_slave_1: left allmulticast mode [ 377.714661][ T43] bridge_slave_1: left promiscuous mode [ 377.714947][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.885592][ T43] bridge_slave_0: left allmulticast mode [ 377.885631][ T43] bridge_slave_0: left promiscuous mode [ 377.885945][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.968683][ T31] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 378.132680][ T31] usb 1-1: config 0 has no interfaces? [ 378.132720][ T31] usb 1-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 378.132745][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.163365][ T31] usb 1-1: config 0 descriptor?? [ 378.412057][T11030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.412716][T11030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.439325][ T5916] usb 1-1: USB disconnect, device number 29 [ 378.569071][ T5835] Bluetooth: hci0: command tx timeout [ 379.238587][ T5916] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 379.388894][ T5916] usb 1-1: Using ep0 maxpacket: 8 [ 379.396136][ T5916] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 379.396167][ T5916] usb 1-1: config 0 has no interface number 0 [ 379.396223][ T5916] usb 1-1: config 0 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 379.396247][ T5916] usb 1-1: config 0 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 379.396274][ T5916] usb 1-1: config 0 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 379.396297][ T5916] usb 1-1: config 0 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 379.396322][ T5916] usb 1-1: config 0 interface 1 has no altsetting 0 [ 379.396361][ T5916] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 379.396387][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.448170][ T5916] usb 1-1: config 0 descriptor?? [ 379.599948][ T5917] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 379.723398][ T5844] usb 1-1: USB disconnect, device number 30 [ 379.765621][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.765660][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.765703][ T5917] usb 4-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 379.765728][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.875301][ T5917] usb 4-1: config 0 descriptor?? [ 380.345637][ T5917] elecom 0003:056E:010C.0033: hidraw0: USB HID v77.96 Device [HID 056e:010c] on usb-dummy_hcd.3-1/input0 [ 380.531520][ T8388] usb 4-1: USB disconnect, device number 20 [ 380.648633][ T5835] Bluetooth: hci0: command tx timeout [ 380.721419][T11073] fido_id[11073]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 380.768985][ T5917] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 380.918992][ T5917] usb 3-1: Using ep0 maxpacket: 8 [ 380.921808][ T5917] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.921870][ T5917] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 380.921894][ T5917] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 380.925536][ T5917] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 380.925569][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.925590][ T5917] usb 3-1: Product: syz [ 380.925605][ T5917] usb 3-1: Manufacturer: syz [ 380.925619][ T5917] usb 3-1: SerialNumber: syz [ 381.102148][ T5917] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 381.111614][ T5917] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 381.111708][ T5917] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 381.352629][ T5917] usb 3-1: USB disconnect, device number 29 [ 381.821667][ T5917] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 382.021958][ T5917] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 382.021988][ T5917] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 382.022009][ T5917] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 382.032057][ T5917] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 382.032089][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.032108][ T5917] usb 4-1: Product: syz [ 382.032122][ T5917] usb 4-1: Manufacturer: syz [ 382.032136][ T5917] usb 4-1: SerialNumber: syz [ 382.728736][ T5835] Bluetooth: hci0: command tx timeout [ 382.859361][ T5917] usb 4-1: 0:2 : does not exist [ 383.088390][ T5909] usb 4-1: USB disconnect, device number 21 [ 384.001809][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.079711][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.134155][ T43] bond0 (unregistering): Released all slaves [ 384.185726][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.185829][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.390186][ T5916] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 384.544924][T10968] chnl_net:caif_netlink_parms(): no params data found [ 384.576257][ T5916] usb 4-1: config index 0 descriptor too short (expected 19492, got 36) [ 384.576290][ T5916] usb 4-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 384.576311][ T5916] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 384.576369][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 384.576396][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.576420][ T5916] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 384.576464][ T5916] usb 4-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 384.576487][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.600765][ T5916] usb 4-1: config 0 descriptor?? [ 384.739504][ T43] IPVS: stopping backup sync thread 10449 ... [ 385.026598][ T5916] lg-g15 0003:046D:C225.0034: item fetching failed at offset 0/5 [ 385.027606][ T5916] lg-g15 0003:046D:C225.0034: probe with driver lg-g15 failed with error -22 [ 385.236377][ T45] usb 4-1: USB disconnect, device number 22 [ 385.808337][ T1545] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 386.068637][ T1545] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 388.381884][T10968] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.382026][T10968] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.382248][T10968] bridge_slave_0: entered allmulticast mode [ 388.384703][T10968] bridge_slave_0: entered promiscuous mode [ 388.454415][T10968] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.454580][T10968] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.454841][T10968] bridge_slave_1: entered allmulticast mode [ 388.458026][T10968] bridge_slave_1: entered promiscuous mode [ 388.844450][ T43] hsr_slave_0: left promiscuous mode [ 388.907501][ T43] hsr_slave_1: left promiscuous mode [ 388.913298][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.913331][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.978066][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.978104][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.221542][ T43] veth1_macvtap: left promiscuous mode [ 389.221684][ T43] veth0_macvtap: left promiscuous mode [ 389.222042][ T43] veth1_vlan: left promiscuous mode [ 389.222287][ T43] veth0_vlan: left promiscuous mode [ 391.944491][ T5844] kernel write not supported for file /snd/seq (pid: 5844 comm: kworker/1:3) [ 394.365652][ T43] team0 (unregistering): Port device team_slave_1 removed [ 394.481802][ C0] vkms_vblank_simulate: vblank timer overrun [ 394.617004][ C0] vkms_vblank_simulate: vblank timer overrun [ 394.733207][ C0] vkms_vblank_simulate: vblank timer overrun [ 394.869819][ T43] team0 (unregistering): Port device team_slave_0 removed [ 394.951592][ C0] vkms_vblank_simulate: vblank timer overrun [ 395.132433][ C0] vkms_vblank_simulate: vblank timer overrun [ 395.382639][ C0] vkms_vblank_simulate: vblank timer overrun [ 395.700697][ C0] vkms_vblank_simulate: vblank timer overrun [ 396.186029][ C0] vkms_vblank_simulate: vblank timer overrun [ 396.284209][ C0] vkms_vblank_simulate: vblank timer overrun [ 396.684569][ C0] vkms_vblank_simulate: vblank timer overrun [ 396.898162][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.691526][T10968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.696345][T10968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.221572][T10968] team0: Port device team_slave_0 added [ 399.240785][T10968] team0: Port device team_slave_1 added [ 400.204828][T10968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.204850][T10968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.204880][T10968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.207912][T10968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.207927][T10968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.207956][T10968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.229037][ T37] audit: type=1326 audit(1757117004.656:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11309 comm="syz.3.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcb7f355ba7 code=0x7ffc0000 [ 400.229103][ T37] audit: type=1326 audit(1757117004.676:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11309 comm="syz.3.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcb7f2fadb9 code=0x7ffc0000 [ 400.229154][ T37] audit: type=1326 audit(1757117004.676:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11309 comm="syz.3.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7f35ebe9 code=0x7ffc0000 [ 400.229204][ T37] audit: type=1326 audit(1757117004.676:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11309 comm="syz.3.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcb7f355ba7 code=0x7ffc0000 [ 400.229254][ T37] audit: type=1326 audit(1757117004.676:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11309 comm="syz.3.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcb7f2fadb9 code=0x7ffc0000 [ 400.229304][ T37] audit: type=1326 audit(1757117004.676:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11309 comm="syz.3.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fcb7f35ebe9 code=0x7ffc0000 [ 400.229354][ T37] audit: type=1326 audit(1757117004.676:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11309 comm="syz.3.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcb7f355ba7 code=0x7ffc0000 [ 400.229404][ T37] audit: type=1326 audit(1757117004.676:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11309 comm="syz.3.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcb7f2fadb9 code=0x7ffc0000 [ 400.229456][ T37] audit: type=1326 audit(1757117004.676:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11309 comm="syz.3.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7f35ebe9 code=0x7ffc0000 [ 400.534621][T11308] debugfs: '!' already exists in 'ieee80211' [ 401.088719][ T45] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 401.238701][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 401.245568][ T45] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 401.245602][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.245622][ T45] usb 1-1: Product: syz [ 401.245638][ T45] usb 1-1: Manufacturer: syz [ 401.245748][ T45] usb 1-1: SerialNumber: syz [ 401.296628][ T45] usb 1-1: config 0 descriptor?? [ 401.309156][ T45] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 401.447557][T10968] hsr_slave_0: entered promiscuous mode [ 401.474114][T10968] hsr_slave_1: entered promiscuous mode [ 401.485409][T10968] debugfs: 'hsr0' already exists in 'hsr' [ 401.485441][T10968] Cannot create hsr debugfs directory [ 401.731419][ T45] usb 1-1: clie_3_5_startup: get interface number bad return length: 0 [ 401.731621][ T45] visor 1-1:0.0: probe with driver visor failed with error -5 [ 401.941717][ T5916] usb 1-1: USB disconnect, device number 31 [ 402.079372][ T5917] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 402.238991][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 402.265960][T11354] serio: Serial port ptm0 [ 402.286577][ T5917] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.286627][ T5917] usb 3-1: config 0 interface 0 has no altsetting 0 [ 402.286667][ T5917] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 402.286691][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.353847][ T5917] usb 3-1: config 0 descriptor?? [ 402.440196][T11358] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 402.950035][ T5917] nzxt-smart2 0003:1E71:2009.0035: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 403.302808][ T5917] usb 3-1: USB disconnect, device number 30 [ 403.635734][T10968] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 403.727561][T10968] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 403.828149][T10968] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 403.937325][T10968] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 404.478771][ T5844] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 404.630128][ T5844] usb 4-1: Using ep0 maxpacket: 32 [ 404.675813][ T5844] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 404.675847][ T5844] usb 4-1: config 0 has no interface number 0 [ 404.681687][T10968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.708039][ T5844] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 404.708076][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.708098][ T5844] usb 4-1: Product: syz [ 404.708113][ T5844] usb 4-1: Manufacturer: syz [ 404.708129][ T5844] usb 4-1: SerialNumber: syz [ 404.777135][ T5844] usb 4-1: config 0 descriptor?? [ 404.782064][ T5844] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 404.788659][ T5909] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 404.795901][T10968] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.828137][ T9716] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.833674][ T9716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.913498][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.913732][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.972448][ T5909] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 404.972559][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.972582][ T5909] usb 6-1: Product: syz [ 404.972597][ T5909] usb 6-1: Manufacturer: syz [ 404.972612][ T5909] usb 6-1: SerialNumber: syz [ 405.049200][ T5844] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 405.076511][ T5909] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 405.199852][ T5844] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 405.427556][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 405.441139][ T10] usb 4-1: USB disconnect, device number 23 [ 405.495518][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 405.540390][ T45] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 405.561015][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 405.567232][ T10] quatech2 4-1:0.51: device disconnected [ 406.475448][ T5916] usb 6-1: USB disconnect, device number 14 [ 406.572933][T10968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.135429][ T45] usb 6-1: Service connection timeout for: 257 [ 407.135457][ T45] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 407.137391][ T45] ath9k_htc: Failed to initialize the device [ 407.142024][ T5916] usb 6-1: ath9k_htc: USB layer deinitialized [ 407.230968][ T8388] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 407.389526][ T8388] usb 4-1: Using ep0 maxpacket: 16 [ 407.393314][ T8388] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.393373][ T8388] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 407.393398][ T8388] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.430578][ T8388] usb 4-1: config 0 descriptor?? [ 407.894011][ T8388] mcp2221 0003:04D8:00DD.0036: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 408.359608][ T5917] usb 4-1: USB disconnect, device number 24 [ 408.649043][ T8388] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 408.741474][T10968] veth0_vlan: entered promiscuous mode [ 408.805393][T11462] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2289'. [ 408.811671][ T8388] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.811704][ T8388] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.811743][ T8388] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 408.811766][ T8388] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.824840][T10968] veth1_vlan: entered promiscuous mode [ 408.856527][ T8388] usb 3-1: config 0 descriptor?? [ 408.966705][T10968] veth0_macvtap: entered promiscuous mode [ 408.995682][T10968] veth1_macvtap: entered promiscuous mode [ 409.055210][T10968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.092469][T10968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.253611][ T993] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.254706][ T993] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.254754][ T993] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.286857][ T993] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.381929][ T8388] cp2112 0003:10C4:EA90.0037: unknown main item tag 0x0 [ 409.413695][ T8388] cp2112 0003:10C4:EA90.0037: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 409.537115][ T8388] cp2112 0003:10C4:EA90.0037: error requesting version [ 409.544305][ T8388] cp2112 0003:10C4:EA90.0037: probe with driver cp2112 failed with error -71 [ 409.598299][ T8388] usb 3-1: USB disconnect, device number 31 [ 410.028093][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.028117][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.196761][ T1545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.196789][ T1545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.763567][T11511] program syz.2.2305 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 413.888588][T11558] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2327'. [ 414.464702][T11572] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2332'. [ 414.464728][T11572] netlink: 120 bytes leftover after parsing attributes in process `syz.5.2332'. [ 414.464752][T11572] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2332'. [ 414.730858][ T5835] Bluetooth: hci4: unexpected event for opcode 0x0809 [ 415.863608][T11606] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 416.848562][ T8388] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 417.001331][ T8388] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 417.001456][ T8388] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.001486][ T8388] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.001510][ T8388] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 417.004526][ T8388] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 417.004557][ T8388] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 417.004579][ T8388] usb 4-1: Manufacturer: syz [ 417.060883][ T8388] usb 4-1: config 0 descriptor?? [ 417.449719][T11640] ALSA: mixer_oss: invalid OSS volume 'A141=wVe]' [ 417.449748][T11640] ALSA: mixer_oss: invalid OSS volume 'ұB;T`@$EcXMYd,' [ 417.449792][T11640] ALSA: mixer_oss: invalid OSS volume 'b@h#' [ 417.449822][T11640] ALSA: mixer_oss: invalid OSS volume 'h4XS4v=0_>&' [ 417.449843][T11640] ALSA: mixer_oss: invalid OSS volume '|/"tj' [ 417.449856][T11640] ALSA: mixer_oss: invalid OSS volume '-z5c^J6$' [ 417.449888][T11640] ALSA: mixer_oss: invalid OSS volume '0Ty󉴪jP&at' [ 417.449904][T11640] ALSA: mixer_oss: invalid OSS volume '|~\' [ 417.449949][T11640] ALSA: mixer_oss: invalid OSS volume '@^3bɜ}G$#\("/oL' [ 417.449961][T11640] ALSA: mixer_oss: invalid OSS volume '' [ 417.629845][ T8388] appleir 0003:05AC:8243.0038: item fetching failed at offset 0/1 [ 417.630783][ T8388] appleir 0003:05AC:8243.0038: parse failed [ 417.630908][ T8388] appleir 0003:05AC:8243.0038: probe with driver appleir failed with error -22 [ 417.758652][ T977] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 417.848387][ T45] usb 4-1: USB disconnect, device number 25 [ 417.887934][T11650] block nbd1: server does not support multiple connections per device. [ 417.894960][T11650] block nbd1: shutting down sockets [ 417.908666][ T977] usb 1-1: Using ep0 maxpacket: 32 [ 417.912084][ T977] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 417.912114][ T977] usb 1-1: config 0 has no interface number 0 [ 417.922303][ T977] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 417.922335][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.922354][ T977] usb 1-1: Product: syz [ 417.922367][ T977] usb 1-1: Manufacturer: syz [ 417.922381][ T977] usb 1-1: SerialNumber: syz [ 417.969880][ T977] usb 1-1: config 0 descriptor?? [ 417.985384][ T977] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 418.229940][ T977] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 418.256890][ T977] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 418.616743][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 418.628726][ T8388] usb 1-1: USB disconnect, device number 32 [ 418.668250][ T8388] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 418.723375][T11660] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2372'. [ 418.746072][ T8388] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 418.748100][ T8388] quatech2 1-1:0.51: device disconnected [ 419.580651][T11668] block nbd1: server does not support multiple connections per device. [ 419.584559][T11668] block nbd1: shutting down sockets [ 419.689630][T11675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2378'. [ 419.689673][T11675] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2378'. [ 420.004396][T11679] program syz.0.2379 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 420.511086][ T9716] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.515355][T11696] vivid-004: disconnect [ 420.516218][T11694] vivid-004: reconnect [ 420.543426][ T9716] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.543484][ T9716] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.543525][ T9716] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.608605][ T8388] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 421.792059][ T8388] usb 1-1: Using ep0 maxpacket: 16 [ 421.798929][ T8388] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.798969][ T8388] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.799013][ T8388] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 421.799039][ T8388] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.816937][ T8388] usb 1-1: config 0 descriptor?? [ 421.904857][T11728] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2397'. [ 422.281708][ T8388] playstation 0003:054C:05C4.0039: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.0-1/input0 [ 422.454196][ T8388] playstation 0003:054C:05C4.0039: Invalid byte count transferred, expected 16 got 0 [ 422.454238][ T8388] playstation 0003:054C:05C4.0039: Failed to retrieve DualShock4 pairing info: -22 [ 422.454297][ T8388] playstation 0003:054C:05C4.0039: Failed to get MAC address from DualShock4 [ 422.454314][ T8388] playstation 0003:054C:05C4.0039: Failed to create dualshock4. [ 422.489020][ T8388] playstation 0003:054C:05C4.0039: probe with driver playstation failed with error -22 [ 422.673253][ T977] usb 1-1: USB disconnect, device number 33 [ 422.798712][ T45] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 422.914229][T11758] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2409'. [ 422.948656][ T45] usb 6-1: Using ep0 maxpacket: 8 [ 422.956688][ T45] usb 6-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 422.956721][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.956743][ T45] usb 6-1: Product: syz [ 422.956759][ T45] usb 6-1: Manufacturer: syz [ 422.956775][ T45] usb 6-1: SerialNumber: syz [ 423.005620][ T45] usb 6-1: config 0 descriptor?? [ 423.030710][ T45] radio-usb-si4713 6-1:0.0: Si4713 development board discovered: (10C4:8244) [ 423.686001][ T45] radio-usb-si4713 6-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 423.687441][ T45] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 423.703382][ T5917] kernel read not supported for file /dsp (pid: 5917 comm: kworker/0:5) [ 423.743915][ T45] usb 6-1: USB disconnect, device number 15 [ 424.947488][ C0] vkms_vblank_simulate: vblank timer overrun [ 425.668894][ T45] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 425.783029][ C0] vkms_vblank_simulate: vblank timer overrun [ 425.818799][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 425.823613][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 425.825342][ T45] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.870406][ T45] usb 1-1: New USB device found, idVendor=17ef, idProduct=7000, bcdDevice=a1.ec [ 425.870443][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.870464][ T45] usb 1-1: Product: syz [ 425.870480][ T45] usb 1-1: Manufacturer: syz [ 425.870494][ T45] usb 1-1: SerialNumber: syz [ 425.889118][ C0] vkms_vblank_simulate: vblank timer overrun [ 425.921662][ T45] usb 1-1: config 0 descriptor?? [ 426.248374][ T977] hid-generic 0005:10CF:05DF.003A: unknown main item tag 0x0 [ 426.261514][ T45] usb 1-1: USB disconnect, device number 34 [ 426.371764][ T977] hid-generic 0005:10CF:05DF.003A: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 427.598678][ T45] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 427.736016][ T37] audit: type=1326 audit(1757117032.186:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11867 comm="syz.5.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a955ebe9 code=0x7ffc0000 [ 427.736369][ T37] audit: type=1326 audit(1757117032.186:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11867 comm="syz.5.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a955ebe9 code=0x7ffc0000 [ 427.767127][ T37] audit: type=1326 audit(1757117032.216:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11867 comm="syz.5.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff6a955ebe9 code=0x7ffc0000 [ 427.767182][ T37] audit: type=1326 audit(1757117032.216:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11867 comm="syz.5.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a955ebe9 code=0x7ffc0000 [ 427.767234][ T37] audit: type=1326 audit(1757117032.216:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11867 comm="syz.5.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a955ebe9 code=0x7ffc0000 [ 427.781076][ T37] audit: type=1326 audit(1757117032.226:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11867 comm="syz.5.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff6a955ebe9 code=0x7ffc0000 [ 427.781131][ T37] audit: type=1326 audit(1757117032.226:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11867 comm="syz.5.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a955ebe9 code=0x7ffc0000 [ 427.781174][ T37] audit: type=1326 audit(1757117032.226:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11867 comm="syz.5.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a955ebe9 code=0x7ffc0000 [ 427.795149][ T37] audit: type=1326 audit(1757117032.246:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11867 comm="syz.5.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7ff6a955ebe9 code=0x7ffc0000 [ 427.795205][ T37] audit: type=1326 audit(1757117032.246:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11867 comm="syz.5.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 427.858566][ T45] usb 8-1: Using ep0 maxpacket: 8 [ 427.928602][ T45] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 427.928638][ T45] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.004270][ T45] pvrusb2: Hardware description: Terratec Grabster AV400 [ 428.004291][ T45] pvrusb2: ********** [ 428.004299][ T45] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 428.004310][ T45] pvrusb2: Important functionality might not be entirely working. [ 428.004319][ T45] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 428.004330][ T45] pvrusb2: ********** [ 428.241496][ T2365] pvrusb2: Invalid write control endpoint [ 428.451640][T11857] pvrusb2: Invalid write control endpoint [ 428.456771][ T5167] usb 8-1: USB disconnect, device number 2 [ 428.579562][ T2365] pvrusb2: Invalid write control endpoint [ 428.579580][ T2365] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 428.579592][ T2365] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 428.579600][ T2365] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 428.579612][ T2365] pvrusb2: Device being rendered inoperable [ 428.587523][ T2365] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 428.587597][ T2365] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 428.615575][ T2365] pvrusb2: Attached sub-driver cx25840 [ 428.615591][ T2365] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 428.615602][ T2365] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 429.248286][T11895] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2457'. [ 429.823196][T11914] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2464'. [ 429.908622][ T45] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 430.073768][ T45] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 430.073800][ T45] usb 3-1: config 0 has no interface number 0 [ 430.073853][ T45] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0xD has an invalid bInterval 104, changing to 10 [ 430.073882][ T45] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 430.127628][ T45] usb 3-1: New USB device found, idVendor=1660, idProduct=1921, bcdDevice=1f.84 [ 430.127672][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.127694][ T45] usb 3-1: Product: syz [ 430.127709][ T45] usb 3-1: Manufacturer: syz [ 430.127724][ T45] usb 3-1: SerialNumber: syz [ 430.167118][ T45] usb 3-1: config 0 descriptor?? [ 430.288579][ T5917] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 430.411714][ T45] dvb-usb: found a 'Medion CTX1921 DVB-T USB' in warm state. [ 430.426280][ T45] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 430.438850][ T45] dvbdev: DVB: registering new adapter (Medion CTX1921 DVB-T USB) [ 430.438940][ T45] usb 3-1: media controller created [ 430.468671][ T5917] usb 1-1: Using ep0 maxpacket: 8 [ 430.473653][ T5917] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 430.473686][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.511071][ T45] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 430.530026][ T5917] pvrusb2: Hardware description: Terratec Grabster AV400 [ 430.530045][ T5917] pvrusb2: ********** [ 430.530052][ T5917] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 430.530065][ T5917] pvrusb2: Important functionality might not be entirely working. [ 430.530075][ T5917] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 430.530087][ T5917] pvrusb2: ********** [ 430.650154][ T977] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 430.707832][ T45] DVB: Unable to find symbol dib7000p_attach() [ 430.707851][ T45] dvb-usb: no frontend was attached by 'Medion CTX1921 DVB-T USB' [ 430.753722][ T2365] pvrusb2: Invalid write control endpoint [ 430.798630][ T977] usb 8-1: Using ep0 maxpacket: 16 [ 430.806696][ T977] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.806733][ T977] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.806776][ T977] usb 8-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 430.806801][ T977] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.868118][ T977] usb 8-1: config 0 descriptor?? [ 430.978687][ T45] rc_core: IR keymap rc-dib0700-rc5 not found [ 430.978711][ T45] Registered IR keymap rc-empty [ 430.979797][ T45] dvb-usb: could not initialize remote control. [ 430.979810][ T45] dvb-usb: Medion CTX1921 DVB-T USB successfully initialized and connected. [ 430.979901][T11917] ------------[ cut here ]------------ [ 430.979910][T11917] usb 3-1: BOGUS control dir, pipe 80002080 doesn't match bRequestType c0 [ 430.980629][T11917] WARNING: CPU: 0 PID: 11917 at drivers/usb/core/urb.c:413 usb_submit_urb+0x112b/0x1830 [ 430.980669][T11917] Modules linked in: [ 430.980691][T11917] CPU: 0 UID: 0 PID: 11917 Comm: syz.0.2465 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 430.980713][T11917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 430.980724][T11917] RIP: 0010:usb_submit_urb+0x112b/0x1830 [ 430.980742][T11917] Code: 0f b6 44 05 00 84 c0 0f 85 e8 05 00 00 45 0f b6 45 00 48 c7 c7 60 c8 a4 8b 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 a6 89 d9 fa 90 <0f> 0b 90 90 49 bc 00 00 00 00 00 fc ff df e9 17 f4 ff ff 89 e9 80 [ 430.980759][T11917] RSP: 0018:ffffc90003c57850 EFLAGS: 00010246 [ 430.980773][T11917] RAX: 1110029ae1d9cd00 RBX: ffff8880281e8a00 RCX: 0000000000080000 [ 430.980787][T11917] RDX: ffffc90005759000 RSI: 00000000000006b3 RDI: 00000000000006b4 [ 430.980800][T11917] RBP: 1ffff11029943c98 R08: 0000000000000000 R09: 0000000000000000 [ 430.980815][T11917] R10: dffffc0000000000 R11: ffffed1017104863 R12: dffffc0000000000 [ 430.980832][T11917] R13: ffff88814ca1e4c0 R14: 0000000080002080 R15: ffff88803d56b0a0 [ 430.980849][T11917] FS: 00007f53c49066c0(0000) GS:ffff8881268bf000(0000) knlGS:0000000000000000 [ 430.980868][T11917] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 430.980883][T11917] CR2: 0000001b31716ff8 CR3: 0000000062e2e000 CR4: 00000000003526f0 [ 430.980905][T11917] Call Trace: [ 430.980914][T11917] [ 430.980942][T11917] usb_start_wait_urb+0x114/0x4c0 [ 430.980974][T11917] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 430.980998][T11917] ? usb_alloc_urb+0x46/0x150 [ 430.981039][T11917] usb_control_msg+0x232/0x3e0 [ 430.981064][T11917] dib0700_i2c_xfer+0xba7/0xf70 [ 430.981117][T11917] __i2c_transfer+0x871/0x2170 [ 430.981150][T11917] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.981205][T11917] ? __pfx___i2c_transfer+0x10/0x10 [ 430.981244][T11917] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 430.981268][T11917] ? i2c_transfer+0x120/0x3a0 [ 430.981303][T11917] i2c_transfer+0x25b/0x3a0 [ 430.981339][T11917] ? __pfx_i2c_transfer+0x10/0x10 [ 430.981374][T11917] ? _copy_from_user+0x94/0xb0 [ 430.981399][T11917] i2cdev_ioctl_rdwr+0x460/0x740 [ 430.981437][T11917] i2cdev_ioctl+0x64e/0x800 [ 430.981461][T11917] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 430.981496][T11917] ? __fget_files+0x3a6/0x420 [ 430.981528][T11917] ? __fget_files+0x2a/0x420 [ 430.981565][T11917] ? bpf_lsm_file_ioctl+0x9/0x20 [ 430.981593][T11917] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 430.981627][T11917] __se_sys_ioctl+0xfc/0x170 [ 430.981656][T11917] do_syscall_64+0xfa/0x3b0 [ 430.981676][T11917] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.981703][T11917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.981722][T11917] ? clear_bhb_loop+0x60/0xb0 [ 430.981743][T11917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.981759][T11917] RIP: 0033:0x7f53c669ebe9 [ 430.981775][T11917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.981790][T11917] RSP: 002b:00007f53c4906038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 430.981811][T11917] RAX: ffffffffffffffda RBX: 00007f53c68d5fa0 RCX: 00007f53c669ebe9 [ 430.981828][T11917] RDX: 00002000000001c0 RSI: 0000000000000707 RDI: 0000000000000004 [ 430.981842][T11917] RBP: 00007f53c6721e19 R08: 0000000000000000 R09: 0000000000000000 [ 430.981856][T11917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.981870][T11917] R13: 00007f53c68d6038 R14: 00007f53c68d5fa0 R15: 00007ffc5a5e2bf8 [ 430.981909][T11917] [ 430.981920][T11917] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 430.981938][T11917] CPU: 0 UID: 0 PID: 11917 Comm: syz.0.2465 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 430.981962][T11917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 430.981975][T11917] Call Trace: [ 430.981984][T11917] [ 430.981994][T11917] dump_stack_lvl+0x99/0x250 [ 430.982026][T11917] ? __asan_memcpy+0x40/0x70 [ 430.982044][T11917] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.982070][T11917] ? __pfx__printk+0x10/0x10 [ 430.982110][T11917] vpanic+0x281/0x750 [ 430.982138][T11917] ? __pfx__printk+0x10/0x10 [ 430.982163][T11917] ? __pfx_vpanic+0x10/0x10 [ 430.982195][T11917] ? is_bpf_text_address+0x292/0x2b0 [ 430.982241][T11917] panic+0xb9/0xc0 [ 430.982273][T11917] ? __pfx_panic+0x10/0x10 [ 430.982324][T11917] __warn+0x31b/0x4b0 [ 430.982354][T11917] ? usb_submit_urb+0x112b/0x1830 [ 430.982380][T11917] ? usb_submit_urb+0x112b/0x1830 [ 430.982402][T11917] report_bug+0x2be/0x4f0 [ 430.982429][T11917] ? usb_submit_urb+0x112b/0x1830 [ 430.982446][T11917] ? usb_submit_urb+0x112b/0x1830 [ 430.982463][T11917] ? usb_submit_urb+0x112d/0x1830 [ 430.982479][T11917] handle_bug+0x84/0x160 [ 430.982497][T11917] exc_invalid_op+0x1a/0x50 [ 430.982514][T11917] asm_exc_invalid_op+0x1a/0x20 [ 430.982533][T11917] RIP: 0010:usb_submit_urb+0x112b/0x1830 [ 430.982555][T11917] Code: 0f b6 44 05 00 84 c0 0f 85 e8 05 00 00 45 0f b6 45 00 48 c7 c7 60 c8 a4 8b 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 a6 89 d9 fa 90 <0f> 0b 90 90 49 bc 00 00 00 00 00 fc ff df e9 17 f4 ff ff 89 e9 80 [ 430.982574][T11917] RSP: 0018:ffffc90003c57850 EFLAGS: 00010246 [ 430.982592][T11917] RAX: 1110029ae1d9cd00 RBX: ffff8880281e8a00 RCX: 0000000000080000 [ 430.982609][T11917] RDX: ffffc90005759000 RSI: 00000000000006b3 RDI: 00000000000006b4 [ 430.982624][T11917] RBP: 1ffff11029943c98 R08: 0000000000000000 R09: 0000000000000000 [ 430.982640][T11917] R10: dffffc0000000000 R11: ffffed1017104863 R12: dffffc0000000000 [ 430.982657][T11917] R13: ffff88814ca1e4c0 R14: 0000000080002080 R15: ffff88803d56b0a0 [ 430.982711][T11917] usb_start_wait_urb+0x114/0x4c0 [ 430.982747][T11917] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 430.982770][T11917] ? usb_alloc_urb+0x46/0x150 [ 430.982811][T11917] usb_control_msg+0x232/0x3e0 [ 430.982837][T11917] dib0700_i2c_xfer+0xba7/0xf70 [ 430.982880][T11917] __i2c_transfer+0x871/0x2170 [ 430.982910][T11917] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.982956][T11917] ? __pfx___i2c_transfer+0x10/0x10 [ 430.982996][T11917] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 430.983020][T11917] ? i2c_transfer+0x120/0x3a0 [ 430.983058][T11917] i2c_transfer+0x25b/0x3a0 [ 430.983176][T11917] ? __pfx_i2c_transfer+0x10/0x10 [ 430.983222][T11917] ? _copy_from_user+0x94/0xb0 [ 430.983255][T11917] i2cdev_ioctl_rdwr+0x460/0x740 [ 430.983303][T11917] i2cdev_ioctl+0x64e/0x800 [ 430.983335][T11917] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 430.983366][T11917] ? __fget_files+0x3a6/0x420 [ 430.983390][T11917] ? __fget_files+0x2a/0x420 [ 430.983418][T11917] ? bpf_lsm_file_ioctl+0x9/0x20 [ 430.983443][T11917] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 430.983492][T11917] __se_sys_ioctl+0xfc/0x170 [ 430.983524][T11917] do_syscall_64+0xfa/0x3b0 [ 430.983545][T11917] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.983579][T11917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.983601][T11917] ? clear_bhb_loop+0x60/0xb0 [ 430.983629][T11917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.983652][T11917] RIP: 0033:0x7f53c669ebe9 [ 430.983671][T11917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.983687][T11917] RSP: 002b:00007f53c4906038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 430.983707][T11917] RAX: ffffffffffffffda RBX: 00007f53c68d5fa0 RCX: 00007f53c669ebe9 [ 430.983719][T11917] RDX: 00002000000001c0 RSI: 0000000000000707 RDI: 0000000000000004 [ 430.983732][T11917] RBP: 00007f53c6721e19 R08: 0000000000000000 R09: 0000000000000000 [ 430.983743][T11917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.983754][T11917] R13: 00007f53c68d6038 R14: 00007f53c68d5fa0 R15: 00007ffc5a5e2bf8 [ 430.983789][T11917] [ 430.984220][T11917] Kernel Offset: disabled