last executing test programs: 3.446764891s ago: executing program 2 (id=6881): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8004, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 3.260690711s ago: executing program 2 (id=6883): syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x400) 2.802067914s ago: executing program 1 (id=6890): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000010003b0c00"/20, @ANYRES32=0x0, @ANYBLOB="0010000000000000300012800b00010065727370616e000020000280040012000500160002000000060003008100000006000e"], 0x50}}, 0x0) 2.568131678s ago: executing program 1 (id=6892): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x14, r1, 0x917}, 0x14}}, 0x0) 2.180086366s ago: executing program 1 (id=6894): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000180)={0x40, 0x31, 0x3, "e3b747"}, 0x0, 0x0}) 1.899463003s ago: executing program 3 (id=6896): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000040)=0xb2b9, 0x4) 1.860468016s ago: executing program 2 (id=6897): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "41eb"}]}], {0x14}}, 0x70}}, 0x0) 1.612709191s ago: executing program 2 (id=6899): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x282, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xff10, 0x8000c61) write$binfmt_misc(r0, &(0x7f0000000140), 0x2000000e) 1.41634734s ago: executing program 3 (id=6900): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x191a, &(0x7f0000000000)={0x0, 0x761, 0x10, 0x1, 0x11cb}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1.304667493s ago: executing program 4 (id=6901): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000080)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 1.300911351s ago: executing program 0 (id=6902): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000000)={0x1, 0x3}) 1.289312856s ago: executing program 2 (id=6903): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000180)) 1.134227193s ago: executing program 2 (id=6904): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000005c0)={'fl512\x00', [0x401, 0x10, 0x401, 0xa, 0x14000000, 0xfffffffc, 0x9, 0x2, 0xffd, 0xa, 0x1212, 0x723, 0xe, 0x2, 0x6, 0x100, 0xffffffa7, 0x9, 0x7fff, 0x1, 0x9, 0x9, 0x200, 0xe2df, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf5a, 0x6]}) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000}) 1.044805206s ago: executing program 0 (id=6905): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) close_range(r0, r0, 0x0) 1.043913076s ago: executing program 4 (id=6906): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r0, r0, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB='/'], 0x20) 834.879856ms ago: executing program 3 (id=6907): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001b80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001bc0)={0x40, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040001}, 0x2000c000) 763.997529ms ago: executing program 4 (id=6908): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x305) keyctl$invalidate(0x15, r0) 713.980091ms ago: executing program 0 (id=6909): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 713.02156ms ago: executing program 3 (id=6910): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4, 0x1}, 0x10) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x4, 0x10000000}}, 0x10) 576.824824ms ago: executing program 4 (id=6911): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xaed}, 0x1c) 528.811871ms ago: executing program 3 (id=6912): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380)=0x7ffd) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) 445.71046ms ago: executing program 1 (id=6913): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) 434.935248ms ago: executing program 4 (id=6914): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delqdisc={0x24, 0x25, 0x2, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x8}, {0x3, 0xd}, {0x8, 0x2}}}, 0x24}}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 406.951339ms ago: executing program 0 (id=6915): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x5, @mcast1, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x65d, @local, 0xffff0929}, 0x1c) 219.810583ms ago: executing program 1 (id=6916): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000540)=""/130) 219.044233ms ago: executing program 0 (id=6917): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001bc0)={0x1c, r1, 0xc4fc9e906872338b, 0x70bd2c, 0x25dfdbfe, {{0x15}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x40040) 178.448233ms ago: executing program 4 (id=6918): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c000280080003400000000005000200890000000800014000e90009080006400000000208000440000000170900010073797a30000000000900020073797a32"], 0x94}}, 0x0) 40.812292ms ago: executing program 3 (id=6919): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000005240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005180)={0x1c, r1, 0x109, 0x0, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0xb}]}, 0x1c}}, 0x84) 1.668057ms ago: executing program 1 (id=6920): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_open_procfs$namespace(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001400)) 0s ago: executing program 0 (id=6921): r0 = open(&(0x7f00009e1000)='./file1\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) unlink(&(0x7f0000000180)='./file1\x00') kernel console output (not intermixed with test programs): 423.581321][ T990] gspca_vc032x: reg_r err -71 [ 423.581409][ T990] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 423.615253][ T990] usb 2-1: USB disconnect, device number 34 [ 424.670109][T15546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4573'. [ 424.670131][T15546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4573'. [ 424.670156][T15546] netlink: 'syz.4.4573': attribute type 11 has an invalid length. [ 424.762806][ T5929] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 424.913579][ T5929] usb 2-1: Using ep0 maxpacket: 32 [ 424.916050][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.916094][ T5929] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 424.916116][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.922485][ T5929] usb 2-1: config 0 descriptor?? [ 425.422516][ T5929] mcp2200 0003:04D8:00DF.000E: USB HID v0.00 Device [HID 04d8:00df] on usb-dummy_hcd.1-1/input0 [ 425.661212][ T5929] usb 2-1: USB disconnect, device number 35 [ 427.861351][T15634] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4615'. [ 428.500856][T15660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4628'. [ 428.501031][T15660] openvswitch: netlink: Unknown nsh attribute 0 [ 428.501059][T15660] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 429.022840][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 429.175636][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.175668][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.175704][ T9] usb 5-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 429.175725][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.235107][ T9] usb 5-1: config 0 descriptor?? [ 429.394904][T15688] sp0: Synchronizing with TNC [ 429.400316][T15690] sp0: Found TNC [ 429.431250][T15684] [U] ` [ 429.622770][T15697] netlink: 'syz.3.4644': attribute type 29 has an invalid length. [ 429.639979][T15697] netlink: 'syz.3.4644': attribute type 29 has an invalid length. [ 429.676965][ T9] cypress 0003:04B4:DE61.000F: item fetching failed at offset 5/7 [ 429.677860][ T9] cypress 0003:04B4:DE61.000F: parse failed [ 429.677937][ T9] cypress 0003:04B4:DE61.000F: probe with driver cypress failed with error -22 [ 429.779639][T15699] bridge2: entered promiscuous mode [ 429.779669][T15699] bridge2: entered allmulticast mode [ 429.796489][T15699] team0: Port device bridge2 added [ 429.848502][T15703] program syz.1.4647 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 429.872810][ T9] usb 5-1: USB disconnect, device number 31 [ 430.012015][T15705] Bluetooth: MGMT ver 1.23 [ 430.062871][T15709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4649'. [ 430.062911][T15709] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.132882][ T5929] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 431.271023][T15743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4666'. [ 431.282785][ T5929] usb 4-1: Using ep0 maxpacket: 16 [ 431.287640][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.287667][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.287698][ T5929] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 431.287717][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.296497][ T5929] usb 4-1: config 0 descriptor?? [ 431.742187][ T5929] hid-picolcd 0003:04D8:F002.0010: unknown main item tag 0x0 [ 431.802981][ T5929] hid-picolcd 0003:04D8:F002.0010: No report with id 0xf3 found [ 431.803004][ T5929] hid-picolcd 0003:04D8:F002.0010: No report with id 0xf4 found [ 431.905690][ T5843] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 431.952873][ T6597] usb 4-1: USB disconnect, device number 37 [ 432.055785][ T5843] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 432.055815][ T5843] usb 3-1: config 0 interface 0 has no altsetting 0 [ 432.059240][ T5843] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 432.059266][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 432.059284][ T5843] usb 3-1: Product: syz [ 432.059296][ T5843] usb 3-1: Manufacturer: syz [ 432.059309][ T5843] usb 3-1: SerialNumber: syz [ 432.080962][ T5843] usb 3-1: config 0 descriptor?? [ 432.096559][ T5843] usb 3-1: selecting invalid altsetting 0 [ 432.172229][T15765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4677'. [ 432.317692][ T9] usb 3-1: USB disconnect, device number 34 [ 432.356214][T15769] block nbd1: not configured, cannot reconfigure [ 432.553333][T15774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4681'. [ 433.033681][T15793] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4690'. [ 433.033719][T15793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4690'. [ 433.356713][T15806] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4696'. [ 434.427601][T15844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4715'. [ 434.571589][T15849] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 435.361307][T15871] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4726'. [ 435.498161][T15879] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4729'. [ 436.145659][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 436.145676][ T37] audit: type=1326 audit(1756964319.835:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15868 comm="syz.3.4725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76c21debe9 code=0x7fc00000 [ 436.727517][T15925] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4751'. [ 436.728108][T15925] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4751'. [ 437.152294][ T5845] Bluetooth: hci2: unexpected event for opcode 0x080e [ 437.232729][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 437.992870][ T5843] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 438.142716][ T5843] usb 2-1: Using ep0 maxpacket: 32 [ 438.145049][ T5843] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 438.145072][ T5843] usb 2-1: config 0 has no interface number 0 [ 438.148247][ T5843] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 438.148272][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.148290][ T5843] usb 2-1: Product: syz [ 438.148302][ T5843] usb 2-1: Manufacturer: syz [ 438.148315][ T5843] usb 2-1: SerialNumber: syz [ 438.214306][ T5843] usb 2-1: config 0 descriptor?? [ 438.646535][ T5843] radio-si470x 2-1:0.35: DeviceID=0x9242 ChipID=0x0000 [ 438.646559][ T5843] radio-si470x 2-1:0.35: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 438.849511][ T5843] radio-si470x 2-1:0.35: si470x_get_report: usb_control_msg returned -71 [ 438.849534][ T5843] radio-si470x 2-1:0.35: si470x_get_scratch: si470x_get_report returned -71 [ 438.849895][ T5843] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5 [ 438.879242][ T5843] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 438.896594][ T5843] usb 2-1: USB disconnect, device number 36 [ 439.021686][ T5842] Bluetooth: Wrong link type (-71) [ 439.151595][ T37] audit: type=1800 audit(1756964322.835:141): pid=16008 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.4790" name="bus" dev="tmpfs" ino=5116 res=0 errno=0 [ 439.237757][T16010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4791'. [ 439.396808][ T37] audit: type=1326 audit(1756964323.075:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16015 comm="syz.4.4793" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fb361165ba7 code=0x0 [ 439.991906][T16039] nbd: must specify a size in bytes for the device [ 440.201719][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.201794][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.343006][ T5843] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 440.498066][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.498096][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.498135][ T5843] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 440.498156][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.506548][ T5843] usb 3-1: config 0 descriptor?? [ 440.938776][ T5843] playstation 0003:054C:0DF2.0011: unbalanced delimiter at end of report description [ 440.939561][ T5843] playstation 0003:054C:0DF2.0011: Parse failed [ 440.939631][ T5843] playstation 0003:054C:0DF2.0011: probe with driver playstation failed with error -22 [ 441.143263][ T990] usb 3-1: USB disconnect, device number 35 [ 441.152907][ T5842] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 441.153249][ T5842] Bluetooth: hci2: Injecting HCI hardware error event [ 441.158074][ T5845] Bluetooth: hci2: hardware error 0x00 [ 441.582865][ T5843] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 441.735258][ T5843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.735289][ T5843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.735325][ T5843] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 441.735346][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.740986][ T5843] usb 2-1: config 0 descriptor?? [ 442.243522][ T5843] aquacomputer_d5next 0003:0C70:F00D.0012: hidraw0: USB HID v0.00 Device [HID 0c70:f00d] on usb-dummy_hcd.1-1/input0 [ 442.272043][T16106] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:16x16 (0x32314247, 8, 0, 0, 0) [ 442.468279][ T5843] usb 2-1: USB disconnect, device number 37 [ 443.137755][T16130] netlink: 'syz.1.4849': attribute type 2 has an invalid length. [ 443.402759][ T5845] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 443.700308][T16150] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4856'. [ 443.700364][T16150] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4856'. [ 443.834255][T16153] mkiss: ax0: crc mode is auto. [ 444.688613][T16187] bond0: option arp_interval: invalid value (18446744071880835072) [ 444.688637][T16187] bond0: option arp_interval: allowed values 0 - 2147483647 [ 445.286316][ T990] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 445.382192][T16209] delete_channel: no stack [ 445.457167][ T990] usb 5-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 445.457193][ T990] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 445.457244][ T990] usb 5-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 445.457265][ T990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.510520][ T990] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 445.700564][T16216] program syz.0.4887 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 445.729460][ T990] gspca_sn9c2028: read1 error -71 [ 445.729873][ T990] gspca_sn9c2028: read1 error -71 [ 445.730258][ T990] gspca_sn9c2028: read1 error -71 [ 445.730344][ T990] sn9c2028 5-1:220.0: probe with driver sn9c2028 failed with error -71 [ 445.779268][ T990] usb 5-1: USB disconnect, device number 32 [ 446.146168][T16226] netlink: 'syz.0.4892': attribute type 2 has an invalid length. [ 446.207806][T16226] : entered promiscuous mode [ 446.678014][T16246] Bluetooth: MGMT ver 1.23 [ 446.986156][T16255] netlink: 'syz.1.4906': attribute type 4 has an invalid length. [ 447.351504][T16272] netlink: 'syz.1.4913': attribute type 4 has an invalid length. [ 447.351523][T16272] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.4913'. [ 447.669355][T16280] sp0: Synchronizing with TNC [ 447.722795][ T5928] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 447.882787][ T5928] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 447.882812][ T5928] usb 5-1: config 1 has no interface number 0 [ 447.882856][ T5928] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 447.882878][ T5928] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 447.882900][ T5928] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.886054][ T5928] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 447.886081][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.886099][ T5928] usb 5-1: Product: syz [ 447.886112][ T5928] usb 5-1: Manufacturer: syz [ 447.886125][ T5928] usb 5-1: SerialNumber: syz [ 447.991846][T16277] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 448.214684][T16277] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 448.484364][ T45] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 448.534513][ T5928] sierra_net 5-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 448.637360][ T5928] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 448.637385][ T5928] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 448.637874][ T45] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 448.637895][ T45] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 448.637913][ T45] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 448.637928][ T45] usb 3-1: config 220 has no interface number 2 [ 448.637995][ T45] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 448.638022][ T45] usb 3-1: config 220 interface 0 has no altsetting 0 [ 448.638038][ T45] usb 3-1: config 220 interface 76 has no altsetting 0 [ 448.638054][ T45] usb 3-1: config 220 interface 1 has no altsetting 0 [ 448.642408][ T5928] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 448.642429][ T5928] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 448.645428][ T45] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 448.645453][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.645480][ T45] usb 3-1: Product: syz [ 448.645492][ T45] usb 3-1: Manufacturer: syz [ 448.645503][ T45] usb 3-1: SerialNumber: syz [ 448.808922][ T5928] usb 5-1: USB disconnect, device number 33 [ 448.897740][ T5928] sierra_net 5-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem [ 448.909064][ T45] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 448.909097][ T45] usb 3-1: No valid video chain found. [ 448.909154][ T45] usb 3-1: selecting invalid altsetting 0 [ 448.949028][ T45] usb 3-1: selecting invalid altsetting 0 [ 448.949052][ T45] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 448.972222][ T45] usb 3-1: USB disconnect, device number 36 [ 449.135738][ T37] audit: type=1326 audit(1756964332.825:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16311 comm="syz.1.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa773febe9 code=0x7ffc0000 [ 449.138517][ T37] audit: type=1326 audit(1756964332.825:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16311 comm="syz.1.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa773febe9 code=0x7ffc0000 [ 449.139447][ T37] audit: type=1326 audit(1756964332.825:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16311 comm="syz.1.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa773febe9 code=0x7ffc0000 [ 449.195588][ T37] audit: type=1326 audit(1756964332.885:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16311 comm="syz.1.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa773febe9 code=0x7ffc0000 [ 449.195855][ T37] audit: type=1326 audit(1756964332.885:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16311 comm="syz.1.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa773febe9 code=0x7ffc0000 [ 449.305212][ T5928] sierra_net 5-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 449.328350][ T6137] udevd[6137]: setting owner of /dev/bus/usb/005/033 to uid=0, gid=0 failed: No such file or directory [ 449.700270][T16327] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4940'. [ 449.700294][T16327] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4940'. [ 449.898109][ T9] IPVS: starting estimator thread 0... [ 449.992854][T16334] IPVS: using max 8 ests per chain, 19200 per kthread [ 451.132914][T16357] netlink: 'syz.3.4954': attribute type 2 has an invalid length. [ 451.132937][T16357] netlink: 1184 bytes leftover after parsing attributes in process `syz.3.4954'. [ 451.528521][T16363] netlink: 'syz.2.4955': attribute type 27 has an invalid length. [ 451.683303][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 451.847132][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 451.864663][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.864693][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.864730][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 451.864750][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.914976][ T9] usb 4-1: config 0 descriptor?? [ 452.262887][ T45] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 452.336832][ T9] logitech 0003:046D:C20E.0013: rdesc size test failed for formula gp [ 452.338410][ T9] logitech 0003:046D:C20E.0013: unbalanced collection at end of report description [ 452.339277][ T9] logitech 0003:046D:C20E.0013: parse failed [ 452.339383][ T9] logitech 0003:046D:C20E.0013: probe with driver logitech failed with error -22 [ 452.420068][ T45] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 452.420096][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.420114][ T45] usb 3-1: Product: syz [ 452.420128][ T45] usb 3-1: Manufacturer: syz [ 452.420140][ T45] usb 3-1: SerialNumber: syz [ 452.460927][ T45] usb 3-1: config 0 descriptor?? [ 452.469481][ T45] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 452.569605][ T9] usb 4-1: USB disconnect, device number 38 [ 453.081318][ T45] gspca_sunplus: reg_r err -71 [ 453.081408][ T45] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 453.093949][ T45] usb 3-1: USB disconnect, device number 37 [ 453.364833][T16388] netlink: 'syz.3.4969': attribute type 2 has an invalid length. [ 453.578536][ T37] audit: type=1326 audit(1756964337.265:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16395 comm="syz.3.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76c21debe9 code=0x7ffc0000 [ 453.578585][ T37] audit: type=1326 audit(1756964337.265:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16395 comm="syz.3.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76c21debe9 code=0x7ffc0000 [ 453.614962][ T37] audit: type=1326 audit(1756964337.305:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16395 comm="syz.3.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f76c21debe9 code=0x7ffc0000 [ 453.615013][ T37] audit: type=1326 audit(1756964337.305:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16395 comm="syz.3.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76c21debe9 code=0x7ffc0000 [ 454.108773][T16419] trusted_key: encrypted_key: key trusted:syz not found [ 454.282815][ T9] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 454.446872][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.446896][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 454.447031][ T9] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 454.447057][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.508582][ T9] usb 3-1: config 0 descriptor?? [ 454.527151][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 454.527212][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 454.566150][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 454.582872][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 454.583029][ T9] usb 3-1: media controller created [ 454.590668][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 454.700127][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 454.711730][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 454.737846][T16415] dvb-usb: bulk message failed: -22 (4/0) [ 454.749288][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input37 [ 454.762791][ T5843] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 454.791479][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 454.791503][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 454.814982][ T9] usb 3-1: USB disconnect, device number 38 [ 454.923083][ T5843] usb 2-1: Using ep0 maxpacket: 16 [ 454.925435][ T5843] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.925463][ T5843] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.925483][ T5843] usb 2-1: config 0 interface 0 has no altsetting 0 [ 454.925514][ T5843] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 454.925534][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.945336][ T5843] usb 2-1: config 0 descriptor?? [ 455.049343][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 455.330657][T16446] vimc link validate: Scaler:src:16x16 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x30314752, 8, 0, 0, 0) [ 455.392387][ T5843] kye 0003:0458:0138.0014: unknown main item tag 0x0 [ 455.392425][ T5843] kye 0003:0458:0138.0014: unknown main item tag 0x0 [ 455.392451][ T5843] kye 0003:0458:0138.0014: unknown main item tag 0x0 [ 455.392477][ T5843] kye 0003:0458:0138.0014: unknown main item tag 0x0 [ 455.392501][ T5843] kye 0003:0458:0138.0014: unknown main item tag 0x0 [ 455.392526][ T5843] kye 0003:0458:0138.0014: unknown main item tag 0x0 [ 455.392551][ T5843] kye 0003:0458:0138.0014: unknown main item tag 0x0 [ 455.392576][ T5843] kye 0003:0458:0138.0014: unknown main item tag 0x0 [ 455.404186][ T5843] kye 0003:0458:0138.0014: unknown main item tag 0x0 [ 455.404218][ T5843] kye 0003:0458:0138.0014: unknown main item tag 0x0 [ 455.411892][ T5843] kye 0003:0458:0138.0014: collection stack underflow [ 455.411918][ T5843] kye 0003:0458:0138.0014: item 0 0 0 12 parsing failed [ 455.454225][ T5843] kye 0003:0458:0138.0014: parse failed [ 455.454297][ T5843] kye 0003:0458:0138.0014: probe with driver kye failed with error -22 [ 455.588834][ T9] usb 2-1: USB disconnect, device number 38 [ 456.227053][T16473] sp0: Synchronizing with TNC [ 456.604183][T16491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5019'. [ 456.732248][T16497] sctp: [Deprecated]: syz.3.5023 (pid 16497) Use of int in maxseg socket option. [ 456.732248][T16497] Use struct sctp_assoc_value instead [ 456.952329][T16502] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5025'. [ 458.018604][T16540] vlan0: entered promiscuous mode [ 458.182763][ T45] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 458.336582][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.341230][ T45] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 458.341256][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.341274][ T45] usb 5-1: Product: syz [ 458.341286][ T45] usb 5-1: Manufacturer: syz [ 458.341299][ T45] usb 5-1: SerialNumber: syz [ 458.373229][ T45] usb 5-1: config 0 descriptor?? [ 458.379703][ T45] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 458.379760][ T45] dvb-usb: bulk message failed: -22 (3/0) [ 458.401260][ T45] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 458.424457][ T45] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 458.424519][ T45] usb 5-1: media controller created [ 458.427760][ T45] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 458.557826][ T45] dvb-usb: bulk message failed: -22 (6/0) [ 458.557925][ T45] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 458.592106][ T45] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input38 [ 458.599296][ T45] dvb-usb: schedule remote query interval to 150 msecs. [ 458.599351][ T45] dvb-usb: bulk message failed: -22 (3/0) [ 458.600541][T16539] dvb-usb: bulk message failed: -22 (2/0) [ 458.622909][ T45] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 458.652338][ T45] usb 5-1: USB disconnect, device number 34 [ 458.928905][ T45] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 459.912768][ T5843] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 460.065609][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 460.065640][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 460.065661][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 460.069776][ T5843] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 460.069802][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.069820][ T5843] usb 3-1: Product: syz [ 460.069832][ T5843] usb 3-1: Manufacturer: syz [ 460.069845][ T5843] usb 3-1: SerialNumber: syz [ 460.095553][ T5843] usb 3-1: config 0 descriptor?? [ 460.268753][ T37] audit: type=1800 audit(1756964343.955:152): pid=16602 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.5071" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 460.345001][ T5843] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 460.552158][T16610] Invalid logical block size (8192) [ 460.598281][ T990] usb 3-1: USB disconnect, device number 39 [ 460.820343][T16616] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 461.202754][ T990] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 461.266389][ T37] audit: type=1326 audit(1756964344.945:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16633 comm="syz.2.5087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609a96ebe9 code=0x7ffc0000 [ 461.266659][ T37] audit: type=1326 audit(1756964344.955:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16633 comm="syz.2.5087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609a96ebe9 code=0x7ffc0000 [ 461.274659][ T37] audit: type=1326 audit(1756964344.965:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16633 comm="syz.2.5087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f609a96ebe9 code=0x7ffc0000 [ 461.276330][ T37] audit: type=1326 audit(1756964344.965:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16633 comm="syz.2.5087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609a96ebe9 code=0x7ffc0000 [ 461.276543][ T37] audit: type=1326 audit(1756964344.965:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16633 comm="syz.2.5087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609a96ebe9 code=0x7ffc0000 [ 461.276586][ T37] audit: type=1326 audit(1756964344.965:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16633 comm="syz.2.5087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f609a96ebe9 code=0x7ffc0000 [ 461.276626][ T37] audit: type=1326 audit(1756964344.965:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16633 comm="syz.2.5087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609a96ebe9 code=0x7ffc0000 [ 461.276664][ T37] audit: type=1326 audit(1756964344.965:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16633 comm="syz.2.5087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609a96ebe9 code=0x7ffc0000 [ 461.365266][ T990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.365297][ T990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.365317][ T990] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 461.365356][ T990] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 461.365376][ T990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.518733][ T990] usb 4-1: config 0 descriptor?? [ 461.607598][T16642] netlink: 268 bytes leftover after parsing attributes in process `syz.2.5092'. [ 461.607627][T16642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5092'. [ 462.013173][ T990] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 462.163470][ T990] usb 4-1: USB disconnect, device number 39 [ 462.239644][ T5843] hid_parser_main: 643 callbacks suppressed [ 462.239665][ T5843] hid-generic 0000:0004:0000.0016: unknown main item tag 0x0 [ 462.239694][ T5843] hid-generic 0000:0004:0000.0016: unknown main item tag 0x0 [ 462.239719][ T5843] hid-generic 0000:0004:0000.0016: unknown main item tag 0x0 [ 462.359709][ T5843] hid-generic 0000:0004:0000.0016: hidraw0: HID v0.00 Device [syz0] on syz0 [ 462.438077][T16661] fido_id[16661]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 462.578624][T16666] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 462.578681][T16666] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 462.578728][T16666] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 462.578776][T16666] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 462.578822][T16666] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 462.578870][T16666] comedi comedi3: 8255: I/O port conflict (0x12,4) [ 462.578917][T16666] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 462.578964][T16666] comedi comedi3: 8255: I/O port conflict (0x81,4) [ 462.579013][T16666] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 462.579065][T16666] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 462.579110][T16666] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 462.579157][T16666] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 462.579202][T16666] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 462.579252][T16666] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 462.579382][T16666] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 462.579429][T16666] comedi comedi3: 8255: I/O port conflict (0x400009,4) [ 462.579471][T16666] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 462.579511][T16666] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 462.579627][T16666] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 462.835296][ T5845] Bluetooth: hci4: unexpected event for opcode 0x204e [ 463.071835][T16687] binder: 16684:16687 ioctl 541b 0 returned -22 [ 463.239706][T16691] gretap0: entered promiscuous mode [ 463.240153][T16691] vlan3: entered promiscuous mode [ 463.388643][T16696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5117'. [ 463.888739][T16715] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 464.272792][ T5928] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 464.432928][ T5928] usb 2-1: Using ep0 maxpacket: 32 [ 464.435409][ T5928] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 464.435524][ T5928] usb 2-1: config 0 has no interface number 0 [ 464.438887][ T5928] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 464.438913][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.438931][ T5928] usb 2-1: Product: syz [ 464.438943][ T5928] usb 2-1: Manufacturer: syz [ 464.438955][ T5928] usb 2-1: SerialNumber: syz [ 464.504378][ T5928] usb 2-1: config 0 descriptor?? [ 464.519954][ T5928] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 464.519983][ T5928] usb 2-1: selecting invalid altsetting 1 [ 464.519997][ T5928] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 464.555814][ T5928] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 464.556192][ T5928] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 464.556361][ T5928] usb 2-1: media controller created [ 464.629656][ T5928] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 465.030548][T16754] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5144'. [ 465.030573][T16754] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5144'. [ 465.030585][T16754] tipc: MTU too low for tipc bearer [ 465.137629][T16757] macsec1: entered promiscuous mode [ 465.141095][T16757] macsec1: entered allmulticast mode [ 465.443663][T16765] digital: digital_start_poll: Unknown protocol [ 465.721166][ T5928] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 465.722019][ T5928] zl10353_read_register: readreg error (reg=127, ret==-110) [ 465.754397][T16722] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 465.816462][ T5928] usb 2-1: USB disconnect, device number 39 [ 466.297230][T16791] x_tables: ip6_tables: LOG.0 target: invalid size 32 (kernel) != (user) 40 [ 466.782849][ T5928] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 466.832850][ T990] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 466.935256][ T5928] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 466.935289][ T5928] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.935309][ T5928] usb 4-1: config 0 interface 0 has no altsetting 0 [ 466.935340][ T5928] usb 4-1: New USB device found, idVendor=0b05, idProduct=183d, bcdDevice= 0.00 [ 466.935360][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.992645][ T990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.992675][ T990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.992708][ T990] usb 2-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 466.992727][ T990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.996248][ T5928] usb 4-1: config 0 descriptor?? [ 467.056025][ T990] usb 2-1: config 0 descriptor?? [ 467.500586][ T5928] asus 0003:0B05:183D.0017: hidraw0: USB HID v0.08 Device [HID 0b05:183d] on usb-dummy_hcd.3-1/input0 [ 467.500617][ T5928] asus 0003:0B05:183D.0017: Asus input not registered [ 467.537154][ T5928] asus 0003:0B05:183D.0017: probe with driver asus failed with error -12 [ 467.552299][ T990] megaworld 0003:07B5:0312.0018: unknown main item tag 0x3 [ 467.584545][ T990] megaworld 0003:07B5:0312.0018: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.1-1/input0 [ 467.584578][ T990] megaworld 0003:07B5:0312.0018: no inputs found [ 467.650124][ T6597] usb 4-1: USB disconnect, device number 40 [ 467.710170][T16831] fido_id[16831]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 467.726758][ T45] usb 2-1: USB disconnect, device number 40 [ 467.874996][T16836] fido_id[16836]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 469.602007][T16899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5210'. [ 469.886071][T16912] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5217'. [ 471.808181][T16986] tipc: Started in network mode [ 471.808211][T16986] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 471.811476][T16986] tipc: Enabled bearer , priority 10 [ 471.960587][T16988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5252'. [ 471.960610][T16988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5252'. [ 471.960633][T16988] netlink: 'syz.4.5252': attribute type 12 has an invalid length. [ 471.960646][T16988] netlink: 'syz.4.5252': attribute type 13 has an invalid length. [ 472.240849][T17000] netlink: 'syz.3.5258': attribute type 11 has an invalid length. [ 472.318233][T17002] veth1_macvtap: left promiscuous mode [ 472.318261][T17002] macsec0: entered allmulticast mode [ 472.365525][T17002] veth1_macvtap: entered promiscuous mode [ 472.365550][T17002] veth1_macvtap: entered allmulticast mode [ 472.365693][T17002] macsec0: left allmulticast mode [ 472.365706][T17002] veth1_macvtap: left allmulticast mode [ 472.602107][T17014] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5266'. [ 472.842792][ T990] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 472.926735][ T45] tipc: Node number set to 10136234 [ 472.997755][ T990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 472.997786][ T990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.999660][ T990] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 472.999686][ T990] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 472.999704][ T990] usb 4-1: Manufacturer: syz [ 473.059701][ T990] usb 4-1: config 0 descriptor?? [ 473.480576][T17049] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 473.483095][ T45] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 473.529232][ T990] cougar 0003:060B:700A.0019: unknown main item tag 0x0 [ 473.529271][ T990] cougar 0003:060B:700A.0019: unknown main item tag 0x0 [ 473.529297][ T990] cougar 0003:060B:700A.0019: unknown main item tag 0x0 [ 473.529327][ T990] cougar 0003:060B:700A.0019: unknown main item tag 0x0 [ 473.529353][ T990] cougar 0003:060B:700A.0019: unknown main item tag 0x0 [ 473.574474][ T990] cougar 0003:060B:700A.0019: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 473.635757][ T45] usb 2-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.635785][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 473.635816][ T45] usb 2-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 473.635836][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.667990][ T45] usb 2-1: config 0 descriptor?? [ 473.713484][ T990] usb 4-1: USB disconnect, device number 41 [ 474.023104][T17056] fido_id[17056]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 474.211625][ T45] apple 0003:05AC:027A.001A: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.1-1/input0 [ 474.303479][ T5843] usb 2-1: USB disconnect, device number 41 [ 474.387454][T17072] fido_id[17072]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 475.070769][T17104] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5306'. [ 475.255610][ T37] audit: type=1400 audit(1756964358.945:161): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=17111 comm="syz.4.5310" src=1 dest=20000 netif=wpan0 [ 475.415231][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 475.443410][T17117] tipc: Enabled bearer , priority 2 [ 475.572793][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 475.575676][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.575733][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 475.575757][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 475.575774][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 475.575793][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 475.577439][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 475.577464][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 475.577480][ T9] usb 3-1: Manufacturer: syz [ 475.590107][ T9] usb 3-1: config 0 descriptor?? [ 476.022793][ T9] rc_core: IR keymap rc-hauppauge not found [ 476.022813][ T9] Registered IR keymap rc-empty [ 476.023671][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 476.045917][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 476.093339][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 476.112931][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input40 [ 476.121731][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 476.143372][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 476.175175][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 476.198313][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 476.213022][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 476.243097][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 476.273374][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 476.296506][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 476.313074][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 476.333045][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 476.429265][ T9] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 476.429289][ T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 476.481817][ T9] usb 3-1: USB disconnect, device number 40 [ 476.642731][ T5843] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 476.792932][ T5843] usb 4-1: Using ep0 maxpacket: 8 [ 476.798322][ T5843] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 476.798349][ T5843] usb 4-1: config 179 has no interface number 0 [ 476.798396][ T5843] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 476.798419][ T5843] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 476.798442][ T5843] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 476.798465][ T5843] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 476.798487][ T5843] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 476.798524][ T5843] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 476.798544][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.855860][T17157] Bluetooth: MGMT ver 1.23 [ 476.913958][T17144] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 477.209583][T17144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.213479][T17144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.447901][ T5928] usb 4-1: USB disconnect, device number 42 [ 477.447988][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 477.448053][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 477.462807][ T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 477.633196][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 477.637893][ T9] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 477.637923][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 477.637952][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 477.637972][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.650443][ T9] usb 2-1: config 0 descriptor?? [ 477.680718][T17177] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5340'. [ 477.680754][T17177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5340'. [ 477.860885][T17179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5341'. [ 477.860907][T17179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5341'. [ 478.084127][ T9] microsoft 0003:045E:009D.001B: unknown main item tag 0x0 [ 478.084167][ T9] microsoft 0003:045E:009D.001B: unknown main item tag 0x0 [ 478.084193][ T9] microsoft 0003:045E:009D.001B: unknown main item tag 0x0 [ 478.084218][ T9] microsoft 0003:045E:009D.001B: unknown main item tag 0x0 [ 478.084244][ T9] microsoft 0003:045E:009D.001B: unknown main item tag 0x0 [ 478.106605][ T9] microsoft 0003:045E:009D.001B: hidraw0: USB HID v0.02 Device [HID 045e:009d] on usb-dummy_hcd.1-1/input0 [ 478.106643][ T9] microsoft 0003:045E:009D.001B: no inputs found [ 478.106655][ T9] microsoft 0003:045E:009D.001B: could not initialize ff, continuing anyway [ 478.268411][ T5843] usb 2-1: USB disconnect, device number 42 [ 478.812817][ T5843] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 478.964436][ T5843] usb 5-1: Using ep0 maxpacket: 16 [ 478.966913][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 245, changing to 11 [ 478.966959][ T5843] usb 5-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 478.966980][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.009548][ T5843] usb 5-1: config 0 descriptor?? [ 479.473557][ T5843] hid-alps 0003:044E:120B.001C: hidraw0: USB HID v0.06 Device [HID 044e:120b] on usb-dummy_hcd.4-1/input0 [ 479.672364][ T9] usb 5-1: USB disconnect, device number 35 [ 479.772035][ T6597] libceph: connect (1)[c::]:6789 error -101 [ 479.793266][ T6597] libceph: mon0 (1)[c::]:6789 connect error [ 479.810909][ T6597] libceph: connect (1)[c::]:6789 error -101 [ 479.811113][ T6597] libceph: mon0 (1)[c::]:6789 connect error [ 479.830770][T17230] fido_id[17230]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 480.002745][ T45] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 480.067964][ T5843] libceph: connect (1)[c::]:6789 error -101 [ 480.068189][ T5843] libceph: mon0 (1)[c::]:6789 connect error [ 480.131914][T17249] pimreg: entered allmulticast mode [ 480.138854][T17249] pimreg: left allmulticast mode [ 480.155581][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.155607][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 480.155647][ T45] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 480.155667][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.161904][ T45] usb 3-1: config 0 descriptor?? [ 480.301278][T17228] ceph: No mds server is up or the cluster is laggy [ 480.587456][ T6091] libceph: connect (1)[c::]:6789 error -101 [ 480.591913][ T6091] libceph: mon0 (1)[c::]:6789 connect error [ 480.698601][ T45] hid-picolcd 0003:04D8:C002.001D: No report with id 0x11 found [ 480.819509][ T9] usb 3-1: USB disconnect, device number 41 [ 482.272258][T17331] veth1_macvtap: left promiscuous mode [ 482.272287][T17331] macsec0: entered promiscuous mode [ 482.272318][T17331] macsec0: entered allmulticast mode [ 482.308493][T17331] veth1_macvtap: entered promiscuous mode [ 482.308517][T17331] veth1_macvtap: entered allmulticast mode [ 482.308841][T17331] macsec0: left promiscuous mode [ 482.309004][T17331] macsec0: left allmulticast mode [ 482.309013][T17331] veth1_macvtap: left allmulticast mode [ 482.512139][T17339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5418'. [ 482.512265][T17339] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5418'. [ 482.999641][T17361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5429'. [ 483.219883][T17371] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5432'. [ 483.609527][T17389] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.5442'. [ 483.609676][T17389] netlink: zone id is out of range [ 483.609717][T17389] netlink: get zone limit has 8 unknown bytes [ 483.692799][ T5928] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 483.731620][T17393] comedi comedi0: Minor 7 could not be opened [ 483.842779][ T5928] usb 3-1: Using ep0 maxpacket: 32 [ 483.845338][ T5928] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 483.845362][ T5928] usb 3-1: config 0 has no interface number 0 [ 483.845401][ T5928] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.845421][ T5928] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.845454][ T5928] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 483.845473][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.851089][ T5928] usb 3-1: config 0 descriptor?? [ 484.490388][ T5928] uclogic 0003:28BD:0094.001E: failed retrieving string descriptor #100: -71 [ 484.490449][ T5928] uclogic 0003:28BD:0094.001E: failed retrieving pen parameters: -71 [ 484.490465][ T5928] uclogic 0003:28BD:0094.001E: pen probing failed: -71 [ 484.490480][ T5928] uclogic 0003:28BD:0094.001E: failed probing parameters: -71 [ 484.490571][ T5928] uclogic 0003:28BD:0094.001E: probe with driver uclogic failed with error -71 [ 484.553084][ T5928] usb 3-1: USB disconnect, device number 42 [ 484.990476][T17424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5457'. [ 485.214685][ T5928] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 485.295956][T17432] netlink: 180 bytes leftover after parsing attributes in process `syz.4.5462'. [ 485.365547][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 485.365633][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.365655][ T5928] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 485.365694][ T5928] usb 4-1: New USB device found, idVendor=045e, idProduct=008e, bcdDevice= 0.00 [ 485.365716][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.435615][ T5928] usb 4-1: config 0 descriptor?? [ 485.895639][ T5928] hid-generic 0003:045E:008E.001F: unbalanced collection at end of report description [ 485.896530][ T5928] hid-generic 0003:045E:008E.001F: probe with driver hid-generic failed with error -22 [ 486.096466][ T5928] usb 4-1: USB disconnect, device number 43 [ 486.223037][ T9] libceph: connect (1)[c::]:6789 error -101 [ 486.223247][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 486.231436][ T9] libceph: connect (1)[c::]:6789 error -101 [ 486.231637][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 486.233343][ T5843] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 486.383191][ T5843] usb 5-1: Using ep0 maxpacket: 16 [ 486.388704][ T5843] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 486.388729][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 486.388746][ T5843] usb 5-1: Product: syz [ 486.388758][ T5843] usb 5-1: SerialNumber: syz [ 486.405817][ T5843] usb 5-1: config 0 descriptor?? [ 486.427948][ T5843] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 486.435708][ T5843] dvb_usb_af9015 5-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 486.436459][ T5843] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 486.436559][ T5843] dvb_usb_af9035 5-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 486.483123][ T5928] libceph: connect (1)[c::]:6789 error -101 [ 486.483446][ T5928] libceph: mon0 (1)[c::]:6789 connect error [ 486.621617][ T5843] usb 5-1: USB disconnect, device number 36 [ 486.679911][T17474] program syz.0.5482 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 486.878620][T17483] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5486'. [ 486.995844][ T5928] libceph: connect (1)[c::]:6789 error -101 [ 486.996076][ T5928] libceph: mon0 (1)[c::]:6789 connect error [ 487.009188][T17460] ceph: No mds server is up or the cluster is laggy [ 487.152733][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 487.153273][ T5845] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 487.387159][T17499] netlink: 'syz.1.5493': attribute type 31 has an invalid length. [ 487.568935][T17504] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5498'. [ 487.572039][T17504] IPVS: Error connecting to the multicast addr [ 488.008074][T17524] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (28928) [ 488.008100][T17524] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 488.223003][T17526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5506'. [ 488.223026][T17526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5506'. [ 488.223050][T17526] netlink: 'syz.2.5506': attribute type 19 has an invalid length. [ 488.223064][T17526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5506'. [ 488.768531][T17539] comedi comedi3: 8255: I/O port conflict (0x404f26,4) [ 488.768587][T17539] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 488.768632][T17539] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 488.768878][T17539] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 488.769010][T17539] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 488.769058][T17539] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 488.769104][T17539] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 488.769256][T17539] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 488.769302][T17539] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 488.769349][T17539] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 488.769436][T17539] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 488.769482][T17539] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 488.769529][T17539] comedi comedi3: 8255: I/O port conflict (0x400,4) [ 488.769613][T17539] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 488.771560][T17519] ceph: No mds server is up or the cluster is laggy [ 488.808392][T17540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5513'. [ 488.902190][T17542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5514'. [ 489.402834][ T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 489.446629][T17567] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5526'. [ 489.552829][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 489.555496][ T9] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 489.555552][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 489.555572][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 489.555592][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 489.555611][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 489.555631][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 489.557179][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 489.557207][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 489.557224][ T9] usb 5-1: SerialNumber: syz [ 489.672695][ T5843] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 489.677452][ T9] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 489.677689][ T9] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 489.826509][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.826541][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.826576][ T5843] usb 4-1: New USB device found, idVendor=056a, idProduct=00f4, bcdDevice= 0.00 [ 489.826596][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.836603][ T5843] usb 4-1: config 0 descriptor?? [ 489.931484][ T6597] libceph: connect (1)[c::]:6789 error -101 [ 489.931836][ T6597] libceph: mon0 (1)[c::]:6789 connect error [ 489.959411][ T6597] libceph: connect (1)[c::]:6789 error -101 [ 489.962828][ T6597] libceph: mon0 (1)[c::]:6789 connect error [ 489.967757][ T6597] usb 5-1: USB disconnect, device number 37 [ 490.223560][ T6091] libceph: connect (1)[c::]:6789 error -101 [ 490.223966][ T6091] libceph: mon0 (1)[c::]:6789 connect error [ 490.291025][ T5843] hid (null): usage index exceeded [ 490.306695][ T5843] wacom 0003:056A:00F4.0020: ignoring exceeding usage max [ 490.307666][ T5843] wacom 0003:056A:00F4.0020: ignoring exceeding usage max [ 490.307683][ T5843] wacom 0003:056A:00F4.0020: usage index exceeded [ 490.307695][ T5843] wacom 0003:056A:00F4.0020: item 0 1 2 2 parsing failed [ 490.308512][ T5843] wacom 0003:056A:00F4.0020: parse failed [ 490.308612][ T5843] wacom 0003:056A:00F4.0020: probe with driver wacom failed with error -22 [ 490.517395][ T9] usb 4-1: USB disconnect, device number 44 [ 490.648608][T17575] ceph: No mds server is up or the cluster is laggy [ 490.931894][T17602] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5542'. [ 491.471076][T17627] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 491.957440][T17647] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 491.957466][T17647] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 491.996366][T17647] vhci_hcd vhci_hcd.0: Device attached [ 492.222807][ T5843] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 492.264556][ T6597] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 492.383078][ T6091] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 492.419655][ T6597] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 492.419683][ T6597] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.419701][ T6597] usb 3-1: Product: syz [ 492.419713][ T6597] usb 3-1: Manufacturer: syz [ 492.419726][ T6597] usb 3-1: SerialNumber: syz [ 492.429581][ T6597] usb 3-1: config 0 descriptor?? [ 492.533091][ T6091] usb 2-1: Using ep0 maxpacket: 16 [ 492.536807][ T6091] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.536835][ T6091] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.536925][ T6091] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 492.536946][ T6091] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.565262][ T6091] usb 2-1: config 0 descriptor?? [ 492.629171][ T990] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 492.662060][ T6597] usb 3-1: Firmware version (0.0) predates our first public release. [ 492.662085][ T6597] usb 3-1: Please update to version 0.2 or newer [ 492.685206][T17648] usb 37-1: recv xbuf, 0 [ 492.723544][ T12] vhci_hcd: stop threads [ 492.724635][ T12] vhci_hcd: release socket [ 492.750047][ T12] vhci_hcd: disconnect device [ 492.753559][ T5843] vhci_hcd: vhci_device speed not set [ 492.803202][ T990] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 492.803238][ T990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.810846][ T990] usb 4-1: config 0 descriptor?? [ 492.851581][ T990] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 492.989630][ T6597] usb 3-1: USB disconnect, device number 43 [ 493.039246][ T6091] konepure 0003:1E7D:2DB4.0021: unknown main item tag 0x0 [ 493.039286][ T6091] konepure 0003:1E7D:2DB4.0021: unknown main item tag 0x0 [ 493.039313][ T6091] konepure 0003:1E7D:2DB4.0021: unknown main item tag 0x0 [ 493.039338][ T6091] konepure 0003:1E7D:2DB4.0021: unknown main item tag 0x0 [ 493.094903][ T6091] konepure 0003:1E7D:2DB4.0021: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.1-1/input0 [ 493.369086][ T6091] usb 2-1: USB disconnect, device number 43 [ 493.480099][ T990] gspca_cpia1: usb_control_msg 01, error -71 [ 493.480120][ T990] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 493.481724][T17683] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5578'. [ 493.524856][ T990] usb 4-1: USB disconnect, device number 45 [ 494.272849][ T990] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 494.345021][T17716] hub 9-0:1.0: USB hub found [ 494.345818][T17716] hub 9-0:1.0: 1 port detected [ 494.422774][ T990] usb 3-1: Using ep0 maxpacket: 32 [ 494.425304][ T990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.425331][ T990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.425375][ T990] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 494.425396][ T990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.433872][ T6597] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 494.490479][ T990] usb 3-1: config 0 descriptor?? [ 494.597328][ T6597] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 494.597355][ T6597] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 494.597372][ T6597] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 494.597388][ T6597] usb 4-1: config 220 has no interface number 2 [ 494.597460][ T6597] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 494.597484][ T6597] usb 4-1: config 220 interface 0 has no altsetting 0 [ 494.597500][ T6597] usb 4-1: config 220 interface 76 has no altsetting 0 [ 494.597517][ T6597] usb 4-1: config 220 interface 1 has no altsetting 0 [ 494.600838][ T6597] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 494.600866][ T6597] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.600884][ T6597] usb 4-1: Product: syz [ 494.600897][ T6597] usb 4-1: Manufacturer: syz [ 494.600909][ T6597] usb 4-1: SerialNumber: syz [ 494.853799][ T6597] usb 4-1: selecting invalid altsetting 0 [ 494.854364][ T6597] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 494.854393][ T6597] usb 4-1: No valid video chain found. [ 494.912345][ T6597] usb 4-1: selecting invalid altsetting 0 [ 494.912376][ T6597] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 494.931231][ T990] hid (null): unknown global tag 0xe [ 494.943631][ T6597] usb 4-1: USB disconnect, device number 46 [ 494.994931][ T990] aquacomputer_d5next 0003:0C70:F0B6.0022: unknown global tag 0xe [ 494.994954][ T990] aquacomputer_d5next 0003:0C70:F0B6.0022: item 0 1 1 14 parsing failed [ 494.995786][ T990] aquacomputer_d5next 0003:0C70:F0B6.0022: probe with driver aquacomputer_d5next failed with error -22 [ 495.161264][ T5843] usb 3-1: USB disconnect, device number 44 [ 495.583680][T17747] comedi comedi3: 8255: I/O port conflict (0x10003,4) [ 495.583735][T17747] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 495.583783][T17747] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 495.583964][T17747] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 495.584010][T17747] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 495.584056][T17747] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 498.002895][ T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 498.004435][T17821] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 498.168640][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.168672][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.168708][ T9] usb 4-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00 [ 498.168729][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.220339][ T9] usb 4-1: config 0 descriptor?? [ 498.513177][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 498.513304][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 498.519405][ T9] usb 4-1: USB disconnect, device number 47 [ 498.533136][ T5843] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 498.683403][ T5843] usb 5-1: Using ep0 maxpacket: 32 [ 498.685928][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.685957][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.685994][ T5843] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 498.686013][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.700832][ T5843] usb 5-1: config 0 descriptor?? [ 499.148579][ T5843] ft260 0003:0403:6030.0023: unbalanced collection at end of report description [ 499.149366][ T5843] ft260 0003:0403:6030.0023: failed to parse HID [ 499.149463][ T5843] ft260 0003:0403:6030.0023: probe with driver ft260 failed with error -22 [ 499.348382][ T6091] usb 5-1: USB disconnect, device number 38 [ 500.408558][T17883] new mount options do not match the existing superblock, will be ignored [ 500.427565][T17883] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 500.509156][T17890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5672'. [ 500.543795][T17889] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5673'. [ 500.742780][ T5843] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 500.795919][ C1] vkms_vblank_simulate: vblank timer overrun [ 500.894115][ T5843] usb 5-1: Using ep0 maxpacket: 16 [ 500.896567][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.896596][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.896617][ T5843] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 500.896656][ T5843] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 500.896676][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.905865][ T5843] usb 5-1: config 0 descriptor?? [ 501.385164][ T5843] microsoft 0003:045E:07DA.0024: report is too long [ 501.385197][ T5843] microsoft 0003:045E:07DA.0024: item 0 4 0 8 parsing failed [ 501.386028][ T5843] microsoft 0003:045E:07DA.0024: parse failed [ 501.386127][ T5843] microsoft 0003:045E:07DA.0024: probe with driver microsoft failed with error -22 [ 501.571801][ T9] usb 5-1: USB disconnect, device number 39 [ 501.647124][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.647198][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.754870][ T5843] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 501.905408][ T5843] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 501.905435][ T5843] usb 4-1: config 0 has no interface number 0 [ 501.905465][ T5843] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 501.905503][ T5843] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 501.905527][ T5843] usb 4-1: config 0 interface 255 has no altsetting 0 [ 501.905558][ T5843] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 501.905578][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.918341][ T5843] usb 4-1: config 0 descriptor?? [ 501.944735][ T5843] ums-realtek 4-1:0.255: USB Mass Storage device detected [ 502.140872][ T5843] usb 4-1: USB disconnect, device number 48 [ 503.351733][T17945] syz.1.5699 (17945): drop_caches: 2 [ 503.486299][T17974] netlink: 87 bytes leftover after parsing attributes in process `syz.3.5711'. [ 503.763230][ T6091] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 503.763355][T17985] CIFS mount error: No usable UNC path provided in device string! [ 503.763355][T17985] [ 503.763371][T17985] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 503.873311][ T6597] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 503.919641][ T6091] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 503.919670][ T6091] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 503.919693][ T6091] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 503.958055][ T6091] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 503.958081][ T6091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.958099][ T6091] usb 2-1: Product: syz [ 503.958111][ T6091] usb 2-1: Manufacturer: syz [ 503.958123][ T6091] usb 2-1: SerialNumber: syz [ 503.993309][ T5843] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 504.012093][ T6091] usb 2-1: config 0 descriptor?? [ 504.016439][T17978] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 504.016585][T17978] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 504.045612][ T6091] usb 2-1: ucan: probing device on interface #0 [ 504.064500][ T6597] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 504.064526][ T6597] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 504.064544][ T6597] usb 5-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 504.064617][ T6597] usb 5-1: config 220 has no interface number 2 [ 504.064690][ T6597] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 504.064715][ T6597] usb 5-1: config 220 interface 0 has no altsetting 0 [ 504.064786][ T6597] usb 5-1: config 220 interface 76 has no altsetting 0 [ 504.064802][ T6597] usb 5-1: config 220 interface 1 has no altsetting 0 [ 504.069922][ T6597] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 504.070003][ T6597] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.070022][ T6597] usb 5-1: Product: syz [ 504.070034][ T6597] usb 5-1: Manufacturer: syz [ 504.070047][ T6597] usb 5-1: SerialNumber: syz [ 504.083093][T17993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5720'. [ 504.196435][ T5843] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 504.196459][ T5843] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 504.196478][ T5843] usb 4-1: config 1 has no interface number 0 [ 504.196586][ T5843] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 504.199331][ T5843] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 504.199412][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.199430][ T5843] usb 4-1: Product: syz [ 504.199442][ T5843] usb 4-1: Manufacturer: syz [ 504.199454][ T5843] usb 4-1: SerialNumber: syz [ 504.335732][ T5843] usb 4-1: selecting invalid altsetting 1 [ 504.439856][ T6091] usb 2-1: ucan: device reported invalid device info [ 504.439877][ T6091] usb 2-1: ucan: probe failed; try to update the device firmware [ 504.566943][ T6597] usb 5-1: selecting invalid altsetting 0 [ 504.592175][ T6597] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 504.592206][ T6597] usb 5-1: No valid video chain found. [ 504.646449][ T6597] usb 5-1: selecting invalid altsetting 0 [ 504.646540][ T6597] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 504.662789][ T990] usb 2-1: USB disconnect, device number 44 [ 504.741597][ T6597] usb 5-1: USB disconnect, device number 40 [ 504.776073][ T5843] usb 4-1: selecting invalid altsetting 1 [ 504.776127][ T5843] cdc_ncm 4-1:1.1: bind() failure [ 504.972669][ T6597] usb 4-1: USB disconnect, device number 49 [ 506.659916][T18088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5758'. [ 506.699656][T18088] dummy0: entered promiscuous mode [ 506.756400][T18088] dummy0: left promiscuous mode [ 507.443305][ T5843] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 507.595629][ T5843] usb 4-1: Using ep0 maxpacket: 8 [ 507.597915][ T5843] usb 4-1: unable to get BOS descriptor or descriptor too short [ 507.599367][ T5843] usb 4-1: config 4 interface 0 has no altsetting 0 [ 507.626833][ T5843] usb 4-1: string descriptor 0 read error: -22 [ 507.626933][ T5843] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 507.626955][ T5843] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 507.678004][ T5843] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 507.694467][ T5843] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 507.694883][ T5843] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 507.694931][ T5843] usb 4-1: media controller created [ 507.750369][ T5843] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 507.910981][ T5843] zl10353_read_register: readreg error (reg=127, ret==0) [ 508.016463][ T5843] usb 4-1: USB disconnect, device number 50 [ 508.251532][ T6091] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 508.251569][ T6091] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 508.251595][ T6091] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 508.251620][ T6091] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 508.251644][ T6091] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 508.251669][ T6091] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 508.251694][ T6091] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 508.251718][ T6091] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 508.251740][ T6091] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 508.251765][ T6091] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 508.344532][ T6091] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz0] on syz0 [ 508.697844][T18146] fido_id[18146]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 508.982009][T18165] netlink: 'syz.1.5789': attribute type 1 has an invalid length. [ 509.169172][T18169] tipc: Started in network mode [ 509.169204][T18169] tipc: Node identity 0000000000005f000000000000000001, cluster identity 4711 [ 509.169256][T18169] tipc: Enabling of bearer rejected, failed to enable media [ 509.538673][T18182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.050714][T18205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5807'. [ 510.050741][T18205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5807'. [ 510.283082][T18211] netlink: 'syz.1.5811': attribute type 178 has an invalid length. [ 510.952852][ T9] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 510.962174][T18241] netlink: 'syz.2.5826': attribute type 16 has an invalid length. [ 511.116416][ T9] usb 5-1: config 0 has an invalid interface number: 46 but max is 0 [ 511.116442][ T9] usb 5-1: config 0 has no interface number 0 [ 511.116493][ T9] usb 5-1: config 0 interface 46 has no altsetting 0 [ 511.116546][ T9] usb 5-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 511.116566][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.167623][ T9] usb 5-1: config 0 descriptor?? [ 511.181658][ T9] usb-storage 5-1:0.46: USB Mass Storage device detected [ 511.197211][ T9] usb-storage 5-1:0.46: Quirks match for vid 0781 pid 0100: 1 [ 511.376273][ T990] usb 5-1: USB disconnect, device number 41 [ 511.581835][T18261] netlink: 277 bytes leftover after parsing attributes in process `syz.3.5835'. [ 511.893806][ T5843] kernel write not supported for file /2325/attr/keycreate (pid: 5843 comm: kworker/1:4) [ 512.387176][T18285] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5847'. [ 513.101415][T18310] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5859'. [ 513.138438][T18313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5860'. [ 513.138460][T18313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5860'. [ 513.342799][T18321] tipc: Enabling of bearer rejected, failed to enable media [ 513.346829][T18322] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5863'. [ 513.707004][T18335] netlink: 'syz.4.5871': attribute type 1 has an invalid length. [ 513.707027][T18335] netlink: 612 bytes leftover after parsing attributes in process `syz.4.5871'. [ 513.707062][T18335] netlink: 'syz.4.5871': attribute type 1 has an invalid length. [ 514.141584][T18356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5881'. [ 514.662806][ T6091] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 514.817798][ T6091] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 514.817823][ T6091] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 514.817840][ T6091] usb 5-1: config 0 has no interface number 0 [ 514.817886][ T6091] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 514.817905][ T6091] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 514.854321][ T6091] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 514.854348][ T6091] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.854367][ T6091] usb 5-1: Product: syz [ 514.854379][ T6091] usb 5-1: Manufacturer: syz [ 514.854390][ T6091] usb 5-1: SerialNumber: syz [ 514.883949][ T6091] usb 5-1: config 0 descriptor?? [ 515.050614][T18383] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 515.548880][ T6091] usb 5-1: USB disconnect, device number 42 [ 515.845929][T18401] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5901'. [ 515.846952][T18401] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5901'. [ 517.125398][ T37] audit: type=1326 audit(1756964400.815:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18453 comm="syz.4.5927" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb36116ebe9 code=0x0 [ 518.083670][T18491] netlink: 'syz.4.5945': attribute type 2 has an invalid length. [ 518.333078][T18499] netlink: 'syz.3.5948': attribute type 1 has an invalid length. [ 518.333101][T18499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5948'. [ 518.882917][ T990] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 519.050677][ T990] usb 3-1: config 9 has an invalid interface number: 88 but max is 1 [ 519.050717][ T990] usb 3-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 519.050734][ T990] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 519.050750][ T990] usb 3-1: config 9 has no interface number 1 [ 519.050806][ T990] usb 3-1: config 9 interface 88 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 519.050829][ T990] usb 3-1: config 9 interface 88 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 519.050847][ T990] usb 3-1: config 9 interface 88 altsetting 9 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 519.050871][ T990] usb 3-1: config 9 interface 88 has no altsetting 0 [ 519.054531][ T990] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=50.80 [ 519.054558][ T990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.054576][ T990] usb 3-1: Product: syz [ 519.054588][ T990] usb 3-1: Manufacturer: syz [ 519.054598][ T990] usb 3-1: SerialNumber: syz [ 519.324620][ T990] qmi_wwan 3-1:9.88: skipping garbage [ 519.324902][ T990] qmi_wwan 3-1:9.88: probe with driver qmi_wwan failed with error -22 [ 519.363869][T18530] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5964'. [ 519.402823][ T990] usb 3-1: Could not set interface, error -71 [ 519.437083][ T990] usb 3-1: USB disconnect, device number 45 [ 519.842943][ T5928] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 520.001417][ T5928] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 520.001446][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.001464][ T5928] usb 5-1: Product: syz [ 520.001477][ T5928] usb 5-1: Manufacturer: syz [ 520.001489][ T5928] usb 5-1: SerialNumber: syz [ 520.022448][ T5928] usb 5-1: config 0 descriptor?? [ 520.071855][T18552] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 520.071911][T18552] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 520.072000][T18552] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 520.072126][T18552] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 520.072175][T18552] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 520.072222][T18552] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 520.072351][T18552] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 520.380308][ T5928] usb 5-1: USB disconnect, device number 43 [ 520.574312][ T6147] udevd[6147]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 521.205264][T18586] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 521.256141][T18588] netlink: 19 bytes leftover after parsing attributes in process `syz.1.5992'. [ 521.364562][T18590] netlink: 5636 bytes leftover after parsing attributes in process `syz.0.5993'. [ 521.393647][T18592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5994'. [ 521.922773][ T6091] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 522.076556][ T6091] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 522.076588][ T6091] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 522.076627][ T6091] usb 4-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 522.076647][ T6091] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.094019][ T6091] usb 4-1: config 0 descriptor?? [ 522.095473][T18605] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 522.224181][T18623] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6008'. [ 522.225802][T18623] tipc: Enabling of bearer rejected, failed to enable media [ 522.561848][ T6091] hid_parser_main: 73 callbacks suppressed [ 522.561870][ T6091] logitech 0003:046D:CA04.0026: unknown main item tag 0x6 [ 522.576785][ T6091] logitech 0003:046D:CA04.0026: hidraw0: USB HID vff.fa Device [HID 046d:ca04] on usb-dummy_hcd.3-1/input0 [ 522.576828][ T6091] logitech 0003:046D:CA04.0026: no inputs found [ 522.757310][ T990] usb 4-1: USB disconnect, device number 51 [ 522.846096][ T37] audit: type=1400 audit(1756964406.535:163): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=18643 comm="syz.1.6019" src=1 dest=20000 netif=wpan0 [ 524.439984][T18697] sp0: Synchronizing with TNC [ 524.600867][T18701] netlink: 'syz.4.6046': attribute type 1 has an invalid length. [ 524.873999][T18706] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6048'. [ 525.081355][T18719] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6055'. [ 525.808733][T18746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6066'. [ 526.698894][T18778] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.6078'. [ 526.836567][T18783] tipc: Enabling of bearer rejected, failed to enable media [ 528.175831][T18842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6105'. [ 529.113202][ T6597] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 529.210753][T18882] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 529.263312][ T6597] usb 2-1: Using ep0 maxpacket: 32 [ 529.266212][ T6597] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 529.266235][ T6597] usb 2-1: config 0 has no interface number 0 [ 529.301007][ T6597] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 529.301034][ T6597] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.301051][ T6597] usb 2-1: Product: syz [ 529.301064][ T6597] usb 2-1: Manufacturer: syz [ 529.301075][ T6597] usb 2-1: SerialNumber: syz [ 529.315671][ T6597] usb 2-1: config 0 descriptor?? [ 529.354803][ T6597] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 529.354829][ T6597] usb 2-1: selecting invalid altsetting 1 [ 529.354843][ T6597] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 529.366845][ T6597] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 529.367255][ T6597] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 529.367303][ T6597] usb 2-1: media controller created [ 529.439212][ T6597] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 530.189171][T18910] sp0: Synchronizing with TNC [ 530.312728][ T5928] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 530.467672][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.467717][ T5928] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 530.467739][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.519557][ T5928] usb 3-1: config 0 descriptor?? [ 530.597029][ T6597] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 530.597104][ T6597] zl10353_read_register: readreg error (reg=127, ret==-110) [ 530.613126][T18874] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 530.761103][ T6597] usb 2-1: USB disconnect, device number 45 [ 530.988101][ T5928] nintendo 0003:057E:200E.0027: unbalanced delimiter at end of report description [ 530.988727][ T5928] nintendo 0003:057E:200E.0027: HID parse failed [ 531.023004][ T5928] nintendo 0003:057E:200E.0027: probe - fail = -22 [ 531.023126][ T5928] nintendo 0003:057E:200E.0027: probe with driver nintendo failed with error -22 [ 531.174390][ T6597] usb 3-1: USB disconnect, device number 46 [ 531.414142][T18940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6146'. [ 531.496147][T18943] netlink: 'syz.4.6148': attribute type 3 has an invalid length. [ 531.496168][T18943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6148'. [ 532.183473][ T6597] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 532.342756][ T6597] usb 3-1: Using ep0 maxpacket: 16 [ 532.348469][ T6597] usb 3-1: too many endpoints for config 0 interface 0 altsetting 5: 130, using maximum allowed: 30 [ 532.348574][ T6597] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 532.348598][ T6597] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.348617][ T6597] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 532.348639][ T6597] usb 3-1: config 0 interface 0 has no altsetting 0 [ 532.348676][ T6597] usb 3-1: New USB device found, idVendor=1e71, idProduct=200e, bcdDevice= 0.00 [ 532.348696][ T6597] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.365487][ T6597] usb 3-1: config 0 descriptor?? [ 532.478030][T18981] netlink: 'syz.0.6166': attribute type 1 has an invalid length. [ 532.818147][ T6597] nzxt-smart2 0003:1E71:200E.0028: item fetching failed at offset 0/3 [ 532.819044][ T6597] nzxt-smart2 0003:1E71:200E.0028: probe with driver nzxt-smart2 failed with error -22 [ 532.920557][T18997] netlink: 504 bytes leftover after parsing attributes in process `syz.3.6173'. [ 532.981252][T19000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6175'. [ 533.003596][ T5843] usb 3-1: USB disconnect, device number 47 [ 533.819614][ T5928] kernel write not supported for file /2459/clear_refs (pid: 5928 comm: kworker/0:5) [ 534.553821][T19072] [U] v3f"S/4:XTzWtlW= [ 535.954326][T19105] netlink: 'syz.2.6225': attribute type 1 has an invalid length. [ 535.954354][T19105] netlink: 184 bytes leftover after parsing attributes in process `syz.2.6225'. [ 535.954369][T19105] netlink: 'syz.2.6225': attribute type 1 has an invalid length. [ 537.340496][T19099] syz.3.6221 (19099): drop_caches: 2 [ 538.122687][ T5843] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 538.272781][ T6597] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 538.277285][ T5843] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 538.277309][ T5843] usb 2-1: config 0 has no interface number 0 [ 538.277353][ T5843] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 538.277435][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.321110][ T5843] usb 2-1: config 0 descriptor?? [ 538.347866][ T37] audit: type=1326 audit(1756964422.035:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19173 comm="syz.2.6257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609a96ebe9 code=0x7ffc0000 [ 538.349109][ T37] audit: type=1326 audit(1756964422.035:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19173 comm="syz.2.6257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609a96ebe9 code=0x7ffc0000 [ 538.351556][ T37] audit: type=1326 audit(1756964422.035:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19173 comm="syz.2.6257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f609a96ebe9 code=0x7ffc0000 [ 538.351600][ T37] audit: type=1326 audit(1756964422.035:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19173 comm="syz.2.6257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609a96ebe9 code=0x7ffc0000 [ 538.351636][ T37] audit: type=1326 audit(1756964422.035:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19173 comm="syz.2.6257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609a96ebe9 code=0x7ffc0000 [ 538.351676][ T37] audit: type=1326 audit(1756964422.035:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19173 comm="syz.2.6257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f609a96ebe9 code=0x7ffc0000 [ 538.352169][ T5843] usb 2-1: selecting invalid altsetting 1 [ 538.354739][ T37] audit: type=1326 audit(1756964422.035:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19173 comm="syz.2.6257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f609a965ba7 code=0x7ffc0000 [ 538.354787][ T37] audit: type=1326 audit(1756964422.035:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19173 comm="syz.2.6257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f609a90adb9 code=0x7ffc0000 [ 538.354826][ T37] audit: type=1326 audit(1756964422.035:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19173 comm="syz.2.6257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609a96ebe9 code=0x7ffc0000 [ 538.354864][ T37] audit: type=1326 audit(1756964422.035:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19173 comm="syz.2.6257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609a96ebe9 code=0x7ffc0000 [ 538.366903][ T5843] dvb_ttusb_budget: ttusb_init_controller: error [ 538.366924][ T5843] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 538.424215][ T6597] usb 4-1: Using ep0 maxpacket: 8 [ 538.429267][ T6597] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 538.459736][ T6597] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 538.459764][ T6597] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.459781][ T6597] usb 4-1: Product: syz [ 538.459793][ T6597] usb 4-1: Manufacturer: syz [ 538.459806][ T6597] usb 4-1: SerialNumber: syz [ 538.506526][ T6597] usb 4-1: config 0 descriptor?? [ 538.557639][ T6597] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 538.557699][ T6597] usb 4-1: setting power ON [ 538.558384][ T6597] dvb-usb: bulk message failed: -22 (2/0) [ 538.598472][ T6597] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 538.621080][ T6597] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 538.621136][ T6597] usb 4-1: media controller created [ 538.867451][ T6597] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 538.928689][ T5843] DVB: Unable to find symbol cx22700_attach() [ 538.962869][ T6597] usb 4-1: selecting invalid altsetting 6 [ 538.962891][ T6597] usb 4-1: digital interface selection failed (-22) [ 538.962904][ T6597] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 538.964749][ T6597] usb 4-1: setting power OFF [ 538.965128][ T6597] dvb-usb: bulk message failed: -22 (2/0) [ 538.965148][ T6597] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 538.965160][ T6597] (NULL device *): no alternate interface [ 539.056634][ T5843] DVB: Unable to find symbol tda10046_attach() [ 539.056650][ T5843] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 539.142899][ T5843] usb 2-1: USB disconnect, device number 46 [ 539.241024][ T6597] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 539.313458][ T6597] usb 4-1: USB disconnect, device number 52 [ 539.638818][T19163] syz.4.6252 (19163): drop_caches: 2 [ 539.862863][T19202] block nbd1: NBD_DISCONNECT [ 541.212776][ T5928] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 541.362704][ T5928] usb 5-1: Using ep0 maxpacket: 32 [ 541.365428][ T5928] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.365457][ T5928] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 541.368731][ T5928] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 541.368757][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 541.368775][ T5928] usb 5-1: Product: syz [ 541.368795][ T5928] usb 5-1: Manufacturer: syz [ 541.368808][ T5928] usb 5-1: SerialNumber: syz [ 541.459750][ T5928] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input45 [ 541.770875][ T9] usb 5-1: USB disconnect, device number 44 [ 541.952772][ T5928] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 541.978086][ T9] appletouch 5-1:1.0: input: appletouch disconnected [ 542.113214][ T5928] usb 4-1: Using ep0 maxpacket: 32 [ 542.117267][ T5928] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 542.117292][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.140085][ T5928] usb 4-1: config 0 descriptor?? [ 542.168356][ T5928] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 542.799240][ T5928] gspca_vc032x: reg_w err -71 [ 542.799270][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 542.799281][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 542.799288][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 542.799296][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 542.799303][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 542.799391][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 542.799399][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 542.799414][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 542.799420][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 542.799426][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 542.799434][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 542.799442][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 542.799450][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 542.799457][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 542.799465][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 542.799472][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 542.799479][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 542.799486][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 542.799494][ T5928] gspca_vc032x: Unknown sensor... [ 542.799574][ T5928] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 542.925509][ T5928] usb 4-1: USB disconnect, device number 53 [ 543.434327][T19321] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 543.434381][T19321] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 543.434477][T19321] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 543.434602][T19321] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 543.434649][T19321] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 543.434698][T19321] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 543.434827][T19321] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 543.434874][T19321] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 543.434919][T19321] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 543.434964][T19321] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 543.435009][T19321] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 543.435055][T19321] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 544.893471][ T5843] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 545.042703][ T5843] usb 2-1: Using ep0 maxpacket: 32 [ 545.045593][ T5843] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 545.045617][ T5843] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 545.045635][ T5843] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 545.045654][ T5843] usb 2-1: config 1 has no interface number 0 [ 545.045698][ T5843] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 545.045721][ T5843] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 545.045759][ T5843] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 545.045779][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.096487][ T5843] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 545.328718][ T5843] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 545.727688][ T5928] usb 2-1: USB disconnect, device number 47 [ 545.730279][ T5928] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 545.771099][T19394] UBIFS error (pid: 19394): cannot open "c:::", error -22 [ 545.829218][T19396] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 545.915561][T19399] netlink: 'syz.2.6352': attribute type 2 has an invalid length. [ 545.940675][T19399] k*]: entered promiscuous mode [ 546.246200][T19410] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6358'. [ 546.564219][T19420] netlink: 'syz.2.6363': attribute type 13 has an invalid length. [ 547.202891][ T5843] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 547.352744][ T5843] usb 2-1: Using ep0 maxpacket: 16 [ 547.360397][ T5843] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 547.360420][ T5843] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 547.360438][ T5843] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 547.368612][ T5843] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 547.368639][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.368657][ T5843] usb 2-1: Product: syz [ 547.368669][ T5843] usb 2-1: Manufacturer: syz [ 547.368681][ T5843] usb 2-1: SerialNumber: syz [ 547.737270][T19420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.766702][T19420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.830329][ T5843] usb 2-1: 0:2 : does not exist [ 547.877938][ T5843] usb 2-1: USB disconnect, device number 48 [ 547.902143][ T6137] udevd[6137]: setting mode of /dev/bus/usb/002/048 to 020664 failed: No such file or directory [ 547.918793][ T6137] udevd[6137]: setting owner of /dev/bus/usb/002/048 to uid=0, gid=0 failed: No such file or directory [ 547.950746][ T6137] udevd[6137]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 548.972465][ T43] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.972499][ T43] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 60183 - 0 [ 548.972522][ T43] netdevsim netdevsim2 netdevsim0: unset [1, 2] type 2 family 0 port 52877 - 0 [ 549.013868][ T43] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.013899][ T43] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 60183 - 0 [ 549.013921][ T43] netdevsim netdevsim2 netdevsim1: unset [1, 2] type 2 family 0 port 52877 - 0 [ 549.015711][ T1443] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.015738][ T1443] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 60183 - 0 [ 549.015760][ T1443] netdevsim netdevsim2 netdevsim2: unset [1, 2] type 2 family 0 port 52877 - 0 [ 549.015795][ T1443] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.015824][ T1443] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 60183 - 0 [ 549.015845][ T1443] netdevsim netdevsim2 netdevsim3: unset [1, 2] type 2 family 0 port 52877 - 0 [ 549.129908][T19462] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6382'. [ 550.411916][T19520] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6407'. [ 551.527505][T19573] xt_limit: Overflow, try lower: 271964/0 [ 551.533208][ T5843] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 551.622461][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 551.622481][ T37] audit: type=1326 audit(1756964435.305:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19576 comm="syz.2.6435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609a96ebe9 code=0x7ffc0000 [ 551.622531][ T37] audit: type=1326 audit(1756964435.305:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19576 comm="syz.2.6435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f609a96ebe9 code=0x7ffc0000 [ 551.642211][ T37] audit: type=1326 audit(1756964435.325:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19576 comm="syz.2.6435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609a96ebe9 code=0x7ffc0000 [ 551.642472][ T37] audit: type=1326 audit(1756964435.325:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19576 comm="syz.2.6435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f609a96ebe9 code=0x7ffc0000 [ 551.687289][ T5843] usb 4-1: Using ep0 maxpacket: 16 [ 551.693163][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.693191][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.693210][ T5843] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 551.693249][ T5843] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 551.693268][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.719375][ T5843] usb 4-1: config 0 descriptor?? [ 551.934753][ T37] audit: type=1326 audit(1756964435.605:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19576 comm="syz.2.6435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609a96ebe9 code=0x7ffc0000 [ 552.213673][ T5843] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0029/input/input46 [ 552.394752][ T5843] microsoft 0003:045E:07DA.0029: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 552.424807][ T5843] usb 4-1: USB disconnect, device number 54 [ 552.641618][T19596] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6445'. [ 552.697109][T19602] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6448'. [ 552.697132][T19602] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6448'. [ 552.697145][T19602] netlink: 'syz.2.6448': attribute type 6 has an invalid length. [ 552.697157][T19602] netlink: 'syz.2.6448': attribute type 5 has an invalid length. [ 552.697167][T19602] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6448'. [ 552.698928][T19600] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 552.698985][T19600] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 552.699055][T19600] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 552.699155][T19600] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 552.699192][T19600] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 552.699230][T19600] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 552.699359][T19600] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 552.699395][T19600] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 552.699432][T19600] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 552.699502][T19600] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 552.699538][T19600] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 552.699576][T19600] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 552.722506][T19593] fido_id[19593]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 553.218243][T19621] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6456'. [ 554.285204][T19666] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 554.285235][T19666] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 554.420658][ T990] IPVS: starting estimator thread 0... [ 554.513206][T19675] IPVS: using max 7 ests per chain, 16800 per kthread [ 555.116883][T19706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6497'. [ 555.149913][T19708] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 555.316571][T19715] netlink: 'syz.4.6502': attribute type 1 has an invalid length. [ 556.869461][T19783] tipc: Enabling of bearer rejected, failed to enable media [ 557.174806][T19800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6544'. [ 557.175780][T19800] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6544'. [ 557.195580][T19799] trusted_key: encrypted_key: key user:syz not found [ 557.537246][ T37] audit: type=1326 audit(1756964441.215:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19810 comm="syz.1.6549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa773febe9 code=0x7ffc0000 [ 557.537304][ T37] audit: type=1326 audit(1756964441.225:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19810 comm="syz.1.6549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa773febe9 code=0x7ffc0000 [ 558.087007][T19835] __vm_enough_memory: pid: 19835, comm: syz.2.6560, bytes: 21200398688256 not enough memory for the allocation [ 558.282713][T19842] sp0: Synchronizing with TNC [ 558.330341][T19848] sp0: Found TNC [ 558.994358][T19870] team0: Device xfrm1 is of different type [ 559.957819][T19902] loop6: detected capacity change from 0 to 524288000 [ 560.000379][T19906] tmpfs: Cannot change global quota limit on remount [ 561.023913][T19939] gfs2: path_lookup on c:::!(>yo=O-FmSH_Y8yu [ 561.023913][T19939] FãzR #xI6BYCg)'!A{g [ 561.023913][T19939] }m]x%{qm*PN~%U5JhBoGhN].L.`$ returned error -2 [ 561.338855][T19949] usb usb1: check_ctrlrecip: process 19949 (syz.4.6609) requesting ep 01 but needs 81 [ 561.672527][ T37] audit: type=1326 audit(1756964445.345:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19958 comm="syz.1.6615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa773febe9 code=0x7ffc0000 [ 561.673238][ T37] audit: type=1326 audit(1756964445.365:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19958 comm="syz.1.6615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7faa773febe9 code=0x7ffc0000 [ 561.673594][ T37] audit: type=1326 audit(1756964445.365:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19958 comm="syz.1.6615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa773febe9 code=0x7ffc0000 [ 561.673873][ T37] audit: type=1326 audit(1756964445.365:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19958 comm="syz.1.6615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa773febe9 code=0x7ffc0000 [ 561.674527][ T37] audit: type=1326 audit(1756964445.365:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19958 comm="syz.1.6615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7faa773febe9 code=0x7ffc0000 [ 561.743087][ T37] audit: type=1326 audit(1756964445.425:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19958 comm="syz.1.6615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa773febe9 code=0x7ffc0000 [ 561.743136][ T37] audit: type=1326 audit(1756964445.435:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19958 comm="syz.1.6615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa773febe9 code=0x7ffc0000 [ 562.973132][T20000] netlink: 'syz.0.6635': attribute type 3 has an invalid length. [ 562.973155][T20000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6635'. [ 562.973167][T20000] netlink: 'syz.0.6635': attribute type 1 has an invalid length. [ 563.081252][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.081346][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.288982][T20016] netlink: 136 bytes leftover after parsing attributes in process `syz.2.6643'. [ 563.289006][T20016] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 563.822747][ T5843] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 563.939299][ T37] audit: type=1326 audit(1756964447.625:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20039 comm="syz.2.6656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609a96ebe9 code=0x7ffc0000 [ 563.942321][ T37] audit: type=1326 audit(1756964447.625:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20039 comm="syz.2.6656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609a96ebe9 code=0x7ffc0000 [ 563.942369][ T37] audit: type=1326 audit(1756964447.625:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20039 comm="syz.2.6656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f609a96ebe9 code=0x7ffc0000 [ 563.942409][ T37] audit: type=1326 audit(1756964447.625:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20039 comm="syz.2.6656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609a96ebe9 code=0x7ffc0000 [ 563.972811][ T5843] usb 5-1: Using ep0 maxpacket: 16 [ 563.975182][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10 [ 563.975229][ T5843] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 563.975247][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.980449][ T5843] usb 5-1: config 0 descriptor?? [ 564.453421][ T5843] uclogic 0003:5543:0781.002A: hidraw0: USB HID v0.04 Device [HID 5543:0781] on usb-dummy_hcd.4-1/input0 [ 564.659199][ T9] usb 5-1: USB disconnect, device number 45 [ 564.836072][T20069] bridge0: port 1(syz_tun) entered blocking state [ 564.838906][T20069] bridge0: port 1(syz_tun) entered disabled state [ 564.839243][T20069] syz_tun: entered allmulticast mode [ 564.860282][T20069] syz_tun: entered promiscuous mode [ 565.392194][T20090] devpts: Bad value for 'max' [ 566.004156][T20116] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 566.190571][T20119] dummy0: entered promiscuous mode [ 566.262913][T20119] dummy0: left promiscuous mode [ 566.770477][T20139] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 566.811785][T20141] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6698'. [ 567.100140][ T37] audit: type=1400 audit(1756964450.785:200): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=20149 comm="syz.1.6702" src=1 dest=20000 netif=wpan0 [ 567.105100][ T5845] Bluetooth: hci1: connection err: -111 [ 567.116721][ T5845] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 567.848332][T20184] netlink: 'syz.1.6716': attribute type 13 has an invalid length. [ 568.502351][T20201] netlink: 'syz.4.6723': attribute type 58 has an invalid length. [ 568.502372][T20201] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6723'. [ 568.584051][T20184] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.586142][T20184] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.738241][T20205] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6726'. [ 569.345565][T20184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 569.378488][T20184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.489911][T20184] tipc: Resetting bearer [ 569.740591][ T37] audit: type=1326 audit(1756964453.425:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20212 comm="syz.3.6729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76c21debe9 code=0x7ffc0000 [ 569.740763][ T37] audit: type=1326 audit(1756964453.425:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20212 comm="syz.3.6729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f76c21debe9 code=0x7ffc0000 [ 569.740916][ T37] audit: type=1326 audit(1756964453.425:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20212 comm="syz.3.6729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76c21debe9 code=0x7ffc0000 [ 569.741042][ T37] audit: type=1326 audit(1756964453.425:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20212 comm="syz.3.6729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76c21debe9 code=0x7ffc0000 [ 569.741415][ T37] audit: type=1326 audit(1756964453.425:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20212 comm="syz.3.6729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f76c21debe9 code=0x7ffc0000 [ 569.741547][ T37] audit: type=1326 audit(1756964453.425:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20212 comm="syz.3.6729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76c21debe9 code=0x7ffc0000 [ 569.741767][ T37] audit: type=1326 audit(1756964453.425:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20212 comm="syz.3.6729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76c21debe9 code=0x7ffc0000 [ 570.678595][ T155] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.683447][ T155] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.683496][ T155] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.683530][ T155] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.394470][T20299] usb usb8: usbfs: process 20299 (syz.0.6768) did not claim interface 0 before use [ 572.410066][T20298] gretap0: entered promiscuous mode [ 572.410182][T20298] vlan2: entered promiscuous mode [ 572.756995][T20313] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6776'. [ 574.215124][T20368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6801'. [ 574.215147][T20368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6801'. [ 574.215171][T20368] netlink: 'syz.1.6801': attribute type 14 has an invalid length. [ 574.215184][T20368] netlink: 'syz.1.6801': attribute type 11 has an invalid length. [ 574.431870][T20380] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6806'. [ 574.846381][T20396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6811'. [ 574.846403][T20396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6811'. [ 575.315121][T20419] delete_channel: no stack [ 575.315578][T20417] delete_channel: no stack [ 575.759870][T20435] netlink: 'syz.3.6830': attribute type 1 has an invalid length. [ 576.445696][ T5843] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 576.592906][ T5843] usb 4-1: Using ep0 maxpacket: 16 [ 576.596566][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.596594][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.596613][ T5843] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 576.596654][ T5843] usb 4-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 576.596674][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.601320][ T5843] usb 4-1: config 0 descriptor?? [ 577.088818][ T5843] lg-g15 0003:046D:C227.002B: hidraw0: USB HID v0.00 Device [HID 046d:c227] on usb-dummy_hcd.3-1/input0 [ 577.122985][T20473] netlink: 'syz.2.6846': attribute type 3 has an invalid length. [ 577.265608][ T990] usb 4-1: USB disconnect, device number 55 [ 577.496240][T20484] smc: net device bond0 applied user defined pnetid S [ 578.002734][ T5843] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 578.095456][T20495] tipc: Enabling of bearer rejected, failed to enable media [ 578.155117][ T5843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.155148][ T5843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.155185][ T5843] usb 2-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 578.155205][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.188573][ T5843] usb 2-1: config 0 descriptor?? [ 578.624348][ T5843] stadia 0003:18D1:9400.002C: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.1-1/input0 [ 578.624379][ T5843] stadia 0003:18D1:9400.002C: no inputs found [ 578.624391][ T5843] stadia 0003:18D1:9400.002C: force feedback init failed [ 578.713196][T20517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6868'. [ 578.811438][ T5843] usb 2-1: USB disconnect, device number 49 [ 578.915438][ T37] audit: type=1326 audit(1756964462.608:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20496 comm="syz.4.6858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36116ebe9 code=0x7fc00000 [ 578.915482][ T37] audit: type=1326 audit(1756964462.608:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20496 comm="syz.4.6858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb36116ebe9 code=0x7fc00000 [ 578.915515][ T37] audit: type=1326 audit(1756964462.608:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20496 comm="syz.4.6858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36116ebe9 code=0x7fc00000 [ 578.915548][ T37] audit: type=1326 audit(1756964462.608:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20496 comm="syz.4.6858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36116ebe9 code=0x7fc00000 [ 578.915580][ T37] audit: type=1326 audit(1756964462.608:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20496 comm="syz.4.6858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36116ebe9 code=0x7fc00000 [ 578.915611][ T37] audit: type=1326 audit(1756964462.608:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20496 comm="syz.4.6858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36116ebe9 code=0x7fc00000 [ 578.915645][ T37] audit: type=1326 audit(1756964462.608:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20496 comm="syz.4.6858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36116ebe9 code=0x7fc00000 [ 578.915681][ T37] audit: type=1326 audit(1756964462.608:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20496 comm="syz.4.6858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36116ebe9 code=0x7fc00000 [ 578.915715][ T37] audit: type=1326 audit(1756964462.608:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20496 comm="syz.4.6858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36116ebe9 code=0x7fc00000 [ 578.915751][ T37] audit: type=1326 audit(1756964462.608:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20496 comm="syz.4.6858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36116ebe9 code=0x7fc00000 [ 579.112725][ T9] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 579.295742][ T9] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.295773][ T9] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 579.295797][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 579.295828][ T9] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 579.295848][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.336216][ T9] usb 4-1: config 0 descriptor?? [ 579.853429][ T9] itetech 0003:06CB:73F6.002D: hidraw0: USB HID v0.01 Device [HID 06cb:73f6] on usb-dummy_hcd.3-1/input0 [ 580.002960][ T9] usb 4-1: USB disconnect, device number 56 [ 580.305476][ T6091] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 580.462809][ T6091] usb 3-1: Using ep0 maxpacket: 16 [ 580.464998][ T6091] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 580.465057][ T6091] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 580.465074][ T6091] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 580.465092][ T6091] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 580.465109][ T6091] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 580.465129][ T6091] usb 3-1: config 1 interface 0 has no altsetting 0 [ 580.465169][ T6091] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 580.465187][ T6091] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.486767][ T6091] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 580.807480][ T6091] ums-sddr09 3-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 580.835580][ T6091] usb 3-1: USB disconnect, device number 48 [ 581.362754][ T5843] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 581.515574][ T5843] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 581.515603][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.534473][ T5843] usb 2-1: config 0 descriptor?? [ 581.538281][ T5843] cp210x 2-1:0.0: cp210x converter detected [ 582.153900][ T5843] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 582.153933][ T5843] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 582.170360][ T5843] usb 2-1: cp210x converter now attached to ttyUSB0 [ 582.177548][ T5843] usb 2-1: USB disconnect, device number 50 [ 582.235076][ T5843] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 582.251291][ T5843] cp210x 2-1:0.0: device disconnected [ 582.920241][T20622] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 583.201540][ C1] ================================================================== [ 583.201563][ C1] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x695/0xa70 [ 583.201602][ C1] Write of size 8 at addr ffff88804ab171b0 by task ktimers/1/29 [ 583.201622][ C1] [ 583.201648][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 583.201674][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 583.201691][ C1] Call Trace: [ 583.201699][ C1] [ 583.201708][ C1] dump_stack_lvl+0x189/0x250 [ 583.201743][ C1] ? __kasan_check_byte+0x12/0x40 [ 583.201770][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 583.201797][ C1] ? lock_release+0x4b/0x3e0 [ 583.201827][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 583.201848][ C1] print_report+0xca/0x240 [ 583.201873][ C1] ? __xfrm_state_delete+0x695/0xa70 [ 583.201899][ C1] kasan_report+0x118/0x150 [ 583.201925][ C1] ? __xfrm_state_delete+0x695/0xa70 [ 583.201955][ C1] __xfrm_state_delete+0x695/0xa70 [ 583.201985][ C1] xfrm_timer_handler+0x18f/0xa00 [ 583.202016][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 583.202041][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 583.202069][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 583.202096][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 583.202122][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 583.202153][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 583.202178][ C1] __hrtimer_run_queues+0x54f/0xd40 [ 583.202216][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 583.202244][ C1] ? ktime_get_update_offsets_now+0x3ab/0x3d0 [ 583.202275][ C1] hrtimer_run_softirq+0x1a3/0x2e0 [ 583.202297][ C1] handle_softirqs+0x22f/0x710 [ 583.202325][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 583.202355][ C1] run_ktimerd+0xcf/0x190 [ 583.202381][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 583.202407][ C1] ? schedule+0x91/0x360 [ 583.202433][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 583.202458][ C1] smpboot_thread_fn+0x53f/0xa60 [ 583.202483][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 583.202516][ C1] kthread+0x70e/0x8a0 [ 583.202546][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 583.202568][ C1] ? __pfx_kthread+0x10/0x10 [ 583.202599][ C1] ? __pfx_kthread+0x10/0x10 [ 583.202627][ C1] ret_from_fork+0x3f9/0x770 [ 583.202653][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 583.202681][ C1] ? __switch_to_asm+0x39/0x70 [ 583.202700][ C1] ? __switch_to_asm+0x33/0x70 [ 583.202719][ C1] ? __pfx_kthread+0x10/0x10 [ 583.202748][ C1] ret_from_fork_asm+0x1a/0x30 [ 583.202774][ C1] [ 583.202781][ C1] [ 583.202786][ C1] Allocated by task 18835: [ 583.202797][ C1] kasan_save_track+0x3e/0x80 [ 583.202817][ C1] __kasan_slab_alloc+0x6c/0x80 [ 583.202838][ C1] kmem_cache_alloc_noprof+0x143/0x310 [ 583.202863][ C1] xfrm_state_alloc+0x24/0x2f0 [ 583.202885][ C1] __find_acq_core+0x8a7/0x1c00 [ 583.202911][ C1] xfrm_find_acq+0x8f/0xd0 [ 583.202936][ C1] xfrm_alloc_userspi+0x6b3/0xc90 [ 583.202955][ C1] xfrm_user_rcv_msg+0x7a0/0xab0 [ 583.202972][ C1] netlink_rcv_skb+0x208/0x470 [ 583.202993][ C1] xfrm_netlink_rcv+0x79/0x90 [ 583.203008][ C1] netlink_unicast+0x846/0xa10 [ 583.203025][ C1] netlink_sendmsg+0x805/0xb30 [ 583.203045][ C1] __sock_sendmsg+0x21c/0x270 [ 583.203062][ C1] ____sys_sendmsg+0x508/0x820 [ 583.203087][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 583.203111][ C1] __x64_sys_sendmsg+0x1a1/0x260 [ 583.203137][ C1] do_syscall_64+0xfa/0x3b0 [ 583.203162][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.203181][ C1] [ 583.203186][ C1] Freed by task 5928: [ 583.203195][ C1] kasan_save_track+0x3e/0x80 [ 583.203216][ C1] kasan_save_free_info+0x46/0x50 [ 583.203234][ C1] __kasan_slab_free+0x5b/0x80 [ 583.203255][ C1] kmem_cache_free+0x195/0x510 [ 583.203278][ C1] xfrm_state_gc_task+0x54e/0x6d0 [ 583.203297][ C1] process_scheduled_works+0xade/0x17b0 [ 583.203319][ C1] worker_thread+0x8a0/0xda0 [ 583.203341][ C1] kthread+0x70e/0x8a0 [ 583.203366][ C1] ret_from_fork+0x3f9/0x770 [ 583.203388][ C1] ret_from_fork_asm+0x1a/0x30 [ 583.203404][ C1] [ 583.203409][ C1] The buggy address belongs to the object at ffff88804ab17180 [ 583.203409][ C1] which belongs to the cache xfrm_state of size 992 [ 583.203428][ C1] The buggy address is located 48 bytes inside of [ 583.203428][ C1] freed 992-byte region [ffff88804ab17180, ffff88804ab17560) [ 583.203449][ C1] [ 583.203454][ C1] The buggy address belongs to the physical page: [ 583.203473][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804ab17180 pfn:0x4ab14 [ 583.203498][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 583.203521][ C1] flags: 0x80000000000040(head|node=0|zone=1) [ 583.203542][ C1] page_type: f5(slab) [ 583.203561][ C1] raw: 0080000000000040 ffff888144eb7780 dead000000000122 0000000000000000 [ 583.203579][ C1] raw: ffff88804ab17180 00000000800e0003 00000000f5000000 0000000000000000 [ 583.203598][ C1] head: 0080000000000040 ffff888144eb7780 dead000000000122 0000000000000000 [ 583.203616][ C1] head: ffff88804ab17180 00000000800e0003 00000000f5000000 0000000000000000 [ 583.203635][ C1] head: 0080000000000002 ffffea00012ac501 00000000ffffffff 00000000ffffffff [ 583.203653][ C1] head: 00000007ff328160 0000000000000000 00000000ffffffff 0000000000000004 [ 583.203664][ C1] page dumped because: kasan: bad access detected [ 583.203678][ C1] page_owner tracks the page as allocated [ 583.203686][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6786, tgid 6784 (syz.1.353), ts 133763111108, free_ts 132760744196 [ 583.203722][ C1] post_alloc_hook+0x240/0x2a0 [ 583.203748][ C1] get_page_from_freelist+0x2119/0x21b0 [ 583.203766][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 583.203785][ C1] alloc_pages_mpol+0xd1/0x380 [ 583.203808][ C1] allocate_slab+0x8a/0x370 [ 583.203825][ C1] ___slab_alloc+0x8d1/0xdd0 [ 583.203852][ C1] kmem_cache_alloc_noprof+0xe6/0x310 [ 583.203875][ C1] xfrm_state_alloc+0x24/0x2f0 [ 583.203897][ C1] xfrm_add_acquire+0xf7/0xb20 [ 583.203921][ C1] xfrm_user_rcv_msg+0x7a0/0xab0 [ 583.203937][ C1] netlink_rcv_skb+0x208/0x470 [ 583.203957][ C1] xfrm_netlink_rcv+0x79/0x90 [ 583.203974][ C1] netlink_unicast+0x846/0xa10 [ 583.203993][ C1] netlink_sendmsg+0x805/0xb30 [ 583.204014][ C1] __sock_sendmsg+0x21c/0x270 [ 583.204032][ C1] ____sys_sendmsg+0x508/0x820 [ 583.204056][ C1] page last free pid 6754 tgid 6753 stack trace: [ 583.204068][ C1] __free_frozen_pages+0xb59/0xce0 [ 583.204094][ C1] free_large_kmalloc+0x13a/0x1f0 [ 583.204119][ C1] sta_info_free+0x5b0/0x660 [ 583.204139][ C1] __sta_info_flush+0x5e4/0x710 [ 583.204162][ C1] ieee80211_ibss_disconnect+0x2c6/0x800 [ 583.204182][ C1] ieee80211_ibss_leave+0x47/0x150 [ 583.204201][ C1] cfg80211_leave_ibss+0x1e7/0x410 [ 583.204222][ C1] cfg80211_netdev_notifier_call+0x1b3/0x1450 [ 583.204249][ C1] notifier_call_chain+0x1b3/0x3e0 [ 583.204272][ C1] __dev_close_many+0x106/0x6f0 [ 583.204293][ C1] __dev_change_flags+0x2c7/0x6d0 [ 583.204316][ C1] netif_change_flags+0x88/0x1a0 [ 583.204339][ C1] do_setlink+0xc55/0x41c0 [ 583.204363][ C1] rtnl_newlink+0x160b/0x1c70 [ 583.204384][ C1] rtnetlink_rcv_msg+0x7cf/0xb70 [ 583.204404][ C1] netlink_rcv_skb+0x208/0x470 [ 583.204425][ C1] [ 583.204430][ C1] Memory state around the buggy address: [ 583.204441][ C1] ffff88804ab17080: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 583.204456][ C1] ffff88804ab17100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 583.204470][ C1] >ffff88804ab17180: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 583.204481][ C1] ^ [ 583.204491][ C1] ffff88804ab17200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 583.204506][ C1] ffff88804ab17280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 583.204526][ C1] ================================================================== [ 583.204588][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 583.204605][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 583.204631][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 583.204644][ C1] Call Trace: [ 583.204652][ C1] [ 583.204660][ C1] dump_stack_lvl+0x99/0x250 [ 583.204689][ C1] ? __asan_memcpy+0x40/0x70 [ 583.204710][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 583.204738][ C1] ? __pfx__printk+0x10/0x10 [ 583.204764][ C1] vpanic+0x281/0x750 [ 583.204793][ C1] ? __pfx_vpanic+0x10/0x10 [ 583.204817][ C1] ? irqentry_exit+0x74/0x90 [ 583.204843][ C1] panic+0xb9/0xc0 [ 583.204867][ C1] ? __pfx_panic+0x10/0x10 [ 583.204891][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 583.204917][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 583.204946][ C1] ? __xfrm_state_delete+0x695/0xa70 [ 583.204971][ C1] check_panic_on_warn+0x89/0xb0 [ 583.204990][ C1] ? __xfrm_state_delete+0x695/0xa70 [ 583.205016][ C1] end_report+0x78/0x160 [ 583.205040][ C1] kasan_report+0x129/0x150 [ 583.205066][ C1] ? __xfrm_state_delete+0x695/0xa70 [ 583.205094][ C1] __xfrm_state_delete+0x695/0xa70 [ 583.205123][ C1] xfrm_timer_handler+0x18f/0xa00 [ 583.205153][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 583.205177][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 583.205203][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 583.205229][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 583.205256][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 583.205286][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 583.205312][ C1] __hrtimer_run_queues+0x54f/0xd40 [ 583.205349][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 583.205376][ C1] ? ktime_get_update_offsets_now+0x3ab/0x3d0 [ 583.205413][ C1] hrtimer_run_softirq+0x1a3/0x2e0 [ 583.205434][ C1] handle_softirqs+0x22f/0x710 [ 583.205463][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 583.205493][ C1] run_ktimerd+0xcf/0x190 [ 583.205529][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 583.205555][ C1] ? schedule+0x91/0x360 [ 583.205581][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 583.205605][ C1] smpboot_thread_fn+0x53f/0xa60 [ 583.205629][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 583.205657][ C1] kthread+0x70e/0x8a0 [ 583.205687][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 583.205712][ C1] ? __pfx_kthread+0x10/0x10 [ 583.205741][ C1] ? __pfx_kthread+0x10/0x10 [ 583.205767][ C1] ret_from_fork+0x3f9/0x770 [ 583.205794][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 583.205822][ C1] ? __switch_to_asm+0x39/0x70 [ 583.205841][ C1] ? __switch_to_asm+0x33/0x70 [ 583.205857][ C1] ? __pfx_kthread+0x10/0x10 [ 583.205885][ C1] ret_from_fork_asm+0x1a/0x30 [ 583.205912][ C1] [ 583.206176][ C1] Kernel Offset: disabled