last executing test programs: 3m8.519570743s ago: executing program 3 (id=3089): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) 3m8.26610311s ago: executing program 3 (id=3095): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x123201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000200)=0x12) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8) 3m8.16217189s ago: executing program 3 (id=3096): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x18, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) 3m8.058548792s ago: executing program 3 (id=3098): r0 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000980)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x6, r0, 0x0, 0x0, 0x86, 0x0, 0x3}]) 3m7.92975904s ago: executing program 3 (id=3101): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r0, 0x6f000) 3m7.864037886s ago: executing program 3 (id=3103): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) getdents64(r0, 0x0, 0x0) 2m52.8058452s ago: executing program 32 (id=3103): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) getdents64(r0, 0x0, 0x0) 2m24.307745007s ago: executing program 1 (id=3588): syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x4600) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 2m24.157376708s ago: executing program 1 (id=3589): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x30}}}) 2m23.985860726s ago: executing program 1 (id=3591): unshare(0x20040600) r0 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r0, 0x21) 2m23.747123081s ago: executing program 1 (id=3593): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000000800)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x40054}, 0x4050884) 2m23.527814789s ago: executing program 1 (id=3595): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) 2m23.405909457s ago: executing program 1 (id=3597): r0 = syz_open_dev$media(&(0x7f00000006c0), 0x2c29, 0x28004) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) 2m8.340274851s ago: executing program 33 (id=3597): r0 = syz_open_dev$media(&(0x7f00000006c0), 0x2c29, 0x28004) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) 10.386791944s ago: executing program 0 (id=5596): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010029bd755a4366529f96c3000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 10.261591358s ago: executing program 0 (id=5598): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="20060600000014e55a3d09b9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.098167224s ago: executing program 0 (id=5645): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8004}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {0xa}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048880}, 0x24040884) 7.034204107s ago: executing program 0 (id=5647): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000eef76c20c80a01c3650d010203010902120001000010000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x24000024) 3.947270952s ago: executing program 0 (id=5674): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)={0x20, 0x23, 0x2, {0x2, 0xa}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x92, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b4") 2.50020763s ago: executing program 5 (id=5688): r0 = syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) ptrace(0x4207, r0) ptrace$pokeuser(0x6, r0, 0x1, 0x5) 2.431807713s ago: executing program 5 (id=5689): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x24, r2, 0x1, 0xfffffffe, 0x25dfdc02, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 2.385765963s ago: executing program 5 (id=5690): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x9, 0xffffffff, 'syz0\x00', 0x8}, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000005e0001"], 0x20}}, 0x0) 2.346054984s ago: executing program 5 (id=5691): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e9090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="90") 920.282225ms ago: executing program 0 (id=5700): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000300)={r1, 0x3, r0, 0xc87a, 0x80000}) 864.752138ms ago: executing program 4 (id=5702): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000e7080003"], 0x64}}, 0x0) 822.012524ms ago: executing program 4 (id=5703): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f0000000080)={{0x1, @empty, 0x2, 0x43, 'fo\x00', 0x2, 0x0, 0x3a}, {@private=0xa810101, 0x4, 0x0, 0x0, 0xba0, 0xdffffffe}}, 0x44) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000040)) 775.918722ms ago: executing program 4 (id=5704): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r1, 0x917, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r2}]}, 0x3c}, 0x1, 0x620b}, 0x0) 724.25188ms ago: executing program 4 (id=5705): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000020100c0"]) 616.2686ms ago: executing program 4 (id=5706): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, 0x0, 0x1, 0xfffffffd, 0x4, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4044890) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040200000000000000000000051000", 0x1e}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) 564.86079ms ago: executing program 4 (id=5707): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)={0x20, 0x23, 0x2, {0x2, 0xa}}, 0x0, &(0x7f00000003c0)={0x0, 0xf, 0x9d, {0x5, 0xf, 0x9d, 0x1, [@generic={0x98, 0x10, 0x0, "f9718307542fb682fc8dc353dafb902dea8c28b68ca4bb9b5f192a06ddbb66439842ff0c377f168fc9010f75757df70952bb7678639e0d9d615e391a747e50f95090ae0a63aff8c27505e1be875af4d425359843a63ca8ec39cae85608b86ec06a535bc656b71dc044959f1b8dad52ada54165c2d955e58d9a8f48fde9a94c8cb341d8d00c32e5bd565928dc294fb118849f480d47"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 518.183267ms ago: executing program 5 (id=5708): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@remote, 0x0, 0x2400, 0x4e21, 0x5, 0x2, 0x0, 0x20, 0x62}, {0x0, 0x0, 0x100000000000, 0x0, 0x1, 0x0, 0x3}, {0x7e3}, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x40002}, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) 452.340756ms ago: executing program 5 (id=5710): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) 421.892786ms ago: executing program 2 (id=5711): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) 351.51234ms ago: executing program 2 (id=5712): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000010c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001080)={&(0x7f0000000240)={0x14, 0x1, 0x5, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000831}, 0x10010) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4002000}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000019c0)={0x34, 0x0, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) 307.84046ms ago: executing program 2 (id=5713): add_key(0x0, 0x0, &(0x7f0000000180)="305c0605e182d1447a", 0x9, 0xfffffffffffffffe) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a", 0x2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xffffffffffffff02, 0x0) 255.891592ms ago: executing program 2 (id=5714): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14}}, 0x60}}, 0x24040880) 184.260741ms ago: executing program 2 (id=5715): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x0, 0x0, {0x54}, [@pci={{0x8}, {0x11}}]}, 0x30}}, 0x0) close(r0) 0s ago: executing program 2 (id=5716): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000002280)={'veth0_to_team\x00', @local}) kernel console output (not intermixed with test programs): 023][ T5891] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 332.079172][ T5891] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 332.100821][ T5891] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 332.131916][ T5891] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 332.197703][ T5921] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 332.293490][ T5891] usb 5-1: USB disconnect, device number 7 [ 332.309289][ T5891] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 332.342929][ T5891] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 332.365492][ T5891] visor 5-1:1.0: device disconnected [ 332.377738][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 332.400892][ T5921] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.437885][ T5921] usb 3-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5 [ 332.457402][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.481799][ T5921] usb 3-1: config 0 descriptor?? [ 332.513804][ T5921] uvcvideo 3-1:0.0: probe with driver uvcvideo failed with error -22 [ 332.722030][ T24] usb 3-1: USB disconnect, device number 59 [ 333.458022][ T1210] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 333.620205][ T1210] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 333.645411][ T1210] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 333.665874][ T1210] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 333.689137][ T1210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.720231][T14117] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 333.745581][ T1210] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 334.079939][ T1210] usb 5-1: USB disconnect, device number 8 [ 334.758959][T14131] devpts: Bad value for 'max' [ 335.405083][T14145] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3648'. [ 335.939048][ T1210] hid-generic 0006:0004:0009.008A: unknown main item tag 0x0 [ 335.953474][ T1210] hid-generic 0006:0004:0009.008A: unknown main item tag 0x0 [ 335.962073][ T1210] hid-generic 0006:0004:0009.008A: unknown main item tag 0x0 [ 335.970071][ T1210] hid-generic 0006:0004:0009.008A: unknown main item tag 0x0 [ 335.983345][ T1210] hid-generic 0006:0004:0009.008A: unknown main item tag 0x0 [ 335.991446][ T1210] hid-generic 0006:0004:0009.008A: unknown main item tag 0x0 [ 335.999359][ T1210] hid-generic 0006:0004:0009.008A: unknown main item tag 0x0 [ 336.007091][ T1210] hid-generic 0006:0004:0009.008A: unknown main item tag 0x0 [ 336.015129][ T1210] hid-generic 0006:0004:0009.008A: unknown main item tag 0x0 [ 336.025579][ T1210] hid-generic 0006:0004:0009.008A: unknown main item tag 0x0 [ 336.047742][ T1210] hid-generic 0006:0004:0009.008A: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 336.123575][T14158] fido_id[14158]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 336.920441][T14177] usb usb8: usbfs: process 14177 (syz.4.3664) did not claim interface 0 before use [ 337.249700][T14190] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3669'. [ 337.506734][T14202] netlink: 'syz.2.3675': attribute type 12 has an invalid length. [ 337.528150][T14202] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3675'. [ 337.678154][T14208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3677'. [ 337.857804][ T1543] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 338.043036][ T1543] usb 5-1: Using ep0 maxpacket: 32 [ 338.057295][ T1543] usb 5-1: config 0 interface 0 has no altsetting 0 [ 338.069172][ T1543] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 338.084017][ T1543] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.092424][ T1543] usb 5-1: Product: syz [ 338.096649][ T1543] usb 5-1: Manufacturer: syz [ 338.102341][ T1543] usb 5-1: SerialNumber: syz [ 338.137054][ T1543] usb 5-1: config 0 descriptor?? [ 338.161384][ T1543] gs_usb 5-1:0.0: Required endpoints not found [ 338.380926][ T1543] usb 5-1: USB disconnect, device number 9 [ 338.771182][T14232] netlink: 'syz.0.3688': attribute type 29 has an invalid length. [ 338.782125][T14232] netlink: 'syz.0.3688': attribute type 29 has an invalid length. [ 339.964745][T14270] xt_l2tp: missing protocol rule (udp|l2tpip) [ 339.982271][T14272] netlink: 'syz.0.3707': attribute type 6 has an invalid length. [ 339.993867][T14272] netlink: 'syz.0.3707': attribute type 6 has an invalid length. [ 340.747322][T14294] netlink: 'syz.4.3719': attribute type 39 has an invalid length. [ 340.935272][T14298] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3721'. [ 340.945171][T14298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3721'. [ 341.139543][T14302] Dead loop on virtual device ip6_vti0, fix it urgently! [ 341.541832][T14312] xt_l2tp: v2 tid > 0xffff: 37482740 [ 341.957989][ T5828] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 341.964719][ T5839] Bluetooth: hci0: command 0x1003 tx timeout [ 342.441177][ T5891] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 342.601043][ T5891] usb 5-1: unable to get BOS descriptor or descriptor too short [ 342.619142][ T5891] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 342.645689][ T5891] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 342.665365][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.685634][ T5891] usb 5-1: Product: syz [ 342.695777][ T5891] usb 5-1: Manufacturer: syz [ 342.705900][ T5891] usb 5-1: SerialNumber: syz [ 343.577734][ T5891] usb 5-1: reset high-speed USB device number 10 using dummy_hcd [ 343.809992][ T5891] usb 5-1: device firmware changed [ 343.840733][ T5891] usb 5-1: USB disconnect, device number 10 [ 343.896905][ T5828] Bluetooth: hci2: unexpected event for opcode 0x0c26 [ 343.987275][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 344.000339][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 344.018274][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 344.026662][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 344.036182][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 344.043442][ T5891] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 344.200411][ T5891] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 344.219958][ T5891] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 344.230818][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.243713][ T5891] usb 5-1: Product: syz [ 344.248532][ T5891] usb 5-1: Manufacturer: syz [ 344.253179][ T5891] usb 5-1: SerialNumber: syz [ 344.263508][ T3453] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.433714][ T3453] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.509338][T14374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3758'. [ 344.626360][ T3453] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.746143][ T3453] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.810417][T14360] chnl_net:caif_netlink_parms(): no params data found [ 344.926003][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 344.926025][ T30] audit: type=1326 audit(1759814022.684:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14391 comm="syz.0.3766" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7983b8eec9 code=0x0 [ 344.954158][ C1] vkms_vblank_simulate: vblank timer overrun [ 345.131757][T14360] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.143971][T14360] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.159154][T14360] bridge_slave_0: entered allmulticast mode [ 345.168284][T14360] bridge_slave_0: entered promiscuous mode [ 345.203306][T14360] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.223052][T14360] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.231088][T14360] bridge_slave_1: entered allmulticast mode [ 345.240607][T14360] bridge_slave_1: entered promiscuous mode [ 345.275172][ T5891] usb 5-1: USB disconnect, device number 11 [ 345.316711][ T3453] bridge_slave_1: left allmulticast mode [ 345.322903][ T3453] bridge_slave_1: left promiscuous mode [ 345.340808][ T3453] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.356998][ T3453] bridge_slave_0: left allmulticast mode [ 345.372281][ T3453] bridge_slave_0: left promiscuous mode [ 345.382260][ T3453] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.474664][T14410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3773'. [ 345.777770][ T5893] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 345.939691][ T5893] usb 5-1: config 0 interface 0 has no altsetting 0 [ 345.946963][ T5893] usb 5-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 345.958925][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.974418][ T5893] usb 5-1: config 0 descriptor?? [ 346.058672][ T3453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.070462][ T3453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.081164][ T3453] bond0 (unregistering): Released all slaves [ 346.103047][T14360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.112482][ T5828] Bluetooth: hci0: command tx timeout [ 346.131735][T14360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.224614][T14360] team0: Port device team_slave_0 added [ 346.269090][T14360] team0: Port device team_slave_1 added [ 346.401113][T14360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.408775][T14360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.435608][ T5893] sigmamicro 0003:1C4F:0059.008B: item fetching failed at offset 0/3 [ 346.436444][ T5893] sigmamicro 0003:1C4F:0059.008B: probe with driver sigmamicro failed with error -22 [ 346.469667][T14360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.501731][T14360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.516473][T14360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.542537][ C1] vkms_vblank_simulate: vblank timer overrun [ 346.552563][T14360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.585923][ T3453] hsr_slave_0: left promiscuous mode [ 346.592797][ T3453] hsr_slave_1: left promiscuous mode [ 346.600128][ T3453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.608038][ T3453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.616756][ T3453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.624119][ T5893] usb 5-1: USB disconnect, device number 12 [ 346.626966][ T3453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.675294][ T3453] veth1_macvtap: left promiscuous mode [ 346.686204][ T3453] veth0_macvtap: left promiscuous mode [ 346.694967][ T3453] veth1_vlan: left promiscuous mode [ 346.700770][ T3453] veth0_vlan: left promiscuous mode [ 346.951830][ T3453] pim6reg9 (unregistering): left allmulticast mode [ 347.552263][ T3453] team0 (unregistering): Port device team_slave_1 removed [ 347.601333][ T3453] team0 (unregistering): Port device team_slave_0 removed [ 347.608984][ T1543] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 347.784574][ T1543] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 347.794319][ T1543] usb 5-1: config 0 has no interface number 0 [ 347.801621][ T1543] usb 5-1: config 0 interface 41 has no altsetting 0 [ 347.810851][ T1543] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 347.820210][ T1543] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.828402][ T1543] usb 5-1: Product: syz [ 347.832623][ T1543] usb 5-1: Manufacturer: syz [ 347.837350][ T1543] usb 5-1: SerialNumber: syz [ 347.845694][ T1543] usb 5-1: config 0 descriptor?? [ 348.191907][ T5828] Bluetooth: hci0: command tx timeout [ 348.312313][T14360] hsr_slave_0: entered promiscuous mode [ 348.324852][T14360] hsr_slave_1: entered promiscuous mode [ 348.333261][T14360] debugfs: 'hsr0' already exists in 'hsr' [ 348.342954][T14360] Cannot create hsr debugfs directory [ 348.476070][ T1543] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 348.507912][ T1543] usb 5-1: USB disconnect, device number 13 [ 348.675657][ T3453] IPVS: stop unused estimator thread 0... [ 348.837692][ T9] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 348.865330][T14360] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 348.882391][T14360] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 348.910478][T14360] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 348.940330][T14360] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 349.007166][T14473] ieee802154 phy0 wpan0: encryption failed: -126 [ 349.014308][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 349.035596][ T9] usb 3-1: config 0 has an invalid interface number: 217 but max is 0 [ 349.061622][ T9] usb 3-1: config 0 has no interface number 0 [ 349.099664][ T9] usb 3-1: config 0 interface 217 has no altsetting 0 [ 349.136891][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=651f, bcdDevice=26.93 [ 349.177781][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.186260][ T9] usb 3-1: Product: syz [ 349.215052][ T9] usb 3-1: Manufacturer: syz [ 349.223738][ T9] usb 3-1: SerialNumber: syz [ 349.249210][ T9] usb 3-1: config 0 descriptor?? [ 349.319107][T14360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.396116][T14360] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.408839][T14485] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 349.423208][T14485] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 349.432780][ T3453] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.440230][ T3453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.449530][T14485] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 349.469960][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.477273][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.481871][ T9] em28xx 3-1:0.217: New device syz syz @ 480 Mbps (2040:651f, interface 217, class 217) [ 349.514968][T14485] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 349.522782][ T9] em28xx 3-1:0.217: Video interface 217 found: bulk [ 349.539159][T14485] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 349.545727][T14485] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 349.553160][T14485] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 349.572171][T14485] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 349.592155][T14485] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 349.610992][ T9] em28xx 3-1:0.217: unknown em28xx chip ID (0) [ 349.614345][T14485] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 349.637289][T14485] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 349.652560][T14485] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 349.715613][ T9] em28xx 3-1:0.217: reading from i2c device at 0xa0 failed (error=-5) [ 349.740202][ T9] em28xx 3-1:0.217: board has no eeprom [ 349.828217][ T9] em28xx 3-1:0.217: Identified as Hauppauge WinTV HVR 850 (card=60) [ 349.836647][ T9] em28xx 3-1:0.217: analog set to bulk mode. [ 349.870762][ T5891] em28xx 3-1:0.217: Registering V4L2 extension [ 349.901739][ T9] usb 3-1: USB disconnect, device number 60 [ 349.919100][ T9] em28xx 3-1:0.217: Disconnecting em28xx [ 350.070974][T14508] overlayfs: failed to resolve './file0': -2 [ 350.152539][ T5891] em28xx 3-1:0.217: Config register raw data: 0xffffffed [ 350.179944][ T5891] em28xx 3-1:0.217: AC97 chip type couldn't be determined [ 350.221294][ T5891] em28xx 3-1:0.217: No AC97 audio processor [ 350.227287][ T5891] em28xx 3-1:0.217: em28xx_v4l2_init: Error while setting audio - error [-19]! [ 350.256773][T14360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.264726][ T5891] em28xx 3-1:0.217: Binding DVB extension [ 350.276152][ T5828] Bluetooth: hci0: command tx timeout [ 350.286101][T14513] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3800'. [ 350.299757][ T5891] em28xx 3-1:0.217: no endpoint for DVB mode and transfer type 0 [ 350.308181][ T5891] em28xx 3-1:0.217: failed to pre-allocate USB transfer buffers for DVB. [ 350.320091][T14513] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3800'. [ 350.336123][T14515] netlink: 'syz.4.3801': attribute type 27 has an invalid length. [ 350.337855][ T5891] em28xx 3-1:0.217: Registering input extension [ 350.358072][ T9] em28xx 3-1:0.217: Closing input extension [ 350.382574][ T9] em28xx 3-1:0.217: Freeing device [ 350.922739][T14360] veth0_vlan: entered promiscuous mode [ 350.980291][T14360] veth1_vlan: entered promiscuous mode [ 351.082916][T14360] veth0_macvtap: entered promiscuous mode [ 351.123579][T14360] veth1_macvtap: entered promiscuous mode [ 351.158860][T14360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.176843][T14360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.218546][ T3453] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.268943][ T3453] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.307662][ T3453] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.316705][ T3453] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.436002][ T3453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.477713][ T3453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.536179][ T3453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.565402][ T3453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.686505][T14566] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3819'. [ 351.692812][T14571] program syz.4.3820 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 351.953421][T14583] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3822'. [ 351.984512][T14580] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3822'. [ 352.013356][T14587] [U]  [ 352.354474][ T5828] Bluetooth: hci0: command tx timeout [ 352.557689][ T1543] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 352.738394][ T1543] usb 6-1: Using ep0 maxpacket: 16 [ 352.748552][ T1543] usb 6-1: config 0 has an invalid interface number: 48 but max is 0 [ 352.756707][ T1543] usb 6-1: config 0 has no interface number 0 [ 352.784073][ T1543] usb 6-1: config 0 interface 48 has no altsetting 0 [ 352.798140][ T1543] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 352.811263][ T1543] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.840115][ T1543] usb 6-1: Product: syz [ 352.844365][ T1543] usb 6-1: Manufacturer: syz [ 352.862447][ T1543] usb 6-1: SerialNumber: syz [ 352.882698][ T1543] usb 6-1: config 0 descriptor?? [ 353.129989][T14601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.157278][T14601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.178520][ T5828] Bluetooth: hci0: Unknown advertising packet type: 0x35 [ 353.178591][ T5828] Bluetooth: hci0: adv larger than maximum supported [ 353.182347][ T5893] usb 6-1: USB disconnect, device number 2 [ 353.187293][ T5828] Bluetooth: hci0: Malformed LE Event: 0x0d [ 353.478662][T14653] ptrace attach of "./syz-executor exec"[13093] was attempted by ""[14653] [ 353.606560][T14659] CUSE: info not properly terminated [ 353.898904][T14675] netlink: 'syz.2.3861': attribute type 10 has an invalid length. [ 353.914991][T14675] lo: entered promiscuous mode [ 353.951213][T14675] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 354.488513][ T1210] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 354.659586][ T1210] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 354.672550][ T1210] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.696726][ T1210] usb 5-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 354.723339][ T1210] usb 5-1: config 0 interface 0 has no altsetting 0 [ 354.730303][ T1210] usb 5-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 354.739749][ T1210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.765465][ T1210] usb 5-1: config 0 descriptor?? [ 355.066953][T14726] raw_sendmsg: syz.2.3885 forgot to set AF_INET. Fix it! [ 355.209980][ T1210] kye 0003:0458:501B.008C: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 355.248139][ T1210] kye 0003:0458:501B.008C: hidraw0: USB HID v0.02 Device [HID 0458:501b] on usb-dummy_hcd.4-1/input0 [ 355.271888][ T1210] kye 0003:0458:501B.008C: tablet-enabling feature report not found [ 355.286942][ T1210] kye 0003:0458:501B.008C: tablet enabling failed [ 355.356836][T14737] netlink: 'syz.2.3890': attribute type 1 has an invalid length. [ 355.365808][T14737] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.3890'. [ 355.415671][ T9] usb 5-1: USB disconnect, device number 14 [ 355.517725][ T5893] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 355.677790][ T5893] usb 6-1: Using ep0 maxpacket: 8 [ 355.684802][ T5893] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 355.693806][ T5893] usb 6-1: config 179 has no interface number 0 [ 355.701457][ T5893] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 355.719522][ T5893] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 355.732899][ T5893] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 355.747542][ T5893] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 355.762972][ T5893] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 355.777355][ T5893] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 355.788741][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.804649][T14734] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 355.844615][T14746] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3894'. [ 355.853951][T14746] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3894'. [ 355.927122][T14748] F2FS-fs: Conflicting test_dummy_encryption options [ 356.112902][ T5893] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input45 [ 356.286750][ T1543] usb 6-1: USB disconnect, device number 3 [ 356.286795][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 356.302989][ C1] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 357.259841][T14787] netlink: 328 bytes leftover after parsing attributes in process `syz.2.3913'. [ 357.287759][ T5893] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 357.393266][ T1210] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 357.476807][ T5893] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 357.499319][ T5893] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 357.511165][ T5893] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 357.522871][ T5893] usb 5-1: config 220 has no interface number 2 [ 357.529792][ T5893] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 357.543426][ T5893] usb 5-1: config 220 interface 0 has no altsetting 0 [ 357.555689][ T5893] usb 5-1: config 220 interface 76 has no altsetting 0 [ 357.563287][ T5893] usb 5-1: config 220 interface 1 has no altsetting 0 [ 357.572563][ T1210] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.594406][ T1210] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 357.606089][ T5893] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 357.616320][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.628134][ T1210] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 357.637235][ T1210] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.646232][ T5893] usb 5-1: Product: syz [ 357.650913][ T5893] usb 5-1: Manufacturer: syz [ 357.656082][ T5893] usb 5-1: SerialNumber: syz [ 357.665445][ T1210] usb 6-1: Product: syz [ 357.669981][ T1210] usb 6-1: Manufacturer: syz [ 357.674657][ T1210] usb 6-1: SerialNumber: syz [ 357.925821][ T5893] usb 5-1: selecting invalid altsetting 0 [ 357.948295][ T5893] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 357.960192][ T5893] uvcvideo 5-1:220.0: No valid video chain found. [ 357.990136][ T5893] usb 5-1: selecting invalid altsetting 0 [ 358.005812][ T5893] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 358.031458][ T5893] usb 5-1: USB disconnect, device number 15 [ 358.118130][ T1210] usb 6-1: cannot find UAC_HEADER [ 358.160877][ T1210] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 358.211411][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 358.237751][ T5921] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 358.342479][ T5893] usb 6-1: USB disconnect, device number 4 [ 358.398658][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 358.407781][ T5921] usb 3-1: unable to get BOS descriptor or descriptor too short [ 358.416883][ T5921] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 358.425551][ T5921] usb 3-1: config 4 has no interface number 0 [ 358.436086][ T5921] usb 3-1: config 4 interface 30 has no altsetting 0 [ 358.446352][ T5921] usb 3-1: string descriptor 0 read error: -22 [ 358.454446][ T5921] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 358.464403][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.488795][ T5921] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 358.496024][ T5921] dw2102: su3000_power_ctrl: 1, initialized 0 [ 358.503361][ T5921] dvb-usb: bulk message failed: -22 (2/0) [ 358.517266][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 358.529228][ T5921] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 358.539366][ T5921] usb 3-1: media controller created [ 358.545119][ T5921] dvb-usb: bulk message failed: -22 (6/0) [ 358.551233][ T5921] dw2102: i2c transfer failed. [ 358.556109][ T5921] dvb-usb: bulk message failed: -22 (6/0) [ 358.562528][ T5921] dw2102: i2c transfer failed. [ 358.567407][ T5921] dvb-usb: bulk message failed: -22 (6/0) [ 358.573684][ T5921] dw2102: i2c transfer failed. [ 358.579134][ T5921] dvb-usb: bulk message failed: -22 (6/0) [ 358.584919][ T5921] dw2102: i2c transfer failed. [ 358.590600][ T5921] dvb-usb: bulk message failed: -22 (6/0) [ 358.596407][ T5921] dw2102: i2c transfer failed. [ 358.601680][ T5921] dvb-usb: bulk message failed: -22 (6/0) [ 358.609723][ T5921] dw2102: i2c transfer failed. [ 358.614566][ T5921] dvb-usb: MAC address: 02:02:02:02:02:02 [ 358.645974][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 358.673839][ T5921] dvb-usb: bulk message failed: -22 (3/0) [ 358.694053][ T5921] dw2102: command 0x0e transfer failed. [ 358.701730][ T5921] dvb-usb: bulk message failed: -22 (3/0) [ 358.707814][ T5921] dw2102: command 0x0e transfer failed. [ 358.947841][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 359.027721][ T5921] dvb-usb: bulk message failed: -22 (3/0) [ 359.041010][ T5921] dw2102: command 0x0e transfer failed. [ 359.046791][ T5921] dvb-usb: bulk message failed: -22 (3/0) [ 359.054029][ T5921] dw2102: command 0x0e transfer failed. [ 359.059961][ T5921] dvb-usb: bulk message failed: -22 (1/0) [ 359.065914][ T5921] dw2102: command 0x51 transfer failed. [ 359.072583][ T5921] dvb-usb: bulk message failed: -22 (5/0) [ 359.078776][ T5921] dw2102: i2c probe for address 0x68 failed. [ 359.084820][ T5921] dvb-usb: bulk message failed: -22 (5/0) [ 359.090898][ T5921] dw2102: i2c probe for address 0x69 failed. [ 359.096930][ T5921] dvb-usb: bulk message failed: -22 (5/0) [ 359.107239][ T5921] dw2102: i2c probe for address 0x6a failed. [ 359.113469][ T5921] dw2102: probing for demodulator failed. Is the external power switched on? [ 359.123912][T14813] dw2102: i2c wr: len=66 is too big! [ 359.123912][T14813] [ 359.127703][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 359.140247][ T5921] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 359.162205][ T9] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 359.186707][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 359.194220][ T9] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 359.204943][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.226527][ T9] usb 5-1: config 0 descriptor?? [ 359.277735][ T5921] rc_core: IR keymap rc-tt-1500 not found [ 359.283579][ T5921] Registered IR keymap rc-empty [ 359.307254][ T5921] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 359.332863][ T5921] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input46 [ 359.350701][ T5921] dvb-usb: schedule remote query interval to 250 msecs. [ 359.368734][ T5921] dw2102: su3000_power_ctrl: 0, initialized 1 [ 359.374881][ T5921] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 359.411714][ T5921] usb 3-1: USB disconnect, device number 61 [ 359.512155][ T5921] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 359.665602][ T9] hid_parser_main: 7 callbacks suppressed [ 359.665632][ T9] uclogic 0003:5543:0042.008D: unknown main item tag 0x0 [ 359.679243][ T9] uclogic 0003:5543:0042.008D: unknown main item tag 0x0 [ 359.686356][ T9] uclogic 0003:5543:0042.008D: unknown main item tag 0x0 [ 359.693678][ T9] uclogic 0003:5543:0042.008D: unknown main item tag 0x0 [ 359.700836][ T9] uclogic 0003:5543:0042.008D: unknown main item tag 0x0 [ 359.710588][ T9] uclogic 0003:5543:0042.008D: hidraw0: USB HID v0.07 Device [HID 5543:0042] on usb-dummy_hcd.4-1/input0 [ 359.737837][ T5891] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 359.876695][ T9] usb 5-1: USB disconnect, device number 16 [ 359.934291][ T5891] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 359.946885][ T5891] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 359.959331][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 12336, setting to 64 [ 359.970824][ T5891] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 359.986921][ T5891] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 359.996662][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.005014][ T5891] usb 6-1: Product: syz [ 360.012027][ T5891] usb 6-1: Manufacturer: syz [ 360.016688][ T5891] usb 6-1: SerialNumber: syz [ 360.025314][ T5891] usb 6-1: config 0 descriptor?? [ 360.056889][ T5891] input: KB Gear Tablet as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input47 [ 360.156326][ C0] kbtab 6-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 360.255948][ T5878] usb 6-1: USB disconnect, device number 5 [ 361.109240][ T5878] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 361.262576][T14882] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3957'. [ 361.279657][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.292317][ T5878] usb 5-1: New USB device found, idVendor=046d, idProduct=c08a, bcdDevice= 0.00 [ 361.301914][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.333643][ T5878] usb 5-1: config 0 descriptor?? [ 361.794713][ T5878] logitech-hidpp-device 0003:046D:C08A.008E: item fetching failed at offset 5/7 [ 361.814509][ T5878] logitech-hidpp-device 0003:046D:C08A.008E: hidpp_probe:parse failed [ 361.837981][ T5878] logitech-hidpp-device 0003:046D:C08A.008E: probe with driver logitech-hidpp-device failed with error -22 [ 362.001989][ T5891] usb 5-1: USB disconnect, device number 17 [ 362.115281][T14914] sp0: Synchronizing with TNC [ 362.434988][T14930] sp0: Synchronizing with TNC [ 362.748392][ T30] audit: type=1800 audit(1759814040.504:61): pid=14947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3988" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 363.104564][T14965] netlink: 'syz.2.3995': attribute type 58 has an invalid length. [ 363.606771][T14988] IPv6: NLM_F_CREATE should be specified when creating new route [ 363.657915][T14988] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 363.665663][T14988] IPv6: NLM_F_CREATE should be set when creating new route [ 363.673398][T14988] IPv6: NLM_F_CREATE should be set when creating new route [ 364.163396][T15016] netlink: 184 bytes leftover after parsing attributes in process `syz.5.4015'. [ 364.473469][T15033] netlink: 1268 bytes leftover after parsing attributes in process `syz.2.4021'. [ 364.507379][T15033] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 365.298832][T15074] overlayfs: workdir and upperdir must be separate subtrees [ 365.481823][T15087] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 365.518846][T15087] overlayfs: missing 'lowerdir' [ 366.240011][T15118] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 366.687714][ T5921] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 366.847663][ T5921] usb 6-1: Using ep0 maxpacket: 8 [ 366.859780][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.883109][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.912127][ T5921] usb 6-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 366.932696][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.967033][ T5921] usb 6-1: config 0 descriptor?? [ 366.972636][T15150] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.4061'. [ 367.295930][T15163] Bluetooth: MGMT ver 1.23 [ 367.410974][ T5921] cherry 0003:046A:0027.008F: unknown main item tag 0x0 [ 367.427687][ T5921] cherry 0003:046A:0027.008F: unknown main item tag 0x0 [ 367.448071][T15171] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4068'. [ 367.457743][ T5921] cherry 0003:046A:0027.008F: unknown main item tag 0x0 [ 367.464802][ T5921] cherry 0003:046A:0027.008F: unknown main item tag 0x0 [ 367.483060][ T5921] cherry 0003:046A:0027.008F: unknown main item tag 0x0 [ 367.493183][ T5921] cherry 0003:046A:0027.008F: unknown main item tag 0x0 [ 367.508708][ T5921] cherry 0003:046A:0027.008F: unknown main item tag 0x0 [ 367.526938][ T5921] cherry 0003:046A:0027.008F: unknown main item tag 0x0 [ 367.550178][ T5921] cherry 0003:046A:0027.008F: unknown main item tag 0x0 [ 367.566186][ T5921] cherry 0003:046A:0027.008F: unknown main item tag 0x0 [ 367.602969][ T5921] cherry 0003:046A:0027.008F: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.5-1/input0 [ 367.640793][ T5921] usb 6-1: USB disconnect, device number 6 [ 367.776827][T15175] fido_id[15175]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 367.915513][T15183] netlink: 'syz.4.4072': attribute type 10 has an invalid length. [ 367.955053][T15183] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4072'. [ 367.970653][T15183] batman_adv: batadv0: Adding interface: virt_wifi0 [ 367.977721][T15183] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.003397][ C1] vkms_vblank_simulate: vblank timer overrun [ 368.011264][T15183] batman_adv: batadv0: Interface activated: virt_wifi0 [ 368.260855][T15195] devtmpfs: Cannot enable quota on remount [ 369.295176][T15248] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4104'. [ 369.860820][T15279] netlink: 'syz.5.4119': attribute type 29 has an invalid length. [ 369.880618][T15279] netlink: 'syz.5.4119': attribute type 29 has an invalid length. [ 370.208576][ T5921] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 370.337693][ T5891] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 370.380370][ T5921] usb 6-1: config 0 interface 0 altsetting 243 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 370.394628][ T5921] usb 6-1: config 0 interface 0 altsetting 243 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 370.408214][ T5921] usb 6-1: config 0 interface 0 has no altsetting 0 [ 370.415375][ T5921] usb 6-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 370.425374][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.433890][ T5893] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 370.446248][ T5921] usb 6-1: config 0 descriptor?? [ 370.497901][ T5891] usb 5-1: Using ep0 maxpacket: 16 [ 370.505140][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 370.527712][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.537704][ T5891] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 370.537766][ T5891] usb 5-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 370.537792][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.548637][ T5891] usb 5-1: config 0 descriptor?? [ 370.598973][ T5893] usb 3-1: Using ep0 maxpacket: 32 [ 370.607001][ T5893] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 370.619887][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.639231][ T5893] usb 3-1: config 0 descriptor?? [ 370.655991][ T5893] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 370.889174][ T5921] lg-g15 0003:046D:0A07.0090: hidraw0: USB HID v2.09 Device [HID 046d:0a07] on usb-dummy_hcd.5-1/input0 [ 371.012049][ T5891] aquacomputer_d5next 0003:0C70:F011.0091: hidraw1: USB HID v0.00 Device [HID 0c70:f011] on usb-dummy_hcd.4-1/input0 [ 371.083302][ T5878] usb 6-1: USB disconnect, device number 7 [ 371.204794][ T5891] usb 5-1: USB disconnect, device number 18 [ 371.252154][ T5893] gspca_vc032x: reg_w err -71 [ 371.265919][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 371.276482][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 371.287371][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 371.297086][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 371.306836][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 371.313560][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 371.319861][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 371.325204][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 371.333312][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 371.339030][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 371.344371][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 371.351193][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 371.356997][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 371.363355][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 371.369751][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 371.375095][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 371.382291][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 371.389194][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 371.394623][ T5893] gspca_vc032x: Unknown sensor... [ 371.400310][ T5893] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 371.418736][ T5893] usb 3-1: USB disconnect, device number 62 [ 371.449577][T15320] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 371.456085][T15320] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 371.463345][T15320] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 371.470413][T15320] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 371.477065][T15320] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 371.484102][T15320] comedi comedi3: 8255: I/O port conflict (0x12,4) [ 371.490864][T15320] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 371.497417][T15320] comedi comedi3: 8255: I/O port conflict (0x81,4) [ 371.504131][T15320] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 371.513976][T15320] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 371.520948][T15320] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 371.528887][T15320] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 371.535373][T15320] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 371.542002][T15320] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 371.548672][T15320] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 371.555596][T15320] comedi comedi3: 8255: I/O port conflict (0x400009,4) [ 371.562840][T15320] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 371.569373][T15320] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 371.575892][T15320] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 371.987770][ T5893] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 372.037942][ T5878] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 372.137739][ T5893] usb 6-1: Using ep0 maxpacket: 16 [ 372.144776][ T5893] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.156539][ T5893] usb 6-1: config 0 interface 0 has no altsetting 0 [ 372.166524][ T5893] usb 6-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 372.171873][T15344] tipc: Started in network mode [ 372.176423][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.181436][T15344] tipc: Node identity ff120000000000000000000000000001, cluster identity 4711 [ 372.198342][T15344] tipc: Enabling of bearer rejected, failed to enable media [ 372.207011][ T5878] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.223123][ T5878] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 372.236661][ T5893] usb 6-1: config 0 descriptor?? [ 372.242145][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.258713][ T5878] usb 5-1: config 0 descriptor?? [ 372.282036][ T5878] pwc: Askey VC010 type 2 USB webcam detected. [ 372.292553][T15346] netlink: 'syz.2.4151': attribute type 10 has an invalid length. [ 372.300598][T15346] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4151'. [ 372.587857][ T5921] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 372.664258][ T5893] hid_parser_main: 59 callbacks suppressed [ 372.664284][ T5893] kye 0003:0458:0153.0092: unknown main item tag 0x0 [ 372.677221][ T5893] kye 0003:0458:0153.0092: unknown main item tag 0x0 [ 372.684158][ T5893] kye 0003:0458:0153.0092: unknown main item tag 0x0 [ 372.691182][ T5893] kye 0003:0458:0153.0092: unknown main item tag 0x0 [ 372.699007][ T5893] kye 0003:0458:0153.0092: unknown main item tag 0x0 [ 372.711301][ T5893] kye 0003:0458:0153.0092: hidraw0: USB HID v0.05 Device [HID 0458:0153] on usb-dummy_hcd.5-1/input0 [ 372.738922][ T5921] usb 3-1: Using ep0 maxpacket: 16 [ 372.747427][ T5921] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 372.757208][ T5921] usb 3-1: config 0 has no interface number 0 [ 372.764426][ T5921] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.788514][ T5921] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.800149][ T5921] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 372.809797][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.827949][ T5921] usb 3-1: config 0 descriptor?? [ 372.873862][ T5871] usb 6-1: USB disconnect, device number 8 [ 372.891912][ T5878] pwc: recv_control_msg error -71 req 02 val 2700 [ 372.902350][ T5878] pwc: recv_control_msg error -71 req 02 val 2c00 [ 372.910113][ T5878] pwc: recv_control_msg error -71 req 04 val 1000 [ 372.917181][ T5878] pwc: recv_control_msg error -71 req 04 val 1300 [ 372.925892][ T5878] pwc: recv_control_msg error -71 req 04 val 1400 [ 372.933100][ T5878] pwc: recv_control_msg error -71 req 02 val 2000 [ 372.940581][ T5878] pwc: recv_control_msg error -71 req 02 val 2100 [ 372.949349][ T5878] pwc: recv_control_msg error -71 req 04 val 1500 [ 372.956283][ T5878] pwc: recv_control_msg error -71 req 02 val 2500 [ 372.963524][ T5878] pwc: recv_control_msg error -71 req 02 val 2400 [ 372.970744][ T5878] pwc: recv_control_msg error -71 req 02 val 2600 [ 372.977784][ T5878] pwc: recv_control_msg error -71 req 02 val 2900 [ 372.984802][ T5878] pwc: recv_control_msg error -71 req 02 val 2800 [ 372.997372][ T5878] pwc: recv_control_msg error -71 req 04 val 1100 [ 373.004505][ T5878] pwc: recv_control_msg error -71 req 04 val 1200 [ 373.012973][ T5878] pwc: Registered as video103. [ 373.022976][ T5878] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input48 [ 373.048771][ T5878] usb 5-1: USB disconnect, device number 19 [ 373.446514][ T5921] uclogic 0003:28BD:0071.0093: failed retrieving string descriptor #100: -71 [ 373.463084][ T5921] uclogic 0003:28BD:0071.0093: failed retrieving pen parameters: -71 [ 373.472499][ T5921] uclogic 0003:28BD:0071.0093: pen probing failed: -71 [ 373.479741][ T5921] uclogic 0003:28BD:0071.0093: failed probing parameters: -71 [ 373.488764][ T5921] uclogic 0003:28BD:0071.0093: probe with driver uclogic failed with error -71 [ 373.510073][ T5921] usb 3-1: USB disconnect, device number 63 [ 373.712115][ T5922] usb 1-1: [UEAGLE-ATM] firmware is not available [ 373.752779][T15363] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4158'. [ 374.047694][ T5871] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 374.210407][ T5871] usb 5-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 374.219794][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.231656][ T5871] usb 5-1: config 0 descriptor?? [ 374.251122][ T5871] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 374.861765][ T5871] pwc: recv_control_msg error -71 req 02 val 2b00 [ 374.889579][ T5871] pwc: recv_control_msg error -71 req 02 val 2700 [ 374.896534][ T5871] pwc: recv_control_msg error -71 req 04 val 1600 [ 374.917490][ T5871] pwc: recv_control_msg error -71 req 02 val 2c00 [ 374.924866][ T5871] pwc: recv_control_msg error -71 req 04 val 1000 [ 374.942301][ T5871] pwc: recv_control_msg error -71 req 04 val 1300 [ 374.958384][ T5871] pwc: recv_control_msg error -71 req 04 val 1400 [ 374.985438][ T5871] pwc: recv_control_msg error -71 req 02 val 2000 [ 374.998338][ T5871] pwc: recv_control_msg error -71 req 02 val 2100 [ 375.009842][ T5871] pwc: recv_control_msg error -71 req 06 val 0600 [ 375.027700][ T5871] pwc: recv_control_msg error -71 req 04 val 1500 [ 375.035754][ T5871] pwc: recv_control_msg error -71 req 02 val 2500 [ 375.044564][ T5871] pwc: recv_control_msg error -71 req 02 val 2400 [ 375.052012][ T5871] pwc: recv_control_msg error -71 req 02 val 2600 [ 375.059523][ T5871] pwc: recv_control_msg error -71 req 02 val 2900 [ 375.066575][ T5871] pwc: recv_control_msg error -71 req 02 val 2800 [ 375.075910][ T5871] pwc: recv_control_msg error -71 req 04 val 1100 [ 375.083100][ T5871] pwc: recv_control_msg error -71 req 04 val 1200 [ 375.106317][ T5871] pwc: Registered as video103. [ 375.119966][ T5871] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input49 [ 375.174023][ T5871] usb 5-1: USB disconnect, device number 20 [ 375.559788][T15423] bpf: Bad value for 'gid' [ 376.238263][ T5871] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 376.277252][T15444] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4196'. [ 376.414270][ T5871] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.442859][ T5871] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 376.457667][ T5871] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 376.477467][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.500881][ T5871] usb 5-1: config 0 descriptor?? [ 376.524429][T15454] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 376.548985][ T5871] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 376.555703][ T5871] dvb-usb: bulk message failed: -22 (3/0) [ 376.572412][ T5871] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 376.609584][ T5871] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 376.616736][ T5871] usb 5-1: media controller created [ 376.641107][ T5871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 376.672999][ T5871] dvb-usb: bulk message failed: -22 (6/0) [ 376.697755][ T5871] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 376.729477][ T5871] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input50 [ 376.778518][ T5871] dvb-usb: schedule remote query interval to 150 msecs. [ 376.795887][ T5871] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 376.828071][ T5871] usb 5-1: USB disconnect, device number 21 [ 376.904630][ T5871] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 377.059104][ T5828] Bluetooth: hci0: SCO packet too small [ 377.304681][ T30] audit: type=1326 audit(1759814055.064:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15477 comm="syz.4.4212" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbcfd38eec9 code=0xffff0000 [ 377.327833][ T5922] usb 3-1: new low-speed USB device number 64 using dummy_hcd [ 377.490421][ T5922] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 377.498816][ T5922] usb 3-1: config 0 has no interface number 0 [ 377.504984][ T5922] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 377.516412][ T5922] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 377.527748][ T5922] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 377.536877][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.549512][ T5922] usb 3-1: config 0 descriptor?? [ 377.558424][T15475] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 377.600079][ T5922] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 377.829197][ T5922] usb 3-1: USB disconnect, device number 64 [ 379.136526][T15525] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4233'. [ 379.177964][T15525] unsupported nlmsg_type 40 [ 379.668348][ T5871] IPVS: starting estimator thread 0... [ 379.757816][T15545] IPVS: using max 28 ests per chain, 67200 per kthread [ 381.154398][T15615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4277'. [ 382.103948][T15650] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 382.128636][T15650] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 382.137770][T15650] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 382.336034][T15657] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 382.397743][T15657] CIFS: Unable to determine destination address [ 382.733485][T15673] netlink: 328 bytes leftover after parsing attributes in process `syz.4.4303'. [ 383.003221][T15684] max out of range [ 383.545453][T15717] overlayfs: failed to resolve './file1': -2 [ 383.669412][T15721] overlayfs: conflicting lowerdir path [ 383.959018][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.965605][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.377769][ T5871] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 385.562086][ T5871] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 385.587673][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 385.595914][ T5871] usb 3-1: Product: syz [ 385.619109][ T5871] usb 3-1: Manufacturer: syz [ 385.623776][ T5871] usb 3-1: SerialNumber: syz [ 385.646841][ T5871] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 385.940905][T15819] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4372'. [ 385.954000][T15819] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4372'. [ 385.969877][T15820] IPVS: ip_vs_add_dest(): server weight less than zero [ 385.976981][ T5921] IPVS: starting estimator thread 0... [ 385.982644][T15819] netlink: 'syz.4.4372': attribute type 5 has an invalid length. [ 386.011475][T15819] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4372'. [ 386.041468][ T5871] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 386.072754][ T5871] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 386.087911][T15821] IPVS: using max 29 ests per chain, 69600 per kthread [ 386.139513][T15827] binder_alloc: binder_alloc_mmap_handler: 15825 200000735000-200000736000 already mapped failed -16 [ 386.250505][ T5871] usb 3-1: USB disconnect, device number 65 [ 387.368206][T15878] RDS: rds_bind could not find a transport for fe80::3e, load rds_tcp or rds_rdma? [ 387.917698][ T5891] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 388.079901][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.094546][ T5891] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 388.117112][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.139587][ T5891] usb 5-1: config 0 descriptor?? [ 388.453339][ T30] audit: type=1326 audit(1759814066.214:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15888 comm="syz.0.4405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7983b8eec9 code=0x7fc00000 [ 388.562843][ T5891] hid (null): global environment stack underflow [ 388.577381][ T5891] logitech-djreceiver 0003:046D:C71F.0094: global environment stack underflow [ 388.596681][ T5891] logitech-djreceiver 0003:046D:C71F.0094: item 0 4 1 11 parsing failed [ 388.612166][ T5891] logitech-djreceiver 0003:046D:C71F.0094: logi_dj_probe: parse failed [ 388.621289][ T5891] logitech-djreceiver 0003:046D:C71F.0094: probe with driver logitech-djreceiver failed with error -22 [ 388.687668][ T5921] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 388.773853][ T5891] usb 5-1: USB disconnect, device number 22 [ 388.847732][ T5921] usb 6-1: Using ep0 maxpacket: 16 [ 388.855354][ T5921] usb 6-1: config 0 has an invalid interface number: 48 but max is 0 [ 388.867606][ T5921] usb 6-1: config 0 has no interface number 0 [ 388.873948][ T5921] usb 6-1: config 0 interface 48 has no altsetting 0 [ 388.894896][ T5921] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 388.907730][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.926069][ T5921] usb 6-1: Product: syz [ 388.932687][ T5921] usb 6-1: Manufacturer: syz [ 388.947648][ T5921] usb 6-1: SerialNumber: syz [ 388.955453][ T5921] usb 6-1: config 0 descriptor?? [ 389.182105][T15911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.199625][T15911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.222607][ T5828] Bluetooth: hci0: Unknown advertising packet type: 0x35 [ 389.222650][ T5828] Bluetooth: hci0: Malformed LE Event: 0x0d [ 389.225697][ T5921] usb 6-1: USB disconnect, device number 9 [ 389.311908][T15937] netlink: 277 bytes leftover after parsing attributes in process `syz.0.4427'. [ 389.753820][T15955] sg_write: data in/out 44713/14 bytes for SCSI command 0x0-- guessing data in; [ 389.753820][T15955] program syz.4.4437 not setting count and/or reply_len properly [ 390.777858][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 390.878533][T16005] ptrace attach of "./syz-executor exec"[5822] was attempted by "ԓ7E\x09Ż P"[16005] [ 390.941241][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.953386][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 390.962482][ T9] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 390.972676][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.983153][ T9] usb 6-1: config 0 descriptor?? [ 391.167735][ T5921] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 391.347925][ T5921] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 391.357135][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.378729][ T5921] usb 3-1: config 0 descriptor?? [ 391.597442][ T9] Bluetooth: Can't get version to change to load ram patch err [ 391.606463][ T9] Bluetooth: Loading sysconfig file failed [ 391.613848][ T9] ath3k 6-1:0.0: probe with driver ath3k failed with error -71 [ 391.623961][ T9] usb 6-1: USB disconnect, device number 10 [ 391.710175][ T5893] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 391.890510][ T5893] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.901022][ T5893] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 391.912351][ T5893] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 391.926689][ T5893] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.937075][ T5893] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 391.948300][ T5893] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 391.963706][ T5893] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.974525][ T5893] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 391.985510][ T5893] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 392.002222][ T5921] ath6kl: Failed to read usb control message: -71 [ 392.010700][ T5893] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 392.020035][ T5921] ath6kl: Unable to read the bmi data from the device: -71 [ 392.027343][ T5921] ath6kl: unable to read target info byte count: -71 [ 392.034330][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 392.042450][ T5893] usb 5-1: SerialNumber: syz [ 392.048781][ T5921] ath6kl: Failed to init ath6kl core: -71 [ 392.056206][ T5921] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 392.070414][ T5921] usb 3-1: USB disconnect, device number 66 [ 392.569775][ T5891] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 392.740299][ T5891] usb 6-1: Using ep0 maxpacket: 16 [ 392.748594][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.760575][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.770664][ T5891] usb 6-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 392.779787][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.797731][ T5891] usb 6-1: config 0 descriptor?? [ 392.849953][ T5921] usb 5-1: USB disconnect, device number 23 [ 393.239007][ T5891] razer 0003:1532:011B.0095: hidraw0: USB HID v0.00 Device [HID 1532:011b] on usb-dummy_hcd.5-1/input0 [ 393.428023][ T5891] usb 6-1: USB disconnect, device number 11 [ 393.873593][T16071] netlink: set zone limit has 4 unknown bytes [ 395.236534][T16133] netlink: 'syz.4.4523': attribute type 4 has an invalid length. [ 395.503060][T16143] loop7: detected capacity change from 0 to 7 [ 395.523453][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.532704][ C0] buffer_io_error: 9 callbacks suppressed [ 395.532725][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 395.551473][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.560754][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 395.569356][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.578596][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 395.597584][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.606907][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 395.616854][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.626321][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 395.637615][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.646820][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 395.667660][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.676881][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 395.686020][T16143] ldm_validate_partition_table(): Disk read failed. [ 395.728092][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.737368][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 395.746845][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.756125][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 395.766045][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.775353][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 395.785533][T16150] block nbd5: Unsupported socket: should be TCP or UNIX. [ 395.790438][T16143] Dev loop7: unable to read RDB block 0 [ 395.804954][T16143] loop7: unable to read partition table [ 395.816629][T16143] loop7: partition table beyond EOD, truncated [ 395.823089][T16143] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 395.986169][T16155] ALSA: mixer_oss: invalid OSS volume '' [ 396.476126][T16178] binder: 16177:16178 ioctl c0306201 200000000100 returned -14 [ 397.157969][T16210] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4559'. [ 397.496476][T16230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4568'. [ 397.599887][T16233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4569'. [ 397.611462][T16235] netlink: 'syz.4.4570': attribute type 1 has an invalid length. [ 398.015868][T16257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4582'. [ 398.097728][T16258] sp0: Synchronizing with TNC [ 398.128642][T16256] [U] [ 398.805337][T16299] can0: slcan on ptm0. [ 398.898092][T16298] can0 (unregistered): slcan off ptm0. [ 399.347795][ T5891] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 399.510188][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.524900][ T5891] usb 6-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 399.535036][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.548938][ T5891] usb 6-1: config 0 descriptor?? [ 399.979933][ T5891] hid-rmi 0003:17EF:6085.0096: collection stack underflow [ 399.992035][ T5891] hid-rmi 0003:17EF:6085.0096: item 0 0 0 12 parsing failed [ 400.000286][ T5891] hid-rmi 0003:17EF:6085.0096: parse failed [ 400.006401][ T5891] hid-rmi 0003:17EF:6085.0096: probe with driver hid-rmi failed with error -22 [ 400.174721][ T5921] usb 6-1: USB disconnect, device number 12 [ 400.297749][ T5891] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 400.447701][ T5891] usb 5-1: Using ep0 maxpacket: 32 [ 400.454616][ T5891] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 400.462945][ T5891] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 400.474818][ T5891] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 400.486102][ T5891] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 400.500599][ T5891] usb 5-1: config 0 interface 0 has no altsetting 0 [ 400.510345][ T5891] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 400.519595][ T5891] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 400.528284][ T5891] usb 5-1: Product: syz [ 400.532501][ T5891] usb 5-1: Manufacturer: syz [ 400.537179][ T5891] usb 5-1: SerialNumber: syz [ 400.544631][ T5891] usb 5-1: config 0 descriptor?? [ 400.554862][ T5891] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 400.566212][ T5891] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 400.779512][ T5921] usb 5-1: USB disconnect, device number 24 [ 400.799549][ T5921] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 401.611163][T16365] netlink: 184 bytes leftover after parsing attributes in process `syz.2.4631'. [ 401.611812][T16365] xt_socket: unknown flags 0xd0 [ 402.066934][ T5828] Bluetooth: Wrong link type (-22) [ 402.314692][T16399] netlink: 'syz.4.4648': attribute type 4 has an invalid length. [ 402.323122][T16399] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4648'. [ 402.367793][T16401] tipc: Enabling of bearer rejected, media not registered [ 402.480109][T16405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4650'. [ 402.565239][ T5828] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 402.568555][ T5828] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 403.308737][ T5871] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 403.461205][ T5871] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.471856][ T5871] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 403.483555][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 403.494721][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 403.504547][ T5871] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 403.519476][ T5871] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 403.528691][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 403.536790][ T5871] usb 6-1: Product: syz [ 403.541287][ T5871] usb 6-1: Manufacturer: syz [ 403.545932][ T5871] usb 6-1: SerialNumber: syz [ 403.553457][ T5871] usb 6-1: config 0 descriptor?? [ 403.772983][ T5871] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 403.780038][ T5871] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 403.979401][ T5871] radio-si470x 6-1:0.0: software version 135, hardware version 216 [ 403.987367][ T5871] radio-si470x 6-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 404.180358][ T5871] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 404.189990][ T5871] radio-si470x 6-1:0.0: submitting int urb failed (-90) [ 404.197405][ T5871] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 404.206621][ T5871] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -22 [ 404.222859][ T5871] usb 6-1: USB disconnect, device number 13 [ 404.397839][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 404.547701][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 404.554771][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 404.564874][ T9] usb 5-1: config 4 has an invalid interface number: 30 but max is 0 [ 404.573218][ T9] usb 5-1: config 4 has no interface number 0 [ 404.579450][ T9] usb 5-1: config 4 interface 30 has no altsetting 0 [ 404.592783][ T9] usb 5-1: string descriptor 0 read error: -22 [ 404.599320][ T9] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 404.608623][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.629526][ T9] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 404.636683][ T9] dw2102: su3000_power_ctrl: 1, initialized 0 [ 404.642888][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 404.651394][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 404.661819][ T9] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 404.670291][ T9] usb 5-1: media controller created [ 404.675644][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 404.681618][ T9] dw2102: i2c transfer failed. [ 404.687906][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 404.693693][ T9] dw2102: i2c transfer failed. [ 404.698620][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 404.704381][ T9] dw2102: i2c transfer failed. [ 404.709285][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 404.715075][ T9] dw2102: i2c transfer failed. [ 404.720105][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 404.725864][ T9] dw2102: i2c transfer failed. [ 404.730770][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 404.736617][ T9] dw2102: i2c transfer failed. [ 404.741563][ T9] dvb-usb: MAC address: 02:02:02:02:02:02 [ 404.747766][ T5828] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 404.747805][ T5839] Bluetooth: hci3: command 0x1003 tx timeout [ 404.790332][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 404.831550][T16445] dw2102: i2c rd: len=75 is too big! [ 404.831550][T16445] [ 404.883933][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 404.916299][ T9] dw2102: command 0x0e transfer failed. [ 404.922737][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 404.930141][ T9] dw2102: command 0x0e transfer failed. [ 405.247861][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 405.253691][ T9] dw2102: command 0x0e transfer failed. [ 405.260128][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 405.265910][ T9] dw2102: command 0x0e transfer failed. [ 405.271674][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 405.277430][ T9] dw2102: command 0x51 transfer failed. [ 405.283124][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 405.288911][ T9] dw2102: i2c probe for address 0x68 failed. [ 405.294912][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 405.302049][ T9] dw2102: i2c probe for address 0x69 failed. [ 405.309158][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 405.314937][ T9] dw2102: i2c probe for address 0x6a failed. [ 405.321087][ T9] dw2102: probing for demodulator failed. Is the external power switched on? [ 405.330641][ T9] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 405.391495][ T5891] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 405.405470][ T9] rc_core: IR keymap rc-tt-1500 not found [ 405.411786][ T9] Registered IR keymap rc-empty [ 405.418562][ T9] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 405.449059][ T9] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input52 [ 405.462185][ T9] dvb-usb: schedule remote query interval to 250 msecs. [ 405.474073][ T9] dw2102: su3000_power_ctrl: 0, initialized 1 [ 405.488394][ T9] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 405.506369][ T9] usb 5-1: USB disconnect, device number 25 [ 405.560682][ T5891] usb 6-1: Using ep0 maxpacket: 32 [ 405.568495][ T5891] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 405.598878][ T5891] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 405.609536][ T9] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 405.624090][ T5891] usb 6-1: config 0 interface 0 has no altsetting 0 [ 405.645302][ T5891] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 405.655787][ T5891] usb 6-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 405.667155][ T5891] usb 6-1: Product: syz [ 405.671843][ T5891] usb 6-1: Manufacturer: syz [ 405.676503][ T5891] usb 6-1: SerialNumber: syz [ 405.688924][ T5891] usb 6-1: config 0 descriptor?? [ 406.118118][ T5891] gs_usb 6-1:0.0: Configuring for 241 interfaces [ 406.125493][ T5891] gs_usb 6-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 406.134253][ T5891] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -22 [ 406.344297][ T5921] usb 6-1: USB disconnect, device number 14 [ 406.511785][T16512] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4702'. [ 406.657037][T16520] netlink: 'syz.2.4706': attribute type 1 has an invalid length. [ 406.670075][T16520] nbd: error processing sock list [ 406.917815][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 406.969740][T16534] mkiss: ax0: crc mode is auto. [ 407.013246][T16536] ptrace attach of "./syz-executor exec"[5822] was attempted by ""[16536] [ 407.080768][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 407.100092][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 407.112537][ T9] usb 5-1: config 4 interface 0 has no altsetting 0 [ 407.123011][ T9] usb 5-1: string descriptor 0 read error: -22 [ 407.131606][ T9] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 407.143637][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.174878][ T9] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 407.194018][ T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 407.230835][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 407.239213][ T9] usb 5-1: media controller created [ 407.284866][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 407.517770][ T5921] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 407.667666][ T5921] usb 6-1: Using ep0 maxpacket: 16 [ 407.674993][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.686882][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.696900][ T5921] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 407.715174][ T5921] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 407.728697][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.740535][ T5921] usb 6-1: config 0 descriptor?? [ 407.875493][T16560] can0: slcan on ptm0. [ 407.939489][T16559] can0 (unregistered): slcan off ptm0. [ 408.207127][ T5921] microsoft 0003:045E:07DA.0097: ignoring exceeding usage max [ 408.258160][ T5921] microsoft 0003:045E:07DA.0097: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 408.292217][ T5921] microsoft 0003:045E:07DA.0097: no inputs found [ 408.307219][ T5921] microsoft 0003:045E:07DA.0097: could not initialize ff, continuing anyway [ 408.355153][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 408.424244][ T5921] usb 6-1: USB disconnect, device number 15 [ 408.522710][ T9] usb 5-1: USB disconnect, device number 26 [ 410.637249][T16672] mkiss: ax0: crc mode is auto. [ 411.161700][T16697] netlink: 'syz.2.4780': attribute type 10 has an invalid length. [ 411.205504][T16697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.217100][T16697] batadv0: entered promiscuous mode [ 411.225278][T16697] batadv0: entered allmulticast mode [ 411.233252][T16697] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 411.239053][ T5893] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 411.252209][ T5893] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 411.261644][ T5893] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 411.272974][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 411.282800][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 411.292581][ T5893] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 411.300165][ T5893] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 411.308178][ T5893] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 411.315788][ T5893] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 411.323476][ T5893] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 411.334756][ T5893] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 411.367820][ T5893] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 411.378953][ T5893] hid-generic 0000:0000:0000.0098: hidraw0: HID v0.00 Device [syz0] on syz0 [ 411.512378][T16704] fido_id[16704]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 412.009063][T16739] netlink: 'syz.2.4799': attribute type 10 has an invalid length. [ 412.018382][T16739] bridge0: port 3(bond0) entered disabled state [ 412.025265][T16739] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.032861][T16739] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.070303][T16742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4799'. [ 412.070345][T16739] bridge0: port 3(bond0) entered blocking state [ 412.085824][T16739] bridge0: port 3(bond0) entered forwarding state [ 412.092753][T16739] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.100225][T16739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.107884][T16739] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.115651][T16739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.135170][T16739] bridge0: port 3(bond0) entered disabled state [ 412.141925][T16739] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.149258][T16739] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.167322][T16742] bond0: left allmulticast mode [ 412.178807][T16742] bond_slave_0: left allmulticast mode [ 412.184431][T16742] bond_slave_1: left allmulticast mode [ 412.190210][T16742] batadv0: left allmulticast mode [ 412.195766][T16742] bridge0: port 3(bond0) entered disabled state [ 412.206553][T16742] bridge_slave_1: left allmulticast mode [ 412.212625][T16742] bridge_slave_1: left promiscuous mode [ 412.218584][T16742] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.228669][T16742] bridge_slave_0: left allmulticast mode [ 412.234385][T16742] bridge_slave_0: left promiscuous mode [ 412.240379][T16742] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.325618][T16746] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 412.332650][T16746] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 412.339555][T16746] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 412.347700][T16746] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 412.355219][T16746] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 412.362467][T16746] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 412.370476][T16746] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 412.377502][T16746] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 412.385708][T16746] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 412.395570][T16746] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 412.404615][T16746] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 412.411897][T16746] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 412.423835][T16746] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 412.434021][T16746] comedi comedi3: 8255: I/O port conflict (0xffffffff8000008b,4) [ 412.442667][T16746] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 412.451518][T16746] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 412.460524][T16746] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 412.470987][T16746] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 412.680594][T16754] netlink: 'syz.2.4806': attribute type 1 has an invalid length. [ 412.698140][T16754] netlink: 'syz.2.4806': attribute type 2 has an invalid length. [ 414.031541][T16814] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4834'. [ 414.999518][T16866] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4858'. [ 415.316580][T16878] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4864'. [ 415.888410][T16905] IPVS: Scheduler module ip_vs_sip not found [ 416.057714][ T5893] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 416.244263][T16928] netlink: 'syz.0.4881': attribute type 10 has an invalid length. [ 416.254179][ T5893] usb 5-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 416.263288][T16928] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4881'. [ 416.303191][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.333630][ T5893] usb 5-1: Product: syz [ 416.338338][ T5893] usb 5-1: Manufacturer: syz [ 416.342982][ T5893] usb 5-1: SerialNumber: syz [ 416.375698][ T5893] usb 5-1: config 0 descriptor?? [ 416.608074][ T5893] peak_usb 5-1:0.0: PEAK-System PCAN-USB FD v0 fw v0.0.0 (1 channels) [ 416.809240][ T5893] peak_usb 5-1:0.0 can0: sending command failure: -8 [ 416.816791][ T5893] peak_usb 5-1:0.0 can0: sending command failure: -8 [ 416.833996][ T5893] peak_usb 5-1:0.0 can0: sending command failure: -8 [ 416.970034][ T5893] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -8 [ 417.024333][ T5893] usb 5-1: USB disconnect, device number 27 [ 417.216808][T16965] comedi comedi3: 8255: I/O port conflict (0x404f26,4) [ 417.234359][T16965] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 417.247092][T16965] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 417.254957][T16965] comedi comedi3: 8255: I/O port conflict (0xd,4) [ 417.255131][T16967] tmpfs: Bad value for 'nr_inodes' [ 417.262072][T16965] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 417.274685][T16965] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 417.285736][T16965] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 417.298570][T16965] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 417.305285][T16965] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 417.325645][T16965] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 417.347755][T16965] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 417.354925][T16965] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 417.368282][T16965] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 417.374945][T16965] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 417.381676][T16965] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 417.390483][T16965] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 417.397051][T16965] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 417.403832][T16965] comedi comedi3: 8255: I/O port conflict (0x402,4) [ 417.411721][T16965] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 417.418407][T16965] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 417.434285][T16965] comedi comedi3: 8255: I/O port conflict (0x40,4) [ 417.441415][T16965] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 417.448152][T16965] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 417.454791][T16965] comedi comedi3: 8255: I/O port conflict (0x8000003,4) [ 417.535544][T16973] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4897'. [ 417.650441][T16979] netlink: 763 bytes leftover after parsing attributes in process `syz.4.4900'. [ 418.247700][ T1543] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 418.413102][ T1543] usb 6-1: config 0 has an invalid descriptor of length 176, skipping remainder of the config [ 418.424354][ T1543] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 418.450434][ T1543] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 418.461653][ T1543] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.469854][ T1543] usb 6-1: Product: syz [ 418.474389][ T1543] usb 6-1: Manufacturer: syz [ 418.480174][ T1543] usb 6-1: SerialNumber: syz [ 418.492843][ T1543] usb 6-1: config 0 descriptor?? [ 418.502159][ T1543] usb-storage 6-1:0.0: USB Mass Storage device detected [ 418.515224][ T1543] usb-storage 6-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 418.607792][ T9] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 418.719742][ T5922] usb 6-1: USB disconnect, device number 16 [ 418.770641][ T9] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 418.779385][ T9] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 418.787497][ T9] usb 5-1: config 0 has no interface number 0 [ 418.793988][ T9] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 418.804107][ T9] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 418.814116][ T9] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 418.824073][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.834485][ T9] usb 5-1: config 0 descriptor?? [ 419.462300][ T9] usb 5-1: USB disconnect, device number 28 [ 419.908079][ T1543] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 420.079889][ T1543] usb 6-1: Using ep0 maxpacket: 16 [ 420.093413][ T1543] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.108862][ T1543] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 420.138100][ T1543] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 420.161661][ T1543] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.198864][ T1543] usb 6-1: config 0 descriptor?? [ 420.264489][T17074] netlink: 19 bytes leftover after parsing attributes in process `syz.2.4945'. [ 420.618905][ T1543] microsoft 0003:045E:07DA.0099: ignoring exceeding usage max [ 420.629491][ T1543] microsoft 0003:045E:07DA.0099: ignoring exceeding usage max [ 420.639312][ T1543] microsoft 0003:045E:07DA.0099: usage index exceeded [ 420.646263][ T1543] microsoft 0003:045E:07DA.0099: item 0 0 2 2 parsing failed [ 420.655363][ T1543] microsoft 0003:045E:07DA.0099: parse failed [ 420.664893][ T1543] microsoft 0003:045E:07DA.0099: probe with driver microsoft failed with error -22 [ 420.825313][ T1543] usb 6-1: USB disconnect, device number 17 [ 421.029944][ T5922] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 421.197918][ T5922] usb 5-1: Using ep0 maxpacket: 8 [ 421.204527][ T5922] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 421.215558][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.226843][ T30] audit: type=1326 audit(1759814098.984:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17080 comm="syz.2.4948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7c38eec9 code=0x7fc00000 [ 421.227129][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.249175][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.265555][ T5922] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 421.280276][ T5922] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 421.289768][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.303144][ T5922] usb 5-1: config 0 descriptor?? [ 421.435746][T17100] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4957'. [ 421.741426][ T5922] hid_parser_main: 33 callbacks suppressed [ 421.741451][ T5922] acrux 0003:1A34:0802.009A: unknown main item tag 0x0 [ 421.741489][ T5922] acrux 0003:1A34:0802.009A: unknown main item tag 0x0 [ 421.741518][ T5922] acrux 0003:1A34:0802.009A: unknown main item tag 0x0 [ 421.741546][ T5922] acrux 0003:1A34:0802.009A: unknown main item tag 0x0 [ 421.741573][ T5922] acrux 0003:1A34:0802.009A: unknown main item tag 0x0 [ 421.741602][ T5922] acrux 0003:1A34:0802.009A: unknown main item tag 0x0 [ 421.741630][ T5922] acrux 0003:1A34:0802.009A: unknown main item tag 0x0 [ 421.741658][ T5922] acrux 0003:1A34:0802.009A: unknown main item tag 0x0 [ 421.741686][ T5922] acrux 0003:1A34:0802.009A: unknown main item tag 0x0 [ 421.741715][ T5922] acrux 0003:1A34:0802.009A: unknown main item tag 0x0 [ 421.756507][ T5922] acrux 0003:1A34:0802.009A: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.4-1/input0 [ 421.756546][ T5922] acrux 0003:1A34:0802.009A: no inputs found [ 421.756563][ T5922] acrux 0003:1A34:0802.009A: Failed to enable force feedback support, error: -19 [ 421.867850][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 421.961073][ T5891] usb 5-1: USB disconnect, device number 29 [ 422.097738][ T1543] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 422.260163][ T1543] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.271881][ T1543] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.281751][ T1543] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 422.295020][ T1543] usb 6-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 422.305037][ T1543] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.315806][ T1543] usb 6-1: config 0 descriptor?? [ 422.748330][ T1543] pantherlord 0003:0810:0002.009B: hidraw0: USB HID v0.00 Device [HID 0810:0002] on usb-dummy_hcd.5-1/input0 [ 422.769960][ T1543] pantherlord 0003:0810:0002.009B: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula [ 422.939932][ T5922] usb 6-1: USB disconnect, device number 18 [ 423.731042][T17152] tipc: Started in network mode [ 423.747520][T17152] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 423.755642][T17152] tipc: Enabled bearer , priority 10 [ 423.770091][T17154] program syz.0.4982 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 423.876438][ T30] audit: type=1800 audit(1759814101.634:65): pid=17159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4985" name="bus" dev="tmpfs" ino=5689 res=0 errno=0 [ 424.537974][ T5893] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 424.697735][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 424.704726][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.727479][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.747799][ T5893] usb 5-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 424.760174][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.788079][ T5893] usb 5-1: config 0 descriptor?? [ 424.877777][ T1543] tipc: Node number set to 10136234 [ 425.210080][ T5893] pantherlord 0003:0F30:0111.009C: item fetching failed at offset 1/3 [ 425.219207][ T5893] pantherlord 0003:0F30:0111.009C: parse failed [ 425.225770][ T5893] pantherlord 0003:0F30:0111.009C: probe with driver pantherlord failed with error -22 [ 425.434396][ T5893] usb 5-1: USB disconnect, device number 30 [ 425.910663][T17252] EXT4-fs: Conflicting test_dummy_encryption options [ 426.019863][T17256] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5031'. [ 426.281280][T17268] netlink: 1030 bytes leftover after parsing attributes in process `syz.5.5037'. [ 426.291550][T17268] bridge: RTM_NEWNEIGH with invalid ether address [ 426.397779][ T1543] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 426.558411][ T1543] usb 5-1: Using ep0 maxpacket: 8 [ 426.565290][ T1543] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.576463][ T1543] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.586324][ T1543] usb 5-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.00 [ 426.595868][ T1543] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.606975][ T1543] usb 5-1: config 0 descriptor?? [ 426.687753][ T5891] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 426.859887][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.871026][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.880909][ T5891] usb 6-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 426.890289][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.901640][ T5891] usb 6-1: config 0 descriptor?? [ 427.028191][ T1543] hid_parser_main: 43 callbacks suppressed [ 427.028217][ T1543] asus 0003:0B05:1807.009D: unknown main item tag 0x0 [ 427.041244][ T1543] asus 0003:0B05:1807.009D: unknown main item tag 0x0 [ 427.048294][ T1543] asus 0003:0B05:1807.009D: unknown main item tag 0x0 [ 427.055176][ T1543] asus 0003:0B05:1807.009D: unknown main item tag 0x0 [ 427.062523][ T1543] asus 0003:0B05:1807.009D: unknown main item tag 0x0 [ 427.072979][ T1543] asus 0003:0B05:1807.009D: hidraw0: USB HID v0.00 Device [HID 0b05:1807] on usb-dummy_hcd.4-1/input0 [ 427.084165][ T1543] asus 0003:0B05:1807.009D: Asus input not registered [ 427.096217][ T1543] asus 0003:0B05:1807.009D: probe with driver asus failed with error -12 [ 427.234034][ T1543] usb 5-1: USB disconnect, device number 31 [ 427.324002][ T5891] stadia 0003:18D1:9400.009E: unknown main item tag 0x0 [ 427.331440][ T5891] stadia 0003:18D1:9400.009E: unknown main item tag 0x0 [ 427.338645][ T5891] stadia 0003:18D1:9400.009E: unknown main item tag 0x0 [ 427.345775][ T5891] stadia 0003:18D1:9400.009E: unknown main item tag 0x0 [ 427.353016][ T5891] stadia 0003:18D1:9400.009E: unknown main item tag 0x0 [ 427.362327][ T5891] stadia 0003:18D1:9400.009E: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.5-1/input0 [ 427.374529][ T5891] stadia 0003:18D1:9400.009E: no inputs found [ 427.380849][ T5891] stadia 0003:18D1:9400.009E: force feedback init failed [ 427.534495][ T5893] usb 6-1: USB disconnect, device number 19 [ 427.786651][T17278] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 427.800178][T17278] overlayfs: missing 'lowerdir' [ 428.283818][T17301] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5052'. [ 428.384929][T17303] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 428.400294][T17303] bond0: (slave lo): Error: Device can not be enslaved while up [ 428.556689][T17313] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5058'. [ 428.570445][T17313] netlink: 43 bytes leftover after parsing attributes in process `syz.4.5058'. [ 428.588447][T17313] netlink: 'syz.4.5058': attribute type 5 has an invalid length. [ 428.596732][T17313] netlink: 43 bytes leftover after parsing attributes in process `syz.4.5058'. [ 428.994838][T17336] netlink: 'syz.0.5070': attribute type 1 has an invalid length. [ 429.017758][T17336] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5070'. [ 429.739367][T17380] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 429.885104][T17388] netlink: 'syz.2.5095': attribute type 11 has an invalid length. [ 430.490288][T17422] binder: 17421:17422 ioctl c0306201 200000000080 returned -22 [ 430.773587][ T30] audit: type=1326 audit(1759814108.534:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17436 comm="syz.4.5119" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbcfd38eec9 code=0x0 [ 430.795383][ C1] vkms_vblank_simulate: vblank timer overrun [ 430.984295][T17446] UHID_CREATE from different security context by process 3008 (syz.2.5123), this is not allowed. [ 432.031882][T17493] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 432.500329][ T5891] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 432.656794][T17523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5160'. [ 432.668390][ T5891] usb 6-1: Using ep0 maxpacket: 8 [ 432.682123][ T5891] usb 6-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 432.735719][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.773963][ T5891] usb 6-1: config 0 descriptor?? [ 433.213691][ T5891] magicmouse 0003:05AC:0269.009F: reserved main item tag 0xd [ 433.221291][ T5891] magicmouse 0003:05AC:0269.009F: item fetching failed at offset 4/5 [ 433.231607][ T5891] magicmouse 0003:05AC:0269.009F: magicmouse hid parse failed [ 433.239363][ T5891] magicmouse 0003:05AC:0269.009F: probe with driver magicmouse failed with error -22 [ 433.377688][ T5922] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 433.420269][ T5891] usb 6-1: USB disconnect, device number 20 [ 433.531831][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 433.542925][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.553768][ T5922] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 433.564156][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.574782][ T5922] usb 5-1: config 0 descriptor?? [ 433.997370][ T5922] bigben 0003:146B:0902.00A0: unexpected rdesc, please submit for review [ 434.008704][ T5922] bigben 0003:146B:0902.00A0: unbalanced collection at end of report description [ 434.019333][ T5922] bigben 0003:146B:0902.00A0: parse failed [ 434.025319][ T5922] bigben 0003:146B:0902.00A0: probe with driver bigben failed with error -22 [ 434.192351][T17541] xt_policy: too many policy elements [ 434.206821][ T5922] usb 5-1: USB disconnect, device number 32 [ 434.372722][T17547] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5172'. [ 434.617888][T17553] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5175'. [ 434.736705][T17557] overlayfs: workdir and upperdir must be separate subtrees [ 435.137982][ T5893] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 435.289479][ T5893] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 435.298997][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.314681][ T5893] usb 5-1: config 0 descriptor?? [ 435.329884][ T5893] cp210x 5-1:0.0: cp210x converter detected [ 435.773650][ T5893] usb 5-1: cp210x converter now attached to ttyUSB0 [ 435.961733][ T5891] usb 5-1: USB disconnect, device number 33 [ 435.995730][ T5891] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 436.015367][ T5891] cp210x 5-1:0.0: device disconnected [ 436.472576][ T30] audit: type=1400 audit(1759814114.234:67): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=17615 comm="syz.0.5204" [ 437.710043][T17668] fuse: Bad value for 'user_id' [ 437.733540][T17668] fuse: Bad value for 'user_id' [ 438.729092][T17714] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 439.207695][T17738] usb usb8: usbfs: process 17738 (syz.5.5244) did not claim interface 0 before use [ 440.492039][T17790] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 440.966098][T17815] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5268'. [ 441.349633][T17831] autofs: Bad value for 'fd' [ 441.957721][ T5921] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 442.128773][ T5921] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 442.150617][ T5921] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 442.179015][ T5921] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 442.228487][ T5921] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 442.250431][ T5921] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 442.299788][ T5921] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 442.328033][ T5921] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 442.351762][ T5921] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 442.385961][ T5921] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 442.416122][ T5921] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 442.469811][ T5921] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 442.487459][ T5921] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 442.510881][T17890] netlink: 'syz.4.5295': attribute type 27 has an invalid length. [ 442.517813][ T5921] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 442.537927][ T5921] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 442.571662][ T5921] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 442.611326][ T5921] usb 6-1: string descriptor 0 read error: -22 [ 442.618664][ T5921] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 442.638793][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.686053][ T5921] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 442.893834][ T5871] usb 6-1: USB disconnect, device number 21 [ 442.927749][ T5893] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 443.088164][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 443.096616][ T5893] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 443.111730][ T5893] usb 5-1: config 0 has no interface number 0 [ 443.121229][ T5893] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x1 has an invalid bInterval 172, changing to 11 [ 443.134258][ T5893] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x1 has invalid maxpacket 50254, setting to 1024 [ 443.152219][ T5893] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 443.162285][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 443.171020][ T5893] usb 5-1: Product: syz [ 443.176132][ T5893] usb 5-1: SerialNumber: syz [ 443.184095][ T5893] usb 5-1: config 0 descriptor?? [ 443.193628][T17899] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 443.205810][ T5893] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 443.417660][ T5891] usb 5-1: USB disconnect, device number 34 [ 443.495702][T17915] netlink: 826 bytes leftover after parsing attributes in process `syz.5.5302'. [ 443.774675][T17925] option changes via remount are deprecated (pid=17924 comm=syz.5.5307) [ 444.091166][T17938] sctp: [Deprecated]: syz.4.5313 (pid 17938) Use of int in max_burst socket option deprecated. [ 444.091166][T17938] Use struct sctp_assoc_value instead [ 444.676371][T17962] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5325'. [ 444.823660][T17968] fuse: Bad value for 'group_id' [ 444.845660][T17968] fuse: Bad value for 'group_id' [ 444.943405][T17974] netlink: 'syz.4.5331': attribute type 6 has an invalid length. [ 445.020824][T17977] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5332'. [ 445.148496][T17984] fuse: Bad value for 'group_id' [ 445.153602][T17984] fuse: Bad value for 'group_id' [ 445.400268][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.530663][T18001] program syz.4.5343 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 445.813087][T18013] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5349'. [ 445.886969][T18015] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5350'. [ 446.317333][T18039] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 446.832496][T18065] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 100 [ 446.869076][T18067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5375'. [ 446.932220][T18069] tmpfs: Cannot retroactively limit inodes [ 447.026693][T18075] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5379'. [ 447.036989][T18075] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5379'. [ 447.125985][T18079] netlink: 'syz.4.5381': attribute type 58 has an invalid length. [ 447.634592][T18101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5392'. [ 448.011287][T18119] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 448.014871][T18120] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5400'. [ 448.018720][T18119] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 448.035749][T18119] comedi comedi3: 8255: I/O port conflict (0x21,4) [ 448.043014][T18119] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 448.051145][T18119] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 448.057771][T18119] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 448.084974][T18119] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 448.093665][T18119] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 448.166937][T18124] program syz.4.5404 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 448.562748][ T30] audit: type=1326 audit(1759814126.324:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18143 comm="syz.4.5413" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbcfd38eec9 code=0x0 [ 448.607717][ T5891] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 448.780008][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.791273][ T5891] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 448.800496][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.818214][ T5891] usb 6-1: config 0 descriptor?? [ 449.038949][ T5891] usbhid 6-1:0.0: can't add hid device: -71 [ 449.045185][ T5891] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 449.057234][ T5891] usb 6-1: USB disconnect, device number 22 [ 449.497708][ T5922] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 449.661179][ T5922] usb 6-1: Using ep0 maxpacket: 32 [ 449.671573][ T5922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.688838][ T5922] usb 6-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice= 0.40 [ 449.726554][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.741822][ T5922] usb 6-1: config 0 descriptor?? [ 449.771820][ T5922] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 449.799299][ T5922] dvb-usb: bulk message failed: -22 (2/0) [ 449.805102][ T5922] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 449.815594][ T5922] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 449.826928][ T5922] usb 6-1: media controller created [ 449.836254][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 449.882201][ T5922] usb 6-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 449.908121][ T5922] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 450.119206][ T5922] rc_core: IR keymap rc-dtt200u not found [ 450.127033][ T5922] Registered IR keymap rc-empty [ 450.134691][ T5922] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 450.179906][ T5922] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input55 [ 450.214402][T18176] block nbd0: Unsupported socket: should be TCP or UNIX. [ 450.223687][ T5922] dvb-usb: schedule remote query interval to 300 msecs. [ 450.247994][ T5922] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 450.280122][ T5922] usb 6-1: USB disconnect, device number 23 [ 450.345955][ T5922] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 450.817674][ T5891] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 450.967775][ T5891] usb 5-1: Using ep0 maxpacket: 16 [ 450.976257][ T5891] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 450.984552][ T5891] usb 5-1: config 0 has no interface number 0 [ 450.993566][ T5891] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 451.002872][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.011079][ T5891] usb 5-1: Product: syz [ 451.015381][ T5891] usb 5-1: Manufacturer: syz [ 451.020300][ T5891] usb 5-1: SerialNumber: syz [ 451.027419][ T5891] usb 5-1: config 0 descriptor?? [ 451.036222][ T5891] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 451.649617][ T5891] gspca_spca1528: reg_w err -71 [ 451.667786][ T5891] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 451.679107][ T5891] usb 5-1: USB disconnect, device number 35 [ 452.212269][T18195] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5436'. [ 452.595127][T18214] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5443'. [ 453.193453][T18247] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 453.688715][ T5828] Bluetooth: hci0: link tx timeout [ 453.695277][ T5828] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 453.868703][ T5828] Bluetooth: hci0: link tx timeout [ 453.873898][ T5828] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 453.900281][ T5828] Bluetooth: hci0: link tx timeout [ 453.905576][ T5828] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 454.351272][ T5828] Bluetooth: hci0: link tx timeout [ 454.356548][ T5828] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 454.389236][T18306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5476'. [ 454.455923][ T5828] Bluetooth: hci0: link tx timeout [ 454.461292][ T5828] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 454.615538][T18318] [U] [ 454.628363][T18316] [U] [ 455.071141][T18340] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 455.137938][ T5891] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 455.296299][ T5828] Bluetooth: hci0: link tx timeout [ 455.301693][ T5891] usb 6-1: Using ep0 maxpacket: 16 [ 455.306977][ T5828] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 455.329171][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.347652][ T5891] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 455.367054][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.391640][ T5828] Bluetooth: hci0: link tx timeout [ 455.396924][ T5828] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 455.405970][ T5891] usb 6-1: config 0 descriptor?? [ 455.545800][T18360] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5497'. [ 455.712364][ T5828] Bluetooth: hci0: command 0x0406 tx timeout [ 455.838447][ T5891] mcp2221 0003:04D8:00DD.00A1: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 456.266469][ T5891] usb 6-1: USB disconnect, device number 24 [ 456.277663][ T5871] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 456.457773][ T5871] usb 5-1: Using ep0 maxpacket: 32 [ 456.468323][ T5871] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.488814][ T5871] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 456.528404][ T5871] usb 5-1: config 0 interface 0 has no altsetting 0 [ 456.537666][ T5871] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 456.560932][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.601742][ T5871] usb 5-1: config 0 descriptor?? [ 456.867294][T18400] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 457.021833][T18408] input: syz0 as /devices/virtual/input/input56 [ 457.045690][ T5871] hid-thrustmaster 0003:044F:B65D.00A2: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 457.083000][ T5871] hid-thrustmaster 0003:044F:B65D.00A2: Wrong number of endpoints? [ 457.244571][ C0] hid-thrustmaster 0003:044F:B65D.00A2: URB to get model id failed with error -71 [ 457.258073][ T5871] usb 5-1: USB disconnect, device number 36 [ 457.414754][T18422] Bluetooth: hci3: Frame reassembly failed (-84) [ 457.427900][ T50] Bluetooth: hci3: Frame reassembly failed (-84) [ 458.568030][T18441] wg2: entered promiscuous mode [ 458.574306][T18441] wg2: entered allmulticast mode [ 459.399586][T18481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5554'. [ 459.473109][ T5839] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 459.508130][ T5921] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 459.577116][T18487] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5557'. [ 459.586501][T18487] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5557'. [ 459.677876][ T5921] usb 5-1: Using ep0 maxpacket: 16 [ 459.689477][ T5921] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 459.704832][ T5921] usb 5-1: config 0 has no interface number 0 [ 459.714898][ T5921] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 459.745890][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.757135][ T5921] usb 5-1: Product: syz [ 459.767915][ T5921] usb 5-1: Manufacturer: syz [ 459.772684][ T5921] usb 5-1: SerialNumber: syz [ 459.798745][ T5921] usb 5-1: config 0 descriptor?? [ 459.810502][ T5921] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 459.962229][T18503] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5565'. [ 459.971683][T18503] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5565'. [ 460.194394][ T5828] Bluetooth: hci0: unexpected event for opcode 0x2005 [ 460.515132][T18532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5578'. [ 460.616785][ T5921] gspca_spca1528: reg_w err -71 [ 460.647751][ T5921] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 460.660463][ T5921] usb 5-1: USB disconnect, device number 37 [ 460.989446][T18553] debugfs: 'ptm0' already exists in 'caif_serial' [ 461.267656][ T5871] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 461.449564][ T5871] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 461.467991][ T5871] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 461.487635][ T5871] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 461.507123][ T5871] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 461.535404][ T5871] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 461.572758][ T5871] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 461.584107][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 461.603702][ T5871] usb 6-1: Product: syz [ 461.611310][T18577] sctp: [Deprecated]: syz.2.5599 (pid 18577) Use of struct sctp_assoc_value in delayed_ack socket option. [ 461.611310][T18577] Use struct sctp_sack_info instead [ 461.612906][ T5871] usb 6-1: Manufacturer: syz [ 461.661388][ T5871] cdc_wdm 6-1:1.0: skipping garbage [ 461.671991][ T5871] cdc_wdm 6-1:1.0: skipping garbage [ 461.700316][ T5871] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 461.706311][ T5871] cdc_wdm 6-1:1.0: Unknown control protocol [ 462.216550][T18599] netlink: 'syz.4.5610': attribute type 6 has an invalid length. [ 462.226704][T18599] netlink: 'syz.4.5610': attribute type 6 has an invalid length. [ 463.129182][T18628] binder: 18627:18628 ioctl c0306201 2000000003c0 returned -14 [ 463.252196][T18632] qnx6: unable to read the first superblock [ 464.012358][ T9] usb 6-1: USB disconnect, device number 25 [ 464.462577][T18663] tunl0: entered allmulticast mode [ 465.602885][T18719] netlink: 'syz.4.5660': attribute type 25 has an invalid length. [ 465.611352][T18719] netlink: 'syz.4.5660': attribute type 28 has an invalid length. [ 465.797860][ T5871] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 465.867111][ T30] audit: type=1326 audit(1759814143.624:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18725 comm="syz.2.5663" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd7c38eec9 code=0x0 [ 465.979775][ T5871] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 465.989028][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.999946][ T5871] usb 6-1: config 0 descriptor?? [ 466.007404][ T5871] cp210x 6-1:0.0: cp210x converter detected [ 466.017670][ T5893] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 466.177822][ T5893] usb 5-1: Using ep0 maxpacket: 32 [ 466.185432][ T5893] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 466.197729][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 466.209154][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 466.220531][ T5893] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 466.233437][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.245542][ T5893] usb 5-1: config 0 descriptor?? [ 466.252574][T18724] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 466.280128][ T5893] hub 5-1:0.0: USB hub found [ 466.437757][ T5871] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 466.463639][ T5871] usb 6-1: cp210x converter now attached to ttyUSB0 [ 466.489423][ T5893] hub 5-1:0.0: 2 ports detected [ 466.666118][ T5878] usb 6-1: USB disconnect, device number 26 [ 466.693512][ T5878] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 466.716977][ T5878] cp210x 6-1:0.0: device disconnected [ 467.019132][T18747] netlink: 'syz.2.5666': attribute type 2 has an invalid length. [ 467.027062][T18747] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.5666'. [ 467.103912][ T5893] usb 5-1: USB disconnect, device number 38 [ 467.607784][ T5893] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 467.758136][ T5893] usb 6-1: Using ep0 maxpacket: 16 [ 467.772429][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 467.786263][ T5893] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 467.801642][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.810677][ T5893] usb 6-1: Product: syz [ 467.815131][ T5893] usb 6-1: Manufacturer: syz [ 467.819938][ T5893] usb 6-1: SerialNumber: syz [ 467.827242][ T5893] usb 6-1: config 0 descriptor?? [ 467.837997][ T5893] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 467.847292][ T5893] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 468.443930][ T5893] em28xx 6-1:0.0: chip ID is em2765 [ 468.703013][ T5893] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 468.711344][ T5893] em28xx 6-1:0.0: board has no eeprom [ 468.787712][ T5893] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 468.802154][ T5893] em28xx 6-1:0.0: dvb set to bulk mode. [ 468.809244][ T5922] em28xx 6-1:0.0: Binding DVB extension [ 468.832338][ T5893] usb 6-1: USB disconnect, device number 27 [ 468.881483][ T5893] em28xx 6-1:0.0: Disconnecting em28xx [ 468.900610][ T5922] em28xx 6-1:0.0: Registering input extension [ 468.907041][ T5893] em28xx 6-1:0.0: Closing input extension [ 468.907733][T18785] loop9: detected capacity change from 0 to 7 [ 468.925559][ T5832] buffer_io_error: 10 callbacks suppressed [ 468.925579][ T5832] Buffer I/O error on dev loop9, logical block 0, async page read [ 468.930807][ T5893] em28xx 6-1:0.0: Freeing device [ 468.934575][ T5832] Buffer I/O error on dev loop9, logical block 0, async page read [ 468.952605][ T5832] Buffer I/O error on dev loop9, logical block 0, async page read [ 468.962598][ T5832] Buffer I/O error on dev loop9, logical block 0, async page read [ 468.975675][ T5832] Buffer I/O error on dev loop9, logical block 0, async page read [ 468.985320][ T5832] Buffer I/O error on dev loop9, logical block 0, async page read [ 468.996601][ T5832] Buffer I/O error on dev loop9, logical block 0, async page read [ 469.004906][ T5832] ldm_validate_partition_table(): Disk read failed. [ 469.012298][ T5832] Buffer I/O error on dev loop9, logical block 0, async page read [ 469.020525][ T5832] Buffer I/O error on dev loop9, logical block 0, async page read [ 469.028941][ T5832] Buffer I/O error on dev loop9, logical block 0, async page read [ 469.037074][ T5832] Dev loop9: unable to read RDB block 0 [ 469.043137][ T5832] loop9: unable to read partition table [ 469.049299][ T5832] loop9: partition table beyond EOD, truncated [ 469.060590][T18785] ldm_validate_partition_table(): Disk read failed. [ 469.068049][T18785] Dev loop9: unable to read RDB block 0 [ 469.074199][T18785] loop9: unable to read partition table [ 469.080784][T18785] loop9: partition table beyond EOD, truncated [ 469.087956][T18785] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 469.087956][T18785] ) failed (rc=-5) [ 469.658024][ T5893] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 469.817626][ T5893] usb 6-1: Using ep0 maxpacket: 16 [ 469.824742][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.835791][ T5893] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 469.845087][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.855764][ T5893] usb 6-1: config 0 descriptor?? [ 470.282585][ T5893] mcp2221 0003:04D8:00DD.00A3: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 470.690905][ T5871] usb 6-1: USB disconnect, device number 28 [ 470.691510][T18817] Invalid logical block size (-32767) [ 471.154590][T18834] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5706'. [ 471.437915][ T5922] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 471.516948][T18842] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 471.526177][T18842] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 471.535388][T18842] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 471.542237][T18842] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 471.567131][T18842] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 471.573409][T18842] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 471.624513][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.676398][ T5922] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 471.694643][ T30] audit: type=1326 audit(1759814149.454:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18820 comm="syz.0.5700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7983b8eec9 code=0x7fc00000 [ 471.701622][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.717022][ C0] vkms_vblank_simulate: vblank timer overrun [ 471.746873][ T5922] usb 5-1: config 0 descriptor?? [ 471.774901][T18842] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 471.786864][T18842] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 471.795324][T18842] CPU: 0 UID: 0 PID: 18842 Comm: syz.5.5710 Not tainted syzkaller #0 PREEMPT(full) [ 471.804710][T18842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 471.814794][T18842] RIP: 0010:klist_remove+0x14a/0x340 [ 471.820109][T18842] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 79 a4 ea f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 5a a4 ea f6 49 8b 44 24 58 48 89 44 24 08 [ 471.839735][T18842] RSP: 0018:ffffc900043ef0c0 EFLAGS: 00010202 [ 471.845830][T18842] RAX: 000000000000000b RBX: ffff888068a43c80 RCX: 0000000000000000 [ 471.853812][T18842] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 471.861802][T18842] RBP: ffffc900043ef1c0 R08: ffffffff8f846b83 R09: 1ffffffff1f08d70 [ 471.869801][T18842] R10: dffffc0000000000 R11: fffffbfff1f08d71 R12: 0000000000000000 [ 471.877797][T18842] R13: 1ffff1100b0b468c R14: ffff8880585a3460 R15: dffffc0000000000 [ 471.885783][T18842] FS: 00007f31a45bb6c0(0000) GS:ffff888125d2d000(0000) knlGS:0000000000000000 [ 471.894729][T18842] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 471.901330][T18842] CR2: 00007fdd7c5b2d58 CR3: 000000005d008000 CR4: 00000000003526f0 [ 471.909319][T18842] Call Trace: [ 471.912682][T18842] [ 471.915657][T18842] ? __pfx_klist_remove+0x10/0x10 [ 471.920706][T18842] ? __pfx_kobject_move+0x10/0x10 [ 471.925750][T18842] ? do_raw_spin_unlock+0x122/0x240 [ 471.930965][T18842] ? get_device_parent+0x366/0x3a0 [ 471.936170][T18842] device_move+0x193/0x700 [ 471.940612][T18842] hci_conn_del_sysfs+0xb8/0x170 [ 471.945576][T18842] hci_conn_del+0xc33/0x11b0 [ 471.950218][T18842] ? hci_abort_conn_sync+0x24e/0xe30 [ 471.955523][T18842] hci_abort_conn_sync+0x658/0xe30 [ 471.960660][T18842] ? __lock_acquire+0xab9/0xd20 [ 471.965560][T18842] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 471.971238][T18842] ? hci_disconnect_all_sync+0x2e/0x350 [ 471.976813][T18842] ? hci_disconnect_all_sync+0x2e/0x350 [ 471.982386][T18842] ? hci_disconnect_all_sync+0x2e/0x350 [ 471.987964][T18842] hci_disconnect_all_sync+0x1b5/0x350 [ 471.993478][T18842] hci_suspend_sync+0x3fc/0xc60 [ 471.998350][T18842] ? __pfx___mutex_lock+0x10/0x10 [ 472.003396][T18842] ? __pfx_hci_suspend_sync+0x10/0x10 [ 472.008789][T18842] ? __wake_up_common_lock+0x190/0x1f0 [ 472.014264][T18842] hci_suspend_dev+0x28d/0x4d0 [ 472.019049][T18842] ? __pfx_hci_suspend_dev+0x10/0x10 [ 472.024380][T18842] hci_suspend_notifier+0xf2/0x290 [ 472.029510][T18842] notifier_call_chain+0x1b6/0x3e0 [ 472.034652][T18842] blocking_notifier_call_chain_robust+0x85/0x100 [ 472.041093][T18842] pm_notifier_call_chain_robust+0x2c/0x60 [ 472.046923][T18842] snapshot_open+0x19c/0x280 [ 472.051541][T18842] ? __pfx_snapshot_open+0x10/0x10 [ 472.056684][T18842] misc_open+0x2d5/0x350 [ 472.060949][T18842] chrdev_open+0x4cc/0x5e0 [ 472.065401][T18842] ? __pfx_chrdev_open+0x10/0x10 [ 472.070391][T18842] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 472.076756][T18842] ? __pfx_chrdev_open+0x10/0x10 [ 472.081707][T18842] do_dentry_open+0x953/0x13f0 [ 472.086496][T18842] vfs_open+0x3b/0x340 [ 472.090578][T18842] ? path_openat+0x2ecd/0x3830 [ 472.095380][T18842] path_openat+0x2ee5/0x3830 [ 472.100004][T18842] ? __pfx_path_openat+0x10/0x10 [ 472.104975][T18842] do_filp_open+0x1fa/0x410 [ 472.109500][T18842] ? __lock_acquire+0xab9/0xd20 [ 472.114454][T18842] ? __pfx_do_filp_open+0x10/0x10 [ 472.119519][T18842] ? _raw_spin_unlock+0x28/0x50 [ 472.124466][T18842] ? alloc_fd+0x64c/0x6c0 [ 472.128816][T18842] do_sys_openat2+0x121/0x1c0 [ 472.133522][T18842] ? __pfx_do_sys_openat2+0x10/0x10 [ 472.138754][T18842] ? rcu_is_watching+0x15/0xb0 [ 472.143538][T18842] __x64_sys_openat+0x138/0x170 [ 472.148439][T18842] do_syscall_64+0xfa/0xfa0 [ 472.152957][T18842] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.158174][T18842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.164374][T18842] ? clear_bhb_loop+0x60/0xb0 [ 472.169064][T18842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.174974][T18842] RIP: 0033:0x7f31a378eec9 [ 472.179429][T18842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.199058][T18842] RSP: 002b:00007f31a45bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 472.207579][T18842] RAX: ffffffffffffffda RBX: 00007f31a39e5fa0 RCX: 00007f31a378eec9 [ 472.215564][T18842] RDX: 0000000000040000 RSI: 0000200000000680 RDI: ffffffffffffff9c [ 472.223550][T18842] RBP: 00007f31a3811f91 R08: 0000000000000000 R09: 0000000000000000 [ 472.231544][T18842] R10: 0000000000000019 R11: 0000000000000246 R12: 0000000000000000 [ 472.239524][T18842] R13: 00007f31a39e6038 R14: 00007f31a39e5fa0 R15: 00007ffff8c11178 [ 472.247516][T18842] [ 472.250561][T18842] Modules linked in: [ 472.254647][ C0] vkms_vblank_simulate: vblank timer overrun [ 472.261724][T18842] ---[ end trace 0000000000000000 ]--- [ 472.297845][T18842] RIP: 0010:klist_remove+0x14a/0x340 [ 472.303248][T18842] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 79 a4 ea f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 5a a4 ea f6 49 8b 44 24 58 48 89 44 24 08 [ 472.354618][T18842] RSP: 0018:ffffc900043ef0c0 EFLAGS: 00010202 [ 472.360941][T18842] RAX: 000000000000000b RBX: ffff888068a43c80 RCX: 0000000000000000 [ 472.369203][T18842] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 472.378033][T18842] RBP: ffffc900043ef1c0 R08: ffffffff8f846b83 R09: 1ffffffff1f08d70 [ 472.386093][T18842] R10: dffffc0000000000 R11: fffffbfff1f08d71 R12: 0000000000000000 [ 472.401825][T18842] R13: 1ffff1100b0b468c R14: ffff8880585a3460 R15: dffffc0000000000 [ 472.410311][T18842] FS: 00007f31a45bb6c0(0000) GS:ffff888125d2d000(0000) knlGS:0000000000000000 [ 472.420063][T18842] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 472.426787][T18842] CR2: 0000001b2e517ff8 CR3: 000000005d008000 CR4: 00000000003526f0 [ 472.435319][T18842] Kernel panic - not syncing: Fatal exception [ 472.441746][T18842] Kernel Offset: disabled [ 472.446127][T18842] Rebooting in 86400 seconds..