last executing test programs: 3.594028549s ago: executing program 3 (id=10431): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) syz_clone(0xd1c4780, 0x0, 0x0, 0x0, 0x0, 0x0) 3.382649894s ago: executing program 3 (id=10434): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x15, {0x0, 0x1ee}, 0xfd}, 0x18, &(0x7f00000004c0)={0x0}}, 0x0) 3.228471964s ago: executing program 3 (id=10436): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, 0x0) 2.961670906s ago: executing program 3 (id=10439): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) unshare(0x42000000) 2.419539803s ago: executing program 4 (id=10446): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0xb00) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x13, r0, 0x0) clock_settime(0x17, &(0x7f0000000240)) 2.290649099s ago: executing program 4 (id=10449): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 1.65850585s ago: executing program 4 (id=10453): r0 = socket(0x840000000002, 0x3, 0xff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x43}, @remote}}}], 0x20}, 0x400c804) 1.567330527s ago: executing program 0 (id=10454): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0xa00, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000180)={0x2, 0x3ff, 0x7, 0x9755, 0x3, "03f37f0ce56ca288"}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x42080, 0x0) 1.527531673s ago: executing program 4 (id=10456): r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$kcm(0x10, 0x2, 0x4) connect(r0, &(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x65, @dev={0xfe, 0x80, '\x00', 0xd}, 0x1, 0x4}, 0x80) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 1.371884187s ago: executing program 4 (id=10458): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}], 0x1, 0x40800) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011500000000000000001c"], 0x30}, 0x1, 0x0, 0x0, 0x400c090}, 0x0) 1.331954617s ago: executing program 0 (id=10459): r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x6, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 1.203703813s ago: executing program 4 (id=10460): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b091c00000000000109022d00010000600009040080020300000009210804000122050009058103200009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000180)='Z') 1.202442985s ago: executing program 1 (id=10461): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x78d9c8c660a6aed2, 0x2}}}, 0x17) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) 1.096813903s ago: executing program 2 (id=10462): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) close(0x3) 1.096171177s ago: executing program 0 (id=10463): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e20, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e1f, 0x0, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 1.049743818s ago: executing program 1 (id=10464): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) fcntl$notify(r0, 0x402, 0x7) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000080)='5\x00', 0x2) 941.405817ms ago: executing program 2 (id=10465): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x489, 0x0, 0x401}]}) 940.69759ms ago: executing program 0 (id=10466): chroot(&(0x7f0000000300)='.\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r0) getcwd(&(0x7f0000000000)=""/204, 0xcc) 803.395474ms ago: executing program 1 (id=10467): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2000}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) kcmp(r0, r0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 776.044985ms ago: executing program 0 (id=10468): syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) 734.923987ms ago: executing program 1 (id=10469): r0 = syz_open_dev$sg(&(0x7f0000000000), 0xffff0000, 0x2842) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000600)={0x0, 0x7, 0x8}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 655.866403ms ago: executing program 0 (id=10470): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 655.414248ms ago: executing program 2 (id=10471): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) 519.369072ms ago: executing program 2 (id=10472): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0xffffffffffffffff, &(0x7f0000000300)) getdents(0xffffffffffffffff, 0x0, 0x0) 422.429537ms ago: executing program 1 (id=10473): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000080)=[{0x6, 0x43, 0x0, 0x7fff0002}]}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 334.347916ms ago: executing program 2 (id=10474): r0 = syz_io_uring_setup(0x18d, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x309}, &(0x7f0000000340), &(0x7f0000000280), &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) io_uring_register$IORING_UNREGISTER_NAPI(r0, 0x1c, &(0x7f0000000140), 0x1) 270.347898ms ago: executing program 3 (id=10475): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000100)={0x2, 0x0, {&(0x7f00000007c0)=""/4083, 0xff3, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000400)=""/184, 0xb8, 0x0, 0x3, 0x3}}, 0x48) 226.049857ms ago: executing program 1 (id=10476): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000740)=""/4096, 0xcb6}, {0x0}], 0x2) syz_emit_ethernet(0xfe0, &(0x7f0000003200)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfd2, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e20, 0xfbe, 0x0, @opaque="c36188db1b21bc2399f98fd1cd989dfe01d7c3d227f404606b4c0592153f0f80fec6842533dba5beffd4d44f8a00d33ec86feb6fe8cca450d31cd8c1745d419c207ef81b6728feba48c1fa7fa537d8fb647d47e6ebdaa143eb866356e0ff922826aa225e5340c0f97510244713ba9400073c39f330c81fa96c48deb4f30d7406fd96c1272003a31f184ca6e6bd9856e8db9c0243fc5b81bdd97ed886f408a02eec1a17a5dd8cae119e1d76a9c0ea5baf2422f11334d516a9b24f4f867d058dbec1bb9e79d0192cab3a15f58dc06f047ee3f46a16c3da51b886c2d7224a053ed216e2910176a7f8732ebeef55a0c4e7c10aaead641c7aca6d383669a682e39859e0688b21592cdcfbce7de55d056edc4f50f609f2ae068497836808674ef7cb510aa1d9f74e718e004b04f9005918128b2b127cf89cdd56805d6b57d77c09208e344d2229ef59ec750d4fefca61f16005dbcf229d736c9a4f58aba66c15b603ea8140a0f53aa757e62ec84f7dcf6639a14264213d6b7bca298ea620f6071142bb19e30941489b44cc37593fc805abcfb76a8a59644f54bff1cf632b56625211cfc265a57795d10dca69236c200425b54150996460c30d92b59726097256d130c565160aad5a1bbba56a7a8429e2d8a05395b3374b37aac913af186e3e984147845a9ba90e6843d3f3022b5e04ba458fa54e7b6fe39cfdf73711b7deab0de9a7ab2f7b84ed53ca2536ad0550cff43563a0d387fd16e63974dcf91d113806ac8b693734fb5a439b361544443249650f723408a27b291756052dddbeb2ec97840db4b22f885f12580dc83963dc8eae77994753b496b583b015711dcb0540774884236664ab3dbf308f3449e87c7304b3b404c24413c7ea3f07c232345a64bcdee63867c78a54191139c9fe63f5aaf7da500b2b0553f20eecec18e90f1bb3254648ef3663a6c18d4d0f07b3cae2d18d3a4e764c0a4c90523615f950cd7a4c20974ddceb72f7b8a1830607c5bc6d1c2dead238029f093b7579c428ed492f783657df9eea57da574edbcae25f55ff2cd6ef2923215ddfa569e900ac72dbb1530d5a737cc065204d6f4b0e965488619f966899cccd218eb9c26974d885fd8ccdd482f4245c7201cd2f13e5aef1efaad1a70a2a6e5da24bbf349453bcd71b677d4fa4e2881699a4f1d010c934eccd1453b07e4617636094a5d9dcc645fea2095e7147d07aafdfd5f0e260abe3ef02280bae5398d51a70565a4443c7139c514fcb6bd004bfa69b3c6239783f53c72c34b37dcf6a124ae4bf26326f929635553b72b3176985584d2e424bfa62f967d9da7ca4864c24bf58011a2d279d67b25a36f8889125cfb6ecff8737a91c44c29f4a49b259388f400db063336bad95ade5b2742e6fa6ec1c0be051d6b946fc812d113423060e492944bb29ab0dcc9a468bac617ee8beec89c6d4747777b46ad0defbb679c39bc31524c6e35a0100a5bc5dfbb771c62dffe3d8cee8d47d0fde520a266fa675d58ad893bd3878f92694c75f2d4313ef8f850906b1b303078856e8362022c2df4a3003857c41efc848dbebcb78213c582a7693e74de76fff13734b4f71fe93d5e8a402adf6bc29563ca500013a2fb739bcd00916ca99f57a590b58cf9ab5dadd040d6222c553b83fa61d127918cb388a831c41d243d27f4037cbf911e3e9e94d5ebc39ef02b1f2606c7fc46c1952c529aab3886b96c04abd5be74f2fce3bab3d96e714c9b4eac73f6c4f781c0407289992a057cb62c9746c35abf8a390aa4f7e7ad1f16ffdee3ec2d1300c9ce0377b6bf645adcf064977ba158064285c399ccc5e0af6d55726ab8c7105374a2b1b4dc69f87360ddd67676108c5622a7a29a243ff2f9eec13446299a5fc2882825dc68514c0e1b3ea0c1342dc85e9c78b03323d12b0e3e8ac1b9d03b4fa31998a2e7c355b0a9623d3eb8cfd5e9c634d6a0e89d525f89722a00f51e4d79870d71d468087fa4416037a26cf0f052d94abd2e239e2a71a7354d5ff2e49373127bf4ce959bd661aa607149564817393ea26cdc94a7ea2e67cd6781daf4586366d036f5531bac80e9c0fdfe4129e445c82ed77c8a55effc523dec5da0412d1f8389ffa390bb0fc3c83502bed630693337cacd081d692abdc8416f1943907036a01331544c1b804d31e1fb148e9a1bc3909e71985bec78fb69eaee933701522c8da9b20e5cbc19c14f7f65d8fd0c8d133a58194dd758556e094e77010d315f6b6ab149fa898482f1b3b7e3eeafea99527293ab6a563d5cf3d049ddd9619e0dd221195280aecf0299b77b85d2393516d84d92d4f03f118f9712f5c072eed8ca31bfa5f05dcd5b7d408d1650b758d60c32aa39646c3bc5611d2d7d43cf31ff6a3cc8dc2efe6d2c968b1202408d807b6a01f6848e10ec8a3ee69a02348035dac5c5f5e6247092275f435cecabde71cc2b8d186df01032a195ecbbb92cc093b4e44445dbd1c2f01622e08dbee78bb545d1e29c7d354d51610bd5f5f48a4e42c0924a5ad9577080c5aafedafc7e971d571d2fc7ce41dff9120753dc221d1a4a9552180a52339dfaf697b1721346f34f1ccfc72f7a9d6cb2261a8b1deabe124cf3c18494fa988bd770726adabf7b0e57d09c0ef5a3bbeee271319218a386d7dadd0daa2c40a7131115a1a7c0c0ae654512f61414b6dcfc5d74afb2071cfdf09b00457a5cf04489dc990a0307e0cc46f90f65205457588a71fd4e772f5e5aa6d0e335debac25f40d48d016f285c2e04f36fc7b8d9419c62123e47a4b9acd40a6dcbbb0d1b8f2765e4424ad848d740fd401bc49c0acc971d1de476e8c586fda0eccf35b29a9a326818b245d75ce36b89b18407bd8f0309f5612a97ca15db0eda6048b8f46e914bdad927c2b636673de0966a09c0ecb7a5fc287af412cc427e598b65ba74000eb394eb95a2f114da106e343edb1a46d1debdf3dae2f9ef6e60f7346c2c53411f2e2e27b1f9e2c020a99442a626f94f5202a5f5023e4aac49d8ceaec8074c223707f80a72be638413c80561e6909e489dd9030f8a110b82bf63e576a73f73cdc6b539b86745ff217ce5eafd18137fc2664e2be2320713417ef1c988486acfe1ae51d21ef4ff022f134d0a817a45b862562cb58e2170d1b906358fa30131e8d23bd24b2124c80f204f8f0d3f74a408aff08f567773e95dce095a2fd61a4d7441fb1a54689b34f3ff163e4686f8f1dfec0f066e2d79cf7354a0a2ad791bc0d089adf16711f7a5a9dc66689f55ca4aaf78eca23865180e6cc87ae773bb6c3fffb71138381377ce40ff7810f015b6f2d2d1f01ef64681825eba419ab413287320f61894ded416bb70a8d6fa164d065ec8d0866c7f9f2387efd74a6eec64e4e081d2a6d2937ba00119472ad0e615bbf7df0a6406f11a01d69a95a13e12aac40eaaf07c3bc3f9a73b931ed9a2a302366e5eee5b23775fc2f253d9ef8f22debeaca87a5af2259c649ce1c2cc8d599a245760739d9d4453409707a5a5fb17e79f2461f919793ddb2fd941a2576b7a929915469faf382fbfc0d6df2c1e301a1d74eef0f8e48a5bff8176f14e9a50432f3b3aa1db9a759c51b712645259cd1f29ccc7bca24b4fdaeb2ee8f7df72b5a60d40d49a1216001395699c6f56a060c65b00d7663e9052968aaff057440978378f8ff83acc4e2e462c9a5083c7ed190dcf5b698d6d045827a88c68ef4215cb5c381ad5f233f01df5f96be0d14bb7b15a5ef60abd5a1c5145a761e9ce47152b05466eb5dd397892fb0e6fb2dd5bc5746c5bc02ff7ddce08f296ccf2fb64b60f724185ee458ccf3a2faedc912af18fc0d71f2e99bf7e1c795b3949a5b2848383d1d905b7ec0a7d00f727caaf392bab8b2c21a16079977b9597c701b42b2b7dbb6d0e882d6d0fc21c88c7ec2b6bf1164cd221c20cd31d54e8e09705b0084c12092d3220e4b16747106c9e0694c8704053e89b99fb1c403d7c848140b941879f544e896f753a12cf00ce0c6c0091fe050258b73f39a6c5e45131386d78ccaed5bd904aff197756cdf6da0a640dce609e394e41dd044a35d6a286e1619e5faa06239006c13b559c737285a1680fbd9ff4b3447808fb6fa025572ffd9f15bd37b4470724a9a573aa0c44b65db5dea2493e88e661765e6cee71b0b662dcb0a2456cb59a134e9301f7ecb44f84291bad3d0f6a229ab4a6d45e119e0e465a4d3a01eb960ded6df76a35da9c188ec1398d0ce36fe8b6c9878a92dd007c9738e3f6640c9190e819707aedae6cbfa99dac49cc598066211d231de93b960620037f4a35a3c94f188020fb2e40cc38b3896999f7cb34d7ebded96f0c696cacc12ae867850d99fe0cf2fa6eb9dd71cfd518586ee772b73bedbdc16e438bfcdbedd5bda2f9698f94e1cc85d9560e0410f21f3ca4dadeefcb1539f0126bd119e65b81654c58b0e168797c7edfd4bb72f44df3d5e0a967155d5cce7ddd90dc4e5db48a6fdf3045aab0855c930d85b038fc999a0e6c5da88aa2180c0fe413fc92cf665e0d12bbc166186669b11abb1cc7ed40c360889f5e7a74e58cdc001650145cdbed086dc2f85ba24d70b6dac47c17876a273b98f1b345f503e82b51768720337a689f70a237f8b6476c96c10335d81edc4a063fbbd878ed5108115e38e690f37cac99110fdbcbc1ec0f52afed136b44d2b12e70ca067ad87da23f9f07a79c0582694bee1d7b9d1ded93cae3dc1d509477706414130039bb9f6d6c91ea5f7538d1993373dca2dfb5c40b1ad1305004c4c81931bec9363ba166feafa32e3eee9b26b22778b6d40c11ec09eb57597c4da7ecf049d58cac998cf27498bf0d414ff444f7355d7ffdb5aebcd1f8809ca1aa5ac9b52c6dd4329e51ffbf0368f1d6e1615a1256ad321b38c591218366a20ac6ad33641c6db0e51fa7e57aa3f6f16da3a94edf130a8eb2fe714620d2687388d5c5c4dbaaa852864cd3ab38d067002b9c15268fd4635d38ba6a9eb96bc55dcb4d8df9590ae8bf2b2e5a3ca5d98532b3ec4aeb9cfc4bac61728c3bf41a094afd26151c9859c6106a0e668682e3b0c18b21a1af2ffb206c60146846650c7579a3b01ac6bbe658d17d5453d7652e5dc0dc89f7cd5b76c810a4a111d51fe85a30470f1ed67dd30fdd6d0900c2e729040cd65634c8376377528275542187f9dde3fa779224804c1f43fbbbe7f0c568f7b0b6291ed2d567ded326aaa67ffce3529c8f11251c9d562cd02739935c8e303c1c997d8820876815c763d7802e85885966f5f7e38086b7218c11d65e0f9133ef47cbe1222ea8b0652e924d8924544a88a26461e1ad24bfbc7194005b4fb3fe7344c1e68a5034aaeaedfd46c2204e465617391835af34ec320bd7dad276ae9d7fb1f09aa3dc066bb6aa153394b3edb09491fa913d0e4c158baa16e66809180420596f59f20224f61cce7c1c4bd73d6da82ce9129bc8dab8ece3a255185061b6830c99d73a73563c8880ca33abc07e36219398fb6641c39b22a099920219e66e1130d14a8bbb6f9ee2eba93ee50025970627781b38e5f6b82d7ddd5ae2f6612701758ffff9fb706e599ae109998bbba94505115aa09f36e97adf0ce23a03ec8ecda201b7e2be501122dfafecfdae775f609c215e35a16236214c03053e8ece28b69855911e95a80f7e059833c257fae88d6b8573de22787e3d01c82f400dcd1"}}}}}, 0x0) 89.946159ms ago: executing program 2 (id=10477): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000480)={{0x5, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x80000, 0xf, 0x80000000000000, 0x592a, 0x9, 0x0, 0xfffffffe, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0xfffffffffffffffe, 0x40, 0x0, 0x4, 0x100000001, 0x8, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x20000000, 0x0, 0x2, 0x0, 0x2, 0x80000000000000, 0x0, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0x49, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000002, 0x0, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2000000000000, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0xb5, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xde4, 0x7, 0x0, 0x100000000]}) 0s ago: executing program 3 (id=10478): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000019c0)=[{{&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000280)='*,', 0x2}], 0x1}}, {{&(0x7f0000000640)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000680)="c0f3dfde39", 0x5}], 0x1}}], 0x2, 0x2404c000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000380)={0xfbff, 0x0, 0x5, 0x3, r1}, 0x10) kernel console output (not intermixed with test programs): config [ 616.879767][ T5908] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 616.908379][ T5908] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 616.935836][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 616.950404][ T5908] usb 1-1: SerialNumber: syz [ 617.199396][ T5908] usb 1-1: 0:2 : does not exist [ 617.264053][ T5908] usb 1-1: USB disconnect, device number 64 [ 617.323279][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 617.419441][ T5923] usb 4-1: reset high-speed USB device number 64 using dummy_hcd [ 617.486318][T25759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9199'. [ 617.495790][T25759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9199'. [ 617.806015][ T5923] usb 4-1: [UEAGLE-ATM] interface 1 not found [ 617.821531][ T5923] ueagle-atm 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 618.036624][ T42] usb 4-1: USB disconnect, device number 64 [ 618.090000][T25777] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.9207'. [ 618.896503][T25803] netlink: 'syz.2.9219': attribute type 1 has an invalid length. [ 618.919377][T25803] netlink: 'syz.2.9219': attribute type 7 has an invalid length. [ 618.933402][T25803] netlink: 'syz.2.9219': attribute type 8 has an invalid length. [ 618.959784][T25803] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9219'. [ 619.037271][T25807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9221'. [ 619.060386][T25807] netlink: 'syz.3.9221': attribute type 30 has an invalid length. [ 619.060425][T25806] binder: 25804:25806 ioctl c0306201 2000000004c0 returned -22 [ 619.085150][T25807] netlink: 'syz.3.9221': attribute type 29 has an invalid length. [ 619.113710][T25807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9221'. [ 619.733340][T25841] xt_hashlimit: size too large, truncated to 1048576 [ 619.851596][ T5923] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 620.028901][ T5923] usb 4-1: Using ep0 maxpacket: 8 [ 620.046662][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.081724][ T5923] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 620.118176][ T5923] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 620.150555][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.175446][ T5923] usb 4-1: config 0 descriptor?? [ 620.620311][ T5923] cypress 0003:04B4:DE61.0065: invalid report_size 60495 [ 620.646500][ T5923] cypress 0003:04B4:DE61.0065: item 0 2 1 7 parsing failed [ 620.672788][ T5923] cypress 0003:04B4:DE61.0065: parse failed [ 620.681230][ T5923] cypress 0003:04B4:DE61.0065: probe with driver cypress failed with error -22 [ 620.839821][ T5923] usb 4-1: USB disconnect, device number 65 [ 621.127279][ T5915] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 621.297369][ T5915] usb 3-1: Using ep0 maxpacket: 16 [ 621.309165][ T5915] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.331600][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 621.361812][ T5915] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 621.374305][T25888] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 621.392526][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.429654][ T5915] usb 3-1: config 0 descriptor?? [ 621.906138][ T5915] mcp2221 0003:04D8:00DD.0066: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 622.108043][ T5923] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 622.267228][ T5923] usb 5-1: Using ep0 maxpacket: 32 [ 622.283185][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.307400][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.322797][ T5923] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 622.343478][ T5915] usb 3-1: USB disconnect, device number 85 [ 622.364708][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.406388][ T5923] usb 5-1: config 0 descriptor?? [ 622.828953][T25930] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 622.891603][ T5923] nintendo 0003:057E:200E.0067: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.4-1/input0 [ 622.920657][T25933] binder: 25931:25933 ioctl c018620c 200000000000 returned -22 [ 622.980271][ T5923] nintendo 0003:057E:200E.0067: Failed charging grip handshake [ 623.007419][ T5923] nintendo 0003:057E:200E.0067: Failed to initialize controller; ret=-110 [ 623.071978][ T5923] nintendo 0003:057E:200E.0067: probe - fail = -110 [ 623.081567][ T5923] nintendo 0003:057E:200E.0067: probe with driver nintendo failed with error -110 [ 623.126578][ T5923] usb 5-1: USB disconnect, device number 73 [ 623.347164][ T5915] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 623.527288][ T5915] usb 3-1: Using ep0 maxpacket: 32 [ 623.534389][ T5915] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.556491][ T5915] usb 3-1: config 0 has no interfaces? [ 623.567134][ T5915] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 623.586602][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.607587][ T5915] usb 3-1: config 0 descriptor?? [ 623.858596][ T5915] usb 3-1: USB disconnect, device number 86 [ 623.989500][T25962] 8021q: adding VLAN 0 to HW filter on device macsec3 [ 624.537330][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 624.545173][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.545277][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.981419][T26002] kvm: user requested TSC rate below hardware speed [ 625.008894][T26003] netlink: 'syz.0.9306': attribute type 1 has an invalid length. [ 625.223644][T26013] tipc: New replicast peer: 255.255.255.255 [ 625.253356][T26013] tipc: Enabled bearer , priority 10 [ 625.492205][T20986] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 625.647157][T20986] usb 2-1: Using ep0 maxpacket: 16 [ 625.655306][T20986] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.673649][T20986] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 625.683616][T20986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.697502][T20986] usb 2-1: config 0 descriptor?? [ 626.152881][T20986] mcp2221 0003:04D8:00DD.0068: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 626.171229][ T29] audit: type=1326 audit(1776717204.998:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26032 comm="syz.3.9320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5baef9c819 code=0x7ffc0000 [ 626.220014][ T29] audit: type=1326 audit(1776717204.998:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26032 comm="syz.3.9320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f5baef9c819 code=0x7ffc0000 [ 626.288946][ T29] audit: type=1326 audit(1776717205.008:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26032 comm="syz.3.9320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5baef9c819 code=0x7ffc0000 [ 626.352724][ T29] audit: type=1326 audit(1776717205.008:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26032 comm="syz.3.9320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5baef9c819 code=0x7ffc0000 [ 626.396628][ T29] audit: type=1326 audit(1776717205.008:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26032 comm="syz.3.9320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f5baef9c819 code=0x7ffc0000 [ 626.449622][ T29] audit: type=1326 audit(1776717205.008:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26032 comm="syz.3.9320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5baef9c819 code=0x7ffc0000 [ 626.491658][ T29] audit: type=1326 audit(1776717205.008:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26032 comm="syz.3.9320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5baef9c819 code=0x7ffc0000 [ 626.518051][ T5933] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 626.554181][ T42] usb 2-1: USB disconnect, device number 65 [ 626.687831][ T5933] usb 1-1: Using ep0 maxpacket: 32 [ 626.698745][ T5933] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 626.730813][ T5933] usb 1-1: config 0 has no interface number 0 [ 626.755138][ T5933] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 626.772243][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.787929][ T5933] usb 1-1: Product: syz [ 626.792320][ T5933] usb 1-1: Manufacturer: syz [ 626.806358][ T5933] usb 1-1: SerialNumber: syz [ 626.829525][ T5933] usb 1-1: config 0 descriptor?? [ 626.839500][ T5933] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 627.037765][T20986] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 627.053648][ T5933] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 627.076575][ T5933] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 627.203582][T20986] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 627.226366][T20986] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.259151][T20986] usb 5-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 627.277194][T20986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.301235][T20986] usb 5-1: config 0 descriptor?? [ 627.499931][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 627.501892][ T5908] usb 1-1: USB disconnect, device number 65 [ 627.541377][ T5908] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 627.572776][ T5908] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 627.591520][ T5908] quatech2 1-1:0.51: device disconnected [ 627.687383][ T5915] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 627.739159][T20986] playstation 0003:054C:0BA0.0069: unknown main item tag 0x0 [ 627.746920][T20986] playstation 0003:054C:0BA0.0069: unknown main item tag 0x0 [ 627.755525][T20986] playstation 0003:054C:0BA0.0069: unknown main item tag 0x0 [ 627.764035][T20986] playstation 0003:054C:0BA0.0069: unknown main item tag 0x0 [ 627.773008][T20986] playstation 0003:054C:0BA0.0069: unknown main item tag 0x0 [ 627.785109][T20986] playstation 0003:054C:0BA0.0069: unknown main item tag 0x0 [ 627.793347][T20986] playstation 0003:054C:0BA0.0069: unknown main item tag 0x0 [ 627.803829][T20986] playstation 0003:054C:0BA0.0069: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.4-1/input0 [ 627.859497][ T5915] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 627.877570][ T5915] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 627.900585][ T5915] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 627.913883][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.922716][ T5915] usb 4-1: Product: syz [ 627.927478][ T5915] usb 4-1: Manufacturer: syz [ 627.932244][ T5915] usb 4-1: SerialNumber: syz [ 627.937883][T20986] playstation 0003:054C:0BA0.0069: Invalid reportID received, expected 18 got 179 [ 627.951479][ T5915] usb 4-1: config 0 descriptor?? [ 627.956631][T20986] playstation 0003:054C:0BA0.0069: Failed to retrieve DualShock4 pairing info: -22 [ 627.972876][ T5915] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 627.983172][T20986] playstation 0003:054C:0BA0.0069: Failed to get MAC address from DualShock4 [ 627.992847][T20986] playstation 0003:054C:0BA0.0069: Failed to create dualshock4. [ 628.008060][T20986] playstation 0003:054C:0BA0.0069: probe with driver playstation failed with error -22 [ 628.153035][ T42] usb 5-1: USB disconnect, device number 74 [ 628.578188][ T42] IPVS: starting estimator thread 0... [ 628.667843][T26106] IPVS: using max 26 ests per chain, 62400 per kthread [ 628.788370][ T5915] gspca_sunplus: reg_r err -71 [ 628.794268][ T5933] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 628.799170][ T5915] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 628.842329][ T5915] usb 4-1: USB disconnect, device number 66 [ 628.967909][ T5933] usb 2-1: Using ep0 maxpacket: 16 [ 628.976115][ T5933] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 628.985027][ T5933] usb 2-1: config 0 has no interface number 0 [ 628.993051][ T5933] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.005488][ T5933] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 629.016744][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.035421][ T5933] usb 2-1: config 0 descriptor?? [ 629.489607][ T5933] mcp2221 0003:04D8:00DD.006A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input2 [ 629.898741][ T5933] usb 2-1: USB disconnect, device number 66 [ 630.566650][T26159] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9375'. [ 630.624977][ T29] audit: type=1326 audit(1776717209.448:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26162 comm="syz.0.9377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897319c819 code=0x7ffc0000 [ 630.692560][ T29] audit: type=1326 audit(1776717209.448:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26162 comm="syz.0.9377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897319c819 code=0x7ffc0000 [ 630.762262][ T29] audit: type=1326 audit(1776717209.448:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26162 comm="syz.0.9377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f897319c819 code=0x7ffc0000 [ 631.011056][T26174] bond0: entered allmulticast mode [ 631.020340][T26174] bond_slave_0: entered allmulticast mode [ 631.034258][T26174] bond_slave_1: entered allmulticast mode [ 632.535431][T26222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9404'. [ 632.957477][ T5933] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 633.120893][ T5933] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 633.133405][ T5933] usb 4-1: config 0 interface 0 has no altsetting 0 [ 633.154657][ T5933] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 633.164433][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 633.173658][ T5933] usb 4-1: Product: syz [ 633.179455][ T5933] usb 4-1: Manufacturer: syz [ 633.184280][ T5933] usb 4-1: SerialNumber: syz [ 633.203837][ T5933] usb 4-1: config 0 descriptor?? [ 633.229691][ T5933] usb 4-1: selecting invalid altsetting 0 [ 633.280531][T26252] cgroup: fork rejected by pids controller in /syz4 [ 633.525682][ T5933] usb 4-1: USB disconnect, device number 67 [ 633.756487][T26262] netlink: 'syz.2.9424': attribute type 16 has an invalid length. [ 634.037850][ T42] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 634.103092][ T144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.135744][ T144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 634.212052][ T42] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 634.237300][ T42] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 634.275708][ T42] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 634.306318][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 634.316970][ T42] usb 2-1: SerialNumber: syz [ 634.356054][ T144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.366915][ T144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 634.566779][ T42] usb 2-1: 0:2 : does not exist [ 634.659257][ T144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.695394][ T144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 634.769447][ T42] usb 2-1: USB disconnect, device number 67 [ 635.039656][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 635.123571][ T5160] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 635.138358][ T5160] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 635.154150][ T5160] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 635.163147][ T5160] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 635.176240][ T5160] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 635.252033][ T144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.264507][ T144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 635.962643][ T144] bridge_slave_0: left allmulticast mode [ 635.985060][ T144] bridge_slave_0: left promiscuous mode [ 636.006251][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.108142][ T144] dvmrp0: left allmulticast mode [ 636.120634][ T144] lo: left allmulticast mode [ 636.376220][T26316] loop9: detected capacity change from 0 to 7 [ 636.416072][T26316] Dev loop9: unable to read RDB block 7 [ 636.423289][T26316] loop9: unable to read partition table [ 636.429770][T26316] loop9: partition table beyond EOD, truncated [ 636.437848][T26316] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 636.472133][ T144] ip6gretap0 (unregistering): left allmulticast mode [ 636.552107][T26317] Dev loop9: unable to read RDB block 7 [ 636.567965][T26317] loop9: unable to read partition table [ 636.574197][T26317] loop9: partition table beyond EOD, truncated [ 636.580773][T26317] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 637.267637][ T5849] Bluetooth: hci0: command tx timeout [ 637.355970][ T144] bond1 (unregistering): Released all slaves [ 637.379960][ T144] bond2 (unregistering): Released all slaves [ 637.404879][ T144] bond0 (unregistering): Released all slaves [ 637.430740][ T144] bond3 (unregistering): Released all slaves [ 637.468889][ T136] tipc: Resetting bearer [ 637.498175][T26290] chnl_net:caif_netlink_parms(): no params data found [ 637.792135][ T144] tipc: Disabling bearer [ 637.833003][ T144] tipc: Disabling bearer [ 637.841719][ T144] tipc: Left network mode [ 637.894865][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 637.894885][ T29] audit: type=1326 audit(1776717216.718:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26349 comm="syz.0.9456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897319c819 code=0x7ffc0000 [ 637.977358][ T5851] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 637.985382][ T29] audit: type=1326 audit(1776717216.718:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26349 comm="syz.0.9456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897319c819 code=0x7ffc0000 [ 638.026298][ T29] audit: type=1326 audit(1776717216.778:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26349 comm="syz.0.9456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f897319c819 code=0x7ffc0000 [ 638.123719][ T29] audit: type=1326 audit(1776717216.778:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26349 comm="syz.0.9456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897319c819 code=0x7ffc0000 [ 638.174790][ T5851] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 638.226758][T26290] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.232108][ T5851] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 638.257721][T26290] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.262215][ T29] audit: type=1326 audit(1776717216.778:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26349 comm="syz.0.9456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897319c819 code=0x7ffc0000 [ 638.289031][T26290] bridge_slave_0: entered allmulticast mode [ 638.305415][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.332228][T26290] bridge_slave_0: entered promiscuous mode [ 638.351086][ T5851] usb 2-1: config 0 descriptor?? [ 638.371626][T26344] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 638.387461][ T29] audit: type=1326 audit(1776717216.778:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26349 comm="syz.0.9456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f897319c819 code=0x7ffc0000 [ 638.414375][T26290] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.437231][T26290] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.489297][T26290] bridge_slave_1: entered allmulticast mode [ 638.496957][ T29] audit: type=1326 audit(1776717216.788:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26349 comm="syz.0.9456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897319c819 code=0x7ffc0000 [ 638.524962][T26290] bridge_slave_1: entered promiscuous mode [ 638.591489][ T29] audit: type=1326 audit(1776717216.788:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26349 comm="syz.0.9456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897319c819 code=0x7ffc0000 [ 638.673623][ T29] audit: type=1326 audit(1776717216.808:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26349 comm="syz.0.9456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f897319c819 code=0x7ffc0000 [ 638.758940][ T29] audit: type=1326 audit(1776717216.888:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26349 comm="syz.0.9456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897319c819 code=0x7ffc0000 [ 638.850638][ T5851] koneplus 0003:1E7D:2E22.006B: unknown main item tag 0x0 [ 638.878993][ T5851] koneplus 0003:1E7D:2E22.006B: unknown main item tag 0x0 [ 638.895409][T26290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.912098][ T5851] koneplus 0003:1E7D:2E22.006B: unknown main item tag 0x0 [ 638.936697][ T5851] koneplus 0003:1E7D:2E22.006B: unknown main item tag 0x0 [ 638.964087][ T5851] koneplus 0003:1E7D:2E22.006B: unknown main item tag 0x0 [ 638.978267][T26290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.999432][ T5851] koneplus 0003:1E7D:2E22.006B: unknown main item tag 0x0 [ 639.037617][ T5851] koneplus 0003:1E7D:2E22.006B: unknown main item tag 0x0 [ 639.048154][ T5851] koneplus 0003:1E7D:2E22.006B: unknown main item tag 0x0 [ 639.081419][ T5851] koneplus 0003:1E7D:2E22.006B: unknown main item tag 0x0 [ 639.117437][ T5851] koneplus 0003:1E7D:2E22.006B: unknown main item tag 0x0 [ 639.149441][ T5851] koneplus 0003:1E7D:2E22.006B: reserved main item tag 0xe [ 639.173786][ T5851] koneplus 0003:1E7D:2E22.006B: unexpected long global item [ 639.196410][ T5851] koneplus 0003:1E7D:2E22.006B: parse failed [ 639.224991][ T5851] koneplus 0003:1E7D:2E22.006B: probe with driver koneplus failed with error -22 [ 639.302936][ T5851] usb 2-1: USB disconnect, device number 68 [ 639.322246][T26290] team0: Port device team_slave_0 added [ 639.338030][ T5849] Bluetooth: hci0: command tx timeout [ 639.492376][T26290] team0: Port device team_slave_1 added [ 639.560712][ T5504] 8021q: adding VLAN 0 to HW filter on device eth2 [ 639.674090][T26290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 639.702748][T26290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 639.750245][T26290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 639.767264][T20986] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 639.831335][T26290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 639.846478][T26290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 639.896599][T26290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 639.981028][T20986] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 640.000692][T20986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.060280][T20986] usb 4-1: config 0 descriptor?? [ 640.092275][T20986] cp210x 4-1:0.0: cp210x converter detected [ 640.189782][ T144] hsr_slave_0: left promiscuous mode [ 640.210414][ T144] hsr_slave_1: left promiscuous mode [ 640.225524][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 640.243109][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 640.263833][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 640.279659][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 640.354553][ T144] veth1_macvtap: left promiscuous mode [ 640.366657][ T144] veth0_macvtap: left promiscuous mode [ 640.381864][ T144] veth1_vlan: left promiscuous mode [ 640.393510][ T144] veth0_vlan: left promiscuous mode [ 640.506330][T20986] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 640.556705][T20986] usb 4-1: cp210x converter now attached to ttyUSB0 [ 640.721418][T26395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9470'. [ 640.758154][ T5930] usb 4-1: USB disconnect, device number 68 [ 640.795220][ T5930] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 640.828122][ T5930] cp210x 4-1:0.0: device disconnected [ 640.864627][T26397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9471'. [ 641.166931][ T144] team_slave_1 (unregistering): left allmulticast mode [ 641.183966][ T144] team0 (unregistering): Port device team_slave_1 removed [ 641.228450][ T144] team_slave_0 (unregistering): left allmulticast mode [ 641.240730][ T144] team0 (unregistering): Port device team_slave_0 removed [ 641.427539][ T5849] Bluetooth: hci0: command tx timeout [ 641.551298][T26389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9467'. [ 641.592984][T26290] hsr_slave_0: entered promiscuous mode [ 641.621057][T26290] hsr_slave_1: entered promiscuous mode [ 641.704435][T26397] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 641.714850][T26397] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 642.256991][ T144] IPVS: stop unused estimator thread 0... [ 642.778208][T20986] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 642.977981][T20986] usb 4-1: Using ep0 maxpacket: 32 [ 642.994807][T20986] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 643.022879][T20986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.069943][T20986] usb 4-1: config 0 descriptor?? [ 643.301272][T20986] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 643.333447][T20986] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 643.359274][ T5908] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 643.390248][T20986] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 643.406824][T20986] usb 4-1: media controller created [ 643.427460][T26449] loop5: detected capacity change from 0 to 4095 [ 643.458172][T20986] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 643.497869][ T5849] Bluetooth: hci0: command tx timeout [ 643.509769][T26425] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 643.551047][T20986] az6027: usb out operation failed. (-71) [ 643.557407][T20986] az6027: usb out operation failed. (-71) [ 643.565584][T20986] stb0899_attach: Driver disabled by Kconfig [ 643.578539][ T5908] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 643.601367][T20986] az6027: no front-end attached [ 643.601367][T20986] [ 643.614516][ T5908] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 643.637602][T20986] az6027: usb out operation failed. (-71) [ 643.656901][T20986] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 643.665179][ T5908] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 643.691644][T20986] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input75 [ 643.725248][ T5908] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 643.741222][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.755499][T20986] dvb-usb: schedule remote query interval to 400 msecs. [ 643.773990][ T5908] usb 1-1: Product: syz [ 643.781204][T20986] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 643.790230][ T5908] usb 1-1: Manufacturer: syz [ 643.803013][ T5908] usb 1-1: SerialNumber: syz [ 643.822971][T20986] usb 4-1: USB disconnect, device number 69 [ 643.850840][ T5908] usb 1-1: config 0 descriptor?? [ 643.869733][T26441] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 643.877433][T26441] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 643.904118][ T5908] usb 1-1: ucan: probing device on interface #0 [ 644.074388][T20986] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 644.202849][T26290] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 644.231647][T26290] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 644.240422][T26290] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 644.261473][T26290] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 644.294515][T26290] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 644.340340][T26290] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 644.349426][T26290] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 644.375146][T26290] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 644.397964][ T5930] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 644.567248][ T5930] usb 2-1: Using ep0 maxpacket: 16 [ 644.584445][ T5908] ucan 1-1:0.0 can0: registered device [ 644.600379][ T5930] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 644.628858][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 644.658641][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 644.692478][ T5930] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 644.726490][ T5930] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 644.744976][ T5908] ucan 1-1:0.0 can0: firmware string: unknown [ 644.802906][ T5908] usb 1-1: USB disconnect, device number 66 [ 644.819808][ T5930] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 644.844779][ T5930] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 644.855467][T26290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.884060][ T5930] usb 2-1: Manufacturer: syz [ 644.919570][ T5930] usb 2-1: config 0 descriptor?? [ 645.050230][T26290] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.081924][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.089383][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.186480][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.193795][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.357137][ T5930] rc_core: IR keymap rc-hauppauge not found [ 645.379601][ T5930] Registered IR keymap rc-empty [ 645.410204][ T5930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 645.459099][ T5930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 645.494287][ T5930] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 645.524968][T26290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 645.543153][ T5930] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input76 [ 645.603337][ T5930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 645.637420][ T5930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 645.683241][ T5930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 645.722930][T26290] veth0_vlan: entered promiscuous mode [ 645.737736][ T5930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 645.767242][ T5930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 645.813420][T26290] veth1_vlan: entered promiscuous mode [ 645.820411][ T5930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 645.867952][ T5930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 645.907669][ T5930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 645.940690][T26506] loop4: detected capacity change from 0 to 1 [ 645.954521][ T5930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 645.970920][T26506] Dev loop4: unable to read RDB block 1 [ 645.986888][T26506] loop4: unable to read partition table [ 645.993156][ T5930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 646.010922][T26506] loop4: partition table beyond EOD, truncated [ 646.012149][T26290] veth0_macvtap: entered promiscuous mode [ 646.025168][T26506] loop_reread_partitions: partition scan of loop4 (þ被xü^>Ñà– ) failed (rc=-5) [ 646.045040][ T5930] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 646.075207][ T5930] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 646.085582][T26290] veth1_macvtap: entered promiscuous mode [ 646.121321][ T5930] usb 2-1: USB disconnect, device number 69 [ 646.203525][T26290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 646.281402][T26290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 646.365931][ T158] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.412780][ T158] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.454596][T26517] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9503'. [ 646.461228][ T158] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.483657][ T158] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.794174][T26522] sctp: [Deprecated]: syz.2.9504 (pid 26522) Use of int in maxseg socket option. [ 646.794174][T26522] Use struct sctp_assoc_value instead [ 646.876382][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.914911][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.062387][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.082218][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.044790][T26565] tun0: tun_chr_ioctl cmd 2148553947 [ 648.319521][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 648.319541][ T29] audit: type=1326 audit(1776717227.148:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26576 comm="syz.2.9529" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe4eff9c819 code=0x0 [ 648.353378][T26580] netlink: 'syz.0.9530': attribute type 22 has an invalid length. [ 648.363980][T26580] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9530'. [ 648.378059][T26580] netlink: 'syz.0.9530': attribute type 22 has an invalid length. [ 648.386584][T26580] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9530'. [ 648.507498][ T24] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 648.635880][T26593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9536'. [ 648.678926][ T24] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 648.701232][ T24] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 648.729859][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 648.751199][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 648.773133][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 648.807610][ T24] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 648.817449][ T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 648.829941][ T24] usb 5-1: Product: syz [ 648.848923][ T24] usb 5-1: Manufacturer: syz [ 648.863133][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 648.889282][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 648.900868][ T24] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 648.906947][ T24] cdc_wdm 5-1:1.0: Unknown control protocol [ 649.142738][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 649.146198][ T5908] usb 5-1: USB disconnect, device number 75 [ 649.149536][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 649.149560][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 649.383063][T26618] input: syz1 as /devices/virtual/input/input77 [ 649.597429][T20986] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 649.777238][T20986] usb 3-1: Using ep0 maxpacket: 16 [ 649.785394][T20986] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 649.797211][T20986] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 649.806502][T20986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.828140][T20986] usb 3-1: config 0 descriptor?? [ 649.848790][T20986] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input78 [ 649.927427][ T5908] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 650.048396][ T5194] bcm5974 3-1:0.0: could not read from device [ 650.076876][ T5194] bcm5974 3-1:0.0: could not read from device [ 650.088840][T20986] usb 3-1: USB disconnect, device number 87 [ 650.097410][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 650.106406][ T5194] bcm5974 3-1:0.0: could not read from device [ 650.121548][ T5908] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 650.133422][ T5908] usb 4-1: config 0 has no interface number 0 [ 650.152611][ T5908] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 650.172707][ T5908] usb 4-1: config 0 interface 85 has no altsetting 0 [ 650.183600][ T5908] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 650.193560][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.203025][ T5908] usb 4-1: Product: syz [ 650.208039][ T5908] usb 4-1: Manufacturer: syz [ 650.213616][ T5908] usb 4-1: SerialNumber: syz [ 650.236435][ T5908] usb 4-1: config 0 descriptor?? [ 650.577263][ T809] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 650.747330][ T809] usb 2-1: Using ep0 maxpacket: 8 [ 650.762027][ T809] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 650.774271][ T809] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 650.788190][ T809] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 650.798774][ T809] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 650.809379][ T809] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 650.823044][ T809] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 650.857761][T26645] loop2: detected capacity change from 0 to 7 [ 650.866567][ T5908] appletouch 4-1:0.85: Geyser mode initialized. [ 650.883669][T26645] Dev loop2: unable to read RDB block 7 [ 650.890713][ T809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.901019][T26645] loop2: AHDI p1 p2 [ 650.910210][T26645] loop2: partition table partially beyond EOD, truncated [ 650.914878][ T5908] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input79 [ 650.927888][T26645] loop2: p1 start 1700753509 is beyond EOD, truncated [ 651.096577][ T5933] usb 4-1: USB disconnect, device number 70 [ 651.158504][ T809] usb 2-1: GET_CAPABILITIES returned 0 [ 651.170490][ T809] usbtmc 2-1:16.0: can't read capabilities [ 651.179788][ T5933] appletouch 4-1:0.85: input: appletouch disconnected [ 651.402210][T26638] usb 2-1: usbtmc_ioctl_clear_out_halt returned -32 [ 651.423804][T26659] program syz.0.9563 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 651.441997][ T5933] usb 2-1: USB disconnect, device number 70 [ 652.097241][ T809] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 652.270789][ T809] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 652.295538][ T809] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 652.317600][ T809] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 652.336320][ T809] usb 4-1: config 0 interface 0 has no altsetting 0 [ 652.373859][ T809] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 652.389732][ T809] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 652.417209][T20986] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 652.425010][ T809] usb 4-1: config 0 interface 0 has no altsetting 0 [ 652.434166][ T809] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 652.448244][ T809] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 652.459429][ T809] usb 4-1: config 0 interface 0 has no altsetting 0 [ 652.468146][ T809] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 652.478212][ T809] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 652.489799][ T809] usb 4-1: config 0 interface 0 has no altsetting 0 [ 652.498649][ T809] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 652.517766][ T809] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 652.537113][ T809] usb 4-1: config 0 interface 0 has no altsetting 0 [ 652.549489][ T809] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 652.558803][ T809] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 652.573435][ T809] usb 4-1: config 0 interface 0 has no altsetting 0 [ 652.582519][ T809] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 652.591920][ T809] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 652.613320][T20986] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 652.627175][ T809] usb 4-1: config 0 interface 0 has no altsetting 0 [ 652.637071][T20986] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 652.645770][T26689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9577'. [ 652.662240][ T809] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 652.677117][T20986] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 652.687794][ T809] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 652.707161][T20986] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 652.721482][ T809] usb 4-1: config 0 interface 0 has no altsetting 0 [ 652.738756][T20986] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 652.755209][ T809] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 652.765609][ T809] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 652.779521][T20986] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 652.790984][ T809] usb 4-1: Product: syz [ 652.795266][T20986] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 652.803868][ T809] usb 4-1: Manufacturer: syz [ 652.808924][ T809] usb 4-1: SerialNumber: syz [ 652.813777][T20986] usb 3-1: Product: syz [ 652.820046][T20986] usb 3-1: Manufacturer: syz [ 652.826635][ T809] usb 4-1: config 0 descriptor?? [ 652.853137][T20986] cdc_wdm 3-1:1.0: skipping garbage [ 652.866623][ T809] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 652.874247][T20986] cdc_wdm 3-1:1.0: skipping garbage [ 652.906281][T20986] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 652.916302][T20986] cdc_wdm 3-1:1.0: Unknown control protocol [ 653.066586][T20986] usb 3-1: USB disconnect, device number 88 [ 653.149118][ T29] audit: type=1326 audit(1776717231.978:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26697 comm="syz.0.9581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897319c819 code=0x7ffc0000 [ 653.186087][ T29] audit: type=1326 audit(1776717231.978:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26697 comm="syz.0.9581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897319c819 code=0x7ffc0000 [ 653.198967][ C0] usb 4-1: yurex_control_callback - control failed: -71 [ 653.215718][ T29] audit: type=1326 audit(1776717231.978:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26697 comm="syz.0.9581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897319c819 code=0x7ffc0000 [ 653.256688][ T29] audit: type=1326 audit(1776717231.978:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26697 comm="syz.0.9581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897319c819 code=0x7ffc0000 [ 653.294581][ T5908] usb 4-1: USB disconnect, device number 71 [ 653.303659][ T29] audit: type=1326 audit(1776717231.978:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26697 comm="syz.0.9581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f897319c819 code=0x7ffc0000 [ 653.340192][ T5908] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 653.395203][ T29] audit: type=1326 audit(1776717231.978:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26697 comm="syz.0.9581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897319c819 code=0x7ffc0000 [ 653.449058][ T29] audit: type=1326 audit(1776717231.978:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26697 comm="syz.0.9581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897319c819 code=0x7ffc0000 [ 653.473905][ T29] audit: type=1326 audit(1776717231.978:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26697 comm="syz.0.9581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897319c819 code=0x7ffc0000 [ 653.505807][T26707] Attempt to restore checkpoint with obsolete wellknown handles [ 653.515447][ T29] audit: type=1326 audit(1776717231.978:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26697 comm="syz.0.9581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f897319c819 code=0x7ffc0000 [ 653.603995][ T29] audit: type=1326 audit(1776717231.978:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26697 comm="syz.0.9581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897319c819 code=0x7ffc0000 [ 653.655868][ T29] audit: type=1326 audit(1776717231.978:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26697 comm="syz.0.9581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897319c819 code=0x7ffc0000 [ 653.686208][ T29] audit: type=1326 audit(1776717232.008:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26697 comm="syz.0.9581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897319c819 code=0x7ffc0000 [ 653.770085][ T29] audit: type=1326 audit(1776717231.978:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26697 comm="syz.0.9581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897319c819 code=0x7ffc0000 [ 653.830231][ T29] audit: type=1326 audit(1776717232.008:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26697 comm="syz.0.9581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f897319c819 code=0x7ffc0000 [ 653.900553][ T29] audit: type=1326 audit(1776717232.008:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26697 comm="syz.0.9581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897319c819 code=0x7ffc0000 [ 655.009752][T26763] input: syz0 as /devices/virtual/input/input80 [ 655.103081][T20986] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 655.281743][T20986] usb 1-1: Using ep0 maxpacket: 32 [ 655.304857][T20986] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 655.326711][T20986] usb 1-1: config 2 has no interface number 0 [ 655.347520][T20986] usb 1-1: config 2 interface 88 has no altsetting 0 [ 655.368858][T20986] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 655.386560][T20986] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.430614][T20986] usb 1-1: Product: syz [ 655.450152][T20986] usb 1-1: Manufacturer: syz [ 655.475830][T20986] usb 1-1: SerialNumber: syz [ 656.331600][T20986] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 656.362064][T20986] asix 1-1:2.88: probe with driver asix failed with error -71 [ 656.399159][T20986] usb 1-1: USB disconnect, device number 67 [ 656.529241][T26793] netlink: 136 bytes leftover after parsing attributes in process `syz.1.9622'. [ 656.567165][T26793] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 656.967527][T20986] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 657.138199][T20986] usb 4-1: Using ep0 maxpacket: 16 [ 657.151687][T20986] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 657.172379][T20986] usb 4-1: config 0 has no interface number 0 [ 657.203775][T20986] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 657.248521][T20986] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 657.281860][T20986] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 657.306955][T20986] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 657.331566][T20986] usb 4-1: Product: syz [ 657.346139][T20986] usb 4-1: SerialNumber: syz [ 657.372815][T20986] usb 4-1: config 0 descriptor?? [ 657.403854][T20986] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 657.444563][T20986] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input81 [ 657.688450][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 657.696122][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 657.703774][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 657.711019][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 657.718227][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 657.725445][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 657.732716][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 657.739938][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 657.747159][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 657.754428][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 657.773728][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 657.782920][T20986] usb 4-1: USB disconnect, device number 72 [ 657.850475][T20986] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 658.075587][T26835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9641'. [ 658.102937][T26835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9641'. [ 658.143875][ T47] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 658.155516][ T47] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 658.180117][ T47] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 658.208872][ T47] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 658.419106][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 658.419127][ T29] audit: type=1800 audit(1776717237.248:764): pid=26841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.9643" name="file0" dev="tmpfs" ino=4472 res=0 errno=0 [ 659.259054][T20986] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 659.429119][T20986] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 659.461829][T20986] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 659.509110][T20986] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 659.538792][T20986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.575556][T20986] usb 2-1: config 0 descriptor?? [ 660.014112][T20986] hid_parser_main: 448 callbacks suppressed [ 660.014149][T20986] saitek 0003:06A3:0621.006C: unknown main item tag 0x0 [ 660.039916][T20986] saitek 0003:06A3:0621.006C: unknown main item tag 0x0 [ 660.063492][T20986] saitek 0003:06A3:0621.006C: unknown main item tag 0x0 [ 660.077235][T20986] saitek 0003:06A3:0621.006C: unknown main item tag 0x0 [ 660.097246][T20986] saitek 0003:06A3:0621.006C: unknown main item tag 0x0 [ 660.104350][T20986] saitek 0003:06A3:0621.006C: unknown main item tag 0x0 [ 660.121457][T20986] saitek 0003:06A3:0621.006C: unknown main item tag 0x0 [ 660.136427][T20986] saitek 0003:06A3:0621.006C: unknown main item tag 0x0 [ 660.156350][T20986] saitek 0003:06A3:0621.006C: unknown main item tag 0x0 [ 660.166728][T20986] saitek 0003:06A3:0621.006C: unknown main item tag 0x0 [ 660.185160][T20986] saitek 0003:06A3:0621.006C: hidraw0: USB HID v0.fe Device [HID 06a3:0621] on usb-dummy_hcd.1-1/input0 [ 660.225130][T20986] usb 2-1: USB disconnect, device number 71 [ 660.380849][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 660.393678][T26891] fido_id[26891]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 660.655485][T26900] tipc: Started in network mode [ 660.674693][T26900] tipc: Node identity ac14140f, cluster identity 4711 [ 660.692415][T26900] tipc: New replicast peer: 255.255.255.255 [ 660.708425][T26900] tipc: Enabled bearer , priority 10 [ 660.725110][T26903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9670'. [ 660.752953][T26903] tipc: Disabling bearer [ 660.948876][T26911] could not allocate digest TFM handle _!5Á’›ã(ìÛiÀ£ïÕHP,ƒomñ«xúÄ™í©*Ô71U"~Âß ‘2.Ë>£~e’…ñŠ>/yµ™ [ 661.266127][ T29] audit: type=1326 audit(1776717240.088:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26919 comm="syz.0.9679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897319c819 code=0x7ffc0000 [ 661.337250][ T29] audit: type=1326 audit(1776717240.088:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26919 comm="syz.0.9679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897319c819 code=0x7ffc0000 [ 661.394123][ T29] audit: type=1326 audit(1776717240.128:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26919 comm="syz.0.9679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f897319c819 code=0x7ffc0000 [ 661.467634][ T29] audit: type=1326 audit(1776717240.128:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26919 comm="syz.0.9679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897319c819 code=0x7ffc0000 [ 661.557735][ T29] audit: type=1326 audit(1776717240.128:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26919 comm="syz.0.9679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f897315d04e code=0x7ffc0000 [ 661.604453][ T29] audit: type=1326 audit(1776717240.128:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26919 comm="syz.0.9679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897319c819 code=0x7ffc0000 [ 661.675602][ T29] audit: type=1326 audit(1776717240.128:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26919 comm="syz.0.9679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f897319c819 code=0x7ffc0000 [ 661.753421][ T29] audit: type=1326 audit(1776717240.128:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26919 comm="syz.0.9679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897319c819 code=0x7ffc0000 [ 661.819822][ T29] audit: type=1326 audit(1776717240.128:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26919 comm="syz.0.9679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897319c819 code=0x7ffc0000 [ 662.397144][T20986] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 662.579435][T20986] usb 2-1: config 0 has no interfaces? [ 662.592482][T20986] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 662.616486][T20986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.642922][T20986] usb 2-1: config 0 descriptor?? [ 662.896391][T26950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.923331][T26950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.942039][T20986] usb 2-1: USB disconnect, device number 72 [ 663.397436][ T42] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 663.438728][T20986] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 663.547899][ T809] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 663.559904][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.571311][ T42] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice= 0.40 [ 663.580897][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.592093][ T42] usb 2-1: config 0 descriptor?? [ 663.608112][T20986] usb 3-1: Using ep0 maxpacket: 8 [ 663.622049][T20986] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 663.640587][T20986] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 663.651188][T20986] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 663.661913][T20986] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 663.675561][T20986] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 663.685075][T20986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.691049][ T24] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 663.710282][ T5849] Bluetooth: hci5: urb ffff88803668f200 submission failed (2) [ 663.748314][ T809] usb 5-1: Using ep0 maxpacket: 8 [ 663.755667][ T809] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 663.764419][ T809] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 663.774354][ T809] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 663.785127][ T5908] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 663.793030][ T809] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 663.803185][ T809] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 663.816673][ T809] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 663.827255][ T809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.849930][ T42] usb 2-1: USB disconnect, device number 73 [ 663.860529][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 663.876369][ T24] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 663.938769][ T24] usb 1-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 663.952075][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.958856][T20986] usb 3-1: GET_CAPABILITIES returned 0 [ 663.965801][T20986] usbtmc 3-1:16.0: can't read capabilities [ 663.971945][ T5908] usb 4-1: Using ep0 maxpacket: 8 [ 663.981174][ T5908] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 663.986673][ T24] usb 1-1: Product: syz [ 664.003050][ T24] usb 1-1: Manufacturer: syz [ 664.006352][ T5908] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 664.010127][ T24] usb 1-1: SerialNumber: syz [ 664.023143][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.031927][ T5908] usb 4-1: Product: syz [ 664.039860][ T24] usb 1-1: config 0 descriptor?? [ 664.051966][ T5908] usb 4-1: Manufacturer: syz [ 664.052267][ T809] usb 5-1: GET_CAPABILITIES returned 0 [ 664.066093][ T5908] usb 4-1: SerialNumber: syz [ 664.073539][ T809] usbtmc 5-1:16.0: can't read capabilities [ 664.084668][ T5908] usb 4-1: config 0 descriptor?? [ 664.100695][ T5908] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 664.170034][ T42] usb 3-1: USB disconnect, device number 89 [ 664.259131][ T24] usb 1-1: USB disconnect, device number 68 [ 664.272256][ T809] usb 5-1: USB disconnect, device number 76 [ 664.711281][ T5908] gspca_zc3xx: reg_w_i err -71 [ 664.997202][ T809] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 665.169446][ T809] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 665.198088][ T29] audit: type=1326 audit(1776717244.028:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27022 comm="syz.1.9727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c2d9c819 code=0x7ffc0000 [ 665.206245][ T809] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 665.246165][ T29] audit: type=1326 audit(1776717244.028:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27022 comm="syz.1.9727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c2d9c819 code=0x7ffc0000 [ 665.263336][ T809] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 665.291873][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.320888][ T29] audit: type=1326 audit(1776717244.068:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27022 comm="syz.1.9727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc1c2d9c819 code=0x7ffc0000 [ 665.327339][ T5908] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 665.371716][T27006] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 665.396970][ T809] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 665.398107][ T29] audit: type=1326 audit(1776717244.068:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27022 comm="syz.1.9727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c2d9c819 code=0x7ffc0000 [ 665.416766][ T5908] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 665.480624][ T5908] usb 4-1: USB disconnect, device number 73 [ 665.517163][ T29] audit: type=1326 audit(1776717244.068:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27022 comm="syz.1.9727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c2d9c819 code=0x7ffc0000 [ 665.605840][ T29] audit: type=1326 audit(1776717244.068:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27022 comm="syz.1.9727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc1c2d9c819 code=0x7ffc0000 [ 665.691277][ T29] audit: type=1326 audit(1776717244.068:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27022 comm="syz.1.9727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c2d9c819 code=0x7ffc0000 [ 665.767349][ T24] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 665.794334][ T29] audit: type=1326 audit(1776717244.068:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27022 comm="syz.1.9727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c2d9c819 code=0x7ffc0000 [ 665.810637][ T809] usb 3-1: USB disconnect, device number 90 [ 665.847173][ T29] audit: type=1326 audit(1776717244.068:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27022 comm="syz.1.9727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7fc1c2d9c819 code=0x7ffc0000 [ 665.922971][ T29] audit: type=1326 audit(1776717244.068:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27022 comm="syz.1.9727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c2d9c819 code=0x7ffc0000 [ 665.981055][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 665.996073][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 666.018445][ T24] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 666.027929][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 666.046213][ T24] usb 5-1: SerialNumber: syz [ 666.301260][ T24] usb 5-1: 0:2 : does not exist [ 666.340855][T27049] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9740'. [ 666.397814][ T24] usb 5-1: USB disconnect, device number 77 [ 666.474652][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 666.847213][ T5908] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 667.007122][ T5908] usb 2-1: Using ep0 maxpacket: 16 [ 667.019439][ T5908] usb 2-1: config 0 has no interfaces? [ 667.031743][ T5908] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 667.048618][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.066928][ T5908] usb 2-1: Product: syz [ 667.074346][ T5908] usb 2-1: Manufacturer: syz [ 667.089557][ T5908] usb 2-1: SerialNumber: syz [ 667.111630][ T5908] usb 2-1: config 0 descriptor?? [ 667.400352][ T5908] usb 2-1: USB disconnect, device number 74 [ 667.677273][ T24] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 667.843585][ T24] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 667.866214][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.885075][ T24] usb 5-1: Product: syz [ 667.895209][ T24] usb 5-1: Manufacturer: syz [ 667.905328][ T24] usb 5-1: SerialNumber: syz [ 668.201745][ T24] rtl8150 5-1:1.0: couldn't reset the device [ 668.232921][ T24] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 668.269013][ T24] usb 5-1: USB disconnect, device number 78 [ 668.426944][T27107] xt_hashlimit: size too large, truncated to 1048576 [ 668.784512][T27117] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9768'. [ 668.816846][T27117] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9768'. [ 668.831593][T27117] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9768'. [ 668.996984][ T5908] hid_parser_main: 28 callbacks suppressed [ 669.020490][ T5908] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 669.039760][ T5908] hid-generic 0000:0000:0000.006D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 669.187845][ T24] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 669.357453][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 669.379810][ T24] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 669.407599][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 669.422997][ T24] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 669.443245][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.465747][ T24] usb 4-1: config 0 descriptor?? [ 669.923134][ T24] mcp2221 0003:04D8:00DD.006E: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 670.359666][ T24] usb 4-1: USB disconnect, device number 74 [ 670.420409][T27170] bond0: entered promiscuous mode [ 670.436221][T27170] bond_slave_0: entered promiscuous mode [ 670.456526][T27170] bond_slave_1: entered promiscuous mode [ 670.480946][T27170] bond0: left promiscuous mode [ 670.486379][T27170] bond_slave_0: left promiscuous mode [ 670.514507][T27170] bond_slave_1: left promiscuous mode [ 671.569687][ T24] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 671.739552][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 671.769069][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 671.799882][ T24] usb 5-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00 [ 671.820647][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.844745][ T24] usb 5-1: config 0 descriptor?? [ 671.859510][T27204] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 672.293186][T27204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.316663][T27204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.360352][ T24] holtek_mouse 0003:04D9:A0C2.006F: unknown main item tag 0x0 [ 672.398421][ T24] holtek_mouse 0003:04D9:A0C2.006F: unknown main item tag 0x0 [ 672.413636][ T24] holtek_mouse 0003:04D9:A0C2.006F: unknown main item tag 0x0 [ 672.422833][ T24] holtek_mouse 0003:04D9:A0C2.006F: unknown main item tag 0x0 [ 672.430876][ T24] holtek_mouse 0003:04D9:A0C2.006F: unknown main item tag 0x0 [ 672.438603][ T24] holtek_mouse 0003:04D9:A0C2.006F: unknown main item tag 0x0 [ 672.446179][ T24] holtek_mouse 0003:04D9:A0C2.006F: unknown main item tag 0x0 [ 672.454197][ T24] holtek_mouse 0003:04D9:A0C2.006F: unknown main item tag 0x0 [ 672.465273][ T24] holtek_mouse 0003:04D9:A0C2.006F: unknown main item tag 0x0 [ 672.489122][ T24] holtek_mouse 0003:04D9:A0C2.006F: unexpected long global item [ 672.508318][ T24] holtek_mouse 0003:04D9:A0C2.006F: hid parse failed: -22 [ 672.517931][ T24] holtek_mouse 0003:04D9:A0C2.006F: probe with driver holtek_mouse failed with error -22 [ 672.602431][ T5908] usb 5-1: USB disconnect, device number 79 [ 672.627538][ T809] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 672.801598][ T809] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 672.813085][ T809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.825329][ T809] usb 3-1: Product: syz [ 672.833336][ T809] usb 3-1: Manufacturer: syz [ 672.840549][ T809] usb 3-1: SerialNumber: syz [ 673.477851][ T809] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 673.511517][ T809] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 673.580795][ T809] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 673.612751][ T809] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 673.650452][ T809] usb 3-1: USB disconnect, device number 91 [ 673.963180][T27270] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9836'. [ 673.978282][T27270] netlink: 'syz.3.9836': attribute type 7 has an invalid length. [ 673.986278][T27270] netlink: 'syz.3.9836': attribute type 8 has an invalid length. [ 673.995805][T27270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9836'. [ 674.727674][ T5908] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 674.882496][T27299] sch_tbf: burst 0 is lower than device vcan0 mtu (2060) ! [ 674.897291][ T5908] usb 2-1: Using ep0 maxpacket: 32 [ 674.907146][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12336, setting to 1024 [ 674.931459][ T5908] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 674.964162][ T5908] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 674.984701][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 674.997867][T27304] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9850'. [ 675.002433][ T5908] usb 2-1: Product: syz [ 675.011992][ T5908] usb 2-1: Manufacturer: syz [ 675.016746][ T5908] usb 2-1: SerialNumber: syz [ 675.026961][ T5908] usb 2-1: config 0 descriptor?? [ 675.048182][T27287] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 675.259827][ T42] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 675.302589][ T5908] usb 2-1: USB disconnect, device number 75 [ 675.427464][ T42] usb 4-1: Using ep0 maxpacket: 16 [ 675.439029][ T42] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.451508][ T42] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 675.484818][ T42] usb 4-1: New USB device found, idVendor=0e8d, idProduct=00a7, bcdDevice=b5.31 [ 675.502867][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.520860][ T42] usb 4-1: Product: syz [ 675.531849][ T42] usb 4-1: Manufacturer: syz [ 675.544594][ T42] usb 4-1: SerialNumber: syz [ 675.565074][ T42] usb 4-1: config 0 descriptor?? [ 675.730021][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 675.730041][ T29] audit: type=1326 audit(1776717254.558:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27332 comm="syz.4.9863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ec79c819 code=0x7ffc0000 [ 675.760098][ T29] audit: type=1326 audit(1776717254.558:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27332 comm="syz.4.9863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ec79c819 code=0x7ffc0000 [ 675.786092][ T29] audit: type=1326 audit(1776717254.558:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27332 comm="syz.4.9863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe9ec79c819 code=0x7ffc0000 [ 675.817689][ T29] audit: type=1326 audit(1776717254.558:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27332 comm="syz.4.9863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ec79c819 code=0x7ffc0000 [ 675.845946][T27305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.862550][T27305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.870101][ T29] audit: type=1326 audit(1776717254.558:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27332 comm="syz.4.9863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ec79c819 code=0x7ffc0000 [ 675.894799][ T5908] usb 4-1: USB disconnect, device number 75 [ 675.914261][T27333] IPVS: Scheduler module ip_vs_ not found [ 675.930689][ T29] audit: type=1326 audit(1776717254.558:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27332 comm="syz.4.9863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe9ec79c819 code=0x7ffc0000 [ 675.986650][ T29] audit: type=1326 audit(1776717254.788:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27332 comm="syz.4.9863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ec79c819 code=0x7ffc0000 [ 676.032561][ T29] audit: type=1326 audit(1776717254.788:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27332 comm="syz.4.9863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ec79c819 code=0x7ffc0000 [ 676.267570][ T42] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 676.335956][T27352] batman_adv: batadv0: Adding interface: ipvlan2 [ 676.342803][T27352] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.371593][T27352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 676.385839][T27352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.396330][T27352] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 676.419884][ T42] usb 3-1: Using ep0 maxpacket: 8 [ 676.427132][ T5908] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 676.435212][ T42] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 676.452792][ T42] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 676.461947][ T42] usb 3-1: config 0 has no interface number 0 [ 676.468829][ T42] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 676.481780][ T42] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 676.495791][ T42] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 676.510799][ T42] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 676.520539][ T42] usb 3-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 676.532267][ T42] usb 3-1: Product: syz [ 676.536604][ T42] usb 3-1: Manufacturer: syz [ 676.555515][ T42] usb 3-1: config 0 descriptor?? [ 676.566764][T27336] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 676.600585][ T5908] usb 4-1: config 0 has an invalid interface number: 229 but max is 0 [ 676.618753][ T5908] usb 4-1: config 0 has no interface number 0 [ 676.648301][ T5908] usb 4-1: config 0 interface 229 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 676.676553][ T5908] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38 [ 676.695235][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.704520][ T5908] usb 4-1: Product: syz [ 676.711008][ T5908] usb 4-1: Manufacturer: syz [ 676.715796][ T5908] usb 4-1: SerialNumber: syz [ 676.724040][ T5908] usb 4-1: config 0 descriptor?? [ 676.979484][ T5908] usb 4-1: USB disconnect, device number 76 [ 677.194992][ T42] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input82 [ 677.285220][T27372] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9880'. [ 677.401570][ T42] usb 3-1: USB disconnect, device number 92 [ 677.408070][ C1] keyspan_remote 3-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 677.997432][ T5930] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 678.167659][ T5930] usb 2-1: Using ep0 maxpacket: 32 [ 678.178978][ T5930] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 678.191080][ T5930] usb 2-1: config 0 has no interface number 0 [ 678.197971][ T5930] usb 2-1: config 0 interface 12 has no altsetting 0 [ 678.207868][ T5930] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 678.229161][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.243954][ T5930] usb 2-1: Product: syz [ 678.253529][ T5930] usb 2-1: Manufacturer: syz [ 678.258618][ T5930] usb 2-1: SerialNumber: syz [ 678.271521][ T5930] usb 2-1: config 0 descriptor?? [ 678.905084][T27432] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.912963][T27432] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.947213][ T5908] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 679.045405][T27432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 679.066764][T27432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 679.104054][ T5930] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 679.130603][ T5908] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 679.141387][ T5930] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 679.150351][ T5908] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 679.159703][ T5930] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 679.171243][ T5908] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 679.190923][ T5930] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 679.222195][ T5908] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 679.236460][ T5930] usb 2-1: USB disconnect, device number 76 [ 679.252570][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.266917][ T5908] usb 1-1: Product: syz [ 679.289796][ T5908] usb 1-1: Manufacturer: syz [ 679.300751][ T5908] usb 1-1: SerialNumber: syz [ 679.322111][ T5908] usb 1-1: config 0 descriptor?? [ 679.362764][ T5908] uvcvideo 1-1:0.0: probe with driver uvcvideo failed with error -22 [ 679.511601][ T136] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.523921][ T136] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.545364][ T136] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.552706][ T5933] usb 1-1: USB disconnect, device number 69 [ 679.566274][ T136] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.595610][ T136] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.619116][ T136] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.629083][ T136] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.638505][ T136] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.679667][ T5851] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 679.841134][ T5851] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 679.862451][ T5851] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 679.884872][ T5851] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 679.904356][ T5851] usb 3-1: config 0 interface 0 has no altsetting 0 [ 679.913443][ T5851] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 679.923361][ T5851] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 679.935506][ T5851] usb 3-1: config 0 interface 0 has no altsetting 0 [ 679.955021][ T5851] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 679.974624][ T5851] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 679.992869][ T5851] usb 3-1: config 0 interface 0 has no altsetting 0 [ 680.007545][ T5851] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 680.017448][ T5851] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 680.030354][ T5851] usb 3-1: config 0 interface 0 has no altsetting 0 [ 680.046536][ T5851] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 680.067463][ T5851] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 680.081725][ T5851] usb 3-1: config 0 interface 0 has no altsetting 0 [ 680.096631][ T5851] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 680.123432][ T5851] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 680.145236][ T5851] usb 3-1: config 0 interface 0 has no altsetting 0 [ 680.161107][ T5851] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 680.177567][ T5851] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 680.207678][ T5851] usb 3-1: config 0 interface 0 has no altsetting 0 [ 680.227803][ T5851] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 680.247625][ T5851] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 680.271006][ T5851] usb 3-1: config 0 interface 0 has no altsetting 0 [ 680.289763][ T5851] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 680.307490][ T5851] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 680.326437][ T5851] usb 3-1: Product: syz [ 680.332784][ T5851] usb 3-1: Manufacturer: syz [ 680.342662][ T5851] usb 3-1: SerialNumber: syz [ 680.357173][ T5908] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 680.367755][ T5851] usb 3-1: config 0 descriptor?? [ 680.397939][ T5851] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 680.517095][ T5908] usb 5-1: Using ep0 maxpacket: 32 [ 680.537591][ T5908] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 680.549536][ T5908] usb 5-1: config 0 has no interface number 0 [ 680.564987][ T5908] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 680.581805][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.601660][ T5908] usb 5-1: Product: syz [ 680.610789][ T5908] usb 5-1: Manufacturer: syz [ 680.624104][ T5908] usb 5-1: SerialNumber: syz [ 680.633064][ T5908] usb 5-1: config 0 descriptor?? [ 680.649206][ T5908] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 680.680622][ C1] usb 3-1: yurex_control_callback - control failed: -71 [ 680.688923][ T42] usb 3-1: USB disconnect, device number 93 [ 680.704696][ T42] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 680.807717][T27484] netlink: 'syz.0.9932': attribute type 8 has an invalid length. [ 680.816378][T27484] sch_fq: defrate 0 ignored. [ 680.891236][ T5908] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 680.923391][ T5908] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 681.073888][T27460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.086734][T27460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.245431][T27499] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9938'. [ 681.258558][ T5908] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 681.268873][T27499] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9938'. [ 681.303406][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 681.313760][ T809] usb 5-1: USB disconnect, device number 80 [ 681.335258][ T809] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 681.366067][ T809] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 681.379252][ T809] quatech2 5-1:0.51: device disconnected [ 681.428321][ T5908] usb 2-1: Using ep0 maxpacket: 8 [ 681.446541][ T5908] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 681.464960][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.480220][ T5908] usb 2-1: Product: syz [ 681.485084][ T5908] usb 2-1: Manufacturer: syz [ 681.490155][ T5908] usb 2-1: SerialNumber: syz [ 681.503549][ T5908] usb 2-1: config 0 descriptor?? [ 681.519100][ T5908] gspca_main: se401-2.14.0 probing 047d:5003 [ 681.697940][ T42] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 681.847133][ T5851] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 681.865596][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.886967][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.914458][ T42] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 681.924688][ T5908] gspca_se401: Too many frame sizes [ 681.933861][ T42] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 681.943315][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.955853][ T42] usb 1-1: config 0 descriptor?? [ 682.029507][ T5851] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 682.040315][ T5851] usb 3-1: config 0 has no interface number 0 [ 682.050250][ T5851] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 682.060114][ T5851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.072851][ T5851] usb 3-1: Product: syz [ 682.077541][ T5851] usb 3-1: Manufacturer: syz [ 682.084124][ T5851] usb 3-1: SerialNumber: syz [ 682.096735][ T5851] usb 3-1: config 0 descriptor?? [ 682.125378][ T5908] usb 2-1: USB disconnect, device number 77 [ 682.132443][ T809] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 682.299414][ T809] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 682.311354][ T809] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 682.322022][ T809] usb 4-1: config 0 interface 0 has no altsetting 0 [ 682.329095][ T809] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 682.338656][ T809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.349812][ T5851] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 682.353253][ T809] usb 4-1: config 0 descriptor?? [ 682.369914][ T5851] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 682.381517][ T5851] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 682.394303][ T42] hid_parser_main: 57 callbacks suppressed [ 682.394327][ T42] steelseries 0003:1038:1410.0070: unknown main item tag 0x0 [ 682.410209][ T5851] usb 3-1: media controller created [ 682.425807][ T42] steelseries 0003:1038:1410.0070: unknown main item tag 0x0 [ 682.439977][ T5851] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 682.448967][ T42] steelseries 0003:1038:1410.0070: unknown main item tag 0x0 [ 682.457355][ T42] steelseries 0003:1038:1410.0070: unknown main item tag 0x0 [ 682.477249][ T42] steelseries 0003:1038:1410.0070: unknown main item tag 0x0 [ 682.489897][ T42] steelseries 0003:1038:1410.0070: not enough fields in HID_OUTPUT_REPORT 0 [ 682.605913][ T5908] usb 1-1: USB disconnect, device number 70 [ 682.722488][T27523] netlink: 'syz.1.9950': attribute type 7 has an invalid length. [ 682.746742][T27523] netlink: 'syz.1.9950': attribute type 7 has an invalid length. [ 682.806099][ T809] hid-steam 0003:28DE:1102.0071: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 683.023368][ T809] usb 4-1: USB disconnect, device number 77 [ 683.335421][T27543] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9959'. [ 683.580262][ T5851] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 683.843624][ T5851] usb 3-1: USB disconnect, device number 94 [ 684.369129][T27573] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 684.375749][T27573] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 684.411493][T27573] vhci_hcd vhci_hcd.0: Device attached [ 684.444542][T27576] vhci_hcd: connection closed [ 684.445473][ T35] vhci_hcd vhci_hcd.1: stop threads [ 684.462668][ T35] vhci_hcd vhci_hcd.1: release socket [ 684.471751][ T35] vhci_hcd vhci_hcd.1: disconnect device [ 684.727876][T27596] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 685.202719][T27619] batadv0: entered promiscuous mode [ 685.219967][T27619] batadv0: left promiscuous mode [ 685.496639][T27634] binder: 27633:27634 ioctl 4020ae46 7fe4f0dcefc0 returned -22 [ 685.528301][T27634] binder: 27633:27634 ioctl 4020ae46 7fe4f0dcefc0 returned -22 [ 685.553277][T27634] binder: 27633:27634 ioctl 4020ae46 7fe4f0dcefc0 returned -22 [ 685.567507][T27634] binder: 27633:27634 ioctl 4020ae46 7fe4f0dcefc0 returned -22 [ 685.601035][T27634] binder: 27633:27634 ioctl 4020ae46 7fe4f0dcefc0 returned -22 [ 685.609971][T27634] binder: 27633:27634 ioctl 4020ae46 7fe4f0dcefc0 returned -22 [ 685.618280][T27634] binder: 27633:27634 ioctl 4020ae46 7fe4f0dcefc0 returned -22 [ 685.626173][T27634] binder: 27633:27634 ioctl 4020ae46 7fe4f0dcefc0 returned -22 [ 685.634672][T27634] binder: 27633:27634 ioctl 4020ae46 7fe4f0dcefc0 returned -22 [ 685.644646][T27634] binder: 27633:27634 ioctl 4020ae46 7fe4f0dcefc0 returned -22 [ 685.653454][T27634] binder: 27633:27634 ioctl 4020ae46 7fe4f0dcefc0 returned -22 [ 685.668743][T27634] binder: 27633:27634 ioctl 4020ae46 7fe4f0dcefc0 returned -22 [ 685.685813][T27634] binder: 27633:27634 ioctl 4020ae46 7fe4f0dcefc0 returned -22 [ 685.709242][T27634] binder: 27633:27634 ioctl 4020ae46 7fe4f0dcefc0 returned -22 [ 685.987998][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.994519][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.440434][T27716] netlink: 'syz.3.10036': attribute type 32 has an invalid length. [ 687.465173][T27716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10036'. [ 687.529963][T27716] bond4: option coupled_control: invalid value (28) [ 687.538992][T27716] bond4 (unregistering): Released all slaves [ 687.617313][ T42] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 687.780816][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 687.800118][ T42] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 687.818659][ T42] usb 3-1: config 0 has no interface number 0 [ 687.838495][ T42] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.869064][ T42] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.900518][ T42] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 687.925809][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.960123][ T42] usb 3-1: config 0 descriptor?? [ 688.427163][ T809] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 688.504851][T27760] netlink: 64691 bytes leftover after parsing attributes in process `syz.4.10056'. [ 688.589615][ T42] uclogic 0003:28BD:0071.0072: pen parameters not found [ 688.602918][ T42] uclogic 0003:28BD:0071.0072: interface is invalid, ignoring [ 688.620105][ T809] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 688.642534][ T42] usb 3-1: USB disconnect, device number 95 [ 688.650934][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.676814][ T809] usb 4-1: Product: syz [ 688.687108][ T809] usb 4-1: Manufacturer: syz [ 688.704855][ T809] usb 4-1: SerialNumber: syz [ 688.736828][ T809] usb 4-1: config 0 descriptor?? [ 688.966282][ T809] usb 4-1: ignoring: probably an ADSL modem [ 688.995611][T27780] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10067'. [ 689.022253][T27780] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10067'. [ 689.302100][ T29] audit: type=1326 audit(1776717268.128:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27792 comm="syz.2.10073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4eff9c819 code=0x7ffc0000 [ 689.357446][ T29] audit: type=1326 audit(1776717268.128:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27792 comm="syz.2.10073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4eff9c819 code=0x7ffc0000 [ 689.383358][ T809] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 689.421061][ T29] audit: type=1326 audit(1776717268.128:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27792 comm="syz.2.10073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4eff9c819 code=0x7ffc0000 [ 689.468923][ T29] audit: type=1326 audit(1776717268.128:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27792 comm="syz.2.10073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4eff9c819 code=0x7ffc0000 [ 689.492635][ T29] audit: type=1326 audit(1776717268.128:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27792 comm="syz.2.10073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4eff9c819 code=0x7ffc0000 [ 689.539693][ T29] audit: type=1326 audit(1776717268.128:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27792 comm="syz.2.10073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fe4eff9c819 code=0x7ffc0000 [ 689.595009][ T809] usb 4-1: USB disconnect, device number 78 [ 689.595959][ T29] audit: type=1326 audit(1776717268.158:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27792 comm="syz.2.10073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4eff9c819 code=0x7ffc0000 [ 689.663146][ T29] audit: type=1326 audit(1776717268.158:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27792 comm="syz.2.10073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4eff9c819 code=0x7ffc0000 [ 689.695931][ T29] audit: type=1326 audit(1776717268.158:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27792 comm="syz.2.10073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4eff9c819 code=0x7ffc0000 [ 689.740598][ T29] audit: type=1326 audit(1776717268.158:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27792 comm="syz.2.10073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fe4eff9c819 code=0x7ffc0000 [ 690.610166][ T809] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 690.777333][ T809] usb 3-1: Using ep0 maxpacket: 8 [ 690.794501][ T809] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 690.830765][ T809] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 690.876456][ T809] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 690.919993][ T809] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 690.953925][ T809] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 690.973662][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.013158][ T809] hub 3-1:1.0: bad descriptor, ignoring hub [ 691.028399][ T809] hub 3-1:1.0: probe with driver hub failed with error -5 [ 691.053075][ T809] cdc_wdm 3-1:1.0: skipping garbage [ 691.073658][ T809] cdc_wdm 3-1:1.0: skipping garbage [ 691.102524][ T809] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 691.120711][ T809] cdc_wdm 3-1:1.0: Unknown control protocol [ 691.283295][T27826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 691.346704][T27826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 692.645303][T27870] macvlan0: entered promiscuous mode [ 692.669121][ T35] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.691569][ T35] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.728244][ T35] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.770524][ T35] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.790646][T27927] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10127'. [ 693.821050][T27930] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 694.007391][T27829] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 694.167133][T27829] usb 5-1: Using ep0 maxpacket: 8 [ 694.179289][T27829] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 694.188885][T27829] usb 5-1: config 0 has no interface number 0 [ 694.196973][T27829] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 694.209061][T27829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.217568][T27856] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 694.219723][T27829] usb 5-1: Product: syz [ 694.230870][T27829] usb 5-1: Manufacturer: syz [ 694.235533][T27829] usb 5-1: SerialNumber: syz [ 694.245096][T27829] usb 5-1: config 0 descriptor?? [ 694.400607][T27856] usb 2-1: unable to get BOS descriptor or descriptor too short [ 694.409851][T27856] usb 2-1: not running at top speed; connect to a high speed hub [ 694.420568][T27856] usb 2-1: config 2 has an invalid interface number: 222 but max is 0 [ 694.429079][T27856] usb 2-1: config 2 has no interface number 0 [ 694.435372][T27856] usb 2-1: config 2 interface 222 has no altsetting 0 [ 694.445286][T27856] usb 2-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.d9 [ 694.458881][T27856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.467038][T27856] usb 2-1: Product: syz [ 694.471549][T27856] usb 2-1: Manufacturer: syz [ 694.476233][T27856] usb 2-1: SerialNumber: syz [ 694.607293][T27828] usb 3-1: USB disconnect, device number 96 [ 694.613384][T27824] cdc_wdm 3-1:1.0: Error autopm - -16 [ 694.661372][T27829] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 694.687176][T27829] uvcvideo 5-1:0.31: No streaming interface found for terminal 32774. [ 694.700732][T27856] usb-storage 2-1:2.222: USB Mass Storage device detected [ 694.735959][T27829] usb 5-1: USB disconnect, device number 81 [ 694.743566][T27856] usb-storage 2-1:2.222: Quirks match for vid 04e6 pid 0007: 1 [ 694.772209][T27856] usb-storage 2-1:2.222: This device (04e6,0007,01d9 S 87 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 694.772209][T27856] Please send a copy of this message to and [ 694.962664][T27954] syz_tun: entered allmulticast mode [ 694.980455][T27953] syz_tun: left allmulticast mode [ 695.008309][T27856] usb 2-1: USB disconnect, device number 78 [ 695.390764][T27973] netlink: 104 bytes leftover after parsing attributes in process `syz.4.10146'. [ 696.625273][T28020] sch_tbf: burst 20736 is lower than device lo mtu (65550) ! [ 696.787185][T27828] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 696.949231][T27828] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 696.970216][T27828] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 696.992641][T27828] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 697.003908][T27828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 697.012797][T27828] usb 2-1: SerialNumber: syz [ 697.270258][T27828] usb 2-1: 0:2 : does not exist [ 697.361788][T28044] kvm: kvm [28043]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x1 [ 697.374532][T27828] usb 2-1: USB disconnect, device number 79 [ 697.471930][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 698.002787][T28067] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10187'. [ 698.018672][T27858] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 698.218865][T27858] usb 5-1: Using ep0 maxpacket: 8 [ 698.236948][T27858] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 698.257069][T27858] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 698.279827][T27858] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 698.314573][T27858] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 698.361575][T27858] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 698.388902][T27858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.631630][T27858] usb 5-1: GET_CAPABILITIES returned 0 [ 698.640825][T27858] usbtmc 5-1:16.0: can't read capabilities [ 698.866591][T27858] usb 5-1: USB disconnect, device number 82 [ 699.900719][T28122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10210'. [ 700.007668][T28122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10210'. [ 700.183827][T28131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10214'. [ 700.697222][T27858] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 700.874737][T27858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 700.901657][T27858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.931145][T27858] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 700.966500][T27858] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.10 [ 700.986455][T27858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.022553][T27858] usb 4-1: config 0 descriptor?? [ 701.468658][T27858] dragonrise 0003:0079:0011.0073: unknown main item tag 0x0 [ 701.495354][T27858] dragonrise 0003:0079:0011.0073: unknown main item tag 0x0 [ 701.520166][T27858] dragonrise 0003:0079:0011.0073: unknown main item tag 0x0 [ 701.544179][T27858] dragonrise 0003:0079:0011.0073: unknown main item tag 0x0 [ 701.567862][T27858] dragonrise 0003:0079:0011.0073: unknown main item tag 0x0 [ 701.592171][T27858] dragonrise 0003:0079:0011.0073: unknown main item tag 0x0 [ 701.614679][T27858] dragonrise 0003:0079:0011.0073: unknown main item tag 0x0 [ 701.640268][T27858] dragonrise 0003:0079:0011.0073: unknown main item tag 0x0 [ 701.671808][T27858] dragonrise 0003:0079:0011.0073: unknown main item tag 0x0 [ 701.698164][T27858] dragonrise 0003:0079:0011.0073: unknown main item tag 0x0 [ 701.739868][T27858] dragonrise 0003:0079:0011.0073: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.3-1/input0 [ 701.794461][T27858] usb 4-1: USB disconnect, device number 79 [ 701.952193][T28184] fido_id[28184]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 701.986906][T28185] team0: Port device bond0 removed [ 702.020095][T28185] bond0: (slave –): Releasing backup interface [ 702.102192][T28185] bridge_slave_0: left allmulticast mode [ 702.120444][T28185] bridge_slave_0: left promiscuous mode [ 702.140751][T28185] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.220492][T28185] bond0: (slave bond_slave_0): Releasing backup interface [ 702.252351][T28195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10242'. [ 702.274898][T28185] bond0: (slave bond_slave_1): Releasing backup interface [ 702.285008][T28195] netlink: 'syz.4.10242': attribute type 15 has an invalid length. [ 702.306184][T28195] netlink: 'syz.4.10242': attribute type 25 has an invalid length. [ 702.326968][T28195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10242'. [ 702.355647][T28185] team0: Port device C removed [ 702.374414][T28185] team0: Port device team_slave_1 removed [ 702.390023][T28185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 702.404327][T28185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 702.421986][T28185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 702.437793][T28185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 702.460197][T28185] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 703.079001][T27829] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 703.258141][T27829] usb 3-1: Using ep0 maxpacket: 16 [ 703.283912][T27829] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 703.309183][T27829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 703.330583][T27829] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 703.345839][T27829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.367511][T27829] usb 3-1: Product: syz [ 703.378565][T27829] usb 3-1: Manufacturer: syz [ 703.392858][T27829] usb 3-1: SerialNumber: syz [ 703.410996][T27829] usb 3-1: config 0 descriptor?? [ 703.433092][T27829] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 703.443161][T28234] netem: incorrect gi model size [ 703.449641][T28234] netem: change failed [ 703.462445][T27829] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 704.057280][T27829] em28xx 3-1:0.0: chip ID is em2860 [ 704.258726][T27829] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 704.284443][T27829] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 704.292825][T27829] em28xx 3-1:0.0: No AC97 audio processor [ 704.312994][T27829] usb 3-1: USB disconnect, device number 97 [ 704.341004][T27829] em28xx 3-1:0.0: Disconnecting em28xx [ 704.908045][T27829] em28xx 3-1:0.0: Freeing device [ 705.157824][T27828] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 705.317590][T27828] usb 4-1: Using ep0 maxpacket: 16 [ 705.342360][T27828] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.369757][T27828] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 705.400507][T27828] usb 4-1: config 0 interface 0 has no altsetting 0 [ 705.416301][T27828] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 705.433278][T27828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.461337][T27828] usb 4-1: config 0 descriptor?? [ 705.742262][T28311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10295'. [ 705.752987][T28311] veth1_macvtap: left promiscuous mode [ 705.894946][T27828] hid (null): global environment stack underflow [ 705.904679][T27828] hid (null): unknown global tag 0xd [ 705.910423][T27828] hid (null): unknown global tag 0xe [ 705.925937][T27828] hid (null): bogus close delimiter [ 705.939007][T27828] hid (null): report_id 11497 is invalid [ 705.952901][T27828] hid (null): invalid report_size 614 [ 705.959313][T27828] hid (null): nested delimiters [ 705.964301][T27828] hid (null): global environment stack overflow [ 706.110414][T27854] usb 4-1: USB disconnect, device number 80 [ 706.976452][T28351] bridge_slave_0: left allmulticast mode [ 706.995514][T28351] bridge_slave_0: left promiscuous mode [ 707.015975][T28351] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.066307][T28351] bridge_slave_1: left allmulticast mode [ 707.089037][T28351] bridge_slave_1: left promiscuous mode [ 707.112833][T28351] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.170691][T28351] bond0: (slave bond_slave_0): Releasing backup interface [ 707.198807][T28351] bond_slave_0: left allmulticast mode [ 707.290049][T28351] bond0: (slave bond_slave_1): Releasing backup interface [ 707.307249][T27858] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 707.315174][T28351] bond_slave_1: left allmulticast mode [ 707.352825][T28351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 707.371292][T28351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 707.395224][T28351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 707.409910][T28351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 707.429929][T28351] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 707.467235][T27858] usb 3-1: Using ep0 maxpacket: 16 [ 707.485344][T27858] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.534027][T27858] usb 3-1: config 0 interface 0 has no altsetting 0 [ 707.551758][T27858] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 707.577274][T27858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.610339][T27858] usb 3-1: config 0 descriptor?? [ 707.828187][T27828] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 707.990556][T27828] usb 5-1: unable to get BOS descriptor or descriptor too short [ 708.013506][T27828] usb 5-1: not running at top speed; connect to a high speed hub [ 708.034927][T27828] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 708.049299][T27828] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 708.079383][T27858] mcp2221 0003:04D8:00DD.0075: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 708.086429][T27828] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 708.113312][T27828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.133676][T27828] usb 5-1: Product: syz [ 708.143813][T27828] usb 5-1: Manufacturer: syz [ 708.164087][T27828] usb 5-1: SerialNumber: syz [ 708.415209][T27828] usb 5-1: 1:1 : unsupported format bits 0x80 [ 708.433495][T27828] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 708.503504][T27858] usb 3-1: USB disconnect, device number 98 [ 708.562653][T27828] usb 5-1: USB disconnect, device number 83 [ 708.709387][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 709.740236][T27858] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 709.917140][T27858] usb 4-1: Using ep0 maxpacket: 16 [ 709.929402][T27858] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 709.950717][T27858] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 709.976393][T27858] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 709.996798][T27858] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.015673][T27858] usb 4-1: Product: syz [ 710.026094][T27858] usb 4-1: Manufacturer: syz [ 710.034699][T27858] usb 4-1: SerialNumber: syz [ 710.054474][T27858] usb 4-1: 0:2 : does not exist [ 710.465218][T27858] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 710.495188][T27858] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 710.521671][T27858] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 710.541811][T27858] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 710.574407][T27858] usb 4-1: 5:0: cannot get min/max values for control 8 (id 5) [ 710.651160][T27858] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 710.672162][T27858] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 710.750000][T27858] usb 4-1: USB disconnect, device number 81 [ 711.153186][T28487] ALSA: mixer_oss: invalid OSS volume '' [ 711.187554][T27829] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 711.337995][T27828] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 711.361486][T27829] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 711.373769][T27829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.384968][T27829] usb 5-1: Product: syz [ 711.390575][T27829] usb 5-1: Manufacturer: syz [ 711.395384][T27829] usb 5-1: SerialNumber: syz [ 711.487452][T27828] usb 3-1: Using ep0 maxpacket: 16 [ 711.496000][T27828] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 711.512582][T27828] usb 3-1: string descriptor 0 read error: -22 [ 711.520703][T27828] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40 [ 711.531005][T27828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.559035][T27828] usb 3-1: 1:1 : format type 0 is detected, processed as PCM [ 711.566571][T27828] usb 3-1: 1:1 : unsupported sample bitwidth 8 in 9 bytes [ 711.654626][T27829] rtl8150 5-1:1.0: couldn't reset the device [ 711.661983][T27829] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 711.678284][T27829] usb 5-1: USB disconnect, device number 84 [ 711.752770][T27828] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 711.765729][T27828] usb 3-1: unit 1 not found! [ 711.830108][T27828] usb 3-1: USB disconnect, device number 99 [ 713.451606][T28544] support for the xor transformation has been removed. [ 713.470186][T27856] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 713.586348][T28550] netlink: 'syz.3.10396': attribute type 11 has an invalid length. [ 713.648212][T27856] usb 3-1: Using ep0 maxpacket: 32 [ 713.670201][T27856] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 713.693558][T27856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.716659][T27856] usb 3-1: config 0 descriptor?? [ 713.935157][T27856] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 713.947463][T27856] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 713.958228][T27856] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 713.965886][T27856] usb 3-1: media controller created [ 713.985791][T27856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 714.067268][T27858] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 714.135448][T28542] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 714.159502][T27856] az6027: usb out operation failed. (-71) [ 714.177844][T27856] az6027: usb out operation failed. (-71) [ 714.187237][T27856] stb0899_attach: Driver disabled by Kconfig [ 714.198765][T27856] az6027: no front-end attached [ 714.198765][T27856] [ 714.206551][T27856] az6027: usb out operation failed. (-71) [ 714.213620][T27856] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 714.225755][T27856] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input83 [ 714.249630][T27858] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 714.264472][T27856] dvb-usb: schedule remote query interval to 400 msecs. [ 714.278724][T27858] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 714.294468][T27856] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 714.310910][T27858] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 714.327947][T27856] usb 3-1: USB disconnect, device number 100 [ 714.338834][T27858] usb 4-1: config 0 interface 0 has no altsetting 0 [ 714.345800][T27858] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 714.360213][T27858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.386721][T27858] usb 4-1: config 0 descriptor?? [ 714.448308][T27856] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 714.827764][T27858] holtek 0003:1241:5015.0076: ignoring exceeding usage max [ 714.859164][T27858] holtek 0003:1241:5015.0076: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.3-1/input0 [ 714.878749][T27858] holtek 0003:1241:5015.0076: no inputs found [ 715.023233][T27858] usb 4-1: USB disconnect, device number 82 [ 715.079427][T27828] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 715.237191][T27828] usb 3-1: Using ep0 maxpacket: 8 [ 715.245238][T27828] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 715.254134][T27828] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 715.264959][T27828] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 715.275160][T27828] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 715.285308][T27828] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 715.299091][T27828] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 715.308336][T27828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.387304][T27829] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 715.544538][T27829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.572188][T27829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 715.585764][T27829] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 715.595086][T27829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.615502][T27829] usb 5-1: config 0 descriptor?? [ 715.734578][T27828] usb 3-1: USB disconnect, device number 101 [ 716.042266][T27829] hid_parser_main: 28 callbacks suppressed [ 716.042298][T27829] playstation 0003:054C:0DF2.0077: unknown main item tag 0x0 [ 716.088845][T27829] playstation 0003:054C:0DF2.0077: unknown main item tag 0x0 [ 716.112425][T27829] playstation 0003:054C:0DF2.0077: unknown main item tag 0x0 [ 716.137731][T27829] playstation 0003:054C:0DF2.0077: unknown main item tag 0x0 [ 716.168800][T27829] playstation 0003:054C:0DF2.0077: unknown main item tag 0x0 [ 716.193191][T27829] playstation 0003:054C:0DF2.0077: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 716.220839][T28630] vcan0: tx address claim with dlc 0 [ 716.260349][T28633] kernel profiling enabled (shift: 6) [ 716.327380][T27829] playstation 0003:054C:0DF2.0077: Invalid reportID received, expected 9 got 169 [ 716.342940][T27829] playstation 0003:054C:0DF2.0077: Failed to retrieve DualSense pairing info: -22 [ 716.379138][T27829] playstation 0003:054C:0DF2.0077: Failed to get MAC address from DualSense [ 716.414290][T27829] playstation 0003:054C:0DF2.0077: Failed to create dualsense. [ 716.448485][T27829] playstation 0003:054C:0DF2.0077: probe with driver playstation failed with error -22 [ 716.532422][T27829] usb 5-1: USB disconnect, device number 85 [ 716.755013][T28645] binder: 28643:28645 ioctl c0306201 200000000640 returned -22 [ 716.920402][T28650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10442'. [ 717.251445][T28663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10448'. [ 717.376767][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 717.376787][ T29] audit: type=1800 audit(1776717296.198:818): pid=28669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.10450" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 717.405585][T28671] netlink: 'syz.4.10449': attribute type 13 has an invalid length. [ 717.447174][T28671] netlink: 'syz.4.10449': attribute type 17 has an invalid length. [ 717.538033][T28667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 717.569596][T28667] 8021q: adding VLAN 0 to HW filter on device team0 [ 717.604242][T28667] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 717.746186][T28671] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 718.543886][T27828] IPVS: starting estimator thread 0... [ 718.647738][T27856] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 718.668980][T28702] IPVS: using max 25 ests per chain, 60000 per kthread [ 718.820666][T27856] usb 5-1: Using ep0 maxpacket: 32 [ 718.831331][T27856] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 718.859718][T27856] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 718.896551][T27856] usb 5-1: config 0 interface 0 has no altsetting 0 [ 718.919285][T27856] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 718.942545][T27856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.957800][T28715] program syz.1.10469 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 718.980960][T27856] usb 5-1: config 0 descriptor?? [ 719.000573][T28718] xt_hashlimit: size too large, truncated to 1048576 [ 719.445012][T27856] corsair-psu 0003:1B1C:1C09.0078: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.4-1/input0 [ 719.549016][T27856] corsair-psu 0003:1B1C:1C09.0078: unable to initialize device (-38) [ 719.614081][ C0] ================================================================== [ 719.622250][ C0] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x40/0x60 [ 719.630484][ C0] Read of size 1 at addr ffff888078d38b88 by task syz.4.10460/28694 [ 719.638513][ C0] [ 719.640921][ C0] CPU: 0 UID: 0 PID: 28694 Comm: syz.4.10460 Tainted: G L syzkaller #0 PREEMPT(full) [ 719.640958][ C0] Tainted: [L]=SOFTLOCKUP [ 719.640968][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 719.640986][ C0] Call Trace: [ 719.641003][ C0] [ 719.641014][ C0] dump_stack_lvl+0xe8/0x150 [ 719.641053][ C0] print_address_description+0x55/0x1e0 [ 719.641084][ C0] ? _raw_spin_lock_irqsave+0x40/0x60 [ 719.641115][ C0] print_report+0x58/0x70 [ 719.641143][ C0] kasan_report+0x117/0x150 [ 719.641173][ C0] ? _raw_spin_lock_irqsave+0x40/0x60 [ 719.641207][ C0] ? hidraw_report_event+0x5a/0x3b0 [ 719.641234][ C0] __kasan_check_byte+0x2a/0x40 [ 719.641261][ C0] lock_acquire+0x84/0x350 [ 719.641292][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 719.641329][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 719.641359][ C0] ? hidraw_report_event+0x5a/0x3b0 [ 719.641385][ C0] hidraw_report_event+0x5a/0x3b0 [ 719.641413][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 719.641442][ C0] hid_report_raw_event+0x311/0x1730 [ 719.641478][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 719.641505][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 719.641538][ C0] ? corsairpsu_raw_event+0x9f/0xc0 [ 719.641639][ C0] hid_input_report+0x44b/0x580 [ 719.641709][ C0] ? __pfx_corsairpsu_raw_event+0x10/0x10 [ 719.641760][ C0] hid_irq_in+0x47e/0x6d0 [ 719.641835][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 719.641899][ C0] dummy_timer+0xbc0/0x4650 [ 719.641987][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 719.642044][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 719.642105][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 719.642154][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 719.642224][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 719.642273][ C0] __hrtimer_run_queues+0x3c0/0xa20 [ 719.642344][ C0] hrtimer_run_softirq+0x17a/0x240 [ 719.642395][ C0] handle_softirqs+0x22a/0x840 [ 719.642471][ C0] ? __irq_exit_rcu+0xca/0x220 [ 719.642544][ C0] __irq_exit_rcu+0xca/0x220 [ 719.642609][ C0] irq_exit_rcu+0x9/0x30 [ 719.642682][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 719.642765][ C0] [ 719.642772][ C0] [ 719.642793][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 719.642830][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 719.642917][ C0] Code: f7 e8 8d f4 e7 f5 f7 c3 00 02 00 00 74 05 e8 60 7d 13 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 d4 76 d9 f5 65 8b 05 1d e3 85 07 85 c0 74 18 5b 41 5e e9 41 48 [ 719.642947][ C0] RSP: 0018:ffffc90004fa7a78 EFLAGS: 00000206 [ 719.642993][ C0] RAX: 0000000000000006 RBX: 0000000000000282 RCX: 0000000080000001 [ 719.643021][ C0] RDX: 0000000000000000 RSI: ffffffff8dfd5677 RDI: 0000000000000001 [ 719.643047][ C0] RBP: 0000000000000000 R08: ffffffff903364f7 R09: 1ffffffff2066c9e [ 719.643104][ C0] R10: dffffc0000000000 R11: fffffbfff2066c9f R12: ffff88802be2f6e8 [ 719.643151][ C0] R13: ffff88802be2f6e0 R14: ffffffff9a737998 R15: 0000000000000001 [ 719.643199][ C0] debug_check_no_obj_freed+0x52e/0x550 [ 719.643275][ C0] kfree+0x13e/0x640 [ 719.643322][ C0] ? raw_ioctl+0x2536/0x41c0 [ 719.643358][ C0] raw_ioctl+0x2536/0x41c0 [ 719.643404][ C0] ? tomoyo_path_number_perm+0x219/0x630 [ 719.643474][ C0] ? tomoyo_path_number_perm+0x219/0x630 [ 719.643547][ C0] ? do_vfs_ioctl+0x1166/0x1530 [ 719.643613][ C0] ? __pfx_raw_ioctl+0x10/0x10 [ 719.643660][ C0] ? do_futex+0x333/0x420 [ 719.643717][ C0] ? __fget_files+0x2a/0x420 [ 719.643763][ C0] ? __fget_files+0x2a/0x420 [ 719.643795][ C0] ? __fget_files+0x3a0/0x420 [ 719.643840][ C0] ? __fget_files+0x2a/0x420 [ 719.643886][ C0] ? bpf_lsm_file_ioctl+0x9/0x20 [ 719.643939][ C0] ? __pfx_raw_ioctl+0x10/0x10 [ 719.643983][ C0] __se_sys_ioctl+0xfc/0x170 [ 719.644042][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.644092][ C0] do_syscall_64+0x15f/0xf80 [ 719.644138][ C0] ? trace_irq_disable+0x3b/0x140 [ 719.644189][ C0] ? clear_bhb_loop+0x40/0x90 [ 719.644243][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.644293][ C0] RIP: 0033:0x7fe9ec79c4ab [ 719.644332][ C0] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 719.644376][ C0] RSP: 002b:00007fe9ed6a8f60 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 719.644411][ C0] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fe9ec79c4ab [ 719.644452][ C0] RDX: 00007fe9ed6a8fe0 RSI: 0000000040085507 RDI: 0000000000000003 [ 719.644480][ C0] RBP: 0000000000000003 R08: 00007fe9ecb40320 R09: 0000000000000000 [ 719.644510][ C0] R10: 0000000000000003 R11: 0000000000000246 R12: 0000200000000180 [ 719.644536][ C0] R13: 0000000000000000 R14: 00007fe9eca15fa0 R15: 00007fe9ecb3fa48 [ 719.644583][ C0] [ 719.644592][ C0] [ 720.118781][ C0] Allocated by task 27856: [ 720.123229][ C0] kasan_save_track+0x3e/0x80 [ 720.128033][ C0] __kasan_kmalloc+0x93/0xb0 [ 720.132712][ C0] __kmalloc_cache_noprof+0x31c/0x660 [ 720.138124][ C0] hidraw_connect+0x57/0x420 [ 720.142915][ C0] hid_connect+0x5bf/0x19d0 [ 720.147454][ C0] hid_hw_start+0xa8/0x120 [ 720.151906][ C0] corsairpsu_probe+0xd9/0x3c0 [ 720.156699][ C0] hid_device_probe+0x416/0x7a0 [ 720.161584][ C0] really_probe+0x267/0xaf0 [ 720.166131][ C0] __driver_probe_device+0x1ef/0x380 [ 720.171448][ C0] driver_probe_device+0x4f/0x240 [ 720.176492][ C0] __device_attach_driver+0x279/0x430 [ 720.181893][ C0] bus_for_each_drv+0x258/0x2f0 [ 720.186773][ C0] __device_attach+0x2c5/0x450 [ 720.191799][ C0] device_initial_probe+0xa1/0xd0 [ 720.196888][ C0] bus_probe_device+0x12a/0x220 [ 720.201764][ C0] device_add+0x7e9/0xbb0 [ 720.206132][ C0] hid_add_device+0x272/0x3e0 [ 720.210841][ C0] usbhid_probe+0xbab/0x1080 [ 720.215458][ C0] usb_probe_interface+0x659/0xc70 [ 720.220613][ C0] really_probe+0x267/0xaf0 [ 720.225161][ C0] __driver_probe_device+0x1ef/0x380 [ 720.230492][ C0] driver_probe_device+0x4f/0x240 [ 720.235557][ C0] __device_attach_driver+0x279/0x430 [ 720.240965][ C0] bus_for_each_drv+0x258/0x2f0 [ 720.245861][ C0] __device_attach+0x2c5/0x450 [ 720.250655][ C0] device_initial_probe+0xa1/0xd0 [ 720.255720][ C0] bus_probe_device+0x12a/0x220 [ 720.260597][ C0] device_add+0x7e9/0xbb0 [ 720.264956][ C0] usb_set_configuration+0x1a87/0x2110 [ 720.270435][ C0] usb_generic_driver_probe+0x8d/0x150 [ 720.275920][ C0] usb_probe_device+0x1c4/0x3b0 [ 720.280801][ C0] really_probe+0x267/0xaf0 [ 720.285322][ C0] __driver_probe_device+0x1ef/0x380 [ 720.290645][ C0] driver_probe_device+0x4f/0x240 [ 720.295686][ C0] __device_attach_driver+0x279/0x430 [ 720.301086][ C0] bus_for_each_drv+0x258/0x2f0 [ 720.305963][ C0] __device_attach+0x2c5/0x450 [ 720.310757][ C0] device_initial_probe+0xa1/0xd0 [ 720.315838][ C0] bus_probe_device+0x12a/0x220 [ 720.320719][ C0] device_add+0x7e9/0xbb0 [ 720.325188][ C0] usb_new_device+0xa08/0x16f0 [ 720.330009][ C0] hub_event+0x2a1c/0x4f30 [ 720.334450][ C0] process_scheduled_works+0xb5d/0x1860 [ 720.340036][ C0] worker_thread+0xa53/0xfc0 [ 720.344685][ C0] kthread+0x388/0x470 [ 720.348791][ C0] ret_from_fork+0x514/0xb70 [ 720.353425][ C0] ret_from_fork_asm+0x1a/0x30 [ 720.358238][ C0] [ 720.360597][ C0] The buggy address belongs to the object at ffff888078d38b00 [ 720.360597][ C0] which belongs to the cache kmalloc-192 of size 192 [ 720.374690][ C0] The buggy address is located 136 bytes inside of [ 720.374690][ C0] freed 192-byte region [ffff888078d38b00, ffff888078d38bc0) [ 720.388540][ C0] [ 720.390901][ C0] The buggy address belongs to the physical page: [ 720.397350][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78d38 [ 720.406145][ C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 720.413281][ C0] page_type: f5(slab) [ 720.417294][ C0] raw: 00fff00000000000 ffff88813fe2d3c0 dead000000000100 dead000000000122 [ 720.425910][ C0] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 720.434513][ C0] page dumped because: kasan: bad access detected [ 720.440941][ C0] page_owner tracks the page as allocated [ 720.446707][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 24161, tgid 24160 (syz.4.8496), ts 566355812900, free_ts 566350512729 [ 720.467489][ C0] post_alloc_hook+0x231/0x280 [ 720.472286][ C0] get_page_from_freelist+0x24ba/0x2540 [ 720.478046][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 720.483904][ C0] allocate_slab+0x77/0x660 [ 720.488444][ C0] refill_objects+0x339/0x3d0 [ 720.493151][ C0] __pcs_replace_empty_main+0x321/0x720 [ 720.498728][ C0] __kmalloc_node_noprof+0x577/0x7c0 [ 720.504045][ C0] alloc_slab_obj_exts+0xbf/0x250 [ 720.509103][ C0] __memcg_slab_post_alloc_hook+0x5c4/0xe80 [ 720.515018][ C0] kmem_cache_alloc_noprof+0x347/0x650 [ 720.520498][ C0] alloc_buffer_head+0x2a/0x270 [ 720.525379][ C0] folio_alloc_buffers+0x19b/0x640 [ 720.530513][ C0] create_empty_buffers+0x3a/0x530 [ 720.535656][ C0] __block_write_begin_int+0x3c2/0x1910 [ 720.541235][ C0] iomap_write_begin+0x1071/0x14f0 [ 720.546398][ C0] iomap_file_buffered_write+0x47a/0xb30 [ 720.552068][ C0] page last free pid 15 tgid 15 stack trace: [ 720.558067][ C0] __free_frozen_pages+0xbc7/0xd30 [ 720.563211][ C0] rcu_core+0x7cd/0x1070 [ 720.567483][ C0] handle_softirqs+0x22a/0x840 [ 720.572275][ C0] run_ksoftirqd+0x36/0x60 [ 720.576743][ C0] smpboot_thread_fn+0x541/0xa50 [ 720.581705][ C0] kthread+0x388/0x470 [ 720.585805][ C0] ret_from_fork+0x514/0xb70 [ 720.590428][ C0] ret_from_fork_asm+0x1a/0x30 [ 720.595215][ C0] [ 720.597563][ C0] Memory state around the buggy address: [ 720.603225][ C0] ffff888078d38a80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 720.611325][ C0] ffff888078d38b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 720.619408][ C0] >ffff888078d38b80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 720.627575][ C0] ^ [ 720.631915][ C0] ffff888078d38c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 720.639993][ C0] ffff888078d38c80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 720.648073][ C0] ================================================================== [ 720.656169][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 720.663396][ C0] CPU: 0 UID: 0 PID: 28694 Comm: syz.4.10460 Tainted: G L syzkaller #0 PREEMPT(full) [ 720.674447][ C0] Tainted: [L]=SOFTLOCKUP [ 720.678795][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 720.688875][ C0] Call Trace: [ 720.692189][ C0] [ 720.695067][ C0] vpanic+0x56c/0xa60 [ 720.699086][ C0] ? __pfx_vpanic+0x10/0x10 [ 720.703626][ C0] panic+0xc5/0xd0 [ 720.707382][ C0] ? __pfx_panic+0x10/0x10 [ 720.711831][ C0] ? _raw_spin_lock_irqsave+0x40/0x60 [ 720.717236][ C0] ? rcu_is_watching+0x15/0xb0 [ 720.722047][ C0] ? _raw_spin_lock_irqsave+0x40/0x60 [ 720.727461][ C0] ? _raw_spin_lock_irqsave+0x40/0x60 [ 720.732885][ C0] check_panic_on_warn+0x89/0xb0 [ 720.737868][ C0] ? _raw_spin_lock_irqsave+0x40/0x60 [ 720.743289][ C0] end_report+0x73/0x170 [ 720.747595][ C0] ? _raw_spin_lock_irqsave+0x40/0x60 [ 720.753030][ C0] kasan_report+0x128/0x150 [ 720.757581][ C0] ? _raw_spin_lock_irqsave+0x40/0x60 [ 720.763024][ C0] ? hidraw_report_event+0x5a/0x3b0 [ 720.768256][ C0] __kasan_check_byte+0x2a/0x40 [ 720.773222][ C0] lock_acquire+0x84/0x350 [ 720.777715][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 720.782718][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 720.787955][ C0] ? hidraw_report_event+0x5a/0x3b0 [ 720.793202][ C0] hidraw_report_event+0x5a/0x3b0 [ 720.798256][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 720.803309][ C0] hid_report_raw_event+0x311/0x1730 [ 720.808714][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 720.813855][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 720.819702][ C0] ? corsairpsu_raw_event+0x9f/0xc0 [ 720.824931][ C0] hid_input_report+0x44b/0x580 [ 720.829813][ C0] ? __pfx_corsairpsu_raw_event+0x10/0x10 [ 720.835555][ C0] hid_irq_in+0x47e/0x6d0 [ 720.839942][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 720.845346][ C0] dummy_timer+0xbc0/0x4650 [ 720.849912][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 720.854967][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 720.859941][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 720.864906][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 720.870747][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 720.875721][ C0] __hrtimer_run_queues+0x3c0/0xa20 [ 720.880957][ C0] hrtimer_run_softirq+0x17a/0x240 [ 720.886101][ C0] handle_softirqs+0x22a/0x840 [ 720.890905][ C0] ? __irq_exit_rcu+0xca/0x220 [ 720.895708][ C0] __irq_exit_rcu+0xca/0x220 [ 720.900375][ C0] irq_exit_rcu+0x9/0x30 [ 720.904652][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 720.910414][ C0] [ 720.913370][ C0] [ 720.916346][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 720.922370][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 720.928840][ C0] Code: f7 e8 8d f4 e7 f5 f7 c3 00 02 00 00 74 05 e8 60 7d 13 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 d4 76 d9 f5 65 8b 05 1d e3 85 07 85 c0 74 18 5b 41 5e e9 41 48 [ 720.948515][ C0] RSP: 0018:ffffc90004fa7a78 EFLAGS: 00000206 [ 720.954622][ C0] RAX: 0000000000000006 RBX: 0000000000000282 RCX: 0000000080000001 [ 720.962617][ C0] RDX: 0000000000000000 RSI: ffffffff8dfd5677 RDI: 0000000000000001 [ 720.970613][ C0] RBP: 0000000000000000 R08: ffffffff903364f7 R09: 1ffffffff2066c9e [ 720.978615][ C0] R10: dffffc0000000000 R11: fffffbfff2066c9f R12: ffff88802be2f6e8 [ 720.986611][ C0] R13: ffff88802be2f6e0 R14: ffffffff9a737998 R15: 0000000000000001 [ 720.994615][ C0] debug_check_no_obj_freed+0x52e/0x550 [ 721.000205][ C0] kfree+0x13e/0x640 [ 721.004125][ C0] ? raw_ioctl+0x2536/0x41c0 [ 721.008744][ C0] raw_ioctl+0x2536/0x41c0 [ 721.013190][ C0] ? tomoyo_path_number_perm+0x219/0x630 [ 721.018866][ C0] ? tomoyo_path_number_perm+0x219/0x630 [ 721.024573][ C0] ? do_vfs_ioctl+0x1166/0x1530 [ 721.029455][ C0] ? __pfx_raw_ioctl+0x10/0x10 [ 721.034257][ C0] ? do_futex+0x333/0x420 [ 721.038613][ C0] ? __fget_files+0x2a/0x420 [ 721.043233][ C0] ? __fget_files+0x2a/0x420 [ 721.047942][ C0] ? __fget_files+0x3a0/0x420 [ 721.052666][ C0] ? __fget_files+0x2a/0x420 [ 721.057331][ C0] ? bpf_lsm_file_ioctl+0x9/0x20 [ 721.062333][ C0] ? __pfx_raw_ioctl+0x10/0x10 [ 721.067125][ C0] __se_sys_ioctl+0xfc/0x170 [ 721.071751][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.077848][ C0] do_syscall_64+0x15f/0xf80 [ 721.082468][ C0] ? trace_irq_disable+0x3b/0x140 [ 721.087521][ C0] ? clear_bhb_loop+0x40/0x90 [ 721.092226][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.098143][ C0] RIP: 0033:0x7fe9ec79c4ab [ 721.102596][ C0] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 721.122329][ C0] RSP: 002b:00007fe9ed6a8f60 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 721.130780][ C0] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fe9ec79c4ab [ 721.138781][ C0] RDX: 00007fe9ed6a8fe0 RSI: 0000000040085507 RDI: 0000000000000003 [ 721.146893][ C0] RBP: 0000000000000003 R08: 00007fe9ecb40320 R09: 0000000000000000 [ 721.154891][ C0] R10: 0000000000000003 R11: 0000000000000246 R12: 0000200000000180 [ 721.162887][ C0] R13: 0000000000000000 R14: 00007fe9eca15fa0 R15: 00007fe9ecb3fa48 [ 721.170887][ C0] [ 721.174829][ C0] Kernel Offset: disabled [ 721.179165][ C0] Rebooting in 86400 seconds..