last executing test programs: 2.758171022s ago: executing program 2 (id=13976): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18) pivot_root(0x0, 0x0) 2.677088583s ago: executing program 2 (id=13978): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x27a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x36, [{{0x9, 0x4, 0x0, 0xb9, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x800, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "1bc8ed7d"}]}}, 0x0}, 0x0) 2.000828449s ago: executing program 1 (id=13987): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/137, 0x89}], 0x1}, 0x1ff}], 0x1, 0x20, 0x0) 1.477946849s ago: executing program 0 (id=13995): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x400, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1.316618504s ago: executing program 0 (id=13997): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0xc4, 0x0, 0x0, 0x0) 1.160467131s ago: executing program 0 (id=14001): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ae"}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 1.138586251s ago: executing program 3 (id=14002): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = io_uring_setup(0x3eae, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1.004930122s ago: executing program 0 (id=14003): r0 = syz_open_dev$video4linux(&(0x7f0000000280), 0x2ea, 0x2382) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0085666, &(0x7f0000000100)={0x4b8c76c522e9be76, 0x0, {0xaca2a353, 0x0, 0x1016, 0x2, 0x0, 0x6, 0x1, 0x4}}) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000040)={0x0, {0xd214, 0x719}}) 989.280458ms ago: executing program 1 (id=14004): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730109000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 928.484776ms ago: executing program 3 (id=14005): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x1, 0x3, 0xffffffff, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) 885.726811ms ago: executing program 0 (id=14006): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090200000000000000000100000008000600ac1414aa08000b0077"], 0x24}}, 0x0) 823.440084ms ago: executing program 1 (id=14007): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000600)={0x1f, 0x0, @any, 0x13, 0x2}, 0xe) 795.162829ms ago: executing program 3 (id=14008): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) ioctl$TCXONC(r0, 0x4b3a, 0x3) 793.846534ms ago: executing program 2 (id=14009): unshare(0x28000400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0x4, 0x0) 741.424458ms ago: executing program 4 (id=14010): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x30, r1, 0x1, 0xfffffffb, 0x100000, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x1009, 0x5, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24000114}, 0x40090) 672.023308ms ago: executing program 1 (id=14011): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x30}}, 0x0) 646.77532ms ago: executing program 0 (id=14012): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x14, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x14}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0xfffffe01, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 635.705401ms ago: executing program 2 (id=14013): io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x6020, r1, 0x0, 0x60, 0x3, 0x0, 0x2, r1}]) 576.2094ms ago: executing program 1 (id=14014): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000001280)={@val={0x1c, 0xf5}, @val={0x0, 0x3}, @mpls={[], @ipv6=@generic={0x5, 0x6, "811d4f", 0x0, 0x5e, 0x0, @private0, @private1}}}, 0x36) 562.81153ms ago: executing program 4 (id=14015): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 502.748924ms ago: executing program 3 (id=14016): capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) 426.916608ms ago: executing program 4 (id=14017): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x64, r0, 0x1, 0x0, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x64}}, 0x0) 364.57129ms ago: executing program 3 (id=14018): io_setup(0x5fb, &(0x7f0000000040)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000002240)='m', 0x1, 0x100000001}]) 330.124ms ago: executing program 4 (id=14019): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCGETS2(r0, 0x5405, &(0x7f0000000000)) 209.92436ms ago: executing program 2 (id=14020): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 182.275387ms ago: executing program 4 (id=14021): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) fadvise64(r0, 0x400, 0x4, 0x1) preadv2(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/243, 0xf3}], 0x1, 0x1, 0x0, 0x0) 88.963915ms ago: executing program 1 (id=14022): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) read(r0, &(0x7f00000002c0)=""/150, 0x96) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{}, 0x7, 0x0, 0x0, 0x0, 0x0}}) 72.838903ms ago: executing program 2 (id=14023): r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000480)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x8, 0x1, 0x0, r0, 0x0}]) 16.260143ms ago: executing program 4 (id=14024): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000000)={0xb6, 0x0, 0x40000000000000}) 0s ago: executing program 3 (id=14025): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): ed -16 [ 779.984447][T28774] Bluetooth: hci5: unexpected event 0x12 length: 1 < 8 [ 779.992003][T28774] Bluetooth: hci5: Malformed Event: 0x02 [ 779.997821][T28774] Bluetooth: hci5: unexpected event 0x04 length: 15 > 10 [ 779.997955][T28774] Bluetooth: hci5: connection err: -111 [ 780.047101][T31858] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12310'. [ 780.200319][T30883] usb 1-1: USB disconnect, device number 50 [ 780.206624][ T5965] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 780.299685][ T1209] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 780.310505][ T1209] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 780.326417][ T1209] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 780.335823][ T1209] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 780.347968][ T1209] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 780.359607][ T1209] microsoft 0003:045E:07DA.0004: no inputs found [ 780.367557][ T1209] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 780.507788][ T30] audit: type=1326 audit(740.223:4043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31872 comm="syz.4.12315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc17998e969 code=0x7ffc0000 [ 780.519165][T30883] usb 4-1: USB disconnect, device number 46 [ 780.570840][ T30] audit: type=1326 audit(740.223:4044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31872 comm="syz.4.12315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc17998e969 code=0x7ffc0000 [ 780.625674][ T30] audit: type=1326 audit(740.233:4045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31872 comm="syz.4.12315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fc17998e969 code=0x7ffc0000 [ 780.655007][ T30] audit: type=1326 audit(740.233:4046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31872 comm="syz.4.12315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc17998e969 code=0x7ffc0000 [ 780.709387][ T30] audit: type=1326 audit(740.233:4047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31872 comm="syz.4.12315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc17998e969 code=0x7ffc0000 [ 780.751446][ T30] audit: type=1326 audit(740.233:4048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31872 comm="syz.4.12315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc17998e969 code=0x7ffc0000 [ 780.779320][ T30] audit: type=1326 audit(740.233:4049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31872 comm="syz.4.12315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc17998e969 code=0x7ffc0000 [ 780.806598][ T30] audit: type=1326 audit(740.233:4050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31872 comm="syz.4.12315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc17998e969 code=0x7ffc0000 [ 780.832773][T31881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12320'. [ 780.930507][T31886] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12322'. [ 781.604222][ T6001] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 781.773533][ T6001] usb 1-1: Using ep0 maxpacket: 16 [ 781.794497][ T6001] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 781.827087][ T6001] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 781.862070][ T6001] usb 1-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 781.881917][ T6001] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.902076][ T6001] usb 1-1: config 0 descriptor?? [ 782.013483][T31946] netlink: 'syz.4.12350': attribute type 1 has an invalid length. [ 782.359946][ T6001] kye 0003:0458:5019.0005: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 782.379447][ T6001] kye 0003:0458:5019.0005: unknown main item tag 0x2 [ 782.403901][ T30] audit: type=1326 audit(742.001:4051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31963 comm="syz.2.12361" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa1a938e969 code=0x0 [ 782.428641][ T6001] kye 0003:0458:5019.0005: hidraw0: USB HID v0.00 Device [HID 0458:5019] on usb-dummy_hcd.0-1/input0 [ 782.453548][ T6001] kye 0003:0458:5019.0005: tablet-enabling feature report not found [ 782.473557][ T6001] kye 0003:0458:5019.0005: tablet enabling failed [ 782.611608][ T6001] usb 1-1: USB disconnect, device number 51 [ 782.662587][T31968] fido_id[31968]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 783.027492][ T5993] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 783.212720][ T5993] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 783.223632][ T5993] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 783.242909][ T5993] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 783.258061][ T5993] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 783.266363][ T6001] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 783.278880][ T5993] usb 2-1: SerialNumber: syz [ 783.371404][ T30] audit: type=1326 audit(742.908:4052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31999 comm="syz.0.12377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352658e969 code=0x7ffc0000 [ 783.460234][ T6001] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.483550][ T6001] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.493602][ T6001] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 783.521879][ T5993] usb 2-1: skipping empty audio interface (v1) [ 783.532953][ T6001] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.618435][ T6001] usb 5-1: config 0 descriptor?? [ 783.690731][ T5993] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 783.730490][ T5993] usb 2-1: USB disconnect, device number 51 [ 783.799681][T30521] udevd[30521]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 783.842406][T32015] rdma_op ffff88807b75b1f0 conn xmit_rdma 0000000000000000 [ 784.109934][ T6001] aquacomputer_d5next 0003:0C70:F00E.0006: unknown main item tag 0x2 [ 784.138977][ T6001] aquacomputer_d5next 0003:0C70:F00E.0006: hidraw0: USB HID v0.00 Device [HID 0c70:f00e] on usb-dummy_hcd.4-1/input0 [ 784.335013][ T6001] usb 5-1: USB disconnect, device number 55 [ 784.416764][T32035] fido_id[32035]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 784.510109][T30883] kernel write not supported for file /4890/attr/exec (pid: 30883 comm: kworker/0:0) [ 785.333649][T32082] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12417'. [ 785.434686][T32061] syz.2.12406 (32061): drop_caches: 2 [ 785.546126][T32086] Bluetooth: MGMT ver 1.23 [ 785.907931][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 785.907952][ T30] audit: type=1326 audit(745.275:4060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32105 comm="syz.3.12428" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f541a58e969 code=0x0 [ 785.996495][T32108] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12429'. [ 786.236442][T32119] netlink: 'syz.0.12434': attribute type 2 has an invalid length. [ 786.246656][T32119] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.12434'. [ 786.592312][T32140] netlink: 88 bytes leftover after parsing attributes in process `syz.4.12442'. [ 786.675220][T32144] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 786.880134][T32153] bridge0: port 1(vlan2) entered blocking state [ 786.894674][T32153] bridge0: port 1(vlan2) entered disabled state [ 786.903718][T32153] vlan2: entered allmulticast mode [ 786.911908][T32153] bridge0: entered allmulticast mode [ 786.943136][T32153] vlan2: left allmulticast mode [ 786.954437][T32153] bridge0: left allmulticast mode [ 787.881870][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 788.087365][T32224] netlink: 'syz.4.12478': attribute type 10 has an invalid length. [ 788.110822][T32224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 788.124371][T32224] batadv0: entered promiscuous mode [ 788.134137][T32224] batadv0: entered allmulticast mode [ 788.138245][T30883] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 788.141368][T32224] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 788.329199][T30883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 788.346825][T30883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.357023][T30883] usb 4-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 788.369708][T30883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.387944][T30883] usb 4-1: config 0 descriptor?? [ 788.540665][ T1209] usb 2-1: new low-speed USB device number 52 using dummy_hcd [ 788.703440][ T1209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 788.736690][ T1209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 788.758446][ T1209] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 788.788273][ T1209] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 788.838849][ T1209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.854351][ T1209] usb 2-1: config 0 descriptor?? [ 788.860876][T32236] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 788.933727][T30883] nzxt-kraken2 0003:1E71:170E.0007: hidraw0: USB HID v0.00 Device [HID 1e71:170e] on usb-dummy_hcd.3-1/input0 [ 789.143494][ T6001] usb 4-1: USB disconnect, device number 47 [ 789.360424][ T1209] saitek 0003:06A3:0621.0008: unknown main item tag 0x0 [ 789.383658][ T1209] saitek 0003:06A3:0621.0008: unbalanced collection at end of report description [ 789.404593][ T1209] saitek 0003:06A3:0621.0008: parse failed [ 789.417617][ T1209] saitek 0003:06A3:0621.0008: probe with driver saitek failed with error -22 [ 789.592644][ T6001] usb 2-1: USB disconnect, device number 52 [ 789.672936][T32286] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12506'. [ 789.994975][ T5993] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 790.169342][ T5993] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.191755][ T5993] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 790.218451][ T5993] usb 3-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 790.228322][ T5993] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.247191][ T5993] usb 3-1: config 0 descriptor?? [ 790.737486][ T5993] maltron 0003:058F:9410.0009: hidraw0: USB HID v0.00 Device [HID 058f:9410] on usb-dummy_hcd.2-1/input0 [ 790.818155][T32326] IPVS: Unknown mcast interface: pimreg1 [ 790.882228][T32330] ALSA: mixer_oss: invalid OSS volume 'ިc">#a6\9/[\' [ 791.034716][T32330] ALSA: mixer_oss: invalid OSS volume 'F4|׃|t@' [ 791.070795][T32330] ALSA: mixer_oss: invalid OSS volume 'GJJ³ HID v0.00 Device [syz0] on syz1 [ 825.555594][ T5993] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 825.746252][ T5993] usb 3-1: Using ep0 maxpacket: 32 [ 825.754232][ T5993] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.756856][ T1179] fido_id[1179]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 825.787992][ T5993] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 825.818713][ T5993] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 825.840098][ T5993] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.850638][ T5993] usb 3-1: config 0 descriptor?? [ 825.926009][ T6009] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 826.006267][ T1185] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13106'. [ 826.118104][ T6009] usb 5-1: Using ep0 maxpacket: 16 [ 826.142665][ T6009] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 826.171720][ T6009] usb 5-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 826.186476][ T6009] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.237101][ T6009] usb 5-1: config 0 descriptor?? [ 826.256247][ T1193] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 826.311957][ T5993] shield 0003:0955:7214.0015: item fetching failed at offset 0/1 [ 826.341876][ T5993] shield 0003:0955:7214.0015: Parse failed [ 826.374791][ T5993] shield 0003:0955:7214.0015: probe with driver shield failed with error -22 [ 826.516877][ T1209] usb 3-1: USB disconnect, device number 51 [ 826.689469][ T6009] acrux 0003:1A34:F705.0016: item fetching failed at offset 2/5 [ 826.701506][ T6009] acrux 0003:1A34:F705.0016: parse failed [ 826.708328][ T6009] acrux 0003:1A34:F705.0016: probe with driver acrux failed with error -22 [ 826.872529][ T1209] IPVS: starting estimator thread 0... [ 826.913942][ T1209] usb 5-1: USB disconnect, device number 60 [ 826.976560][ T1219] IPVS: using max 29 ests per chain, 69600 per kthread [ 827.240687][ T6009] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 827.435629][ T6009] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 827.445847][ T6009] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 827.457458][ T6009] usb 2-1: config 0 has no interface number 0 [ 827.479518][ T6009] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 827.497168][ T6009] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 827.522838][ T6009] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 827.549859][ T6009] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.580454][ T6009] usb 2-1: Product: syz [ 827.591077][ T6009] usb 2-1: Manufacturer: syz [ 827.598122][ T6009] usb 2-1: SerialNumber: syz [ 827.634632][ T6009] usb 2-1: config 0 descriptor?? [ 827.661559][ T1245] overlayfs: workdir and upperdir must be separate subtrees [ 827.670228][ T1244] Bluetooth: MGMT ver 1.23 [ 828.095924][ T1209] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 828.235091][ T5993] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 828.280986][ T1209] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.300758][ T6009] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 828.323952][ T6009] usb 2-1: USB disconnect, device number 57 [ 828.331169][ T1209] usb 5-1: config 0 interface 0 has no altsetting 0 [ 828.346579][ T1209] usb 5-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 828.368236][ T1209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.388299][ T1209] usb 5-1: config 0 descriptor?? [ 828.427385][ T5993] usb 3-1: Using ep0 maxpacket: 8 [ 828.439290][ T5993] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 828.448387][ T5993] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.470815][ T5993] usb 3-1: Product: syz [ 828.475123][ T5993] usb 3-1: Manufacturer: syz [ 828.479746][ T5993] usb 3-1: SerialNumber: syz [ 828.526047][ T5993] usb 3-1: config 0 descriptor?? [ 828.542293][ T5993] gspca_main: sq905-2.14.0 probing 2770:9120 [ 828.866193][ T1209] nti 0003:0757:0A00.0017: hidraw0: USB HID v0.00 Device [HID 0757:0a00] on usb-dummy_hcd.4-1/input0 [ 829.005839][ T6009] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 829.087530][ T1286] netlink: 76 bytes leftover after parsing attributes in process `syz.1.13151'. [ 829.101376][ T1209] usb 5-1: USB disconnect, device number 61 [ 829.200762][ T6009] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 829.222160][ T5993] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 829.239705][ T6009] usb 1-1: config 0 has no interface number 0 [ 829.246209][ T5993] sq905 3-1:0.0: probe with driver sq905 failed with error -71 [ 829.255022][ T6009] usb 1-1: config 0 interface 29 has no altsetting 0 [ 829.274733][ T5993] usb 3-1: USB disconnect, device number 52 [ 829.295811][ T6009] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 829.317736][ T6009] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.338823][ T6009] usb 1-1: Product: syz [ 829.345287][ T6009] usb 1-1: Manufacturer: syz [ 829.351761][ T6009] usb 1-1: SerialNumber: syz [ 829.368537][ T6009] usb 1-1: config 0 descriptor?? [ 829.616834][ T6009] peak_usb 1-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 829.831684][ T6009] peak_usb 1-1:0.29 can0: sending command failure: -22 [ 829.840549][ T6009] peak_usb 1-1:0.29 can0: sending command failure: -22 [ 829.847675][ T6009] peak_usb 1-1:0.29 can0: sending command failure: -22 [ 829.947353][ T6009] peak_usb 1-1:0.29: probe with driver peak_usb failed with error -22 [ 830.031318][ T6001] usb 4-1: new low-speed USB device number 55 using dummy_hcd [ 830.089397][ T6009] usb 1-1: USB disconnect, device number 57 [ 830.225335][ T6001] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 830.239880][ T6001] usb 4-1: config 0 has no interface number 0 [ 830.266043][ T6001] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 830.294221][ T6001] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 830.318347][ T6001] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 830.337849][ T6001] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.369031][ T6001] usb 4-1: config 0 descriptor?? [ 830.390579][ T1305] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 830.410862][ T6001] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 830.692128][ T1209] usb 4-1: USB disconnect, device number 55 [ 830.795192][ T30] audit: type=1326 audit(787.265:4084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1345 comm="syz.0.13176" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f352658e969 code=0x0 [ 830.815140][ T1344] mkiss: ax0: crc mode is auto. [ 830.886094][ T6001] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 831.060719][ T6001] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 831.099952][ T6001] usb 3-1: config 0 interface 0 has no altsetting 0 [ 831.109350][ T6001] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 831.124215][ T6001] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 831.134346][ T6001] usb 3-1: Product: syz [ 831.138557][ T6001] usb 3-1: Manufacturer: syz [ 831.148314][ T6001] usb 3-1: SerialNumber: syz [ 831.157167][ T6001] usb 3-1: config 0 descriptor?? [ 831.179467][ T6001] usb 3-1: selecting invalid altsetting 0 [ 831.234871][ T1361] sp0: Synchronizing with TNC [ 831.448273][ T6001] usb 3-1: USB disconnect, device number 53 [ 831.763133][ T6009] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 831.809047][ T1209] usb 2-1: new low-speed USB device number 58 using dummy_hcd [ 831.937686][ T6009] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 831.948400][ T6009] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 831.959427][ T6009] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.978559][ T1209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 831.978930][ T6009] usb 5-1: config 0 descriptor?? [ 831.995362][ T1209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 832.013404][ T1209] usb 2-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 832.040738][ T1209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.051473][ T5999] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 832.073614][ T1209] usb 2-1: config 0 descriptor?? [ 832.222554][ T5999] usb 4-1: Using ep0 maxpacket: 16 [ 832.236546][ T5999] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 832.248185][ T5999] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 832.260688][ T5999] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 832.275487][ T5999] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 832.284999][ T5999] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.300597][ T5999] usb 4-1: config 0 descriptor?? [ 832.393577][T30883] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 832.462086][ T6009] lg-g15 0003:046D:C222.0018: reserved main item tag 0xd [ 832.479118][ T6009] lg-g15 0003:046D:C222.0018: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 832.561311][ T1209] logitech-djreceiver 0003:046D:C52F.0019: hidraw1: USB HID v0.00 Device [HID 046d:c52f] on usb-dummy_hcd.1-1/input0 [ 832.587019][T30883] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 832.605507][T30883] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 832.628891][T30883] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 832.650157][T30883] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 832.700407][T30883] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 832.718439][ T1209] usb 5-1: USB disconnect, device number 62 [ 832.730548][ T30] audit: type=1326 audit(789.079:4085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1403 comm="syz.2.13204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a938e969 code=0x7ffc0000 [ 832.762591][T30883] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 832.768452][ T30] audit: type=1326 audit(789.079:4086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1403 comm="syz.2.13204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a938e969 code=0x7ffc0000 [ 832.776808][ T5999] microsoft 0003:045E:07DA.001A: No inputs registered, leaving [ 832.800927][T30883] usb 1-1: Product: syz [ 832.805136][T30883] usb 1-1: Manufacturer: syz [ 832.817915][ T5999] microsoft 0003:045E:07DA.001A: hidraw2: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 832.829587][ T5999] microsoft 0003:045E:07DA.001A: no inputs found [ 832.830965][ T6009] usb 2-1: USB disconnect, device number 58 [ 832.836261][ T5999] microsoft 0003:045E:07DA.001A: could not initialize ff, continuing anyway [ 832.858623][ T30] audit: type=1326 audit(789.079:4087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1403 comm="syz.2.13204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa1a938e969 code=0x7ffc0000 [ 832.890633][ T30] audit: type=1326 audit(789.154:4088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1403 comm="syz.2.13204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a938e969 code=0x7ffc0000 [ 832.916017][T30883] cdc_wdm 1-1:1.0: skipping garbage [ 832.919418][ T30] audit: type=1326 audit(789.154:4089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1403 comm="syz.2.13204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a938e969 code=0x7ffc0000 [ 832.929559][T30883] cdc_wdm 1-1:1.0: skipping garbage [ 832.976026][T30883] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 832.986056][T30883] cdc_wdm 1-1:1.0: Unknown control protocol [ 833.029509][ T30] audit: type=1326 audit(789.360:4090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1408 comm="syz.2.13205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a938e969 code=0x7ffc0000 [ 833.095188][ T6001] usb 4-1: USB disconnect, device number 56 [ 833.115792][ T30] audit: type=1326 audit(789.360:4091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1408 comm="syz.2.13205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a938e969 code=0x7ffc0000 [ 833.151055][ T30] audit: type=1326 audit(789.379:4092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1408 comm="syz.2.13205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fa1a938e969 code=0x7ffc0000 [ 833.178109][ T30] audit: type=1326 audit(789.379:4093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1408 comm="syz.2.13205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a938e969 code=0x7ffc0000 [ 833.201376][ T1409] fido_id[1409]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 833.217016][ T1209] usb 1-1: USB disconnect, device number 58 [ 833.868787][ T1209] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 833.977207][ T1446] nbd: must specify a size in bytes for the device [ 833.987085][ T6001] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 834.065299][ T1209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 834.087192][ T1209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.115018][ T1209] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 834.137307][ T1209] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 834.160345][ T1209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.181953][ T6001] usb 4-1: Using ep0 maxpacket: 32 [ 834.186486][ T1209] usb 2-1: config 0 descriptor?? [ 834.194840][ T6001] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 834.226857][ T6001] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 834.250120][ T6001] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 834.269492][ T6001] usb 4-1: config 1 has no interface number 0 [ 834.286876][ T6001] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 834.328463][ T6001] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 834.365593][ T6001] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 834.378067][ T6001] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.403868][ T6001] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 834.619839][ T6001] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 834.640283][ T1209] plantronics 0003:047F:FFFF.001B: ignoring exceeding usage max [ 834.668193][ T1209] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 834.688708][ T1209] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 834.809733][T30883] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 834.860896][ T6009] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 834.915611][ T6001] usb 2-1: USB disconnect, device number 59 [ 834.922047][ T1476] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 834.991082][T30883] usb 1-1: Using ep0 maxpacket: 8 [ 834.999507][T30883] usb 1-1: config 0 has an invalid descriptor of length 51, skipping remainder of the config [ 835.011307][ T1478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13238'. [ 835.011854][T30883] usb 1-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 835.021493][ T1478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13238'. [ 835.042977][T30883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.055766][ T6009] usb 3-1: Using ep0 maxpacket: 32 [ 835.061181][T30883] usb 1-1: config 0 descriptor?? [ 835.066718][ T6009] usb 3-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 835.087906][ T6009] usb 3-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 835.097812][ T6009] usb 3-1: config 0 interface 0 has no altsetting 0 [ 835.106794][ T6009] usb 3-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 835.118467][T30883] usb 4-1: USB disconnect, device number 57 [ 835.125313][ T6009] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.140216][T30883] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 835.154654][ T6009] usb 3-1: config 0 descriptor?? [ 835.314378][ T1209] usb 1-1: USB disconnect, device number 59 [ 835.613516][ T6009] chicony 0003:04F2:1236.001C: unknown main item tag 0x1 [ 835.620785][ T6009] chicony 0003:04F2:1236.001C: unknown main item tag 0x0 [ 835.638087][ T6009] chicony 0003:04F2:1236.001C: hidraw0: USB HID v0.05 Device [HID 04f2:1236] on usb-dummy_hcd.2-1/input0 [ 835.864294][ T6009] usb 3-1: USB disconnect, device number 54 [ 835.984972][ T1502] tmpfs: Cannot change global quota limit on remount [ 835.996493][ T1209] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 836.179060][ T1209] usb 5-1: Using ep0 maxpacket: 16 [ 836.186196][ T1209] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 836.196869][ T1209] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 836.207862][T30883] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 836.215552][ T1209] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 836.225601][ T1209] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 836.249860][ T1209] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 836.301920][ T1209] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 836.312255][ T1209] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 836.321326][ T1209] usb 5-1: Manufacturer: syz [ 836.329062][ T1209] usb 5-1: config 0 descriptor?? [ 836.402478][T30883] usb 2-1: Using ep0 maxpacket: 16 [ 836.431539][T30883] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 836.447420][T30883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.458366][T30883] usb 2-1: Product: syz [ 836.463556][T30883] usb 2-1: Manufacturer: syz [ 836.468875][T30883] usb 2-1: SerialNumber: syz [ 836.491500][T30883] r8152-cfgselector 2-1: Unknown version 0x0000 [ 836.502551][T30883] r8152-cfgselector 2-1: config 0 descriptor?? [ 836.527794][ T1515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13255'. [ 836.537361][ T1515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13255'. [ 836.561004][ T1515] netlink: 'syz.2.13255': attribute type 12 has an invalid length. [ 836.575993][ T1515] netlink: 'syz.2.13255': attribute type 11 has an invalid length. [ 836.687644][ T1209] rc_core: IR keymap rc-hauppauge not found [ 836.695065][ T1209] Registered IR keymap rc-empty [ 836.713100][ T1209] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 836.753795][ T1209] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 836.793116][ T1209] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 836.823178][ T1209] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input113 [ 836.843520][ T1209] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 836.862504][ T1209] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 836.892730][ T1209] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 836.932492][ T1209] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 836.959043][ T1209] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 836.994192][T30883] r8152-cfgselector 2-1: USB disconnect, device number 60 [ 837.012504][ T1209] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 837.045670][ T1209] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 837.076775][ T1209] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 837.118878][ T1209] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 837.151076][ T1209] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 837.172318][ T5999] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 837.185970][ T1209] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 837.208725][ T1209] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 837.246790][ T1209] usb 5-1: USB disconnect, device number 63 [ 837.358169][ T5999] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 837.381592][ T5999] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.404010][ T5999] usb 3-1: Product: syz [ 837.420058][ T5999] usb 3-1: Manufacturer: syz [ 837.430763][ T5999] usb 3-1: SerialNumber: syz [ 837.454196][ T5999] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 837.474973][T30883] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 837.743125][ T1527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.755780][ T1527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.832155][ T1555] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13274'. [ 837.845716][ T6001] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 838.007227][ T5999] usb 3-1: USB disconnect, device number 55 [ 838.016755][ T6001] usb 1-1: Using ep0 maxpacket: 32 [ 838.019441][ T6001] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 838.019476][ T6001] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 838.019518][ T6001] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 838.019545][ T6001] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.029414][ T6001] usb 1-1: config 0 descriptor?? [ 838.142672][ T1566] sp0: Synchronizing with TNC [ 838.223920][ T1570] netlink: 412 bytes leftover after parsing attributes in process `syz.1.13281'. [ 838.557624][ T6001] hid (null): global environment stack underflow [ 838.576565][ T6001] waterforce 0003:1044:7A4D.001D: global environment stack underflow [ 838.597307][ T6001] waterforce 0003:1044:7A4D.001D: item 0 0 1 11 parsing failed [ 838.606068][ T6001] waterforce 0003:1044:7A4D.001D: hid parse failed with -22 [ 838.621605][ T6001] waterforce 0003:1044:7A4D.001D: probe with driver waterforce failed with error -22 [ 838.698552][ T1593] netlink: 256 bytes leftover after parsing attributes in process `syz.4.13292'. [ 838.714468][ T1593] netlink: 72 bytes leftover after parsing attributes in process `syz.4.13292'. [ 838.785903][ T6001] usb 1-1: USB disconnect, device number 60 [ 838.925838][T30883] usb 3-1: Service connection timeout for: 256 [ 838.935694][T30883] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 838.951407][T30883] ath9k_htc: Failed to initialize the device [ 838.968687][ T5999] usb 3-1: ath9k_htc: USB layer deinitialized [ 839.008461][ T1604] kAFS: unable to lookup cell 'gK)kJL+} T/pbΈ&MK(|Fkq2J$O-7RkE1 ўLEB{Nb+*eRMc\jmԩԿOt" kknzHKu6MySHIUo IfVU r&cNN0NBc5?7c#0*k<9mcL 07뜖Ctϒ [ 839.008461][ T1604] jyHao 1.B$&2M0=`;!dφOJIX!J˟BvU_Rc?' [ 839.503133][ T6097] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 839.699867][ T6097] usb 5-1: Using ep0 maxpacket: 8 [ 839.706593][ T1639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13312'. [ 839.715673][ T1639] netlink: 56 bytes leftover after parsing attributes in process `syz.3.13312'. [ 839.729620][ T1641] ieee802154 phy1 wpan1: encryption failed: -22 [ 839.743993][ T6097] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 839.760519][ T6097] usb 5-1: config 179 has no interface number 0 [ 839.766897][ T6097] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 839.802168][ T6097] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 839.822492][ T6097] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 839.856022][ T6097] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 839.894295][ T6097] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 839.944111][ T6097] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 839.958979][ T1651] tipc: Started in network mode [ 839.965775][ T6097] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.975017][ T1651] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 839.989606][ T1651] tipc: Enabled bearer , priority 10 [ 840.016427][ T1616] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 840.293489][ T1664] overlayfs: conflicting options: metacopy=off,verity=require [ 840.351035][ T1616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.362975][ T1616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.539906][ T6001] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 840.601441][ T5999] usb 5-1: USB disconnect, device number 64 [ 840.601507][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 840.601563][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 840.702368][ T6001] usb 3-1: Using ep0 maxpacket: 8 [ 840.721792][ T6097] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 840.726133][ T6001] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 840.741821][ T6001] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.760650][ T6001] usb 3-1: Product: syz [ 840.766191][ T6001] usb 3-1: Manufacturer: syz [ 840.770858][ T6001] usb 3-1: SerialNumber: syz [ 840.784008][ T6001] usb 3-1: config 0 descriptor?? [ 840.793503][ T6001] gspca_main: se401-2.14.0 probing 047d:5003 [ 840.903829][ T6097] usb 4-1: Using ep0 maxpacket: 32 [ 840.922540][ T6097] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 840.947384][ T6097] usb 4-1: config 0 has no interface number 0 [ 840.959296][ T6097] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 840.978221][ T6097] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.986246][ T6097] usb 4-1: Product: syz [ 841.000024][ T6097] usb 4-1: Manufacturer: syz [ 841.010064][ T6097] usb 4-1: SerialNumber: syz [ 841.024426][ T6097] usb 4-1: config 0 descriptor?? [ 841.041493][ T6097] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 841.194433][ T6009] tipc: Node number set to 4269801488 [ 841.240407][ T6001] gspca_se401: Bayer format not supported! [ 841.468450][ T6001] usb 3-1: USB disconnect, device number 56 [ 841.663333][ T6097] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 841.701734][ T6097] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 841.882280][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 841.882728][ T6001] usb 4-1: USB disconnect, device number 58 [ 841.889800][ T5999] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 841.943174][ T6001] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 841.977069][ T6001] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 841.993402][ T6001] quatech2 4-1:0.51: device disconnected [ 842.067393][ T5999] usb 5-1: config 0 has an invalid interface number: 32 but max is 0 [ 842.080081][ T5999] usb 5-1: config 0 has no interface number 0 [ 842.086239][ T5999] usb 5-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 842.121897][ T5999] usb 5-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 842.131809][ T5999] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 842.154174][ T5999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.184888][ T5999] usb 5-1: config 0 descriptor?? [ 842.570959][ T6001] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 842.636974][ T5999] logitech-djreceiver 0003:046D:C71B.001E: unknown main item tag 0x0 [ 842.645506][ T5999] logitech-djreceiver 0003:046D:C71B.001E: unknown main item tag 0x0 [ 842.654056][ T5999] logitech-djreceiver 0003:046D:C71B.001E: unknown main item tag 0x0 [ 842.662786][ T5999] logitech-djreceiver 0003:046D:C71B.001E: unknown main item tag 0x0 [ 842.671256][ T5999] logitech-djreceiver 0003:046D:C71B.001E: unknown main item tag 0x0 [ 842.685565][ T5999] logitech-djreceiver 0003:046D:C71B.001E: unknown main item tag 0x0 [ 842.695182][ T5999] logitech-djreceiver 0003:046D:C71B.001E: unknown main item tag 0x0 [ 842.710992][ T5999] logitech-djreceiver 0003:046D:C71B.001E: hidraw0: USB HID v0.00 Device [HID 046d:c71b] on usb-dummy_hcd.4-1/input32 [ 842.752877][ T6001] usb 2-1: Using ep0 maxpacket: 16 [ 842.780537][ T6001] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 842.789439][ T6001] usb 2-1: config 0 has no interface number 0 [ 842.808985][ T6001] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 842.837162][ T6001] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 842.854739][ T6001] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 842.866759][ T6009] usb 5-1: USB disconnect, device number 65 [ 842.893757][ T6001] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.917841][ T6001] usb 2-1: config 0 descriptor?? [ 843.605492][ T6001] uclogic 0003:28BD:0071.001F: failed retrieving string descriptor #100: -71 [ 843.658402][ T6001] uclogic 0003:28BD:0071.001F: failed retrieving pen parameters: -71 [ 843.681220][ T6001] uclogic 0003:28BD:0071.001F: pen probing failed: -71 [ 843.702331][ T6001] uclogic 0003:28BD:0071.001F: failed probing parameters: -71 [ 843.716492][ T6001] uclogic 0003:28BD:0071.001F: probe with driver uclogic failed with error -71 [ 843.756854][ T6001] usb 2-1: USB disconnect, device number 61 [ 843.842677][ T1763] program syz.0.13372 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 843.872083][ T1765] __nla_validate_parse: 2 callbacks suppressed [ 843.872103][ T1765] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13371'. [ 843.953461][ T1768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13373'. [ 844.495296][ T6001] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 844.670138][ T6001] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.692581][ T6001] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 844.703416][ T6001] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.719488][ T6001] usb 5-1: config 0 descriptor?? [ 845.181675][ T1823] netlink: 100 bytes leftover after parsing attributes in process `syz.3.13398'. [ 845.201722][ T5999] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 845.236215][ T6001] hid-picolcd 0003:04D8:C002.0020: No report with id 0x11 found [ 845.273978][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 845.274000][ T30] audit: type=1800 audit(843.218:4098): pid=1825 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.13399" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 845.387038][ T6001] usb 5-1: USB disconnect, device number 66 [ 845.394743][ T5999] usb 3-1: Using ep0 maxpacket: 16 [ 845.414828][ T5999] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 845.445157][ T5999] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 845.468791][ T5999] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 845.491274][ T5999] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 845.524200][ T5999] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 845.565918][ T5999] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.573977][ T5999] usb 3-1: Product: syz [ 845.594924][ T5999] usb 3-1: Manufacturer: syz [ 845.600227][ T5999] usb 3-1: SerialNumber: syz [ 845.922238][ T5999] usb 3-1: USB disconnect, device number 57 [ 845.994239][T30521] udevd[30521]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 846.268152][ T1850] sg_write: process 5174 (syz.4.13411) changed security contexts after opening file descriptor, this is not allowed. [ 846.749540][ T1881] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 846.749540][ T1881] program syz.4.13426 not setting count and/or reply_len properly [ 847.307514][ T6009] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 847.491229][ T6009] usb 5-1: Using ep0 maxpacket: 32 [ 847.514528][ T6009] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 847.535518][ T6009] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 847.570333][ T6009] usb 5-1: config 0 interface 0 has no altsetting 0 [ 847.595225][ T6009] usb 5-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 847.608650][ T6009] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.620468][ T6009] usb 5-1: config 0 descriptor?? [ 847.756186][ T6097] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 847.790876][ T5999] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 847.904001][ T1938] netlink: 'syz.0.13455': attribute type 1 has an invalid length. [ 847.928644][ T6097] usb 3-1: Using ep0 maxpacket: 32 [ 847.956339][ T6097] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 847.969760][ T6097] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.987320][ T5999] usb 2-1: Using ep0 maxpacket: 16 [ 847.994747][ T5999] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 848.016681][ T6097] usb 3-1: config 0 descriptor?? [ 848.027865][ T5999] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 848.045389][ T6097] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 848.069971][ T5999] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 848.084523][ T5999] usb 2-1: config 0 interface 0 has no altsetting 0 [ 848.097098][ T5999] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 848.101616][ T6009] glorious 0003:258A:0033.0021: unknown main item tag 0x0 [ 848.134060][ T5999] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.137360][ T6009] glorious 0003:258A:0033.0021: unknown main item tag 0x0 [ 848.154159][ T5999] usb 2-1: Product: syz [ 848.158442][ T5999] usb 2-1: Manufacturer: syz [ 848.162725][ T6009] glorious 0003:258A:0033.0021: unknown main item tag 0x0 [ 848.170458][ T6009] glorious 0003:258A:0033.0021: unknown main item tag 0x0 [ 848.178997][ T5999] usb 2-1: SerialNumber: syz [ 848.199632][ T6009] glorious 0003:258A:0033.0021: unknown main item tag 0x0 [ 848.222979][ T5999] usb 2-1: config 0 descriptor?? [ 848.232674][ T6009] glorious 0003:258A:0033.0021: hidraw0: USB HID vff.fc Device [Glorious Model D] on usb-dummy_hcd.4-1/input0 [ 848.311813][ T6009] usb 5-1: USB disconnect, device number 67 [ 848.436220][ T1948] fido_id[1948]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 848.483759][ T6097] gspca_vc032x: reg_w err -71 [ 848.498631][ T5999] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input114 [ 848.509978][ T6097] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.521065][ T6097] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.526524][ T6097] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.533018][ T6097] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.538742][ T5174] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 848.558179][ T6097] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.563633][ T6097] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.574437][ T6097] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.584903][ T5174] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 848.597328][ T6097] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.616399][ T6097] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.622623][ T5174] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 848.631774][ T6097] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.648227][ T6097] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.653596][ T6097] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.670335][ T5174] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 848.688521][ T6097] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.697828][ T6097] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.704415][ T6097] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.728506][ T6097] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.739884][ T1926] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 848.756253][ T6097] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.761921][ T6097] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.767811][ T5174] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 848.780640][ T5999] usb 2-1: USB disconnect, device number 62 [ 848.789315][ T6097] gspca_vc032x: Unknown sensor... [ 848.797614][ T6097] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 848.806518][T31804] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 848.837820][ T6097] usb 3-1: USB disconnect, device number 58 [ 848.990369][ T1964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13465'. [ 849.017611][ T1965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13464'. [ 849.041238][ T1965] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13464'. [ 849.782367][ T2001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13480'. [ 850.215127][ T6009] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 850.398680][ T6009] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 850.407952][ T6009] usb 4-1: config 0 has no interface number 0 [ 850.413001][ T2026] vlan0: entered allmulticast mode [ 850.414094][ T6009] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 850.428489][ T2026] bond0: entered allmulticast mode [ 850.428518][ T2026] @: entered allmulticast mode [ 850.428537][ T2026] bond_slave_1: entered allmulticast mode [ 850.428554][ T2026] team0: entered allmulticast mode [ 850.428571][ T2026] team_slave_0: entered allmulticast mode [ 850.428651][ T2026] team_slave_1: entered allmulticast mode [ 850.469762][ T6009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.497289][ T6009] usb 4-1: config 0 descriptor?? [ 850.532178][ T6009] usb 4-1: selecting invalid altsetting 1 [ 850.558816][ T6009] dvb_ttusb_budget: ttusb_init_controller: error [ 850.598160][ T6009] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 850.769402][ T2042] 9pnet_fd: Insufficient options for proto=fd [ 850.788623][ T6009] DVB: Unable to find symbol cx22700_attach() [ 850.796612][ T2040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13499'. [ 850.819010][ T2040] tipc: Started in network mode [ 850.879744][ T2040] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 850.920581][ T2040] tipc: Enabling of bearer rejected, failed to enable media [ 850.936196][ T6009] DVB: Unable to find symbol tda10046_attach() [ 850.942619][ T6009] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 850.957711][ T6009] usb 4-1: USB disconnect, device number 59 [ 851.124208][ T2053] netlink: 34 bytes leftover after parsing attributes in process `syz.2.13505'. [ 851.640421][ T2083] netlink: 'syz.0.13519': attribute type 3 has an invalid length. [ 851.660397][ T5999] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 851.842091][ T5999] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.875671][ T5999] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 851.906574][ T5999] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 851.944600][ T5999] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 851.967167][ T5999] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.985155][ T2097] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 852.000827][ T5999] usb 4-1: config 0 descriptor?? [ 852.479602][ T5999] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 852.495254][ T2119] trusted_key: encrypted_key: key user:syz not found [ 852.498601][ T5999] plantronics 0003:047F:FFFF.0022: unbalanced collection at end of report description [ 852.557078][ T2121] netlink: 'syz.1.13538': attribute type 1 has an invalid length. [ 852.570994][ T5999] plantronics 0003:047F:FFFF.0022: parse failed [ 852.598834][ T5999] plantronics 0003:047F:FFFF.0022: probe with driver plantronics failed with error -22 [ 852.703662][ T6009] usb 4-1: USB disconnect, device number 60 [ 853.559868][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 854.094312][ T2184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 854.341327][ T6009] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 854.540221][ T6009] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 854.570400][ T6009] usb 3-1: config 0 has no interface number 0 [ 854.602233][ T6009] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 854.627160][ T30] audit: type=1326 audit(851.964:4099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2212 comm="syz.4.13581" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc17998e969 code=0x0 [ 854.651561][ T6009] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 854.701376][ T6009] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 854.715569][ T6009] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.734559][ T6009] usb 3-1: Product: syz [ 854.741996][ T6009] usb 3-1: Manufacturer: syz [ 854.758784][ T6009] usb 3-1: SerialNumber: syz [ 854.780370][ T6009] usb 3-1: config 0 descriptor?? [ 854.807528][ T2188] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 854.829763][ T6009] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 854.858310][ T6009] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 854.961590][ T5999] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 855.133010][ T5999] usb 4-1: Using ep0 maxpacket: 32 [ 855.149008][ T5999] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 855.164596][ T5999] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.174187][ T5999] usb 4-1: Product: syz [ 855.183811][ T5999] usb 4-1: Manufacturer: syz [ 855.189228][ T5999] usb 4-1: SerialNumber: syz [ 855.200631][ T5999] usb 4-1: config 0 descriptor?? [ 855.442532][ T5999] snd-usb-6fire 4-1:0.0: unknown device firmware state received from device: [ 855.451360][ T5999] eb 9a 47 80 9b f8 7a f0 [ 855.468781][ T5999] snd-usb-6fire 4-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 855.570993][ T6009] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 855.654433][ T6001] usb 4-1: USB disconnect, device number 61 [ 855.757756][ T6009] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 855.797465][ T6009] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 855.827511][ T6009] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 855.827549][ T6009] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.892962][ T6009] usb 2-1: config 0 descriptor?? [ 856.362599][ T6009] arvo 0003:1E7D:30D4.0023: unknown main item tag 0x0 [ 856.407035][ T6009] arvo 0003:1E7D:30D4.0023: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 856.554711][ T5999] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 856.569121][ T6009] arvo 0003:1E7D:30D4.0023: couldn't init struct arvo_device [ 856.575806][ T6097] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 856.584711][ T6009] arvo 0003:1E7D:30D4.0023: couldn't install keyboard [ 856.610405][ T6009] arvo 0003:1E7D:30D4.0023: probe with driver arvo failed with error -71 [ 856.641875][ T6009] usb 2-1: USB disconnect, device number 63 [ 856.741102][ T5999] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 856.749582][ T5999] usb 1-1: config 0 has no interface number 0 [ 856.755746][ T5999] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 856.766120][ T5999] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.777036][ T6097] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.797003][ T6097] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 856.807261][T30883] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 856.818771][ T5999] usb 1-1: config 0 descriptor?? [ 856.835164][ T5999] usb 1-1: selecting invalid altsetting 1 [ 856.841060][ T6097] usb 5-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 856.855238][ T5999] dvb_ttusb_budget: ttusb_init_controller: error [ 856.861626][ T5999] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 856.874276][ T6097] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.913634][ T6097] usb 5-1: config 0 descriptor?? [ 856.995965][T30883] usb 4-1: Using ep0 maxpacket: 8 [ 857.013386][T30883] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 857.029417][T30883] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 857.067135][ T5999] DVB: Unable to find symbol cx22700_attach() [ 857.077265][T30883] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 857.095836][T30883] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 857.122371][T30883] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 857.157784][T30883] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 857.171740][T30883] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 857.198490][T30883] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 857.225541][ T5999] DVB: Unable to find symbol tda10046_attach() [ 857.243320][ T5999] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 857.264509][T30883] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 857.289767][ T5999] usb 1-1: USB disconnect, device number 61 [ 857.302652][T30883] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 857.338720][T30883] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 857.360935][T30883] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 857.373679][T30883] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 857.401392][ T1209] usb 3-1: USB disconnect, device number 59 [ 857.429684][ T6097] logitech-djreceiver 0003:046D:C534.0024: unknown main item tag 0x7 [ 857.441574][T30883] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 857.463741][T30883] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 857.477715][ T1209] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 857.501320][ T1209] cyberjack 3-1:0.69: device disconnected [ 857.526251][T30883] usb 4-1: string descriptor 0 read error: -22 [ 857.533476][T30883] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 857.549112][T30883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.603329][T30883] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 857.654783][ T6009] usb 5-1: USB disconnect, device number 68 [ 858.263039][ T2321] tipc: Started in network mode [ 858.268523][ T2321] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 858.279999][ T2321] tipc: Enabled bearer , priority 10 [ 859.207111][ T6009] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 859.394220][ T6009] usb 5-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 859.421972][ T6009] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 859.440443][ T6009] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 30768, setting to 64 [ 859.452815][ T6009] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 859.469630][ T6009] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 859.478940][ T6001] tipc: Node number set to 15444650 [ 859.507305][ T6009] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 859.526268][ T6009] usb 5-1: Product: syz [ 859.530714][ T6009] usb 5-1: Manufacturer: syz [ 859.535372][ T6009] usb 5-1: SerialNumber: syz [ 859.554324][ T6009] usb 5-1: config 0 descriptor?? [ 859.633450][ T1209] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 859.787613][ T6009] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 859.816507][ T6009] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 859.840331][ T1209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 859.876651][ T1209] usb 3-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 859.903579][ T1209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.957768][ T1209] usb 3-1: config 0 descriptor?? [ 859.967312][ T5999] usb 4-1: USB disconnect, device number 62 [ 860.002051][ T6009] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 860.018347][ T6009] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 860.055777][ T6009] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 860.217749][ T2408] tipc: Enabling of bearer rejected, failed to enable media [ 860.228170][ T6009] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 860.261520][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 860.268501][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 860.275200][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 860.281866][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 860.288598][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 860.295276][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 860.301971][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 860.308891][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 860.315585][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 860.322404][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 860.329149][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 860.335808][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 860.342484][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 860.349160][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 860.355889][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 860.362591][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 860.369273][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 860.375990][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 860.382674][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 860.389344][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 860.396121][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 860.402894][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 860.409553][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 860.416271][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 860.422932][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 860.429587][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 860.436290][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 860.444026][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 860.451638][ T6009] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 860.460158][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 860.467631][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 860.468882][ T1209] glorious 0003:258A:0036.0025: unknown main item tag 0x1 [ 860.474962][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 860.489098][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 860.495956][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 860.502965][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 860.509812][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 860.516595][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 860.529056][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 860.535959][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 860.543399][ T6009] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 860.556002][ T1209] glorious 0003:258A:0036.0025: reserved main item tag 0xd [ 860.566578][ T6009] usb 5-1: USB disconnect, device number 69 [ 860.583591][ T1209] glorious 0003:258A:0036.0025: item fetching failed at offset 4/5 [ 860.608439][ T1209] glorious 0003:258A:0036.0025: probe with driver glorious failed with error -22 [ 860.672272][ T1209] usb 3-1: USB disconnect, device number 60 [ 860.748307][ T2422] netlink: 'syz.0.13660': attribute type 5 has an invalid length. [ 860.831000][ T5993] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 861.014163][ T5993] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 861.038342][ T5993] usb 2-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 861.063510][ T5993] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.102844][ T5993] usb 2-1: config 0 descriptor?? [ 861.590273][ T5993] sigmamicro 0003:1C4F:0059.0026: hidraw0: USB HID v1.05 Device [HID 1c4f:0059] on usb-dummy_hcd.1-1/input0 [ 861.781561][ T5993] usb 2-1: USB disconnect, device number 64 [ 861.823952][ T2470] fido_id[2470]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 862.125448][ T1209] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 862.230951][ T6009] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 862.275161][ T30] audit: type=1326 audit(859.129:4100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2499 comm="syz.3.13690" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f541a58e969 code=0x0 [ 862.338027][ T1209] usb 1-1: Using ep0 maxpacket: 32 [ 862.345102][ T1209] usb 1-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 862.355327][ T1209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.369062][ T1209] usb 1-1: config 0 descriptor?? [ 862.408644][ T6009] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 862.439529][ T6009] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 862.464029][ T6009] usb 5-1: config 0 interface 0 has no altsetting 0 [ 862.474837][ T6009] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 862.498270][ T6009] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.526497][ T6009] usb 5-1: config 0 descriptor?? [ 862.786509][ T2520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13699'. [ 862.803102][ T30] audit: type=1326 audit(859.597:4101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2521 comm="syz.2.13698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a938e969 code=0x7ffc0000 [ 862.840931][ T30] audit: type=1326 audit(859.597:4102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2521 comm="syz.2.13698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a938e969 code=0x7ffc0000 [ 862.896641][ T30] audit: type=1326 audit(859.597:4103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2521 comm="syz.2.13698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa1a938e969 code=0x7ffc0000 [ 862.942203][ T30] audit: type=1326 audit(859.615:4104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2521 comm="syz.2.13698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a938e969 code=0x7ffc0000 [ 862.967155][ T30] audit: type=1326 audit(859.615:4105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2521 comm="syz.2.13698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a938e969 code=0x7ffc0000 [ 862.988766][ T2528] netlink: 'syz.2.13700': attribute type 8 has an invalid length. [ 863.023690][ T6009] hid-steam 0003:28DE:1102.0028: unknown main item tag 0x0 [ 863.030988][ T6009] hid-steam 0003:28DE:1102.0028: unknown main item tag 0x0 [ 863.053369][ T30] audit: type=1326 audit(859.615:4106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2521 comm="syz.2.13698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fa1a938e969 code=0x7ffc0000 [ 863.080425][ T6009] hid-steam 0003:28DE:1102.0028: unknown main item tag 0x0 [ 863.083479][ T1209] usb 1-1: string descriptor 0 read error: -71 [ 863.109258][ T30] audit: type=1326 audit(859.615:4107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2521 comm="syz.2.13698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a938e969 code=0x7ffc0000 [ 863.110682][ T6009] hid-steam 0003:28DE:1102.0028: unknown main item tag 0x0 [ 863.135131][ T1209] uclogic 0003:256C:006E.0027: failed retrieving string descriptor #200: -71 [ 863.161484][ T6009] hid-steam 0003:28DE:1102.0028: unknown main item tag 0x0 [ 863.166175][ T1209] uclogic 0003:256C:006E.0027: failed retrieving pen parameters: -71 [ 863.178360][ T30] audit: type=1326 audit(859.615:4108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2521 comm="syz.2.13698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a938e969 code=0x7ffc0000 [ 863.219603][ T1209] uclogic 0003:256C:006E.0027: failed probing pen v2 parameters: -71 [ 863.224964][ T6009] hid-steam 0003:28DE:1102.0028: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 863.239223][ T1209] uclogic 0003:256C:006E.0027: failed probing parameters: -71 [ 863.239346][ T1209] uclogic 0003:256C:006E.0027: probe with driver uclogic failed with error -71 [ 863.314783][ T1209] usb 1-1: USB disconnect, device number 62 [ 863.357483][ T6009] usb 5-1: USB disconnect, device number 70 [ 863.483078][ T2546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13707'. [ 863.501614][ T2537] fido_id[2537]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 863.692189][ T2558] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 863.789672][ T2563] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 863.946792][ T2573] random: crng reseeded on system resumption [ 863.960478][ T2567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13718'. [ 864.580869][ T1209] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 864.758367][ T1209] usb 2-1: Using ep0 maxpacket: 16 [ 864.777310][ T1209] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 864.807040][ T1209] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 864.833844][ T1209] usb 2-1: config 0 interface 0 has no altsetting 0 [ 864.844515][ T1209] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 864.862706][ T1209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.883081][ T1209] usb 2-1: config 0 descriptor?? [ 865.067895][ T2607] use of bytesused == 0 is deprecated and will be removed in the future, [ 865.076736][ T2607] use the actual size instead. [ 865.330479][ T1209] hid (null): unknown global tag 0xd [ 865.370295][ T1209] mcp2200 0003:04D8:00DF.0029: unknown global tag 0xd [ 865.388506][ T1209] mcp2200 0003:04D8:00DF.0029: item 0 4 1 13 parsing failed [ 865.407134][ T1209] mcp2200 0003:04D8:00DF.0029: can't parse reports [ 865.424693][ T1209] mcp2200 0003:04D8:00DF.0029: probe with driver mcp2200 failed with error -22 [ 865.546868][ T1209] usb 2-1: USB disconnect, device number 65 [ 865.758361][ T2628] "syz.3.13740" (2628) uses obsolete ecb(arc4) skcipher [ 866.112639][ T2670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13755'. [ 866.121660][ T2670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13755'. [ 866.159144][ T2670] netlink: 'syz.0.13755': attribute type 14 has an invalid length. [ 866.179591][ T2673] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13756'. [ 866.188899][ T2670] netlink: 'syz.0.13755': attribute type 12 has an invalid length. [ 866.688990][ T6009] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 866.815859][ T2711] futex_wake_op: syz.1.13770 tries to shift op by -1; fix this program [ 866.860006][ T6009] usb 4-1: Using ep0 maxpacket: 16 [ 866.882602][ T6009] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 866.890838][ T6009] usb 4-1: config 0 has no interface number 0 [ 866.913430][ T6009] usb 4-1: config 0 interface 255 altsetting 121 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.933299][ T6009] usb 4-1: config 0 interface 255 altsetting 121 endpoint 0x81 has invalid wMaxPacketSize 0 [ 866.964483][ T6009] usb 4-1: config 0 interface 255 has no altsetting 0 [ 866.984285][ T6009] usb 4-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 867.009718][ T6009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.032967][ T6009] usb 4-1: config 0 descriptor?? [ 867.478211][ T6009] uclogic 0003:28BD:0934.002A: interface is invalid, ignoring [ 867.514557][ T5999] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 867.685062][ T5999] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 867.700431][ T6009] usb 4-1: USB disconnect, device number 63 [ 867.705074][ T5999] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 867.715690][ T1209] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 867.728506][ T5999] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.746550][ T5999] usb 2-1: config 0 descriptor?? [ 867.759205][ T2735] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 867.909970][ T1209] usb 3-1: config 0 has an invalid interface number: 33 but max is 0 [ 867.918149][ T1209] usb 3-1: config 0 has no interface number 0 [ 867.924553][ T1209] usb 3-1: New USB device found, idVendor=24cf, idProduct=59e4, bcdDevice= 9.43 [ 867.934610][ T1209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.951625][ T1209] usb 3-1: config 0 descriptor?? [ 867.973815][ T1209] usb-storage 3-1:0.33: USB Mass Storage device detected [ 868.198535][ T6009] usb 3-1: USB disconnect, device number 61 [ 868.223837][ T5999] elan 0003:04F3:0755.002B: unknown main item tag 0x0 [ 868.250522][ T5999] elan 0003:04F3:0755.002B: item fetching failed at offset 3/5 [ 868.260813][ T5999] elan 0003:04F3:0755.002B: Hid Parse failed [ 868.267323][ T5999] elan 0003:04F3:0755.002B: probe with driver elan failed with error -22 [ 868.425666][ T6009] usb 2-1: USB disconnect, device number 66 [ 868.677760][ T5999] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 868.848684][ T5999] usb 1-1: Using ep0 maxpacket: 16 [ 868.867125][ T5999] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 868.889971][ T5999] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 868.912709][ T5999] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 868.923525][ T5999] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 868.933698][ T5999] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 868.951300][ T5999] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 868.980221][ T5999] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 869.008916][ T5999] usb 1-1: Manufacturer: syz [ 869.027672][ T5999] usb 1-1: config 0 descriptor?? [ 869.363293][ T5999] rc_core: IR keymap rc-hauppauge not found [ 869.369381][ T5999] Registered IR keymap rc-empty [ 869.376134][ T5999] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 869.416817][ T5999] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 869.458989][ T5999] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 869.477835][ T5999] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input115 [ 869.509273][ T5999] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 869.538816][ T5999] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 869.575619][ T5999] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 869.608312][ T5999] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 869.639749][ T5999] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 869.671943][ T5999] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 869.693158][ T5999] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 869.735869][ T5999] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 869.778666][ T5999] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 869.810934][ T5999] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 869.843082][ T5999] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 869.870765][ T5999] mceusb 1-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 869.912514][ T5999] usb 1-1: USB disconnect, device number 63 [ 870.597408][ T2890] delete_channel: no stack [ 870.990114][ T6009] kernel write not supported for file /sg0 (pid: 6009 comm: kworker/1:5) [ 871.069737][ T2913] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13847'. [ 871.084892][ T2913] netlink: 'syz.2.13847': attribute type 9 has an invalid length. [ 871.449755][ T6009] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 871.572967][ T2943] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13862'. [ 871.618296][ T6009] usb 3-1: Using ep0 maxpacket: 16 [ 871.635795][ T6009] usb 3-1: config 64 has an invalid interface number: 219 but max is 1 [ 871.648487][ T6009] usb 3-1: config 64 has an invalid interface number: 145 but max is 1 [ 871.660268][ T6009] usb 3-1: config 64 has no interface number 0 [ 871.668989][ T6009] usb 3-1: config 64 has no interface number 1 [ 871.677950][ T6009] usb 3-1: config 64 interface 145 has no altsetting 0 [ 871.690345][ T6009] usb 3-1: New USB device found, idVendor=185b, idProduct=1e78, bcdDevice=33.a9 [ 871.721257][ T6009] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.740633][ T6009] usb 3-1: Product: syz [ 871.751430][ T6009] usb 3-1: Manufacturer: syz [ 871.756110][ T6009] usb 3-1: SerialNumber: syz [ 872.017497][ T6009] dvb-usb: found a 'Compro Videomate U500' in cold state, will try to load a firmware [ 872.046322][ T6009] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 872.065710][ T6009] dib0700: firmware download failed at 7 with -22 [ 872.103423][ T6009] hub 3-1:64.145: Invalid hub with more than one config or interface [ 872.115368][ T6009] hub 3-1:64.145: probe with driver hub failed with error -22 [ 872.130005][ T6009] dvb-usb: found a 'Compro Videomate U500' in cold state, will try to load a firmware [ 872.147038][ T6009] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 872.173285][ T6009] dib0700: firmware download failed at 7 with -22 [ 872.200077][ T6009] usb 3-1: USB disconnect, device number 62 [ 872.259317][ T2974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13876'. [ 872.583434][ T2994] smk_cipso_doi:679 remove rc = -2 [ 872.682550][ T2999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13888'. [ 872.771525][ T3006] RDS: rds_bind could not find a transport for fe88::5, load rds_tcp or rds_rdma? [ 872.871820][ T3010] netlink: 104 bytes leftover after parsing attributes in process `syz.2.13892'. [ 873.206368][ T3024] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13900'. [ 873.206693][ T3020] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13898'. [ 873.347431][ T3029] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 873.634346][ T3049] netlink: 272 bytes leftover after parsing attributes in process `syz.1.13909'. [ 875.358601][ T3149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13959'. [ 875.563875][ T5999] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 875.722554][ T1209] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 875.745734][ T5999] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 875.760880][ T5999] usb 1-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 875.780898][ T5999] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.800949][ T5999] usb 1-1: config 0 descriptor?? [ 875.907684][ T1209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 11285, setting to 64 [ 875.929246][ T1209] usb 2-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=94.47 [ 875.939287][ T1209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.968765][ T1209] usb 2-1: Product: syz [ 875.974804][ T1209] usb 2-1: Manufacturer: syz [ 875.980119][ T1209] usb 2-1: SerialNumber: syz [ 876.001399][ T1209] usb 2-1: config 0 descriptor?? [ 876.012526][ T3154] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 876.115250][ T3184] binder: BINDER_SET_CONTEXT_MGR already set [ 876.123475][ T3184] binder: 3183:3184 ioctl 40046207 0 returned -16 [ 876.240572][ T1209] usb 2-1: USB disconnect, device number 67 [ 876.249944][ T5999] elecom 0003:056E:010C.002C: reserved main item tag 0xd [ 876.287811][ T5999] elecom 0003:056E:010C.002C: unexpected long global item [ 876.314791][ T5999] elecom 0003:056E:010C.002C: probe with driver elecom failed with error -22 [ 876.464908][ T5993] usb 1-1: USB disconnect, device number 64 [ 876.535041][ T6009] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 876.724231][ T6009] usb 3-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 876.738377][ T6009] usb 3-1: config 0 interface 0 has no altsetting 0 [ 876.745084][ T6009] usb 3-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 876.758947][ T6009] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.773664][ T6009] usb 3-1: config 0 descriptor?? [ 877.246855][ T6009] apple 0003:05AC:027A.002D: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.2-1/input0 [ 877.458796][ T1209] usb 3-1: USB disconnect, device number 63 [ 877.555750][ T3231] program syz.4.13996 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 877.631019][ T3233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13999'. [ 879.035823][ T3284] ================================================================== [ 879.043947][ T3284] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 879.052579][ T3284] Write of size 1440 at addr ffffc9000439fda0 by task vivid-000-vid-c/3284 [ 879.061197][ T3284] [ 879.063561][ T3284] CPU: 1 UID: 0 PID: 3284 Comm: vivid-000-vid-c Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(full) [ 879.063586][ T3284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 879.063606][ T3284] Call Trace: [ 879.063617][ T3284] [ 879.063629][ T3284] dump_stack_lvl+0x189/0x250 [ 879.063662][ T3284] ? __pfx_dump_stack_lvl+0x10/0x10 [ 879.063686][ T3284] ? __pfx__printk+0x10/0x10 [ 879.063715][ T3284] ? __pfx__printk+0x10/0x10 [ 879.063741][ T3284] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 879.063763][ T3284] ? __virt_addr_valid+0xc3/0x540 [ 879.063790][ T3284] print_report+0xb4/0x290 [ 879.063810][ T3284] ? tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 879.063835][ T3284] kasan_report+0x118/0x150 [ 879.063865][ T3284] ? tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 879.063891][ T3284] kasan_check_range+0x29a/0x2b0 [ 879.063909][ T3284] ? tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 879.063931][ T3284] __asan_memcpy+0x40/0x70 [ 879.063954][ T3284] tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 879.064017][ T3284] vivid_thread_vid_cap_tick+0xfff/0x5fe0 [ 879.064051][ T3284] ? xfd_validate_state+0x6d/0x150 [ 879.064069][ T3284] ? __lock_acquire+0xaac/0xd20 [ 879.064097][ T3284] ? ktime_get+0x3e/0x1f0 [ 879.064116][ T3284] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 879.064152][ T3284] ? lockdep_hardirqs_on+0x9c/0x150 [ 879.064178][ T3284] vivid_thread_vid_cap+0x8d8/0x10d0 [ 879.064209][ T3284] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 879.064230][ T3284] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 879.064252][ T3284] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 879.064278][ T3284] ? __kthread_parkme+0x7b/0x200 [ 879.064296][ T3284] ? __kthread_parkme+0x1a1/0x200 [ 879.064318][ T3284] kthread+0x70e/0x8a0 [ 879.064342][ T3284] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 879.064361][ T3284] ? __pfx_kthread+0x10/0x10 [ 879.064381][ T3284] ? __pfx_kthread+0x10/0x10 [ 879.064402][ T3284] ? _raw_spin_unlock_irq+0x23/0x50 [ 879.064421][ T3284] ? lockdep_hardirqs_on+0x9c/0x150 [ 879.064442][ T3284] ? __pfx_kthread+0x10/0x10 [ 879.064463][ T3284] ret_from_fork+0x4b/0x80 [ 879.064483][ T3284] ? __pfx_kthread+0x10/0x10 [ 879.064507][ T3284] ret_from_fork_asm+0x1a/0x30 [ 879.064546][ T3284] [ 879.064555][ T3284] [ 879.280627][ T3284] The buggy address belongs to the virtual mapping at [ 879.280627][ T3284] [ffffc90004389000, ffffc900043a1000) created by: [ 879.280627][ T3284] vb2_vmalloc_alloc+0xef/0x340 [ 879.298528][ T3284] [ 879.300858][ T3284] The buggy address belongs to the physical page: [ 879.307284][ T3284] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x200000000 pfn:0x755df [ 879.316744][ T3284] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 879.323875][ T3284] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 879.332467][ T3284] raw: 0000000200000000 0000000000000000 00000001ffffffff 0000000000000000 [ 879.341049][ T3284] page dumped because: kasan: bad access detected [ 879.347472][ T3284] page_owner tracks the page as allocated [ 879.353187][ T3284] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 3283, tgid 3282 (syz.1.14022), ts 878855314609, free_ts 878812683254 [ 879.372557][ T3284] post_alloc_hook+0x1d8/0x230 [ 879.377367][ T3284] get_page_from_freelist+0x21c7/0x22a0 [ 879.382935][ T3284] __alloc_frozen_pages_noprof+0x181/0x370 [ 879.388773][ T3284] alloc_pages_mpol+0x232/0x4a0 [ 879.393661][ T3284] alloc_pages_noprof+0xa9/0x190 [ 879.398601][ T3284] __vmalloc_node_range_noprof+0x8fe/0x12c0 [ 879.404499][ T3284] vmalloc_user_noprof+0x74/0x80 [ 879.409440][ T3284] vb2_vmalloc_alloc+0xef/0x340 [ 879.414303][ T3284] __vb2_queue_alloc+0x9c2/0x15a0 [ 879.419336][ T3284] vb2_core_reqbufs+0xc31/0x1420 [ 879.424288][ T3284] __vb2_init_fileio+0x318/0xff0 [ 879.429239][ T3284] __vb2_perform_fileio+0x284/0x1600 [ 879.434546][ T3284] vb2_fop_read+0x273/0x360 [ 879.439144][ T3284] v4l2_read+0x19c/0x2c0 [ 879.443399][ T3284] vfs_read+0x1fd/0x980 [ 879.447565][ T3284] ksys_read+0x145/0x250 [ 879.451826][ T3284] page last free pid 3264 tgid 3262 stack trace: [ 879.458155][ T3284] __free_frozen_pages+0xb05/0xcd0 [ 879.463271][ T3284] __tlb_remove_table+0x2d2/0x3b0 [ 879.468304][ T3284] tlb_remove_table_rcu+0x85/0x100 [ 879.473420][ T3284] rcu_core+0xca8/0x1710 [ 879.477668][ T3284] handle_softirqs+0x286/0x870 [ 879.482441][ T3284] do_softirq+0xec/0x180 [ 879.486698][ T3284] __local_bh_enable_ip+0x17d/0x1c0 [ 879.491907][ T3284] bpf_test_run+0x3fc/0x830 [ 879.496415][ T3284] bpf_prog_test_run_skb+0xb30/0x1560 [ 879.501791][ T3284] bpf_prog_test_run+0x2ac/0x340 [ 879.506736][ T3284] __sys_bpf+0x4a4/0x860 [ 879.511000][ T3284] __x64_sys_bpf+0x7c/0x90 [ 879.515422][ T3284] do_syscall_64+0xf6/0x210 [ 879.519941][ T3284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.525928][ T3284] [ 879.528343][ T3284] Memory state around the buggy address: [ 879.533973][ T3284] ffffc9000439ff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 879.542037][ T3284] ffffc9000439ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 879.550104][ T3284] >ffffc900043a0000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 879.558180][ T3284] ^ [ 879.562261][ T3284] ffffc900043a0080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 879.570341][ T3284] ffffc900043a0100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 879.578412][ T3284] ================================================================== [ 879.609628][ T3284] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 879.616871][ T3284] CPU: 1 UID: 0 PID: 3284 Comm: vivid-000-vid-c Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(full) [ 879.629318][ T3284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 879.639409][ T3284] Call Trace: [ 879.642716][ T3284] [ 879.645671][ T3284] dump_stack_lvl+0x99/0x250 [ 879.650295][ T3284] ? __asan_memcpy+0x40/0x70 [ 879.654920][ T3284] ? __pfx_dump_stack_lvl+0x10/0x10 [ 879.660152][ T3284] ? __pfx__printk+0x10/0x10 [ 879.664786][ T3284] panic+0x2db/0x790 [ 879.668718][ T3284] ? __pfx_panic+0x10/0x10 [ 879.673165][ T3284] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 879.679086][ T3284] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 879.685457][ T3284] ? print_memory_metadata+0x314/0x400 [ 879.690950][ T3284] ? tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 879.696615][ T3284] check_panic_on_warn+0x89/0xb0 [ 879.701584][ T3284] ? tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 879.707243][ T3284] end_report+0x78/0x160 [ 879.711520][ T3284] kasan_report+0x129/0x150 [ 879.716059][ T3284] ? tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 879.721735][ T3284] kasan_check_range+0x29a/0x2b0 [ 879.726699][ T3284] ? tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 879.732365][ T3284] __asan_memcpy+0x40/0x70 [ 879.736809][ T3284] tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 879.742346][ T3284] vivid_thread_vid_cap_tick+0xfff/0x5fe0 [ 879.748115][ T3284] ? xfd_validate_state+0x6d/0x150 [ 879.753253][ T3284] ? __lock_acquire+0xaac/0xd20 [ 879.758135][ T3284] ? ktime_get+0x3e/0x1f0 [ 879.762475][ T3284] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 879.768648][ T3284] ? lockdep_hardirqs_on+0x9c/0x150 [ 879.773898][ T3284] vivid_thread_vid_cap+0x8d8/0x10d0 [ 879.779207][ T3284] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 879.784941][ T3284] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 879.790846][ T3284] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 879.797187][ T3284] ? __kthread_parkme+0x7b/0x200 [ 879.802131][ T3284] ? __kthread_parkme+0x1a1/0x200 [ 879.807163][ T3284] kthread+0x70e/0x8a0 [ 879.811244][ T3284] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 879.816975][ T3284] ? __pfx_kthread+0x10/0x10 [ 879.821575][ T3284] ? __pfx_kthread+0x10/0x10 [ 879.826170][ T3284] ? _raw_spin_unlock_irq+0x23/0x50 [ 879.831393][ T3284] ? lockdep_hardirqs_on+0x9c/0x150 [ 879.836601][ T3284] ? __pfx_kthread+0x10/0x10 [ 879.841198][ T3284] ret_from_fork+0x4b/0x80 [ 879.845618][ T3284] ? __pfx_kthread+0x10/0x10 [ 879.850212][ T3284] ret_from_fork_asm+0x1a/0x30 [ 879.855000][ T3284] [ 879.858330][ T3284] Kernel Offset: disabled [ 879.862657][ T3284] Rebooting in 86400 seconds..