last executing test programs: 3.120542749s ago: executing program 4 (id=21779): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000280)=@canfd={{0x1}, 0x11, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x0) 2.991995606s ago: executing program 4 (id=21782): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000003c0)={0xfff9, 0xe38b, 0xffff, 0x40}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, 0x0) 2.612503524s ago: executing program 1 (id=21785): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 2.28179579s ago: executing program 4 (id=21789): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000000)=0xffffffff, 0x4) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000080)="1e", 0x1}], 0x1}, 0x4000001) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2) 2.01690771s ago: executing program 2 (id=21793): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) write$sndseq(r0, 0x0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000001140)={0x80, 0x1}) 1.920926358s ago: executing program 4 (id=21794): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x206000, 0x1000}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1.653447038s ago: executing program 2 (id=21795): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040)=0xfd87, 0x4) 1.524343239s ago: executing program 2 (id=21796): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x8112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x0, 0x0}) 1.281143952s ago: executing program 2 (id=21797): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x844a}], 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r1, 0x5608, 0x0) 1.187910186s ago: executing program 3 (id=21799): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') read$FUSE(r0, &(0x7f0000004fc0)={0x2020}, 0x2020) pread64(r0, &(0x7f0000000940)=""/126, 0x7e, 0xe) read$usbmon(r0, &(0x7f00000000c0)=""/170, 0xaa) 1.061491377s ago: executing program 3 (id=21801): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000280)) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f00000002c0)=[{0x800000000}, {0xe, 0x7, 0xbc}], 0x2, 0xbff, 0x1e, 0x0, 0xc, 0x6e}) 1.025148311s ago: executing program 2 (id=21802): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) lseek(r2, 0x8, 0x2) 997.912335ms ago: executing program 3 (id=21803): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000700)={0x8, 0x120, 0xfa00, {0x0, {0x8, 0xfffffffc, "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", 0x0, 0x4, 0x3, 0x1d, 0x8, 0x92, 0x5, 0x1}, r1}}, 0x128) 920.145625ms ago: executing program 3 (id=21805): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 896.506466ms ago: executing program 2 (id=21806): sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000000040050bbe1a00000000000109022400010000e80b0904000001030002000921fd7f000122e30109058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 748.346032ms ago: executing program 1 (id=21808): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000097c0)={0x1, 0x0, [{0x269, 0x0, 0x8000000}]}) 739.741722ms ago: executing program 3 (id=21809): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x4c032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/122, 0x7a}], 0x1) 690.534521ms ago: executing program 0 (id=21810): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpid() capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) kcmp(r0, r1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 572.531826ms ago: executing program 4 (id=21811): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000001c0)={0x6, 0xfffffffb, 0x200, 0x0, 0x7}) 484.774331ms ago: executing program 0 (id=21812): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 468.116479ms ago: executing program 3 (id=21813): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x20003214, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085507, 0x0) 366.336589ms ago: executing program 0 (id=21814): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000002880)=[{{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f00000009c0)=[@rights={{0x10, 0x1, 0x1, [r1]}}, @cred={{0x18, 0x1, 0x2, {r0}}}], 0x28, 0x48040}}], 0x1, 0x0) 324.557753ms ago: executing program 4 (id=21815): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x9) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000300)=0x6) 263.978208ms ago: executing program 0 (id=21816): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001, 0x0, 0xf2b}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000005600230d000000000000000007"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) recvmmsg(r0, &(0x7f0000003880)=[{{0x0, 0x0, 0x0}, 0x2400000}], 0x1, 0x12000, 0x0) 261.518002ms ago: executing program 1 (id=21817): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0x3}, {0x11, 0x10}, {0xffe0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x480dc}, 0x4001080) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) 191.906408ms ago: executing program 0 (id=21818): syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) r0 = syz_io_uring_setup(0x32d9, &(0x7f0000000200)={0x0, 0x6273, 0x8, 0xffffffff, 0x400000, 0x0, 0x0}, &(0x7f0000000300)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4000, @fd_index=0x3, 0x8, 0x0}) io_uring_enter(r0, 0x7ec5, 0x9f84, 0x24, 0x0, 0x0) 159.549452ms ago: executing program 1 (id=21819): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) 67.570986ms ago: executing program 1 (id=21820): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x48) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x25, &(0x7f0000000000), 0x90) 51.087744ms ago: executing program 0 (id=21821): r0 = open(&(0x7f00000002c0)='./file0\x00', 0x1491ff, 0x22) fcntl$setlease(r0, 0x400, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x180043, 0x80) fcntl$setlease(r0, 0x400, 0x1) 0s ago: executing program 1 (id=21822): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x1, 0x0, 0xad, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x1a, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x9, 0x10000}]}}}}}}}, 0x0) kernel console output (not intermixed with test programs): r: mce write submit urb error = -90 [ 1073.204781][ T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1073.234708][ T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1073.254790][ T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1073.277089][ T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1073.313505][T28598] netlink: 'syz.4.18554': attribute type 11 has an invalid length. [ 1073.333744][T28598] netlink: 'syz.4.18554': attribute type 4 has an invalid length. [ 1073.346333][ T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1073.354230][T28598] netlink: 199768 bytes leftover after parsing attributes in process `syz.4.18554'. [ 1073.366249][ T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1073.403099][ T47] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1073.419568][ T47] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1073.449046][ T47] usb 3-1: USB disconnect, device number 25 [ 1073.661890][T28624] input input120: cannot allocate more than FF_MAX_EFFECTS effects [ 1074.077804][T28650] bridge1: entered promiscuous mode [ 1074.084947][ T47] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 1074.215363][T28660] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1074.276289][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1074.289240][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1074.301939][ T47] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1074.334438][ T47] usb 5-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 1074.343706][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.375808][ T47] usb 5-1: config 0 descriptor?? [ 1074.821862][ T47] hid_parser_main: 221 callbacks suppressed [ 1074.821889][ T47] elecom 0003:056E:00FF.00B3: unknown main item tag 0x0 [ 1074.843177][ T47] elecom 0003:056E:00FF.00B3: unknown main item tag 0x0 [ 1074.853872][ T47] elecom 0003:056E:00FF.00B3: unknown main item tag 0x0 [ 1074.863326][ T47] elecom 0003:056E:00FF.00B3: unknown main item tag 0x0 [ 1074.872490][ T47] elecom 0003:056E:00FF.00B3: unknown main item tag 0x0 [ 1074.885335][ T47] elecom 0003:056E:00FF.00B3: unknown main item tag 0x0 [ 1074.892440][ T47] elecom 0003:056E:00FF.00B3: unknown main item tag 0x0 [ 1074.931407][ T47] elecom 0003:056E:00FF.00B3: unknown main item tag 0x0 [ 1074.944240][ T47] elecom 0003:056E:00FF.00B3: unknown main item tag 0x0 [ 1074.952617][ T47] elecom 0003:056E:00FF.00B3: unknown main item tag 0x0 [ 1074.974874][ T47] elecom 0003:056E:00FF.00B3: hidraw0: USB HID v0.03 Device [HID 056e:00ff] on usb-dummy_hcd.4-1/input0 [ 1075.075286][ T47] usb 5-1: USB disconnect, device number 23 [ 1075.145935][T28704] fido_id[28704]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1076.247536][T28784] netlink: 208 bytes leftover after parsing attributes in process `syz.2.18616'. [ 1076.974992][T28814] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18627'. [ 1077.068286][T28816] program syz.3.18629 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1077.493455][ T29] audit: type=1326 audit(1775954962.676:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28845 comm="syz.2.18639" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x0 [ 1077.879100][ T29] audit: type=1326 audit(1775954963.066:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28867 comm="syz.0.18647" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98f6c code=0x7ffc0000 [ 1077.922549][ T29] audit: type=1326 audit(1775954963.066:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28867 comm="syz.0.18647" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98f6c code=0x7ffc0000 [ 1077.946005][ T29] audit: type=1326 audit(1775954963.066:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28867 comm="syz.0.18647" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f98f6c code=0x7ffc0000 [ 1077.974943][ T29] audit: type=1326 audit(1775954963.066:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28867 comm="syz.0.18647" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98f6c code=0x7ffc0000 [ 1078.055045][ T29] audit: type=1326 audit(1775954963.066:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28867 comm="syz.0.18647" exe="/root/syz-executor" sig=0 arch=40000003 syscall=301 compat=1 ip=0xf7f98f6c code=0x7ffc0000 [ 1078.093246][ T29] audit: type=1326 audit(1775954963.066:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28867 comm="syz.0.18647" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98f6c code=0x7ffc0000 [ 1078.117609][ T29] audit: type=1326 audit(1775954963.066:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28867 comm="syz.0.18647" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98f6c code=0x7ffc0000 [ 1078.775357][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1078.953735][ T10] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1078.972325][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1078.997825][ T10] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1079.007876][ T10] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1079.018557][ T10] usb 3-1: Manufacturer: syz [ 1079.030402][ T10] usb 3-1: config 0 descriptor?? [ 1079.115499][ T10] rc_core: IR keymap rc-hauppauge not found [ 1079.126168][ T10] Registered IR keymap rc-empty [ 1079.133042][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1079.147928][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input121 [ 1079.699198][ T6676] usb 3-1: USB disconnect, device number 26 [ 1080.541816][ T29] audit: type=1326 audit(1775954965.726:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29057 comm="syz.2.18702" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x0 [ 1080.613722][ T29] audit: type=1326 audit(1775954965.796:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29061 comm="syz.4.18703" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 1080.776940][T29068] veth3: entered promiscuous mode [ 1080.782078][T29068] veth3: entered allmulticast mode [ 1080.792732][T29068] team0: Port device veth3 added [ 1080.888736][T29085] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 1081.165871][T29104] netlink: 'syz.0.18718': attribute type 31 has an invalid length. [ 1081.672637][T29132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18730'. [ 1081.683386][T29132] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1082.229690][T29167] netlink: 10 bytes leftover after parsing attributes in process `syz.2.18746'. [ 1082.370162][T29170] netlink: 'syz.1.18747': attribute type 10 has an invalid length. [ 1082.395005][T29170] batadv0: left allmulticast mode [ 1082.402354][T29170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1082.431435][T29170] batadv0: entered allmulticast mode [ 1082.450270][T29182] netlink: 'syz.1.18747': attribute type 10 has an invalid length. [ 1082.459867][T29170] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1082.467517][T29182] netlink: 40 bytes leftover after parsing attributes in process `syz.1.18747'. [ 1082.478943][T29182] batadv0: entered promiscuous mode [ 1082.500463][T29182] bond0: (slave batadv0): Releasing backup interface [ 1082.519410][T29182] bridge0: port 2(batadv0) entered blocking state [ 1082.529136][T29182] bridge0: port 2(batadv0) entered disabled state [ 1082.545935][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1082.545956][ T29] audit: type=1326 audit(1775954967.736:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29184 comm="syz.0.18753" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98f6c code=0x7ffc0000 [ 1082.575570][ T47] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1082.583668][ T29] audit: type=1326 audit(1775954967.736:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29184 comm="syz.0.18753" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98f6c code=0x7ffc0000 [ 1082.612671][ T29] audit: type=1326 audit(1775954967.736:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29184 comm="syz.0.18753" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f98f6c code=0x7ffc0000 [ 1082.640432][ T29] audit: type=1326 audit(1775954967.736:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29184 comm="syz.0.18753" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98f6c code=0x7ffc0000 [ 1082.757853][ T47] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.771439][ T47] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1082.781647][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.794425][ T47] usb 3-1: config 0 descriptor?? [ 1082.809006][ T47] pwc: Askey VC010 type 2 USB webcam detected. [ 1082.870815][T29202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18769'. [ 1082.883572][T29202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18769'. [ 1082.966219][ T3541] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1082.976856][ T3541] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1082.982452][T29208] usb usb8: usbfs: process 29208 (syz.1.18761) did not claim interface 0 before use [ 1083.212242][ T47] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1083.221318][ T47] pwc: recv_control_msg error -71 req 02 val 2700 [ 1083.228447][ T47] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1083.235697][ T47] pwc: recv_control_msg error -71 req 04 val 1000 [ 1083.242609][ T47] pwc: recv_control_msg error -71 req 04 val 1300 [ 1083.253566][ T47] pwc: recv_control_msg error -71 req 04 val 1400 [ 1083.260686][ T47] pwc: recv_control_msg error -71 req 02 val 2000 [ 1083.269520][ T47] pwc: recv_control_msg error -71 req 02 val 2100 [ 1083.278206][ T47] pwc: recv_control_msg error -71 req 04 val 1500 [ 1083.285313][ T47] pwc: recv_control_msg error -71 req 02 val 2500 [ 1083.292257][ T47] pwc: recv_control_msg error -71 req 02 val 2400 [ 1083.299507][ T47] pwc: recv_control_msg error -71 req 02 val 2600 [ 1083.309231][ T47] pwc: recv_control_msg error -71 req 02 val 2900 [ 1083.316580][ T47] pwc: recv_control_msg error -71 req 02 val 2800 [ 1083.324001][ T47] pwc: recv_control_msg error -71 req 04 val 1100 [ 1083.331517][ T47] pwc: recv_control_msg error -71 req 04 val 1200 [ 1083.344109][ T47] pwc: Registered as video103. [ 1083.374999][ T47] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input123 [ 1083.403139][ T47] usb 3-1: USB disconnect, device number 27 [ 1084.033369][T29274] netlink: 48 bytes leftover after parsing attributes in process `syz.3.18782'. [ 1084.248005][T29286] tap0: tun_chr_ioctl cmd 1074025677 [ 1084.254347][T29286] tap0: linktype set to 1 [ 1084.591560][T29307] kvm: kvm [29306]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0x200000000400 [ 1084.961588][T29324] input: syz0 as /devices/virtual/input/input124 [ 1085.949974][T29404] netlink: 52 bytes leftover after parsing attributes in process `syz.0.18810'. [ 1086.904689][ T1851] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1086.952416][T29439] veth3: entered promiscuous mode [ 1086.957882][T29439] veth3: entered allmulticast mode [ 1086.966246][T29439] team0: Port device veth3 added [ 1087.074943][ T1851] usb 3-1: Using ep0 maxpacket: 8 [ 1087.084336][ T1851] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 1087.094110][ T1851] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 1087.102716][ T1851] usb 3-1: config 0 has no interface number 0 [ 1087.114592][ T1851] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1087.127108][ T1851] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1087.140316][ T1851] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1087.153614][ T1851] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1087.163300][ T1851] usb 3-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 1087.172615][ T1851] usb 3-1: Product: syz [ 1087.184541][ T1851] usb 3-1: Manufacturer: syz [ 1087.191659][ T1851] usb 3-1: config 0 descriptor?? [ 1087.198524][T29426] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1087.831872][ T1851] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input125 [ 1088.053266][ C1] keyspan_remote 3-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 1088.062941][ T1851] usb 3-1: USB disconnect, device number 28 [ 1088.467324][ T29] audit: type=1326 audit(1775954973.656:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29525 comm="syz.1.18843" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fcef6c code=0x0 [ 1088.508153][T29529] netlink: 32 bytes leftover after parsing attributes in process `syz.4.18844'. [ 1088.518785][T29529] netem: unknown loss type 13 [ 1088.523747][T29529] netem: change failed [ 1089.387626][T29604] netlink: 'syz.4.18856': attribute type 1 has an invalid length. [ 1089.395920][T29604] netlink: 'syz.4.18856': attribute type 2 has an invalid length. [ 1090.179761][T29644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18873'. [ 1090.489894][T29649] ip6gretap0: entered promiscuous mode [ 1090.675893][T29649] bridge0: entered promiscuous mode [ 1090.699541][T29649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1090.748292][T29649] 8021q: adding VLAN 0 to HW filter on device team0 [ 1090.785144][T29649] tipc: Resetting bearer [ 1090.815354][T29649] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1091.294007][T29654] tipc: Resetting bearer [ 1091.312373][T29654] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1092.781442][ T29] audit: type=1326 audit(1775954977.966:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29739 comm="syz.3.18916" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x0 [ 1092.953147][T29754] netlink: 'syz.2.18911': attribute type 2 has an invalid length. [ 1092.973386][T29754] !: entered promiscuous mode [ 1092.983184][T29754] netlink: 'syz.2.18911': attribute type 2 has an invalid length. [ 1092.991656][T29754] !: left promiscuous mode [ 1093.120934][T29765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18913'. [ 1093.130931][T29765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18913'. [ 1093.136294][T29767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18914'. [ 1093.308217][T29773] kvm: kvm [29772]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x400006 [ 1093.454208][T29783] binder: 29782:29783 unknown command 1074553622 [ 1093.461019][T29783] binder: 29782:29783 ioctl c0306201 80000640 returned -22 [ 1094.207350][T29817] kvm: kvm [29809]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x400006 [ 1094.425877][T29829] bridge0: entered promiscuous mode [ 1094.431849][T29829] macvlan2: entered promiscuous mode [ 1094.563930][T29839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18941'. [ 1094.674024][T29848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18945'. [ 1094.684950][T29848] netlink: 148 bytes leftover after parsing attributes in process `syz.2.18945'. [ 1095.062234][T29864] kvm: kvm [29863]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x400006 [ 1096.614718][ T29] audit: type=1326 audit(1775954981.796:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29939 comm="syz.4.18979" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x0 [ 1097.233229][T29964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18983'. [ 1097.857026][ T29] audit: type=1326 audit(1775954983.046:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29999 comm="syz.3.18995" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 1097.880196][ T29] audit: type=1326 audit(1775954983.046:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29999 comm="syz.3.18995" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 1097.908071][ T29] audit: type=1326 audit(1775954983.046:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29999 comm="syz.3.18995" exe="/root/syz-executor" sig=0 arch=40000003 syscall=163 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 1097.931344][ T29] audit: type=1326 audit(1775954983.076:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29999 comm="syz.3.18995" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 1097.959146][ T29] audit: type=1326 audit(1775954983.076:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29999 comm="syz.3.18995" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 1098.002734][ T29] audit: type=1326 audit(1775954983.096:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29999 comm="syz.3.18995" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7175cab code=0x7ffc0000 [ 1098.030672][ T29] audit: type=1326 audit(1775954983.126:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29999 comm="syz.3.18995" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 1098.053711][ T29] audit: type=1326 audit(1775954983.126:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29999 comm="syz.3.18995" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 1098.077472][ T29] audit: type=1326 audit(1775954983.126:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29999 comm="syz.3.18995" exe="/root/syz-executor" sig=0 arch=40000003 syscall=180 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 1099.312910][T30060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19016'. [ 1100.155713][T30103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19035'. [ 1100.544778][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1101.161641][T30151] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1101.262792][T30151] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1101.304746][T30153] netlink: 92 bytes leftover after parsing attributes in process `syz.2.19055'. [ 1101.668667][T30162] loop4: detected capacity change from 0 to 7 [ 1101.679982][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1101.689657][ C1] buffer_io_error: 9 callbacks suppressed [ 1101.689676][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1101.707811][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1101.717514][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1101.727087][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1101.736782][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1101.754939][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1101.764614][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1101.773148][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1101.782830][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1101.791019][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1101.800702][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1101.809066][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1101.818786][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1101.828576][T30162] ldm_validate_partition_table(): Disk read failed. [ 1101.837505][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1101.847206][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1101.855705][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1101.865381][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1101.873586][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1101.883242][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1101.891598][T30162] Dev loop4: unable to read RDB block 0 [ 1101.898016][T30162] loop4: unable to read partition table [ 1101.903987][T30162] loop4: partition table beyond EOD, truncated [ 1101.910756][T30162] loop_reread_partitions: partition scan of loop4 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 1102.925431][T30216] tap0: tun_chr_ioctl cmd 1074025677 [ 1102.931102][T30216] tap0: linktype set to 1 [ 1103.429233][T30244] kvm: kvm [30243]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0x200000000400 [ 1104.014937][ T6676] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1104.186867][ T6676] usb 3-1: Using ep0 maxpacket: 32 [ 1104.195220][ T6676] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 1104.213039][ T6676] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1104.221456][ T6676] usb 3-1: config 0 has no interface number 0 [ 1104.243271][ T6676] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1104.252466][ T6676] usb 3-1: config 0 has no interface number 0 [ 1104.261967][ T6676] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1104.272612][ T6676] usb 3-1: config 0 has no interface number 0 [ 1104.282980][ T6676] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1104.292284][ T6676] usb 3-1: config 0 has no interface number 0 [ 1104.303728][ T6676] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1104.315232][ T6676] usb 3-1: config 0 has no interface number 0 [ 1104.322767][ T6676] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1104.333296][ T6676] usb 3-1: config 0 has no interface number 0 [ 1104.341962][ T6676] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1104.350716][ T6676] usb 3-1: config 0 has no interface number 0 [ 1104.358751][ T6676] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1104.367202][ T6676] usb 3-1: config 0 has no interface number 0 [ 1104.377668][ T6676] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1104.390654][ T6676] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.399311][ T6676] usb 3-1: Product: syz [ 1104.403619][ T6676] usb 3-1: Manufacturer: syz [ 1104.409081][ T6676] usb 3-1: SerialNumber: syz [ 1104.417929][ T6676] usb 3-1: config 0 descriptor?? [ 1104.427184][ T6676] etas_es58x 3-1:0.2: Starting syz syz (Serial Number syz) [ 1104.648743][ T6676] etas_es58x 3-1:0.2: could not retrieve the product info string [ 1104.712110][ T6676] usb 3-1: USB disconnect, device number 29 [ 1104.739113][ T6676] etas_es58x 3-1:0.2: Disconnecting syz syz [ 1105.841083][T30380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19119'. [ 1106.254637][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1106.254656][ T29] audit: type=1326 audit(1775954991.426:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30354 comm="syz.2.19114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7fc00000 [ 1106.741362][T30427] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.19133'. [ 1106.908339][T30434] netlink: 'syz.2.19135': attribute type 1 has an invalid length. [ 1107.000906][T30434] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1108.456635][ T29] audit: type=1326 audit(1775954993.636:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30519 comm="syz.2.19150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1108.480956][ T29] audit: type=1326 audit(1775954993.636:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30519 comm="syz.2.19150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1108.515424][ T29] audit: type=1326 audit(1775954993.646:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30519 comm="syz.2.19150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1108.564583][ T29] audit: type=1326 audit(1775954993.646:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30519 comm="syz.2.19150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1108.597736][ T29] audit: type=1326 audit(1775954993.646:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30519 comm="syz.2.19150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1108.620623][ T29] audit: type=1326 audit(1775954993.676:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30519 comm="syz.2.19150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=38 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1108.654802][ T29] audit: type=1326 audit(1775954993.676:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30519 comm="syz.2.19150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1108.678653][ T29] audit: type=1326 audit(1775954993.676:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30519 comm="syz.2.19150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1108.701311][ T29] audit: type=1326 audit(1775954993.696:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30519 comm="syz.2.19150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=10 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1108.832338][T30537] pim6reg: left allmulticast mode [ 1108.947591][ T1210] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1109.118193][ T1210] usb 3-1: Using ep0 maxpacket: 32 [ 1109.125912][ T1210] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1109.135416][ T1210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.155360][ T1210] usb 3-1: config 0 descriptor?? [ 1109.174659][ T1210] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1109.224699][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1109.375798][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1109.391823][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.415312][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 1109.426766][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.438870][ T10] usb 2-1: Product: syz [ 1109.443120][ T10] usb 2-1: Manufacturer: syz [ 1109.448152][ T10] usb 2-1: SerialNumber: syz [ 1109.791851][T30541] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19159'. [ 1109.867399][ T10] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 1109.893645][ T10] usb 2-1: USB disconnect, device number 20 [ 1110.006313][ T1210] gspca_sunplus: reg_w_riv err -71 [ 1110.011565][ T1210] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1110.025978][ T1210] usb 3-1: USB disconnect, device number 30 [ 1110.045332][T30630] netlink: 32 bytes leftover after parsing attributes in process `syz.3.19176'. [ 1110.429193][T30650] kvm: kvm [30648]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x3ffeb7 [ 1110.784738][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1110.849968][ T10] hid_parser_main: 31 callbacks suppressed [ 1110.849992][ T10] hid-generic 0000:0000:0000.00B4: unknown main item tag 0x0 [ 1110.874775][ T10] hid-generic 0000:0000:0000.00B4: unknown main item tag 0x0 [ 1110.894749][ T10] hid-generic 0000:0000:0000.00B4: unknown main item tag 0x0 [ 1110.902218][ T10] hid-generic 0000:0000:0000.00B4: unknown main item tag 0x0 [ 1110.922823][ T10] hid-generic 0000:0000:0000.00B4: unknown main item tag 0x0 [ 1110.932953][ T10] hid-generic 0000:0000:0000.00B4: unknown main item tag 0x0 [ 1110.941383][ T10] hid-generic 0000:0000:0000.00B4: unknown main item tag 0x0 [ 1110.955689][ T10] hid-generic 0000:0000:0000.00B4: unknown main item tag 0x0 [ 1110.964069][ T10] hid-generic 0000:0000:0000.00B4: unknown main item tag 0x0 [ 1110.971749][ T10] hid-generic 0000:0000:0000.00B4: unknown main item tag 0x0 [ 1110.996407][ T10] hid-generic 0000:0000:0000.00B4: hidraw0: HID v0.03 Device [syz1] on syz1 [ 1111.108721][T30671] fido_id[30671]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1112.124725][ T7934] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 1112.273232][T30732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19205'. [ 1112.309206][ T7934] usb 2-1: config 1 has an invalid interface number: 128 but max is 1 [ 1112.336245][ T7934] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1112.367528][ T7934] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1112.385080][ T7934] usb 2-1: config 1 has no interface number 0 [ 1112.391255][ T7934] usb 2-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1112.415380][ T7934] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1112.425474][ T7934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.433563][ T7934] usb 2-1: Product: syz [ 1112.438319][ T7934] usb 2-1: Manufacturer: syz [ 1112.442965][ T7934] usb 2-1: SerialNumber: syz [ 1112.485169][ T7934] cdc_wdm 2-1:1.128: skipping garbage [ 1112.490747][ T7934] cdc_wdm 2-1:1.128: invalid descriptor buffer length [ 1112.499200][ T7934] cdc_wdm 2-1:1.128: probe with driver cdc_wdm failed with error -22 [ 1112.567251][T30750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19210'. [ 1112.697021][ T1851] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1112.755805][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1112.755823][ T29] audit: type=1326 audit(1775954997.946:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30756 comm="syz.0.19213" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f98f6c code=0x0 [ 1112.877015][ T1851] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1112.887325][ T1851] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1112.897285][ T1851] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1112.906897][ T1851] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1112.916202][ T1851] usb 3-1: Product: syz [ 1112.920650][ T1851] usb 3-1: Manufacturer: syz [ 1112.925394][ T1851] usb 3-1: SerialNumber: syz [ 1112.934171][ T1851] usb 3-1: config 0 descriptor?? [ 1112.951380][ T1851] usb 3-1: selecting invalid altsetting 0 [ 1113.173168][ T1851] usb 3-1: USB disconnect, device number 31 [ 1114.424564][ T29] audit: type=1326 audit(1775954999.596:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30808 comm="syz.4.19219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7fc00000 [ 1114.467522][ T29] audit: type=1326 audit(1775954999.596:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30808 comm="syz.4.19219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f14f6c code=0x7fc00000 [ 1114.514775][ T29] audit: type=1326 audit(1775954999.596:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30808 comm="syz.4.19219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7fc00000 [ 1114.554709][ T29] audit: type=1326 audit(1775954999.596:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30808 comm="syz.4.19219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7fc00000 [ 1114.614705][ T29] audit: type=1326 audit(1775954999.596:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30808 comm="syz.4.19219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7fc00000 [ 1114.667258][ T29] audit: type=1326 audit(1775954999.596:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30808 comm="syz.4.19219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7fc00000 [ 1114.712438][ T29] audit: type=1326 audit(1775954999.596:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30808 comm="syz.4.19219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7fc00000 [ 1114.746405][ T29] audit: type=1326 audit(1775954999.596:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30808 comm="syz.4.19219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7fc00000 [ 1114.769646][ T29] audit: type=1326 audit(1775954999.596:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30808 comm="syz.4.19219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7fc00000 [ 1114.824064][T30867] program syz.4.19236 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1114.968521][ T1851] usb 2-1: USB disconnect, device number 21 [ 1115.514758][T30911] bridge0: entered promiscuous mode [ 1115.521402][T30911] macvlan2: entered promiscuous mode [ 1115.910609][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.917172][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.573582][ T6676] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1116.741400][ T6676] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1116.751334][ T6676] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1116.766388][ T6676] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1116.775600][ T6676] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1116.787150][ T6676] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1116.801199][ T6676] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1116.810689][ T6676] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1116.818800][ T6676] usb 3-1: Product: syz [ 1116.823029][ T6676] usb 3-1: Manufacturer: syz [ 1116.833513][ T6676] cdc_wdm 3-1:1.0: skipping garbage [ 1116.840155][ T6676] cdc_wdm 3-1:1.0: skipping garbage [ 1116.857543][ T6676] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1116.863542][ T6676] cdc_wdm 3-1:1.0: Unknown control protocol [ 1117.267302][ T1851] usb 3-1: USB disconnect, device number 32 [ 1117.930629][ T6676] hid_parser_main: 73 callbacks suppressed [ 1117.930653][ T6676] hid-generic 0000:0000:0000.00B5: unknown main item tag 0x0 [ 1117.981827][ T6676] hid-generic 0000:0000:0000.00B5: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1119.057492][ T7934] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1119.215011][ T7934] usb 3-1: Using ep0 maxpacket: 32 [ 1119.225754][ T7934] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1119.234927][ T7934] usb 3-1: config 0 has no interface number 0 [ 1119.241167][ T7934] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1119.253589][ T7934] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1119.265533][ T7934] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1119.274858][ T7934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.282905][ T7934] usb 3-1: Product: syz [ 1119.287942][ T7934] usb 3-1: Manufacturer: syz [ 1119.292581][ T7934] usb 3-1: SerialNumber: syz [ 1119.301801][ T7934] usb 3-1: config 0 descriptor?? [ 1119.920880][ T7934] appletouch 3-1:0.85: Geyser mode initialized. [ 1119.930441][ T7934] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input126 [ 1120.166783][ T1851] usb 3-1: USB disconnect, device number 33 [ 1120.206034][ T1851] appletouch 3-1:0.85: input: appletouch disconnected [ 1121.505165][ T47] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1121.677401][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 1121.713397][ T47] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1121.746635][ T47] usb 5-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 1121.756765][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.765371][ T47] usb 5-1: Product: syz [ 1121.769710][ T47] usb 5-1: Manufacturer: syz [ 1121.774331][ T47] usb 5-1: SerialNumber: syz [ 1121.805137][ T1851] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1121.957814][ T1851] usb 3-1: Using ep0 maxpacket: 32 [ 1121.970359][ T1851] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1121.979776][ T1851] usb 3-1: config 0 has no interface number 0 [ 1121.991001][ T1851] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1122.001030][ T1851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.011057][ T1851] usb 3-1: Product: syz [ 1122.017088][ T1851] usb 3-1: Manufacturer: syz [ 1122.024812][ T1851] usb 3-1: SerialNumber: syz [ 1122.042532][ T1851] usb 3-1: config 0 descriptor?? [ 1122.054272][ T1851] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1122.208614][T31207] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19320'. [ 1122.253542][T31271] loop4: detected capacity change from 0 to 7 [ 1122.262379][ C1] blk_print_req_error: 8 callbacks suppressed [ 1122.262399][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1122.278202][ C1] buffer_io_error: 10 callbacks suppressed [ 1122.278219][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1122.292463][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1122.301327][ T1851] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1122.302455][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1122.316032][ T47] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 1122.328891][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1122.337142][ T1851] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1122.338639][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1122.351092][ T47] usb 5-1: USB disconnect, device number 24 [ 1122.360565][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1122.371359][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1122.384621][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1122.394353][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1122.405146][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1122.414810][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1122.423263][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1122.432917][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1122.441482][ T8980] ldm_validate_partition_table(): Disk read failed. [ 1122.453829][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1122.463683][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1122.473773][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1122.483540][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1122.492206][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1122.501948][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1122.511537][ T8980] Dev loop4: unable to read RDB block 0 [ 1122.518231][ T8980] loop4: unable to read partition table [ 1122.532466][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 24 [ 1122.532917][ T8980] loop4: partition table beyond EOD, truncated [ 1122.553460][T31271] ldm_validate_partition_table(): Disk read failed. [ 1122.561335][T31271] Dev loop4: unable to read RDB block 0 [ 1122.568252][T31271] loop4: unable to read partition table [ 1122.574319][T31271] loop4: partition table beyond EOD, truncated [ 1122.581314][T31271] loop_reread_partitions: partition scan of loop4 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 1122.655246][ T5198] ldm_validate_partition_table(): Disk read failed. [ 1122.662087][ T5198] Dev loop4: unable to read RDB block 0 [ 1122.674773][ T5198] loop4: unable to read partition table [ 1122.680678][ T5198] loop4: partition table beyond EOD, truncated [ 1122.733652][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1122.737346][ T10] usb 3-1: USB disconnect, device number 34 [ 1122.771541][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1122.828918][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1122.860082][ T10] quatech2 3-1:0.51: device disconnected [ 1123.668051][T31342] loop9: detected capacity change from 0 to 7 [ 1123.680647][T31342] Dev loop9: unable to read RDB block 7 [ 1123.686653][T31342] loop9: unable to read partition table [ 1123.692526][T31342] loop9: partition table beyond EOD, truncated [ 1123.699546][T31342] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1125.384164][T31416] bond2 (unregistering): Released all slaves [ 1125.431280][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 1125.431299][ T29] audit: type=1800 audit(1775955010.616:1551): pid=31463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.19383" name="bus" dev="tmpfs" ino=19773 res=0 errno=0 [ 1126.144716][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1126.728558][T31537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19390'. [ 1127.833518][T31575] block device autoloading is deprecated and will be removed. [ 1129.917566][T31657] pimreg: tun_chr_ioctl cmd 1074025677 [ 1129.923857][T31657] pimreg: linktype set to 776 [ 1130.923791][T31715] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1131.130068][T31729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19447'. [ 1131.649856][T31747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19453'. [ 1131.665372][T31747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19453'. [ 1134.285760][T31867] kvm_intel: kvm [31866]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x1 [ 1135.195522][ T24] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1135.353922][ T24] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 1135.362706][ T24] usb 2-1: config 0 has no interface number 0 [ 1135.370277][ T24] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1135.385557][ T24] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1135.400966][ T24] usb 2-1: config 0 interface 255 has no altsetting 0 [ 1135.421275][ T24] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1135.434529][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.448555][ T24] usb 2-1: config 0 descriptor?? [ 1135.478400][ T24] ums-realtek 2-1:0.255: USB Mass Storage device detected [ 1135.522504][T31940] input: syz1 as /devices/virtual/input/input127 [ 1135.707779][ T6676] usb 2-1: USB disconnect, device number 22 [ 1139.891143][T32122] kvm: kvm [32121]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0xbf [ 1140.197285][T32139] input: syz1 as /devices/virtual/input/input128 [ 1140.798639][T32180] input: syz0 as /devices/virtual/input/input129 [ 1141.512036][T32221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19601'. [ 1143.125299][ T6676] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1143.297334][ T6676] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1143.313715][ T6676] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 1143.325720][ T6676] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 1143.337798][ T6676] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 1143.348247][ T6676] usb 5-1: config 129 has no interface number 0 [ 1143.357880][ T6676] usb 5-1: config 129 has no interface number 1 [ 1143.364405][ T6676] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1143.381736][ T6676] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 1143.392924][ T6676] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1143.406778][ T6676] usb 5-1: config 129 interface 135 has no altsetting 0 [ 1143.413757][ T6676] usb 5-1: config 129 interface 5 has no altsetting 0 [ 1143.437915][ T6676] usb 5-1: string descriptor 0 read error: -22 [ 1143.444267][ T6676] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1143.453712][ T6676] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.511066][ T6676] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1143.523125][ T6676] usb 5-1: MIDIStreaming interface descriptor not found [ 1143.776611][ T6676] usb 5-1: USB disconnect, device number 25 [ 1144.644632][ T24] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 1144.803060][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1144.815381][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 1144.834835][ T24] usb 3-1: config 8 has an invalid interface number: 69 but max is 0 [ 1144.843775][ T24] usb 3-1: config 8 has no interface number 0 [ 1144.854679][ T24] usb 3-1: config 8 interface 69 has no altsetting 0 [ 1144.878842][ T24] usb 3-1: New USB device found, idVendor=05c6, idProduct=9079, bcdDevice=87.a6 [ 1144.891729][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.914643][ T24] usb 3-1: Product: Ⲁ擐鶴袇鼅 [ 1145.183754][ T29] audit: type=1326 audit(1775955030.366:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32392 comm="syz.3.19644" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 1145.210392][ T29] audit: type=1326 audit(1775955030.366:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32392 comm="syz.3.19644" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 1145.237496][ T29] audit: type=1326 audit(1775955030.366:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32392 comm="syz.3.19644" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 1145.285396][ T29] audit: type=1326 audit(1775955030.366:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32392 comm="syz.3.19644" exe="/root/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 1145.308593][ T29] audit: type=1326 audit(1775955030.366:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32392 comm="syz.3.19644" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 1145.331968][ T29] audit: type=1326 audit(1775955030.366:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32392 comm="syz.3.19644" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 1145.357713][ T29] audit: type=1326 audit(1775955030.366:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32392 comm="syz.3.19644" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 1145.386866][ T29] audit: type=1326 audit(1775955030.366:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32392 comm="syz.3.19644" exe="/root/syz-executor" sig=0 arch=40000003 syscall=397 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 1145.393443][T32404] input: syz0 as /devices/virtual/input/input130 [ 1145.420883][ T29] audit: type=1326 audit(1775955030.376:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32392 comm="syz.3.19644" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 1145.454737][ T29] audit: type=1326 audit(1775955030.376:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32392 comm="syz.3.19644" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 1145.581966][ T24] uvcvideo 3-1:8.69: Found UVC 0.00 device Ⲁ擐鶴袇鼅 (05c6:9079) [ 1145.600527][ T24] uvcvideo 3-1:8.69: No valid video chain found. [ 1145.818244][ T1210] usb 3-1: USB disconnect, device number 35 [ 1146.502644][T32458] input: syz0 as /devices/virtual/input/input131 [ 1146.624718][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1147.721621][T32517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19679'. [ 1147.753119][T32517] netlink: 104 bytes leftover after parsing attributes in process `syz.4.19679'. [ 1147.763054][T32517] netlink: 104 bytes leftover after parsing attributes in process `syz.4.19679'. [ 1149.559719][T32606] sch_fq: defrate 0 ignored. [ 1150.330218][T32649] program syz.0.19723 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1151.191724][T32688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19737'. [ 1151.744718][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1151.776160][ T8978] udevd[8978]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 1152.975819][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1152.975839][ T29] audit: type=1326 audit(1775955038.166:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=306 comm="syz.2.19768" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1153.006718][ T29] audit: type=1326 audit(1775955038.166:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=306 comm="syz.2.19768" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1153.032394][ T29] audit: type=1326 audit(1775955038.196:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=306 comm="syz.2.19768" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1153.095584][ T29] audit: type=1326 audit(1775955038.196:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=306 comm="syz.2.19768" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1153.135593][ T29] audit: type=1326 audit(1775955038.196:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=306 comm="syz.2.19768" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1153.180269][ T29] audit: type=1326 audit(1775955038.226:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=306 comm="syz.2.19768" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1153.203244][ T29] audit: type=1326 audit(1775955038.226:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=306 comm="syz.2.19768" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1153.225949][ T29] audit: type=1326 audit(1775955038.226:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=306 comm="syz.2.19768" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1153.249676][ T29] audit: type=1326 audit(1775955038.226:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=306 comm="syz.2.19768" exe="/root/syz-executor" sig=0 arch=40000003 syscall=230 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1153.278669][ T29] audit: type=1326 audit(1775955038.226:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=306 comm="syz.2.19768" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1155.562618][ T1210] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1155.608206][ T24] hid-generic 0003:0004:0000.00B6: unknown main item tag 0x0 [ 1155.622114][ T24] hid-generic 0003:0004:0000.00B6: unknown main item tag 0x0 [ 1155.630339][ T24] hid-generic 0003:0004:0000.00B6: unknown main item tag 0x0 [ 1155.652623][ T24] hid-generic 0003:0004:0000.00B6: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1155.737523][ T412] fido_id[412]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1155.752541][ T1210] usb 5-1: Using ep0 maxpacket: 32 [ 1155.768615][ T1210] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1155.784854][ T1210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.802930][ T1210] usb 5-1: config 0 descriptor?? [ 1155.824306][ T1210] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1156.169310][ T442] IPv6: NLM_F_CREATE should be specified when creating new route [ 1156.629383][ T1210] gspca_sunplus: reg_w_riv err -71 [ 1156.635354][ T1210] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1156.687924][ T1210] usb 5-1: USB disconnect, device number 26 [ 1157.813479][ T508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19833'. [ 1159.637109][ T597] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 1159.729055][ T606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19864'. [ 1160.143789][ T6676] hid-generic 0003:0004:0000.00B7: unknown main item tag 0x0 [ 1160.156785][ T6676] hid-generic 0003:0004:0000.00B7: unknown main item tag 0x0 [ 1160.165149][ T6676] hid-generic 0003:0004:0000.00B7: unknown main item tag 0x0 [ 1160.188477][ T6676] hid-generic 0003:0004:0000.00B7: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1160.266209][ T633] fido_id[633]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1161.121446][ T675] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19886'. [ 1161.198793][ T684] netlink: 724 bytes leftover after parsing attributes in process `syz.0.19889'. [ 1161.277677][ T686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19890'. [ 1161.297388][ T686] netlink: 72 bytes leftover after parsing attributes in process `syz.0.19890'. [ 1161.377400][ T24] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1161.556758][ T24] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1161.566564][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1161.578122][ T24] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1161.588896][ T24] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1161.597127][ T24] usb 3-1: Manufacturer: syz [ 1161.605129][ T24] usb 3-1: config 0 descriptor?? [ 1161.684576][ T24] rc_core: IR keymap rc-hauppauge not found [ 1161.690587][ T24] Registered IR keymap rc-empty [ 1161.699878][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1161.714275][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input132 [ 1161.840241][ C1] igorplugusb 3-1:0.0: Error: urb status = -32 [ 1161.857176][ T6676] usb 3-1: USB disconnect, device number 36 [ 1162.529100][ T756] netem: incorrect ge model size [ 1162.538179][ T756] netem: change failed [ 1162.678868][ T765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19912'. [ 1162.690756][ T765] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19912'. [ 1162.964605][ T47] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1163.174847][ T47] usb 5-1: Using ep0 maxpacket: 16 [ 1163.190643][ T47] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1163.193472][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1163.193488][ T29] audit: type=1800 audit(1775955048.376:1581): pid=801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.19923" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1163.212238][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.257677][ T47] usb 5-1: Product: syz [ 1163.262000][ T47] usb 5-1: Manufacturer: syz [ 1163.284550][ T47] usb 5-1: SerialNumber: syz [ 1163.293621][ T47] usb 5-1: config 0 descriptor?? [ 1163.308576][ T47] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 1163.383326][ T813] futex_wake_op: syz.2.19927 tries to shift op by -1; fix this program [ 1163.397070][ T29] audit: type=1326 audit(1775955048.586:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=812 comm="syz.1.19926" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x0 [ 1163.958692][ T29] audit: type=1326 audit(1775955049.146:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=834 comm="syz.2.19933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1164.014740][ T29] audit: type=1326 audit(1775955049.146:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=834 comm="syz.2.19933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1164.046618][ T29] audit: type=1326 audit(1775955049.146:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=834 comm="syz.2.19933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1164.096858][ T29] audit: type=1326 audit(1775955049.146:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=834 comm="syz.2.19933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1164.144730][ T29] audit: type=1326 audit(1775955049.146:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=834 comm="syz.2.19933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1164.184988][ T29] audit: type=1326 audit(1775955049.146:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=834 comm="syz.2.19933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1164.209124][ T29] audit: type=1326 audit(1775955049.146:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=834 comm="syz.2.19933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1164.274877][ T29] audit: type=1326 audit(1775955049.146:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=834 comm="syz.2.19933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1164.353655][ T850] netlink: 'syz.2.19938': attribute type 30 has an invalid length. [ 1164.550744][ T1851] usb 5-1: USB disconnect, device number 27 [ 1164.979756][ T888] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.19954'. [ 1166.964806][ T1851] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1167.118728][ T1851] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1167.127948][ T1851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1167.155429][ T1851] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1167.164863][ T1851] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1167.172894][ T1851] usb 3-1: Manufacturer: syz [ 1167.195583][ T1851] usb 3-1: config 0 descriptor?? [ 1167.292988][ T993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19986'. [ 1167.324534][ T1851] rc_core: IR keymap rc-hauppauge not found [ 1167.330502][ T1851] Registered IR keymap rc-empty [ 1167.339460][ T1851] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1167.353866][ T1851] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input133 [ 1167.428539][ T1851] usb 3-1: USB disconnect, device number 37 [ 1167.617632][ T1020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19990'. [ 1168.660798][ T1071] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20004'. [ 1168.948828][ T1083] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20010'. [ 1168.962336][ T1083] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.664418][ T1130] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1170.013686][ T1149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20033'. [ 1170.024097][ T1149] netlink: 'syz.0.20033': attribute type 5 has an invalid length. [ 1170.543839][ T1174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20043'. [ 1170.563806][ T1174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20043'. [ 1170.592302][ T1176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20042'. [ 1171.982488][ T1244] hub 9-0:1.0: USB hub found [ 1171.989026][ T1244] hub 9-0:1.0: 1 port detected [ 1172.437893][ T1274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20078'. [ 1172.450018][ T1274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20078'. [ 1172.654605][ T6676] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1172.804640][ T6676] usb 3-1: Using ep0 maxpacket: 16 [ 1172.836515][ T6676] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1172.848554][ T6676] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1172.875194][ T6676] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1172.904855][ T6676] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1172.922592][ T6676] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.949139][ T6676] usb 3-1: config 0 descriptor?? [ 1173.410726][ T6676] microsoft 0003:045E:07DA.00B8: unbalanced collection at end of report description [ 1173.423084][ T6676] microsoft 0003:045E:07DA.00B8: parse failed [ 1173.434208][ T6676] microsoft 0003:045E:07DA.00B8: probe with driver microsoft failed with error -22 [ 1173.640552][ T1851] usb 3-1: USB disconnect, device number 38 [ 1175.342286][ T1409] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 1175.348553][ T1409] syzkaller0: group set to 0 [ 1175.720335][ T1428] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20125'. [ 1176.084597][ T1851] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1176.266102][ T1851] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1176.285712][ T1851] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1176.306573][ T1851] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1176.315828][ T1851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.323943][ T1851] usb 5-1: Product: syz [ 1176.328329][ T1851] usb 5-1: Manufacturer: syz [ 1176.333076][ T1851] usb 5-1: SerialNumber: syz [ 1176.552984][ T1463] netlink: 160 bytes leftover after parsing attributes in process `syz.0.20136'. [ 1176.570692][ T1851] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1176.772103][ T1851] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1176.791082][ T1851] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 1177.177457][ T1851] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 1177.223207][ T1851] usb 5-1: USB disconnect, device number 28 [ 1177.269484][ T8978] udevd[8978]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1177.366913][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.373285][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.757609][ T6676] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1177.928360][ T6676] usb 3-1: config 253 has an invalid interface number: 130 but max is 0 [ 1177.936939][ T6676] usb 3-1: config 253 has no interface number 0 [ 1177.943245][ T6676] usb 3-1: config 253 interface 130 has no altsetting 0 [ 1177.969818][ T6676] usb 3-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 1177.993379][ T6676] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.011805][ T6676] usb 3-1: Product: syz [ 1178.016884][ T6676] usb 3-1: Manufacturer: syz [ 1178.021515][ T6676] usb 3-1: SerialNumber: syz [ 1178.656665][ T6676] dvb-usb: found a 'EvolutePC TVWay+' in warm state. [ 1178.678702][ T6676] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1178.701081][ T6676] dvbdev: DVB: registering new adapter (EvolutePC TVWay+) [ 1178.713364][ T6676] usb 3-1: media controller created [ 1178.737287][ T6676] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1178.824976][ T6676] DVB: Unable to find symbol dib8000_attach() [ 1178.835908][ T6676] dvb-usb: no frontend was attached by 'EvolutePC TVWay+' [ 1178.916374][ T6676] rc_core: IR keymap rc-dib0700-nec not found [ 1178.922523][ T6676] Registered IR keymap rc-empty [ 1178.946233][ T6676] dvb-usb: could not initialize remote control. [ 1178.952787][ T6676] dvb-usb: EvolutePC TVWay+ successfully initialized and connected. [ 1178.968839][ T6676] usb 3-1: USB disconnect, device number 39 [ 1179.042909][ T6676] dvb-usb: EvolutePC TVWay+ successfully deinitialized and disconnected. [ 1179.322241][ T1614] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 1179.352020][ T1618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20177'. [ 1179.372086][ T1618] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20177'. [ 1179.428306][T24641] Bluetooth: hci1: command 0x0406 tx timeout [ 1180.261401][ T1668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20194'. [ 1180.273020][ T1668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20194'. [ 1180.658559][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1180.658579][ T29] audit: type=1326 audit(1775955065.846:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1677 comm="syz.2.20200" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708ef6c code=0x0 [ 1181.789181][ T1727] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.20216'. [ 1181.800946][ T1727] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 1181.992835][ T1735] netlink: 160 bytes leftover after parsing attributes in process `syz.4.20218'. [ 1183.654863][ T6676] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1183.664213][ T1787] netlink: 'syz.1.20234': attribute type 29 has an invalid length. [ 1183.806620][ T6676] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1183.817914][ T6676] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1183.828608][ T6676] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1183.840916][ T6676] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.852579][ T6676] usb 3-1: config 0 descriptor?? [ 1184.090203][ T1809] geneve2: entered allmulticast mode [ 1184.299141][ T6676] hid-steam 0003:28DE:1142.00B9: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 1184.374891][ T6676] hid-steam 0003:28DE:1142.00B9: Steam wireless receiver connected [ 1184.380071][ T1827] overlay: Unknown parameter 'Wz!?V1|G*, priority 20 [ 1199.198749][ T2585] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1199.488321][ T2598] IPv6: Can't replace route, no match found [ 1199.915400][ T2633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20487'. [ 1200.004619][ T24] tipc: Node number set to 2886997007 [ 1201.048724][ T2726] macsec0: entered promiscuous mode [ 1201.054004][ T2726] macsec0: left allmulticast mode [ 1201.062781][ T2726] macsec0: left promiscuous mode [ 1201.570009][ T29] audit: type=1326 audit(1775955086.756:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2748 comm="syz.2.20527" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1201.593848][ T29] audit: type=1326 audit(1775955086.756:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2748 comm="syz.2.20527" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1201.617418][ T29] audit: type=1326 audit(1775955086.756:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2748 comm="syz.2.20527" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1201.640407][ T29] audit: type=1326 audit(1775955086.756:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2748 comm="syz.2.20527" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1201.665043][ T29] audit: type=1326 audit(1775955086.756:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2748 comm="syz.2.20527" exe="/root/syz-executor" sig=0 arch=40000003 syscall=444 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1201.689280][ T29] audit: type=1326 audit(1775955086.756:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2748 comm="syz.2.20527" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1201.720222][ T29] audit: type=1326 audit(1775955086.756:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2748 comm="syz.2.20527" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1201.743658][ T29] audit: type=1326 audit(1775955086.756:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2748 comm="syz.2.20527" exe="/root/syz-executor" sig=0 arch=40000003 syscall=445 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1201.769259][ T29] audit: type=1326 audit(1775955086.756:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2748 comm="syz.2.20527" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1202.277675][ T2791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20529'. [ 1202.516431][ T2807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20535'. [ 1202.843876][ T2833] geneve2: entered allmulticast mode [ 1203.802767][ T2898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20558'. [ 1204.134598][ T1210] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1204.295821][ T1210] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1204.320138][ T1210] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1204.334294][ T1210] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1204.343860][ T1210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.402313][ T1210] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 1205.419766][ T1210] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input136 [ 1205.467330][ T1210] input: failed to attach handler kbd to device input136, error: -5 [ 1205.557151][ T1210] usb 5-1: USB disconnect, device number 30 [ 1205.752697][ T2991] input: syz1 as /devices/virtual/input/input137 [ 1206.843165][ T3059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20601'. [ 1207.332802][ T29] audit: type=1326 audit(1775955092.516:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3074 comm="syz.1.20610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 1207.364644][ T29] audit: type=1326 audit(1775955092.516:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3074 comm="syz.1.20610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 1207.405414][ T29] audit: type=1326 audit(1775955092.596:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3074 comm="syz.1.20610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7105cab code=0x7ffc0000 [ 1207.468794][ T29] audit: type=1326 audit(1775955092.626:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3074 comm="syz.1.20610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 1207.502154][ T29] audit: type=1326 audit(1775955092.626:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3074 comm="syz.1.20610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 1207.525961][ T29] audit: type=1326 audit(1775955092.626:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3074 comm="syz.1.20610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 1207.560328][ T29] audit: type=1326 audit(1775955092.626:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3074 comm="syz.1.20610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 1207.594087][ T29] audit: type=1326 audit(1775955092.626:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3074 comm="syz.1.20610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 1207.625071][ T29] audit: type=1326 audit(1775955092.626:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3074 comm="syz.1.20610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 1207.652538][ T29] audit: type=1326 audit(1775955092.626:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3074 comm="syz.1.20610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 1207.805202][ T1851] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1207.963778][ T1851] usb 3-1: Using ep0 maxpacket: 32 [ 1207.973674][ T1851] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1207.994897][ T1851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.003217][ T1851] usb 3-1: Product: syz [ 1208.025332][ T1851] usb 3-1: Manufacturer: syz [ 1208.030088][ T1851] usb 3-1: SerialNumber: syz [ 1208.041580][ T1851] usb 3-1: config 0 descriptor?? [ 1208.054052][ T3107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20620'. [ 1208.073821][ T3107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20620'. [ 1208.275791][ T1851] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 044 [ 1208.484399][ T1210] usb 3-1: USB disconnect, device number 44 [ 1209.035138][ T1210] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 1209.204021][ T1210] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1209.212913][ T1210] usb 5-1: not running at top speed; connect to a high speed hub [ 1209.223009][ T1210] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1209.239744][ T1210] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1209.251300][ T1210] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1209.266548][ T1210] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40 [ 1209.275868][ T1210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=36 [ 1209.283943][ T1210] usb 5-1: Product: syz [ 1209.288445][ T1210] usb 5-1: Manufacturer: syz [ 1209.293097][ T1210] usb 5-1: SerialNumber: syz [ 1209.474580][ T1851] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1209.519796][ T1210] usb 5-1: 1:1 : no or invalid class specific endpoint descriptor [ 1209.527932][ T1210] usb 5-1: 1:1 : format type 65 is not supported yet [ 1209.535397][ T1210] usb 5-1: 0:2 : does not exist [ 1209.572417][ T1210] usb 5-1: USB disconnect, device number 31 [ 1209.602994][ T8978] udevd[8978]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1209.654400][ T1851] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1209.686934][ T1851] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1209.696337][ T1851] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1209.708205][ T1851] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1209.717413][ T1851] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1209.734839][ T1851] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1209.752774][ T1851] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1209.762161][ T1851] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1209.774064][ T1851] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1209.788231][ T1851] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1209.796519][ T1851] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1209.806162][ T1851] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1209.817642][ T1851] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1209.825636][ T1851] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1209.835677][ T1851] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1209.847201][ T1851] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1209.867310][ T1851] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1209.876802][ T1851] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1209.887944][ T1851] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1209.899795][ T1851] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1209.909238][ T1851] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1209.920303][ T1851] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1209.928613][ T1851] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1209.937862][ T1851] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1209.949076][ T1851] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1209.958955][ T1851] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1209.969097][ T1851] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1209.979446][ T1851] usb 3-1: Product: syz [ 1209.983828][ T1851] usb 3-1: Manufacturer: syz [ 1209.989017][ T1851] usb 3-1: SerialNumber: syz [ 1210.007125][ T1851] usb 3-1: config 0 descriptor?? [ 1210.025687][ T1851] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 1210.183144][ T3225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20640'. [ 1210.233662][ T1210] usb 3-1: USB disconnect, device number 45 [ 1210.249020][ T1210] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 1211.127625][ T3263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20649'. [ 1212.469944][ T3348] ip6gretap1: entered allmulticast mode [ 1212.814701][ T24] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1212.977254][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1213.056875][ T24] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1213.065524][ T24] usb 3-1: config 0 has no interface number 0 [ 1213.073399][ T24] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1213.108831][ T24] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1213.126196][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1213.139907][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.169075][ T24] usb 3-1: Product: syz [ 1213.173294][ T24] usb 3-1: Manufacturer: syz [ 1213.186811][ T24] usb 3-1: SerialNumber: syz [ 1213.205454][ T24] usb 3-1: config 0 descriptor?? [ 1213.602994][ T3383] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 1213.650303][ T24] appletouch 3-1:0.85: Geyser mode initialized. [ 1213.922072][ T24] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input138 [ 1213.960004][ T24] usb 3-1: USB disconnect, device number 46 [ 1213.966124][ C1] appletouch 3-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 1214.159601][ T24] appletouch 3-1:0.85: input: appletouch disconnected [ 1215.779314][ T3465] geneve2: entered promiscuous mode [ 1215.810538][ T3472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20706'. [ 1215.822128][ T3472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20706'. [ 1216.199784][ T3496] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1216.249675][ T3495] binder: 3487:3495 ioctl c0306201 80000180 returned -14 [ 1216.627412][ T3519] overlayfs: missing 'lowerdir' [ 1216.738497][ T3527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20728'. [ 1216.740579][ T3528] netlink: 48 bytes leftover after parsing attributes in process `syz.3.20729'. [ 1216.839545][ T63] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.870982][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1216.871000][ T29] audit: type=1326 audit(1775955102.056:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3529 comm="syz.0.20731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98f6c code=0x7ffc0000 [ 1216.908655][ T29] audit: type=1326 audit(1775955102.056:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3529 comm="syz.0.20731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98f6c code=0x7ffc0000 [ 1216.934261][ T29] audit: type=1326 audit(1775955102.056:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3529 comm="syz.0.20731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f98f6c code=0x7ffc0000 [ 1216.957771][ T29] audit: type=1326 audit(1775955102.056:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3529 comm="syz.0.20731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98f6c code=0x7ffc0000 [ 1217.002441][ T29] audit: type=1326 audit(1775955102.056:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3529 comm="syz.0.20731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=177 compat=1 ip=0xf7f98f6c code=0x7ffc0000 [ 1217.040746][ T63] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.063605][ T29] audit: type=1326 audit(1775955102.116:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3529 comm="syz.0.20731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98f6c code=0x7ffc0000 [ 1217.086394][ T29] audit: type=1326 audit(1775955102.116:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3529 comm="syz.0.20731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98f6c code=0x7ffc0000 [ 1217.158313][ T63] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.270689][ T63] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.296983][T24641] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1217.306603][T24641] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1217.316970][T24641] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1217.325275][T24641] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1217.333164][T24641] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1217.549239][ T63] bridge_slave_1: left allmulticast mode [ 1217.555808][ T63] bridge_slave_1: left promiscuous mode [ 1217.561787][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.577643][ T63] bridge_slave_0: left allmulticast mode [ 1217.583446][ T63] bridge_slave_0: left promiscuous mode [ 1217.592443][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.863651][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1217.880716][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1217.893010][ T63] bond0 (unregistering): Released all slaves [ 1217.908286][ T63] bond1 (unregistering): Released all slaves [ 1218.210641][ T3550] chnl_net:caif_netlink_parms(): no params data found [ 1218.633762][ T3550] bridge0: port 1(bridge_slave_0) entered blocking state [ 1218.651414][ T3550] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.671881][ T3550] bridge_slave_0: entered allmulticast mode [ 1218.688304][ T3550] bridge_slave_0: entered promiscuous mode [ 1218.717633][ T3550] bridge0: port 2(bridge_slave_1) entered blocking state [ 1218.727137][ T3550] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.739791][ T3550] bridge_slave_1: entered allmulticast mode [ 1218.757093][ T3550] bridge_slave_1: entered promiscuous mode [ 1218.787169][ T63] hsr_slave_0: left promiscuous mode [ 1218.805206][ T63] hsr_slave_1: left promiscuous mode [ 1218.812637][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1218.831771][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1218.848260][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1218.866760][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1218.901418][ T63] veth1_macvtap: left promiscuous mode [ 1218.909808][ T63] veth0_macvtap: left promiscuous mode [ 1218.919983][ T63] veth1_vlan: left promiscuous mode [ 1218.930139][ T63] veth0_vlan: left promiscuous mode [ 1219.280464][ T63] team0 (unregistering): Port device team_slave_1 removed [ 1219.324020][ T63] team0 (unregistering): Port device team_slave_0 removed [ 1219.424728][ T5833] Bluetooth: hci1: command tx timeout [ 1219.522660][ T3550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1219.580739][ T3550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1219.660934][ T3550] team0: Port device team_slave_0 added [ 1219.679225][ T3550] team0: Port device team_slave_1 added [ 1219.738762][ T3550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1219.748152][ T3550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1219.801785][ T3550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1219.823514][ T3550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1219.843583][ T3550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1219.876892][ T3550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1219.967608][ T3550] hsr_slave_0: entered promiscuous mode [ 1220.007822][ T3550] hsr_slave_1: entered promiscuous mode [ 1220.037691][ T3550] debugfs: 'hsr0' already exists in 'hsr' [ 1220.043546][ T3550] Cannot create hsr debugfs directory [ 1221.258913][ T3550] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1221.280463][ T3550] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1221.381224][ T3550] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1221.403801][ T3550] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1221.504758][ T5833] Bluetooth: hci1: command tx timeout [ 1221.589272][ T3550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1221.619293][ T3550] 8021q: adding VLAN 0 to HW filter on device team0 [ 1221.656181][T27105] bridge0: port 1(bridge_slave_0) entered blocking state [ 1221.663392][T27105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1221.696736][ T3726] bridge0: port 2(bridge_slave_1) entered blocking state [ 1221.704012][ T3726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1221.895930][ T3550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1222.011896][ T3550] veth0_vlan: entered promiscuous mode [ 1222.049395][ T3550] veth1_vlan: entered promiscuous mode [ 1222.154110][ T3550] veth0_macvtap: entered promiscuous mode [ 1222.182892][ T3550] veth1_macvtap: entered promiscuous mode [ 1222.208651][ T3550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1222.236746][ T3550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1222.269734][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.302077][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.340443][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.356626][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.734099][ T3990] veth1_to_bridge: entered promiscuous mode [ 1222.800393][ T3990] veth1_to_bridge: left promiscuous mode [ 1222.897488][T27105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1222.922773][T27105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1223.011832][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1223.030181][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1223.060713][ T4071] loop9: detected capacity change from 0 to 524287936 [ 1223.584569][ T5833] Bluetooth: hci1: command tx timeout [ 1225.654601][ T24] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1225.675535][ T5833] Bluetooth: hci1: command tx timeout [ 1225.804618][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1225.811698][ T24] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1225.821715][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.833344][ T24] usb 3-1: config 0 descriptor?? [ 1226.072704][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1226.091348][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1226.143858][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1226.159919][ T24] usb 3-1: media controller created [ 1226.179925][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1226.276920][ T24] az6027: usb out operation failed. (-71) [ 1226.288786][ T24] az6027: usb out operation failed. (-71) [ 1226.297691][ T24] stb0899_attach: Driver disabled by Kconfig [ 1226.303743][ T24] az6027: no front-end attached [ 1226.303743][ T24] [ 1226.315423][ T24] az6027: usb out operation failed. (-71) [ 1226.321201][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1226.334967][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input142 [ 1226.374899][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 1226.381989][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1226.402047][ T24] usb 3-1: USB disconnect, device number 47 [ 1226.482325][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1226.725624][ T4235] blkio.reset_stats is deprecated [ 1227.725378][ T4298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20831'. [ 1227.737579][ T4298] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20831'. [ 1228.316216][ T10] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1228.342061][ T4345] tap0: tun_chr_ioctl cmd 1074025677 [ 1228.350767][ T4345] tap0: linktype set to 804 [ 1228.476721][ T10] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1228.489007][ T10] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1228.502631][ T10] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1228.514595][ T10] usb 3-1: config 220 has no interface number 2 [ 1228.533966][ T10] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1228.555276][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1228.563017][ T10] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1228.570448][ T10] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1228.578157][ T10] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1228.588710][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1228.599362][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.610635][ T10] usb 3-1: Product: syz [ 1228.614981][ T10] usb 3-1: Manufacturer: syz [ 1228.620097][ T10] usb 3-1: SerialNumber: syz [ 1228.873939][ T10] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1228.882823][ T10] uvcvideo 3-1:220.0: No valid video chain found. [ 1228.882909][ T4368] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20848'. [ 1228.891908][ T10] usb 3-1: selecting invalid altsetting 0 [ 1228.899708][ T4368] netlink: 32 bytes leftover after parsing attributes in process `syz.0.20848'. [ 1228.919789][ T10] usb 3-1: selecting invalid altsetting 0 [ 1228.927438][ T10] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1228.955388][ T10] usb 3-1: USB disconnect, device number 48 [ 1229.254967][ T4395] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1229.262488][ T4395] IPv6: NLM_F_CREATE should be set when creating new route [ 1229.269858][ T4395] IPv6: NLM_F_CREATE should be set when creating new route [ 1229.277139][ T4395] IPv6: NLM_F_CREATE should be set when creating new route [ 1229.382809][ T4401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20855'. [ 1229.397970][ T4401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20855'. [ 1229.409307][ T4401] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20855'. [ 1231.765880][ T4504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20894'. [ 1233.502336][ T4569] netlink: 'syz.4.20918': attribute type 9 has an invalid length. [ 1233.586635][ T4569] netlink: 'syz.4.20918': attribute type 5 has an invalid length. [ 1233.663118][ T4576] kvm: kvm [4574]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076) [ 1235.498237][ T1210] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1235.674572][ T1210] usb 3-1: Using ep0 maxpacket: 8 [ 1235.696090][ T1210] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1235.712001][ T1210] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1235.728170][ T1210] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1235.738535][ T1210] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1235.753593][ T1210] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1235.763213][ T1210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.992521][ T1210] usb 3-1: GET_CAPABILITIES returned 0 [ 1235.999584][ T1210] usbtmc 3-1:16.0: can't read capabilities [ 1236.219255][ T4659] usbtmc 3-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 1236.241246][ T1210] usb 3-1: USB disconnect, device number 49 [ 1236.802503][ T4751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20981'. [ 1237.116245][ T4771] kvm: kvm [4770]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0xfffffffffffffffd [ 1237.248143][ T4780] batadv_slave_0: entered promiscuous mode [ 1237.276702][ T4779] batadv_slave_0: left promiscuous mode [ 1237.584087][ T4792] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1237.601071][ T4792] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1237.749325][ T4799] batadv0: entered promiscuous mode [ 1237.757064][ T4799] bond0: entered promiscuous mode [ 1237.763399][ T4799] bond_slave_0: entered promiscuous mode [ 1237.769862][ T4799] bond_slave_1: entered promiscuous mode [ 1237.779097][ T4799] debugfs: 'hsr1' already exists in 'hsr' [ 1237.787228][ T4799] Cannot create hsr debugfs directory [ 1237.793189][ T4799] hsr1: entered allmulticast mode [ 1237.799701][ T4799] batadv0: entered allmulticast mode [ 1237.806201][ T4799] bond0: entered allmulticast mode [ 1237.812650][ T4799] bond_slave_0: entered allmulticast mode [ 1237.823214][ T4799] bond_slave_1: entered allmulticast mode [ 1237.836778][ T4799] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1238.228023][ T4817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21007'. [ 1238.565038][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1238.716623][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1238.730858][ T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1238.744226][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1238.753950][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.790800][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.799786][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.816391][ T4823] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1238.857906][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1239.567788][ T10] usb 5-1: USB disconnect, device number 32 [ 1240.507778][ T4951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21035'. [ 1240.523746][ T4951] netlink: 'syz.4.21035': attribute type 30 has an invalid length. [ 1240.533212][ T4951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21035'. [ 1243.652625][ T5021] netlink: 28 bytes leftover after parsing attributes in process `syz.0.21067'. [ 1244.563554][ T5057] erspan0: entered promiscuous mode [ 1245.047875][ T5076] netlink: 236 bytes leftover after parsing attributes in process `syz.2.21090'. [ 1245.275124][ T24] IPVS: starting estimator thread 0... [ 1245.364521][ T5089] IPVS: using max 29 ests per chain, 69600 per kthread [ 1245.434805][ T5095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21099'. [ 1246.484780][ T47] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1246.657824][ T47] usb 5-1: Using ep0 maxpacket: 16 [ 1246.665493][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1246.678147][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1246.688753][ T47] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1246.702359][ T47] usb 5-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 1246.716846][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.730737][ T47] usb 5-1: config 0 descriptor?? [ 1246.864149][ T5157] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1246.871012][ T5157] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1246.877412][ T5157] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1246.883467][ T5157] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1246.895843][ T5157] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1246.902444][ T5157] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1246.913906][ T5157] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1246.920568][ T5157] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1246.934269][ T5157] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1247.128588][ T5174] cifs: Unknown parameter 'fd' [ 1247.200166][ T47] a4tech 0003:09DA:000A.00BB: unknown main item tag 0x0 [ 1247.215189][ T47] a4tech 0003:09DA:000A.00BB: unknown main item tag 0x0 [ 1247.222210][ T47] a4tech 0003:09DA:000A.00BB: unknown main item tag 0x0 [ 1247.234613][ T47] a4tech 0003:09DA:000A.00BB: unknown main item tag 0x0 [ 1247.241797][ T47] a4tech 0003:09DA:000A.00BB: unknown main item tag 0x0 [ 1247.250040][ T47] a4tech 0003:09DA:000A.00BB: unknown main item tag 0x0 [ 1247.268168][ T47] a4tech 0003:09DA:000A.00BB: unknown main item tag 0x0 [ 1247.278613][ T47] a4tech 0003:09DA:000A.00BB: collection stack underflow [ 1247.291812][ T47] a4tech 0003:09DA:000A.00BB: item 0 0 0 12 parsing failed [ 1247.300549][ T47] a4tech 0003:09DA:000A.00BB: parse failed [ 1247.306801][ T47] a4tech 0003:09DA:000A.00BB: probe with driver a4tech failed with error -22 [ 1247.417630][T26320] usb 5-1: USB disconnect, device number 33 [ 1248.212862][ T5235] pimreg: tun_chr_ioctl cmd 1074025677 [ 1248.221993][ T5235] pimreg: linktype set to 805 [ 1248.305086][ T47] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 1248.466534][ T47] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1248.474839][ T47] usb 5-1: config 0 has no interface number 0 [ 1248.480992][ T47] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1248.514809][ T47] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1248.533627][ T47] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1248.544320][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.566378][ T47] usb 5-1: config 0 descriptor?? [ 1248.572145][ T5225] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1248.608825][ T47] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1248.864669][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 1248.948049][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 1248.948181][T24641] Bluetooth: hci4: command 0x0406 tx timeout [ 1248.954128][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 1248.954168][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 1249.339626][ T10] usb 5-1: USB disconnect, device number 34 [ 1249.497888][ T5305] netlink: 228 bytes leftover after parsing attributes in process `syz.0.21157'. [ 1250.876922][ T5368] netlink: 40 bytes leftover after parsing attributes in process `syz.2.21183'. [ 1251.024687][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 1251.031102][ T1838] Bluetooth: hci3: command 0x0406 tx timeout [ 1251.031117][T24641] Bluetooth: hci1: command 0x0c1a tx timeout [ 1251.350023][ T5393] kvm: kvm [5392]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x7 [ 1253.005613][ T5454] program syz.2.21213 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1253.106825][T24641] Bluetooth: hci1: command 0x0c1a tx timeout [ 1255.028952][ T5580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21249'. [ 1255.038839][ T5580] netlink: 'syz.4.21249': attribute type 30 has an invalid length. [ 1255.049245][ T5580] netlink: 'syz.4.21249': attribute type 29 has an invalid length. [ 1255.058828][ T5580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21249'. [ 1255.095006][T26320] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1255.254928][T26320] usb 3-1: Using ep0 maxpacket: 8 [ 1255.262191][T26320] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1255.298847][T26320] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1255.309110][T26320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.317658][T26320] usb 3-1: Product: syz [ 1255.324637][T26320] usb 3-1: Manufacturer: syz [ 1255.329285][T26320] usb 3-1: SerialNumber: syz [ 1255.600363][T26320] usb 3-1: USB disconnect, device number 50 [ 1256.528406][ T5650] sctp: [Deprecated]: syz.0.21267 (pid 5650) Use of int in maxseg socket option. [ 1256.528406][ T5650] Use struct sctp_assoc_value instead [ 1256.813501][ T5666] netlink: 20 bytes leftover after parsing attributes in process `syz.3.21275'. [ 1256.827139][ T5666] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1257.196303][ T5688] netlink: 16 bytes leftover after parsing attributes in process `syz.3.21283'. [ 1257.345380][ T5697] netlink: 228 bytes leftover after parsing attributes in process `syz.3.21287'. [ 1257.440457][ T29] audit: type=1400 audit(1775955142.626:1622): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A2020202030202020313920202020302020202030202020202030202020202020203020202020202020202020300A65727370616E303A202020202020203020202020202020302020202030202020203020202020302020202020302020202020202020202030202020202020202020302020202020202020302020202020202030202020323220202020302020202030202020202030202020202020203020202020202020202020300A69705F767469303A202020202020203020202020202020302020202030202020203020202020302020202020302020202020202020202030202020202020202020302020202020202020302020202020202030202020203320202020302020202030202020202030202020202020203320202020202020202020300A6970365F767469303A202020202020203020202020202020302020202030202020203020202020302020202020302020202020202020202030202020202020202020302020202020202020302020202020202030202020203620202020372020202030202020202030202020202020203620202020202020202020300A2020736974303A20202020 [ 1257.627379][ T29] audit: type=1326 audit(1775955142.816:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5714 comm="syz.2.21293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63f6c code=0x7ffc0000 [ 1257.783563][ T29] audit: type=1326 audit(1775955142.816:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5714 comm="syz.2.21293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63f6c code=0x7ffc0000 [ 1257.824730][ T29] audit: type=1326 audit(1775955142.816:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5714 comm="syz.2.21293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63f6c code=0x7ffc0000 [ 1257.892834][ T29] audit: type=1326 audit(1775955142.816:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5714 comm="syz.2.21293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63f6c code=0x7ffc0000 [ 1257.939517][ T29] audit: type=1326 audit(1775955142.816:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5714 comm="syz.2.21293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f63f6c code=0x7ffc0000 [ 1257.967004][ T29] audit: type=1326 audit(1775955142.816:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5714 comm="syz.2.21293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63f6c code=0x7ffc0000 [ 1258.002376][ T29] audit: type=1326 audit(1775955142.816:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5714 comm="syz.2.21293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63f6c code=0x7ffc0000 [ 1258.044622][ T29] audit: type=1326 audit(1775955142.816:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5714 comm="syz.2.21293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63f6c code=0x7ffc0000 [ 1258.067101][ T29] audit: type=1326 audit(1775955142.816:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5714 comm="syz.2.21293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63f6c code=0x7ffc0000 [ 1258.765160][ T5764] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1259.763277][ T5777] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21320'. [ 1259.789604][ T5777] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21320'. [ 1259.804807][ T5781] netlink: 228 bytes leftover after parsing attributes in process `syz.2.21319'. [ 1260.004298][ T5786] kvm: kvm [5785]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x9 [ 1266.689028][ T6121] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1266.696142][ T6121] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1268.020868][ T6162] pim6reg: tun_chr_ioctl cmd 1074812118 [ 1268.639674][ T6191] bridge0: entered promiscuous mode [ 1268.645888][ T6191] macvlan2: entered promiscuous mode [ 1268.773532][ T6195] dummy0: entered promiscuous mode [ 1268.784984][ T6195] macvtap2: entered promiscuous mode [ 1268.797092][ T6195] dummy0: left promiscuous mode [ 1270.152598][T26320] IPVS: starting estimator thread 0... [ 1270.164534][ T6273] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 1270.258625][ T6274] IPVS: using max 27 ests per chain, 64800 per kthread [ 1270.712044][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 1270.712074][ T29] audit: type=1326 audit(1775955155.896:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.2.21494" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f63f6c code=0x0 [ 1271.748683][ T6353] input: syz1 as /devices/virtual/input/input143 [ 1271.865110][ T10] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 1272.027174][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1272.039577][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 1272.056108][ T10] usb 3-1: config 38 has an invalid interface number: 233 but max is 0 [ 1272.077471][ T10] usb 3-1: config 38 has no interface number 0 [ 1272.083906][ T10] usb 3-1: config 38 interface 233 has no altsetting 0 [ 1272.106883][ T10] usb 3-1: New USB device found, idVendor=10b8, idProduct=1f9c, bcdDevice=cf.68 [ 1272.116638][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.125957][ T10] usb 3-1: Product: syz [ 1272.130425][ T10] usb 3-1: Manufacturer: syz [ 1272.135243][ T10] usb 3-1: SerialNumber: syz [ 1272.586084][ T10] dvb-usb: found a 'DiBcom TFE8096P reference design' in warm state. [ 1272.610594][ T10] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1272.621048][ T10] dvbdev: DVB: registering new adapter (DiBcom TFE8096P reference design) [ 1272.632407][ T10] usb 3-1: media controller created [ 1272.648325][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1272.712979][ T10] DVB: Unable to find symbol dib8000_attach() [ 1272.728902][ T10] dvb-usb: no frontend was attached by 'DiBcom TFE8096P reference design' [ 1272.814596][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 1272.832788][ T10] Registered IR keymap rc-empty [ 1272.845515][ T10] dvb-usb: could not initialize remote control. [ 1272.864941][ T10] dvb-usb: DiBcom TFE8096P reference design successfully initialized and connected. [ 1272.887913][ T10] usb 3-1: USB disconnect, device number 51 [ 1272.910859][ T10] dvb-usb: DiBcom TFE8096P reference design successfully deinitialized and disconnected. [ 1274.084587][T26320] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1274.234559][T26320] usb 5-1: Using ep0 maxpacket: 16 [ 1274.257056][T26320] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1274.274512][T26320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.282610][T26320] usb 5-1: Product: syz [ 1274.287704][T26320] usb 5-1: Manufacturer: syz [ 1274.292306][T26320] usb 5-1: SerialNumber: syz [ 1274.517384][T26320] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1274.529749][T26320] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1274.540576][T26320] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1274.549397][T26320] usb 5-1: media controller created [ 1274.563682][T26320] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1274.784994][T26320] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1274.821381][T26320] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1274.834182][T26320] usb 5-1: USB disconnect, device number 35 [ 1275.874913][ T6581] vivid-002: disconnect [ 1275.880277][ T6579] vivid-002: reconnect [ 1276.068477][ T6596] netlink: 'syz.0.21586': attribute type 12 has an invalid length. [ 1276.493627][ T6623] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 1276.648355][ T6627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21600'. [ 1276.844592][ T29] audit: type=1326 audit(1775955162.026:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.1.21599" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x0 [ 1277.056066][ T6643] netlink: 'syz.3.21605': attribute type 2 has an invalid length. [ 1278.214603][ T1851] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1278.364828][ T1851] usb 5-1: Using ep0 maxpacket: 8 [ 1278.394588][ T1851] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1278.408307][ T1851] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1278.419517][ T1851] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 168 [ 1278.430080][ T1851] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1278.443914][ T1851] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1278.453356][ T1851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.709666][ T1851] usb 5-1: GET_CAPABILITIES returned 0 [ 1278.715502][ T1851] usbtmc 5-1:16.0: can't read capabilities [ 1278.929846][ T1210] usb 5-1: USB disconnect, device number 36 [ 1279.098502][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21638'. [ 1279.112714][ T6746] netlink: 104 bytes leftover after parsing attributes in process `syz.0.21638'. [ 1279.122523][ T6746] netlink: 104 bytes leftover after parsing attributes in process `syz.0.21638'. [ 1279.822603][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21654'. [ 1279.849510][ T6788] netlink: 48 bytes leftover after parsing attributes in process `syz.4.21654'. [ 1280.727936][ T6822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21668'. [ 1280.924061][ T6840] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1280.949845][ T6842] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1281.087721][ T6847] netlink: 'syz.2.21674': attribute type 2 has an invalid length. [ 1281.110059][ T6847] : entered promiscuous mode [ 1281.120558][ T6847] netlink: 'syz.2.21674': attribute type 2 has an invalid length. [ 1281.130500][ T6847] : left promiscuous mode [ 1281.939608][ T6917] pimreg: tun_chr_ioctl cmd 2147767521 [ 1284.440456][ T7043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21734'. [ 1284.459546][ T7043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21734'. [ 1284.947290][ T7065] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1284.953384][ T7065] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1284.960203][ T7065] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1284.968485][ T7065] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1284.974950][ T7065] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1285.649827][ T29] audit: type=1326 audit(1775955170.836:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.4.21757" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x0 [ 1285.921399][ T7105] netlink: 'syz.2.21760': attribute type 1 has an invalid length. [ 1285.976941][ T7105] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1286.368163][ T7159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21770'. [ 1286.717430][ T7173] sock: sock_timestamping_bind_phc: sock not bind to device [ 1286.944760][T24641] Bluetooth: hci0: command 0x0406 tx timeout [ 1287.025426][T24641] Bluetooth: hci1: command 0x0c1a tx timeout [ 1287.025466][ T1838] Bluetooth: hci3: command 0x0406 tx timeout [ 1287.031661][T31391] Bluetooth: hci2: command 0x0406 tx timeout [ 1287.038063][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 1289.073729][ T7287] batadv_slave_0: entered promiscuous mode [ 1289.091977][ T7286] batadv_slave_0: left promiscuous mode [ 1289.244602][ T24] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1289.418407][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1289.432543][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1289.445362][ T24] usb 3-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 1289.454988][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.473879][ T24] usb 3-1: config 0 descriptor?? [ 1289.858265][ T7325] [ 1289.860654][ T7325] ===================================================== [ 1289.867608][ T7325] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1289.875073][ T7325] syzkaller #0 Tainted: G L [ 1289.881159][ T7325] ----------------------------------------------------- [ 1289.888113][ T7325] syz.0.21821/7325 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1289.895848][ T7325] ffff8880252afb20 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 1289.904491][ T7325] [ 1289.904491][ T7325] and this task is already holding: [ 1289.911865][ T7325] ffff888059055be8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1289.920590][ T7325] which would create a new lock dependency: [ 1289.926855][ T7325] (&new->fa_lock){....}-{3:3} -> (&f_owner->lock){....}-{3:3} [ 1289.934442][ T7325] [ 1289.934442][ T7325] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1289.943913][ T7325] (&dev->event_lock#2){..-.}-{3:3} [ 1289.943945][ T7325] [ 1289.943945][ T7325] ... which became SOFTIRQ-irq-safe at: [ 1289.956842][ T7325] lock_acquire+0xf0/0x2e0 [ 1289.961358][ T7325] _raw_spin_lock_irqsave+0x40/0x60 [ 1289.966648][ T7325] input_inject_event+0xa5/0x340 [ 1289.971683][ T7325] led_trigger_event+0x138/0x210 [ 1289.976724][ T7325] kbd_bh+0x1f3/0x300 [ 1289.980805][ T7325] tasklet_action_common+0x2da/0x4b0 [ 1289.986190][ T7325] handle_softirqs+0x22a/0x870 [ 1289.991049][ T7325] run_ksoftirqd+0x36/0x60 [ 1289.995556][ T7325] smpboot_thread_fn+0x541/0xa50 [ 1290.000593][ T7325] kthread+0x388/0x470 [ 1290.004749][ T7325] ret_from_fork+0x51e/0xb90 [ 1290.009446][ T7325] ret_from_fork_asm+0x1a/0x30 [ 1290.014309][ T7325] [ 1290.014309][ T7325] to a SOFTIRQ-irq-unsafe lock: [ 1290.021325][ T7325] (tasklist_lock){.+.+}-{3:3} [ 1290.021353][ T7325] [ 1290.021353][ T7325] ... which became SOFTIRQ-irq-unsafe at: [ 1290.034096][ T7325] ... [ 1290.034104][ T7325] lock_acquire+0xf0/0x2e0 [ 1290.041208][ T7325] _raw_read_lock+0x36/0x50 [ 1290.045806][ T7325] __do_wait+0xde/0x740 [ 1290.050052][ T7325] do_wait+0x1e7/0x540 [ 1290.054236][ T7325] kernel_wait+0xd6/0x1c0 [ 1290.058678][ T7325] call_usermodehelper_exec_work+0xbe/0x230 [ 1290.064669][ T7325] process_scheduled_works+0xb6e/0x18c0 [ 1290.070309][ T7325] worker_thread+0xa53/0xfc0 [ 1290.075018][ T7325] kthread+0x388/0x470 [ 1290.079177][ T7325] ret_from_fork+0x51e/0xb90 [ 1290.083865][ T7325] ret_from_fork_asm+0x1a/0x30 [ 1290.088729][ T7325] [ 1290.088729][ T7325] other info that might help us debug this: [ 1290.088729][ T7325] [ 1290.098964][ T7325] Chain exists of: [ 1290.098964][ T7325] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 1290.098964][ T7325] [ 1290.111930][ T7325] Possible interrupt unsafe locking scenario: [ 1290.111930][ T7325] [ 1290.120263][ T7325] CPU0 CPU1 [ 1290.125649][ T7325] ---- ---- [ 1290.131022][ T7325] lock(tasklist_lock); [ 1290.135719][ T7325] local_irq_disable(); [ 1290.142486][ T7325] lock(&dev->event_lock#2); [ 1290.149699][ T7325] lock(&new->fa_lock); [ 1290.156483][ T7325] [ 1290.159993][ T7325] lock(&dev->event_lock#2); [ 1290.164870][ T7325] [ 1290.164870][ T7325] *** DEADLOCK *** [ 1290.164870][ T7325] [ 1290.173029][ T7325] 4 locks held by syz.0.21821/7325: [ 1290.178341][ T7325] #0: ffffffff8e900f70 (file_rwsem){++++}-{0:0}, at: __break_lease+0x4de/0x1e80 [ 1290.187512][ T7325] #1: ffff88803451b908 (&ctx->flc_lock){+.+.}-{3:3}, at: __break_lease+0x4e8/0x1e80 [ 1290.197010][ T7325] #2: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1290.206076][ T7325] #3: ffff888059055be8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1290.215221][ T7325] [ 1290.215221][ T7325] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1290.225627][ T7325] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1290.231460][ T7325] IN-SOFTIRQ-W at: [ 1290.235618][ T7325] lock_acquire+0xf0/0x2e0 [ 1290.242041][ T7325] _raw_spin_lock_irqsave+0x40/0x60 [ 1290.249238][ T7325] input_inject_event+0xa5/0x340 [ 1290.256184][ T7325] led_trigger_event+0x138/0x210 [ 1290.263214][ T7325] kbd_bh+0x1f3/0x300 [ 1290.269201][ T7325] tasklet_action_common+0x2da/0x4b0 [ 1290.276495][ T7325] handle_softirqs+0x22a/0x870 [ 1290.283261][ T7325] run_ksoftirqd+0x36/0x60 [ 1290.289682][ T7325] smpboot_thread_fn+0x541/0xa50 [ 1290.296632][ T7325] kthread+0x388/0x470 [ 1290.302700][ T7325] ret_from_fork+0x51e/0xb90 [ 1290.309302][ T7325] ret_from_fork_asm+0x1a/0x30 [ 1290.316097][ T7325] INITIAL USE at: [ 1290.320180][ T7325] lock_acquire+0xf0/0x2e0 [ 1290.326602][ T7325] _raw_spin_lock_irqsave+0x40/0x60 [ 1290.333744][ T7325] input_inject_event+0xa5/0x340 [ 1290.340613][ T7325] kbd_led_trigger_activate+0xbc/0x100 [ 1290.348271][ T7325] led_trigger_set+0x535/0x960 [ 1290.354956][ T7325] led_trigger_set_default+0x260/0x2a0 [ 1290.362430][ T7325] led_classdev_register_ext+0x787/0x9c0 [ 1290.369973][ T7325] input_leds_connect+0x517/0x790 [ 1290.377187][ T7325] input_register_device+0xd00/0x1160 [ 1290.384504][ T7325] atkbd_connect+0x731/0xa50 [ 1290.391030][ T7325] serio_driver_probe+0x82/0xd0 [ 1290.397890][ T7325] really_probe+0x267/0xaf0 [ 1290.404357][ T7325] __driver_probe_device+0x18c/0x320 [ 1290.411571][ T7325] driver_probe_device+0x4f/0x240 [ 1290.418517][ T7325] __driver_attach+0x34c/0x640 [ 1290.425201][ T7325] bus_for_each_dev+0x23b/0x2c0 [ 1290.432053][ T7325] serio_handle_event+0x20a/0xdd0 [ 1290.438996][ T7325] process_scheduled_works+0xb6e/0x18c0 [ 1290.446465][ T7325] worker_thread+0xa53/0xfc0 [ 1290.452975][ T7325] kthread+0x388/0x470 [ 1290.458962][ T7325] ret_from_fork+0x51e/0xb90 [ 1290.465473][ T7325] ret_from_fork_asm+0x1a/0x30 [ 1290.472161][ T7325] } [ 1290.474839][ T7325] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 1290.484101][ T7325] -> (&client->buffer_lock){....}-{3:3} { [ 1290.489931][ T7325] INITIAL USE at: [ 1290.493914][ T7325] lock_acquire+0xf0/0x2e0 [ 1290.500081][ T7325] _raw_spin_lock+0x2e/0x40 [ 1290.506415][ T7325] evdev_handle_get_val+0x70/0x9f0 [ 1290.513266][ T7325] evdev_ioctl_handler+0x127b/0x1fe0 [ 1290.520296][ T7325] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1290.527521][ T7325] __do_fast_syscall_32+0x20d/0x640 [ 1290.534472][ T7325] do_fast_syscall_32+0x33/0x70 [ 1290.541080][ T7325] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1290.549155][ T7325] } [ 1290.551748][ T7325] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 1290.559996][ T7325] ... acquired at: [ 1290.563886][ T7325] _raw_spin_lock+0x2e/0x40 [ 1290.568566][ T7325] evdev_handle_get_val+0x70/0x9f0 [ 1290.573862][ T7325] evdev_ioctl_handler+0x127b/0x1fe0 [ 1290.579323][ T7325] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1290.584968][ T7325] __do_fast_syscall_32+0x20d/0x640 [ 1290.590349][ T7325] do_fast_syscall_32+0x33/0x70 [ 1290.595383][ T7325] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1290.601890][ T7325] [ 1290.604216][ T7325] -> (&new->fa_lock){....}-{3:3} { [ 1290.609356][ T7325] INITIAL USE at: [ 1290.613273][ T7325] lock_acquire+0xf0/0x2e0 [ 1290.619262][ T7325] _raw_write_lock_irq+0x3d/0x50 [ 1290.625778][ T7325] fasync_remove_entry+0xf1/0x1c0 [ 1290.632373][ T7325] __fput+0x8a5/0xa70 [ 1290.638015][ T7325] task_work_run+0x1d9/0x270 [ 1290.644353][ T7325] exit_to_user_mode_loop+0xed/0x480 [ 1290.651239][ T7325] __do_fast_syscall_32+0x415/0x640 [ 1290.658020][ T7325] do_fast_syscall_32+0x33/0x70 [ 1290.664530][ T7325] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1290.672431][ T7325] INITIAL READ USE at: [ 1290.676764][ T7325] lock_acquire+0xf0/0x2e0 [ 1290.683181][ T7325] _raw_read_lock_irqsave+0x48/0x60 [ 1290.690389][ T7325] kill_fasync+0x199/0x4d0 [ 1290.696807][ T7325] __se_sys_vmsplice+0x100d/0x1490 [ 1290.704003][ T7325] __do_fast_syscall_32+0x20d/0x640 [ 1290.711303][ T7325] do_fast_syscall_32+0x33/0x70 [ 1290.718162][ T7325] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1290.726498][ T7325] } [ 1290.728996][ T7325] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1290.737675][ T7325] ... acquired at: [ 1290.741479][ T7325] _raw_read_lock_irqsave+0x48/0x60 [ 1290.746857][ T7325] kill_fasync+0x199/0x4d0 [ 1290.751452][ T7325] evdev_pass_values+0x627/0xbd0 [ 1290.756569][ T7325] evdev_events+0x1e6/0x340 [ 1290.761249][ T7325] input_pass_values+0x288/0x890 [ 1290.766365][ T7325] input_event_dispose+0x330/0x6b0 [ 1290.771745][ T7325] input_inject_event+0x1dd/0x340 [ 1290.776957][ T7325] evdev_write+0x325/0x4c0 [ 1290.781570][ T7325] vfs_write+0x29a/0xb90 [ 1290.785999][ T7325] ksys_write+0x150/0x270 [ 1290.790515][ T7325] __do_fast_syscall_32+0x20d/0x640 [ 1290.795900][ T7325] do_fast_syscall_32+0x33/0x70 [ 1290.800942][ T7325] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1290.807452][ T7325] [ 1290.809780][ T7325] [ 1290.809780][ T7325] the dependencies between the lock to be acquired [ 1290.809789][ T7325] and SOFTIRQ-irq-unsafe lock: [ 1290.823342][ T7325] -> (tasklist_lock){.+.+}-{3:3} { [ 1290.828563][ T7325] HARDIRQ-ON-R at: [ 1290.832638][ T7325] lock_acquire+0xf0/0x2e0 [ 1290.838889][ T7325] _raw_read_lock+0x36/0x50 [ 1290.845239][ T7325] __do_wait+0xde/0x740 [ 1290.851224][ T7325] do_wait+0x1e7/0x540 [ 1290.857156][ T7325] kernel_wait+0xd6/0x1c0 [ 1290.863314][ T7325] call_usermodehelper_exec_work+0xbe/0x230 [ 1290.871302][ T7325] process_scheduled_works+0xb6e/0x18c0 [ 1290.878679][ T7325] worker_thread+0xa53/0xfc0 [ 1290.885110][ T7325] kthread+0x388/0x470 [ 1290.891008][ T7325] ret_from_fork+0x51e/0xb90 [ 1290.897429][ T7325] ret_from_fork_asm+0x1a/0x30 [ 1290.904025][ T7325] SOFTIRQ-ON-R at: [ 1290.908105][ T7325] lock_acquire+0xf0/0x2e0 [ 1290.914437][ T7325] _raw_read_lock+0x36/0x50 [ 1290.920856][ T7325] __do_wait+0xde/0x740 [ 1290.926836][ T7325] do_wait+0x1e7/0x540 [ 1290.932732][ T7325] kernel_wait+0xd6/0x1c0 [ 1290.938885][ T7325] call_usermodehelper_exec_work+0xbe/0x230 [ 1290.946612][ T7325] process_scheduled_works+0xb6e/0x18c0 [ 1290.954452][ T7325] worker_thread+0xa53/0xfc0 [ 1290.961022][ T7325] kthread+0x388/0x470 [ 1290.966933][ T7325] ret_from_fork+0x51e/0xb90 [ 1290.973372][ T7325] ret_from_fork_asm+0x1a/0x30 [ 1290.979983][ T7325] INITIAL USE at: [ 1290.983976][ T7325] lock_acquire+0xf0/0x2e0 [ 1290.990139][ T7325] _raw_write_lock_irq+0x3d/0x50 [ 1290.996822][ T7325] copy_process+0x247a/0x3cd0 [ 1291.003248][ T7325] kernel_clone+0x248/0x8e0 [ 1291.009499][ T7325] user_mode_thread+0x110/0x180 [ 1291.016196][ T7325] rest_init+0x23/0x300 [ 1291.022117][ T7325] start_kernel+0x385/0x3d0 [ 1291.028373][ T7325] x86_64_start_reservations+0x24/0x30 [ 1291.035689][ T7325] x86_64_start_kernel+0x143/0x1c0 [ 1291.042561][ T7325] common_startup_64+0x13e/0x147 [ 1291.049253][ T7325] INITIAL READ USE at: [ 1291.053691][ T7325] lock_acquire+0xf0/0x2e0 [ 1291.060303][ T7325] _raw_read_lock+0x36/0x50 [ 1291.066992][ T7325] __do_wait+0xde/0x740 [ 1291.073363][ T7325] do_wait+0x1e7/0x540 [ 1291.079621][ T7325] kernel_wait+0xd6/0x1c0 [ 1291.086146][ T7325] call_usermodehelper_exec_work+0xbe/0x230 [ 1291.094237][ T7325] process_scheduled_works+0xb6e/0x18c0 [ 1291.101978][ T7325] worker_thread+0xa53/0xfc0 [ 1291.108758][ T7325] kthread+0x388/0x470 [ 1291.115004][ T7325] ret_from_fork+0x51e/0xb90 [ 1291.121781][ T7325] ret_from_fork_asm+0x1a/0x30 [ 1291.128726][ T7325] } [ 1291.131346][ T7325] ... key at: [] tasklist_lock+0x18/0x40 [ 1291.139260][ T7325] ... acquired at: [ 1291.143164][ T7325] _raw_read_lock+0x36/0x50 [ 1291.147864][ T7325] send_sigurg+0x12b/0x420 [ 1291.152483][ T7325] sk_send_sigurg+0x6c/0x2e0 [ 1291.157265][ T7325] queue_oob+0x42c/0x4f0 [ 1291.161695][ T7325] unix_stream_sendmsg+0xcb1/0xe80 [ 1291.167019][ T7325] ____sys_sendmsg+0x972/0x9f0 [ 1291.171974][ T7325] ___sys_sendmsg+0x2a5/0x360 [ 1291.176838][ T7325] __sys_sendmsg+0x183/0x260 [ 1291.181624][ T7325] __do_fast_syscall_32+0x20d/0x640 [ 1291.187004][ T7325] do_fast_syscall_32+0x33/0x70 [ 1291.192040][ T7325] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1291.198550][ T7325] [ 1291.200891][ T7325] -> (&f_owner->lock){....}-{3:3} { [ 1291.206212][ T7325] INITIAL USE at: [ 1291.210136][ T7325] lock_acquire+0xf0/0x2e0 [ 1291.216138][ T7325] _raw_write_lock_irq+0x3d/0x50 [ 1291.222795][ T7325] __f_setown+0x67/0x370 [ 1291.228607][ T7325] do_fcntl+0x171c/0x1a20 [ 1291.235460][ T7325] do_compat_fcntl64+0x51e/0x7e0 [ 1291.241971][ T7325] __do_fast_syscall_32+0x20d/0x640 [ 1291.248742][ T7325] do_fast_syscall_32+0x33/0x70 [ 1291.255179][ T7325] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1291.263267][ T7325] INITIAL READ USE at: [ 1291.267601][ T7325] lock_acquire+0xf0/0x2e0 [ 1291.274020][ T7325] _raw_read_lock_irq+0x45/0x60 [ 1291.280876][ T7325] do_fcntl+0x30f/0x1a20 [ 1291.287207][ T7325] do_compat_fcntl64+0x51e/0x7e0 [ 1291.294148][ T7325] __do_fast_syscall_32+0x20d/0x640 [ 1291.301353][ T7325] do_fast_syscall_32+0x33/0x70 [ 1291.308209][ T7325] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1291.316629][ T7325] } [ 1291.319218][ T7325] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1291.328075][ T7325] ... acquired at: [ 1291.331974][ T7325] _raw_read_lock_irqsave+0x48/0x60 [ 1291.337366][ T7325] send_sigio+0x38/0x370 [ 1291.341839][ T7325] kill_fasync+0x24d/0x4d0 [ 1291.346475][ T7325] lease_break_callback+0x26/0x30 [ 1291.351689][ T7325] __break_lease+0x81c/0x1e80 [ 1291.356558][ T7325] do_dentry_open+0x1010/0x14e0 [ 1291.361599][ T7325] vfs_open+0x3b/0x340 [ 1291.365851][ T7325] path_openat+0x2e08/0x3860 [ 1291.370622][ T7325] do_file_open+0x23e/0x4a0 [ 1291.375305][ T7325] do_sys_openat2+0x113/0x200 [ 1291.380161][ T7325] __ia32_compat_sys_open+0x117/0x140 [ 1291.385805][ T7325] __do_fast_syscall_32+0x20d/0x640 [ 1291.391211][ T7325] do_fast_syscall_32+0x33/0x70 [ 1291.396250][ T7325] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1291.402941][ T7325] [ 1291.405271][ T7325] [ 1291.405271][ T7325] stack backtrace: [ 1291.411252][ T7325] CPU: 1 UID: 0 PID: 7325 Comm: syz.0.21821 Tainted: G L syzkaller #0 PREEMPT(full) [ 1291.411280][ T7325] Tainted: [L]=SOFTLOCKUP [ 1291.411286][ T7325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1291.411296][ T7325] Call Trace: [ 1291.411304][ T7325] [ 1291.411311][ T7325] dump_stack_lvl+0xe8/0x150 [ 1291.411332][ T7325] __lock_acquire+0x2a94/0x2cf0 [ 1291.411359][ T7325] lock_acquire+0xf0/0x2e0 [ 1291.411376][ T7325] ? send_sigio+0x38/0x370 [ 1291.411393][ T7325] ? lock_acquire+0xf0/0x2e0 [ 1291.411411][ T7325] _raw_read_lock_irqsave+0x48/0x60 [ 1291.411429][ T7325] ? send_sigio+0x38/0x370 [ 1291.411445][ T7325] send_sigio+0x38/0x370 [ 1291.411461][ T7325] kill_fasync+0x24d/0x4d0 [ 1291.411477][ T7325] ? kill_fasync+0x53/0x4d0 [ 1291.411493][ T7325] lease_break_callback+0x26/0x30 [ 1291.411510][ T7325] __break_lease+0x81c/0x1e80 [ 1291.411536][ T7325] ? __pfx___break_lease+0x10/0x10 [ 1291.411558][ T7325] ? __pfx_apparmor_file_open+0x10/0x10 [ 1291.411577][ T7325] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1291.411595][ T7325] do_dentry_open+0x1010/0x14e0 [ 1291.411620][ T7325] vfs_open+0x3b/0x340 [ 1291.411638][ T7325] ? path_openat+0x2df0/0x3860 [ 1291.411655][ T7325] path_openat+0x2e08/0x3860 [ 1291.411674][ T7325] ? __pfx_stack_trace_save+0x10/0x10 [ 1291.411691][ T7325] ? stack_depot_save_flags+0x33/0x810 [ 1291.411717][ T7325] ? __pfx_path_openat+0x10/0x10 [ 1291.411732][ T7325] ? __ia32_compat_sys_open+0x117/0x140 [ 1291.411754][ T7325] ? __do_fast_syscall_32+0x20d/0x640 [ 1291.411773][ T7325] ? do_fast_syscall_32+0x33/0x70 [ 1291.411793][ T7325] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1291.411813][ T7325] ? __lock_acquire+0x6b5/0x2cf0 [ 1291.411832][ T7325] do_file_open+0x23e/0x4a0 [ 1291.411850][ T7325] ? __pfx_do_file_open+0x10/0x10 [ 1291.411871][ T7325] ? _raw_spin_unlock+0x28/0x50 [ 1291.411887][ T7325] ? alloc_fd+0x64b/0x6c0 [ 1291.411910][ T7325] do_sys_openat2+0x113/0x200 [ 1291.411931][ T7325] ? __pfx_do_sys_openat2+0x10/0x10 [ 1291.411952][ T7325] ? __ia32_compat_sys_open+0xb3/0x140 [ 1291.411975][ T7325] __ia32_compat_sys_open+0x117/0x140 [ 1291.411998][ T7325] __do_fast_syscall_32+0x20d/0x640 [ 1291.412019][ T7325] ? lockdep_hardirqs_on+0x7a/0x110 [ 1291.412037][ T7325] ? do_fast_syscall_32+0x33/0x70 [ 1291.412056][ T7325] ? irqentry_exit+0x10e/0x620 [ 1291.412075][ T7325] ? trace_irq_disable+0x3b/0x150 [ 1291.412089][ T7325] do_fast_syscall_32+0x33/0x70 [ 1291.412109][ T7325] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1291.412126][ T7325] RIP: 0023:0xf7f98f6c [ 1291.412140][ T7325] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1291.412153][ T7325] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000005 [ 1291.412171][ T7325] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000180043 [ 1291.412182][ T7325] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1291.412191][ T7325] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1291.412200][ T7325] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1291.412209][ T7325] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1291.412223][ T7325] [ 1291.772063][ T24] asus 0003:0B05:1ABE.00BC: unknown main item tag 0x0 [ 1291.780516][ T24] asus 0003:0B05:1ABE.00BC: unknown main item tag 0x0 [ 1291.787353][ T24] asus 0003:0B05:1ABE.00BC: unknown main item tag 0x0 [ 1291.794154][ T24] asus 0003:0B05:1ABE.00BC: unknown main item tag 0x0 [ 1291.801067][ T24] asus 0003:0B05:1ABE.00BC: unknown main item tag 0x0 [ 1291.807902][ T24] asus 0003:0B05:1ABE.00BC: unknown main item tag 0x0 [ 1291.814814][ T24] asus 0003:0B05:1ABE.00BC: unknown main item tag 0x0 [ 1291.821608][ T24] asus 0003:0B05:1ABE.00BC: unknown main item tag 0x0 [ 1291.828529][ T24] asus 0003:0B05:1ABE.00BC: unknown main item tag 0x0 [ 1291.835660][ T24] asus 0003:0B05:1ABE.00BC: unknown main item tag 0x0 [ 1291.854152][ T24] asus 0003:0B05:1ABE.00BC: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.2-1/input0 [ 1291.982752][ T24] usb 3-1: USB disconnect, device number 52