last executing test programs: 2.793009844s ago: executing program 4 (id=32227): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @empty, 0x6}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000003c0)=0x2, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 2.549339928s ago: executing program 4 (id=32231): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xe}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xffffffffffffffff}}]}}}]}, 0x8c}}, 0x40) 2.194407013s ago: executing program 4 (id=32237): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x16, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={0x0}}, 0x0) 2.053007389s ago: executing program 4 (id=32240): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) 1.634178319s ago: executing program 2 (id=32245): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) set_mempolicy(0x4005, &(0x7f0000000080)=0x3, 0x2) 1.553610173s ago: executing program 3 (id=32248): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) 1.398013024s ago: executing program 1 (id=32249): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x12, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 1.383502703s ago: executing program 3 (id=32250): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r0) lstat(&(0x7f0000001780)='./file0\x00', 0x0) 1.327231486s ago: executing program 4 (id=32251): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xb0a0, 0x1, 0x3}, 0x15, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r1, 0x402c5828, 0x0) 1.185457149s ago: executing program 4 (id=32252): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096010006010003000000002a90a02700000000b3813e"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.053218926s ago: executing program 1 (id=32254): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002d00)=[{{&(0x7f0000001080)={0xa, 0x4e23, 0xfffffffe, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}, {{&(0x7f0000001100)={0xa, 0x4e20, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff7}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000001140)="a5", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000001200)={0x0, @in6={{0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}, [0xffffffffffffffff, 0x8, 0x10000000, 0x1, 0x2, 0x400, 0x100000001, 0x94, 0x7, 0x4, 0xffff, 0x4, 0x4, 0x0, 0x7]}, &(0x7f0000000040)=0xfc) 940.893331ms ago: executing program 1 (id=32255): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[], 0x8) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000003280)=""/85, &(0x7f00000002c0)=0x55) 912.299657ms ago: executing program 0 (id=32256): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)=0x4) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x3) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000580)='\x00!G', 0x3}], 0x1, 0x803, 0x2) 840.046973ms ago: executing program 1 (id=32257): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x1000001, 0x6100) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x2000000000001]}}) 689.635136ms ago: executing program 0 (id=32258): write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x5, 0x3, 0x0, 0xfe, @time, {}, {0x0, 0x1}, @result={0x0, 0x316}}], 0x1c) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r1, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x0) 679.918895ms ago: executing program 2 (id=32259): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000f0f000000000100000e00"}}}]}, 0x48}}, 0x0) 642.232748ms ago: executing program 1 (id=32260): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x203a2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000200)=0x12) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x4003, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x0, 0xe, 0x0, 0x80008071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x1, 0x80, 0x0, 0x2005, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x3, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x1, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x800001, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x0, 0x8, 0xfffffffe, 0x100, 0x8d2, 0xa, 0x5, 0x7fff, 0x5, 0x9, 0xb, 0x6, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x8, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12f, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x3, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x5, 0x16, 0xffffffff, 0x80000000, 0x3, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x0, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0xffffffff, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff343e, 0x1000]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 463.074094ms ago: executing program 1 (id=32261): r0 = epoll_create1(0x80000) r1 = syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x40000) epoll_wait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x7922) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) 429.762607ms ago: executing program 2 (id=32262): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r1, &(0x7f00000000c0)={0x0, 0xc, 0x0, @thr={0x0, 0x0}}) close_range(r0, 0xffffffffffffffff, 0x0) 428.091322ms ago: executing program 3 (id=32263): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}}, 0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000002140)=0x0) io_submit(r1, 0x1, &(0x7f0000002340)=[&(0x7f0000002180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 378.754304ms ago: executing program 0 (id=32264): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r0, 0x40044591, 0x0) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) 303.69911ms ago: executing program 2 (id=32265): r0 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003880), 0x63}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 290.677344ms ago: executing program 0 (id=32266): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d"], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 231.446206ms ago: executing program 3 (id=32267): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e23, 0x100, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}], 0x3c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}], 0x10) 207.969083ms ago: executing program 2 (id=32268): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd40}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_VERSION={0x5, 0x6, 0xd}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) 145.195711ms ago: executing program 3 (id=32269): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x20000014}) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x400) 138.845247ms ago: executing program 0 (id=32270): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) fcntl$setsig(r0, 0xa, 0x21) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) 54.058198ms ago: executing program 2 (id=32271): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_bridge\x00'}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x5}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) 21.313947ms ago: executing program 3 (id=32272): connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0x12}, 0xfffffffc}, 0x1c) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) 0s ago: executing program 0 (id=32273): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000f0f000000000100000e00"}}}]}, 0x48}}, 0x0) kernel console output (not intermixed with test programs): pe 11 has an invalid length. [ 1775.687768][T10895] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1775.862785][T10895] usb 3-1: Using ep0 maxpacket: 8 [ 1775.873477][T10895] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1775.883938][T10895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1775.895205][T10895] usb 3-1: Product: syz [ 1775.899701][T10895] usb 3-1: Manufacturer: syz [ 1775.904314][T10895] usb 3-1: SerialNumber: syz [ 1775.942161][T10895] usb 3-1: config 0 descriptor?? [ 1775.960766][T10895] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1776.444396][ T6043] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1776.452394][ T2257] random: crng reseeded on system resumption [ 1776.567383][ T1211] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 1776.579010][T10895] radio-usb-si4713 3-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 1776.589247][T10895] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1776.605412][T10895] usb 3-1: USB disconnect, device number 27 [ 1776.617969][ T6043] usb 2-1: Using ep0 maxpacket: 8 [ 1776.636445][ T6043] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1776.653094][ T6043] usb 2-1: config 0 has no interface number 0 [ 1776.677421][ T6043] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1776.697433][ T6043] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1776.723128][ T6043] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1776.736537][ T1211] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1776.738403][ T6043] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1776.762576][ T6043] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1776.769142][ T1211] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1776.773237][ T6043] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1776.791898][ T1211] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1776.792834][ T6043] usb 2-1: config 0 descriptor?? [ 1776.822590][ T1211] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1776.832862][ T6043] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1776.852960][ T1211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1776.884154][ T1211] usb 4-1: config 0 descriptor?? [ 1777.067109][ T2243] ldusb 2-1:0.55: Write buffer overflow, 448 bytes dropped [ 1777.088119][T30132] usb 2-1: USB disconnect, device number 38 [ 1777.121767][T30132] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1777.360388][ T1211] hid-steam 0003:28DE:1102.00A2: unknown main item tag 0x0 [ 1777.382016][ T1211] hid-steam 0003:28DE:1102.00A2: unknown main item tag 0x0 [ 1777.392382][ T1211] hid-steam 0003:28DE:1102.00A2: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 1777.417972][ T2301] loop6: detected capacity change from 0 to 524288000 [ 1777.468145][ T1211] hid-steam 0003:28DE:1102.00A2: Steam Controller 'XXXXXXXXXX' connected [ 1777.514193][ T1211] input: Steam Controller as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1102.00A2/input/input210 [ 1777.635603][ T1211] hid-steam 0003:28DE:1102.00A3: unknown main item tag 0x0 [ 1777.687387][ T1211] hid-steam 0003:28DE:1102.00A3: unknown main item tag 0x0 [ 1777.757992][ T1211] hid-steam 0003:28DE:1102.00A3: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 1777.845304][ T1211] usb 4-1: USB disconnect, device number 28 [ 1777.957373][ T6043] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1777.986971][ T2318] fido_id[2318]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1778.008096][ T1211] hid-steam 0003:28DE:1102.00A2: Steam Controller 'XXXXXXXXXX' disconnected [ 1778.158849][ T6043] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1778.168770][ T6043] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1778.186398][ T6043] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1778.217282][ T6043] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1778.267611][ T6043] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1778.291587][ T6043] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1778.314341][ T6043] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1778.326903][ T6043] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1778.336210][ T6043] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1778.361032][ T6043] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1778.384753][ T6043] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1778.394058][ T6043] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1778.419235][ T6043] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1778.435464][ T6043] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1778.445218][ T6043] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1778.478841][ T6043] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1778.503914][ T6043] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1778.525412][ T6043] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1778.553364][ T6043] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1778.604471][ T6043] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1778.624413][ T6043] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1778.654171][ T6043] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1778.668778][ T6043] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1778.691491][ T6043] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1778.756017][ T6043] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1778.807703][ T6043] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1778.827785][ T6043] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1778.836189][ T6043] usb 5-1: Product: syz [ 1778.853979][ T6043] usb 5-1: Manufacturer: syz [ 1778.864959][ T6043] usb 5-1: SerialNumber: syz [ 1778.878897][ T6043] usb 5-1: config 0 descriptor?? [ 1778.911520][ T6043] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 1779.271616][ T1211] usb 5-1: USB disconnect, device number 42 [ 1779.299759][ T2387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29862'. [ 1779.315434][ T1211] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 1779.485678][ T2408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1779.976866][ T30] audit: type=1326 audit(1752364211.158:7440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2440 comm="syz.4.29881" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1780.068514][ T30] audit: type=1326 audit(1752364211.158:7441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2440 comm="syz.4.29881" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1780.099590][ T2449] netlink: 32 bytes leftover after parsing attributes in process `syz.0.29883'. [ 1780.104760][ T30] audit: type=1326 audit(1752364211.188:7442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2440 comm="syz.4.29881" exe="/root/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1780.142703][ T30] audit: type=1326 audit(1752364211.198:7443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2440 comm="syz.4.29881" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1780.195483][ T30] audit: type=1326 audit(1752364211.198:7444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2440 comm="syz.4.29881" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1780.218116][ T30] audit: type=1326 audit(1752364211.198:7445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2440 comm="syz.4.29881" exe="/root/syz-executor" sig=0 arch=40000003 syscall=145 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1780.256003][ T30] audit: type=1326 audit(1752364211.198:7446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2440 comm="syz.4.29881" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1780.346018][ T30] audit: type=1326 audit(1752364211.198:7447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2440 comm="syz.4.29881" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1780.374903][ T30] audit: type=1326 audit(1752364211.238:7448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2443 comm="syz.2.29882" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1780.428328][ T30] audit: type=1326 audit(1752364211.238:7449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2443 comm="syz.2.29882" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1780.847323][ T6239] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1780.875514][ T2499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.29898'. [ 1781.012561][ T6239] usb 4-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1781.022264][ T6239] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1781.050266][ T6239] usb 4-1: Product: syz [ 1781.057705][ T6239] usb 4-1: Manufacturer: syz [ 1781.066179][ T2507] netlink: 'syz.4.29903': attribute type 30 has an invalid length. [ 1781.066822][ T6239] usb 4-1: SerialNumber: syz [ 1781.100356][ T6239] usb 4-1: config 0 descriptor?? [ 1781.113128][ T6239] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 1781.428191][T30132] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1781.521701][ T6239] input: sonixb as /devices/platform/dummy_hcd.3/usb4/4-1/input/input211 [ 1781.599452][T30132] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1781.620914][T30132] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1781.651376][T30132] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1781.677428][T30132] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.738249][T30132] usb 5-1: config 0 descriptor?? [ 1781.747875][ T1211] usb 4-1: USB disconnect, device number 29 [ 1782.018210][ T2568] program syz.0.29914 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1782.079413][ T2569] program syz.0.29914 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1782.166796][T30132] elan 0003:04F3:0755.00A4: unbalanced delimiter at end of report description [ 1782.191285][T30132] elan 0003:04F3:0755.00A4: Hid Parse failed [ 1782.203605][T30132] elan 0003:04F3:0755.00A4: probe with driver elan failed with error -22 [ 1782.373368][ T1211] usb 5-1: USB disconnect, device number 43 [ 1782.534922][ T2610] tipc: Enabled bearer , priority 20 [ 1782.567522][T30132] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 1782.739743][T30132] usb 2-1: config 0 has no interfaces? [ 1782.749096][T30132] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1782.773384][T30132] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1782.784158][T30132] usb 2-1: Product: syz [ 1782.788967][T30132] usb 2-1: Manufacturer: syz [ 1782.793591][T30132] usb 2-1: SerialNumber: syz [ 1782.828078][T30132] usb 2-1: config 0 descriptor?? [ 1783.096347][ T6043] usb 2-1: USB disconnect, device number 39 [ 1783.647631][T30132] tipc: Node number set to 3758096385 [ 1784.590057][ T2704] usb usb8: usbfs: process 2704 (syz.0.29953) did not claim interface 0 before use [ 1785.365974][ T2747] sg_write: data in/out 3145852/1 bytes for SCSI command 0x1c-- guessing data in; [ 1785.365974][ T2747] program syz.3.29968 not setting count and/or reply_len properly [ 1785.383122][ C0] vkms_vblank_simulate: vblank timer overrun [ 1785.830096][ T2783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.29979'. [ 1786.917396][T30132] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 1787.051155][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1787.051173][ T30] audit: type=1400 audit(1752364218.238:7453): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A2F2F2605 pid=2866 comm="syz.2.30008" [ 1787.079202][T30132] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1787.097944][T30132] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1787.115992][T30132] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1787.131239][T30132] usb 2-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 1787.143852][T30132] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1787.165618][ T2875] netlink: 'syz.2.30010': attribute type 5 has an invalid length. [ 1787.167798][T30132] usb 2-1: config 0 descriptor?? [ 1787.572149][ T30] audit: type=1326 audit(1752364218.748:7454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2894 comm="syz.4.30018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1787.613057][ T30] audit: type=1326 audit(1752364218.748:7455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2894 comm="syz.4.30018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1787.642130][ T30] audit: type=1326 audit(1752364218.798:7456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2894 comm="syz.4.30018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1787.665600][ T30] audit: type=1326 audit(1752364218.798:7457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2894 comm="syz.4.30018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1787.711742][ T30] audit: type=1326 audit(1752364218.798:7458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2894 comm="syz.4.30018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1787.741022][ T30] audit: type=1326 audit(1752364218.818:7459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2894 comm="syz.4.30018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=95 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1787.775923][ T30] audit: type=1326 audit(1752364218.828:7460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2894 comm="syz.4.30018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1787.804285][ T30] audit: type=1326 audit(1752364218.828:7461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2894 comm="syz.4.30018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1787.852344][T30132] usb 2-1: string descriptor 0 read error: -71 [ 1787.876938][T30132] uclogic 0003:5543:3031.00A5: failed retrieving string descriptor #200: -71 [ 1787.899919][T30132] uclogic 0003:5543:3031.00A5: failed retrieving pen parameters: -71 [ 1787.925334][T30132] uclogic 0003:5543:3031.00A5: failed probing pen v2 parameters: -71 [ 1787.936572][T30132] uclogic 0003:5543:3031.00A5: failed probing parameters: -71 [ 1787.952089][T30132] uclogic 0003:5543:3031.00A5: probe with driver uclogic failed with error -71 [ 1787.982249][T30132] usb 2-1: USB disconnect, device number 40 [ 1788.146029][ T2930] tipc: MTU too low for tipc bearer [ 1788.194794][ T2932] netlink: 'syz.3.30028': attribute type 3 has an invalid length. [ 1788.257776][T10895] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1788.412065][T10895] usb 3-1: Using ep0 maxpacket: 16 [ 1788.431675][T10895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1788.449505][T10895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1788.463798][T10895] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 1788.476348][T10895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1788.500250][T10895] usb 3-1: config 0 descriptor?? [ 1788.921632][T10895] playstation 0003:054C:05C4.00A6: report_id 32548 is invalid [ 1788.939832][T10895] playstation 0003:054C:05C4.00A6: item 0 2 1 8 parsing failed [ 1788.957819][T30132] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1788.962867][T10895] playstation 0003:054C:05C4.00A6: Parse failed [ 1788.980757][T10895] playstation 0003:054C:05C4.00A6: probe with driver playstation failed with error -22 [ 1789.138931][ T1211] usb 3-1: USB disconnect, device number 28 [ 1789.147770][T30132] usb 2-1: config 0 interface 0 altsetting 225 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1789.169137][T30132] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1789.176233][T30132] usb 2-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 1789.189496][T30132] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1789.218562][T30132] usb 2-1: config 0 descriptor?? [ 1789.654804][T30132] nti 0003:0757:0A00.00A7: invalid report_size -1903817399 [ 1789.654831][T30132] nti 0003:0757:0A00.00A7: item 0 4 1 7 parsing failed [ 1789.655617][T30132] nti 0003:0757:0A00.00A7: probe with driver nti failed with error -22 [ 1789.697365][ T1211] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1789.857333][ T1211] usb 4-1: Using ep0 maxpacket: 16 [ 1789.867963][ T1211] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1789.870983][T10895] usb 2-1: USB disconnect, device number 41 [ 1789.943744][ T1211] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1789.971490][ T1211] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1789.984409][ T1211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1790.017996][ T1211] usb 4-1: config 0 descriptor?? [ 1790.461282][ T1211] hid-multitouch 0003:1FD2:6007.00A8: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 1790.651082][ T1211] usb 4-1: USB disconnect, device number 30 [ 1791.084902][ T3085] tipc: Enabling of bearer rejected, already enabled [ 1791.187326][ T1211] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1791.339352][ T1211] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1791.363869][ T1211] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1791.388763][ T1211] usb 5-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 1791.405912][ T1211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1791.417710][T10895] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1791.424994][ T1211] usb 5-1: config 0 descriptor?? [ 1791.573416][T10895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1791.589535][T10895] usb 3-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 1791.605228][T10895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1791.635232][T10895] usb 3-1: config 0 descriptor?? [ 1791.762863][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.769404][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.876401][ T1211] sigmamicro 0003:1C4F:0059.00A9: unknown main item tag 0x0 [ 1791.904756][ T1211] sigmamicro 0003:1C4F:0059.00A9: unknown main item tag 0x0 [ 1791.922403][ T1211] sigmamicro 0003:1C4F:0059.00A9: unknown main item tag 0x0 [ 1791.925544][ T30] audit: type=1326 audit(1752364223.108:7462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3123 comm="syz.1.30085" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1791.957373][ T1211] sigmamicro 0003:1C4F:0059.00A9: unknown main item tag 0x0 [ 1791.966061][ T1211] sigmamicro 0003:1C4F:0059.00A9: unknown main item tag 0x0 [ 1791.983775][ T1211] sigmamicro 0003:1C4F:0059.00A9: hidraw0: USB HID v7.ff Device [HID 1c4f:0059] on usb-dummy_hcd.4-1/input0 [ 1792.083962][T10895] cypress 0003:04B4:DE64.00AA: item fetching failed at offset 3/7 [ 1792.123014][T10895] cypress 0003:04B4:DE64.00AA: parse failed [ 1792.136131][ T6043] usb 5-1: USB disconnect, device number 44 [ 1792.144454][T10895] cypress 0003:04B4:DE64.00AA: probe with driver cypress failed with error -22 [ 1792.200416][ T3135] gretap3: entered promiscuous mode [ 1792.222103][ T3135] gretap3: entered allmulticast mode [ 1792.281348][T10895] usb 3-1: USB disconnect, device number 29 [ 1792.745287][ T3188] binder: 3186:3188 ioctl c0306201 800001c0 returned -22 [ 1792.956048][ T3199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30105'. [ 1793.147316][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1793.316156][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1793.338283][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1793.372572][ T9] usb 4-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 1793.404015][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1793.443721][ T9] usb 4-1: config 0 descriptor?? [ 1793.548608][ T3239] netlink: 'syz.1.30118': attribute type 4 has an invalid length. [ 1793.908210][ T9] aquacomputer_d5next 0003:0C70:F014.00AB: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.3-1/input0 [ 1794.099849][ T6043] usb 4-1: USB disconnect, device number 31 [ 1794.337067][ T3249] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1794.358295][ T3249] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1794.371544][ T3249] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1794.380968][ T3249] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1794.957701][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1794.957717][ T30] audit: type=1326 audit(1752364226.138:7469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3311 comm="syz.4.30145" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x0 [ 1794.985309][ C0] vkms_vblank_simulate: vblank timer overrun [ 1795.420792][ T3345] netlink: 16 bytes leftover after parsing attributes in process `syz.3.30157'. [ 1795.433787][ T3345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.30157'. [ 1795.527430][ T6043] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1795.697456][ T6043] usb 2-1: Using ep0 maxpacket: 8 [ 1795.706265][ T6043] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1795.736339][ T6043] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1795.756235][ T6043] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1795.766684][ T6043] usb 2-1: Product: syz [ 1795.778661][ T6043] usb 2-1: Manufacturer: syz [ 1795.783320][ T6043] usb 2-1: SerialNumber: syz [ 1796.008042][ T6043] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 1796.016355][ T6043] usb 2-1: Handspring Visor / Palm OS: port 0, is for Remote File System use [ 1796.033172][ T6043] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1796.042151][ T6043] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1796.216847][ T6043] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 1796.246417][ T6043] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 1796.270731][ T6043] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1796.281555][ T6043] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1796.294327][ T6043] usb 2-1: USB disconnect, device number 42 [ 1796.354961][ T6043] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1796.376189][ T6043] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1796.376830][ T6043] visor 2-1:1.0: device disconnected [ 1796.649555][ T30] audit: type=1326 audit(1752364227.828:7470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3430 comm="syz.4.30178" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1796.649613][ T30] audit: type=1326 audit(1752364227.828:7471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3430 comm="syz.4.30178" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1796.654038][ T30] audit: type=1326 audit(1752364227.838:7472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3430 comm="syz.4.30178" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1796.654802][ T30] audit: type=1326 audit(1752364227.838:7473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3430 comm="syz.4.30178" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1796.655302][ T30] audit: type=1326 audit(1752364227.838:7474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3430 comm="syz.4.30178" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1796.655488][ T30] audit: type=1326 audit(1752364227.838:7475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3430 comm="syz.4.30178" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1796.666092][ T30] audit: type=1326 audit(1752364227.848:7476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3430 comm="syz.4.30178" exe="/root/syz-executor" sig=0 arch=40000003 syscall=333 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1796.666246][ T30] audit: type=1326 audit(1752364227.848:7477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3430 comm="syz.4.30178" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1796.666384][ T30] audit: type=1326 audit(1752364227.848:7478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3430 comm="syz.4.30178" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1796.835496][ C0] vkms_vblank_simulate: vblank timer overrun [ 1797.068971][ C0] vkms_vblank_simulate: vblank timer overrun [ 1797.073002][ T3445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30186'. [ 1797.484766][ T3467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.30195'. [ 1798.137471][ T6043] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1798.309622][ T6043] usb 3-1: Using ep0 maxpacket: 8 [ 1798.330175][ T6043] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1798.339211][ T6043] usb 3-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 1798.375679][ T6043] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1798.407305][ T6043] usb 3-1: config 0 descriptor?? [ 1798.632495][ T3536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30222'. [ 1798.645954][ T3536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.30222'. [ 1798.659636][ T3536] netlink: 'syz.4.30222': attribute type 11 has an invalid length. [ 1798.672728][ T3536] netlink: 'syz.4.30222': attribute type 13 has an invalid length. [ 1798.850970][ T6043] hid-u2fzero 0003:20A0:4287.00AC: hidraw0: USB HID v0.03 Device [HID 20a0:4287] on usb-dummy_hcd.2-1/input0 [ 1798.886962][ T6043] hid-u2fzero 0003:20A0:4287.00AC: NitroKey U2F LED initialised [ 1798.911311][ T6043] hid-u2fzero 0003:20A0:4287.00AC: NitroKey U2F RNG initialised [ 1799.055953][ T6043] usb 3-1: USB disconnect, device number 30 [ 1800.147450][T30132] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1800.187417][ T1211] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1800.297305][T30132] usb 3-1: Using ep0 maxpacket: 8 [ 1800.317433][T30132] usb 3-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 1800.326617][T30132] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1800.337904][T30132] usb 3-1: Product: syz [ 1800.342118][T30132] usb 3-1: Manufacturer: syz [ 1800.346731][T30132] usb 3-1: SerialNumber: syz [ 1800.359105][ T1211] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1800.370999][T30132] usb 3-1: config 0 descriptor?? [ 1800.387913][T30132] gspca_main: xirlink-cit-2.14.0 probing 0545:800c [ 1800.397563][ T1211] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1800.410425][T30132] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input212 [ 1800.419471][ T1211] usb 5-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 1800.430448][ T1211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1800.489679][ T1211] usb 5-1: config 0 descriptor?? [ 1800.661037][T30132] usb 3-1: USB disconnect, device number 31 [ 1800.933011][ T1211] asus 0003:0B05:18C6.00AD: hidraw0: USB HID v0.00 Device [HID 0b05:18c6] on usb-dummy_hcd.4-1/input0 [ 1800.987279][ T1211] asus 0003:0B05:18C6.00AD: Asus input not registered [ 1801.015374][ T1211] asus 0003:0B05:18C6.00AD: probe with driver asus failed with error -12 [ 1801.136851][ T6043] usb 5-1: USB disconnect, device number 45 [ 1801.635811][ T3725] netlink: 152 bytes leftover after parsing attributes in process `syz.1.30280'. [ 1801.706143][ T3725] tipc: Enabled bearer , priority 20 [ 1801.824149][ T3735] netlink: 24 bytes leftover after parsing attributes in process `syz.4.30285'. [ 1802.425062][T30132] IPVS: starting estimator thread 0... [ 1802.487397][ T6043] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 1802.527362][ T3764] IPVS: using max 32 ests per chain, 76800 per kthread [ 1802.659551][ T6043] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 1802.687342][ T6043] usb 2-1: config 0 has no interface number 0 [ 1802.693624][ T6043] usb 2-1: config 0 interface 251 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1802.728364][ T6043] usb 2-1: config 0 interface 251 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1802.769278][ T6043] usb 2-1: config 0 interface 251 has no altsetting 0 [ 1802.775372][ T3777] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.30303'. [ 1802.776100][ T6043] usb 2-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 1802.808609][ T3777] netlink: zone id is out of range [ 1802.816813][ T3777] netlink: zone id is out of range [ 1802.833701][ T3777] netlink: zone id is out of range [ 1802.835255][ T6043] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1802.854352][ T3777] netlink: zone id is out of range [ 1802.870693][ T3777] netlink: get zone limit has 8 unknown bytes [ 1802.878690][ T6043] usb 2-1: config 0 descriptor?? [ 1803.220173][ T3797] netlink: 48 bytes leftover after parsing attributes in process `syz.3.30312'. [ 1803.320811][ T6043] uclogic 0003:28BD:1903.00AE: interface is invalid, ignoring [ 1803.345119][ T3799] Cannot find set identified by id 0 to match [ 1803.356135][ T3803] netlink: 'syz.3.30314': attribute type 30 has an invalid length. [ 1803.532310][ T6043] usb 2-1: USB disconnect, device number 43 [ 1803.578388][ T3823] [U] M٭Q& K4 [ 1803.977851][ T3842] tipc: Resetting bearer [ 1804.015127][ T3842] veth1_vlan: left allmulticast mode [ 1804.107478][ T3842] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1804.117517][ T1211] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 1804.132722][ T3842] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1804.148362][ T3842] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1804.190703][ T3842] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 1804.210710][ T3842] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 1804.231784][ T3842] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 1804.272705][ T3842] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1804.283009][ T1211] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1804.283044][ T1211] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1804.283069][ T1211] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1804.285420][ T1211] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1804.295651][ T3842] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1804.318638][ T1211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1804.326147][ T3842] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1804.343603][ T1211] usb 5-1: Product: syz [ 1804.363521][ T1211] usb 5-1: Manufacturer: syz [ 1804.369676][ T1211] usb 5-1: SerialNumber: syz [ 1804.385036][ T1211] usb 5-1: config 0 descriptor?? [ 1804.392028][ T3844] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1804.407183][ T3844] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1804.416261][ T1211] usb 5-1: ucan: probing device on interface #0 [ 1804.487527][ T6239] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1804.639649][ T6239] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1804.653918][ T6239] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1804.664312][ T6239] usb 4-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 1804.673941][ T6239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.706659][ T6239] usb 4-1: config 0 descriptor?? [ 1804.830016][ T1211] usb 5-1: ucan: device reported invalid tx-fifo size [ 1804.847157][ T1211] usb 5-1: ucan: probe failed; try to update the device firmware [ 1804.912339][ T3882] netlink: 28 bytes leftover after parsing attributes in process `syz.2.30340'. [ 1805.070145][T30132] usb 5-1: USB disconnect, device number 46 [ 1805.135128][ T6239] logitech-djreceiver 0003:046D:C534.00AF: unbalanced delimiter at end of report description [ 1805.155985][ T6239] logitech-djreceiver 0003:046D:C534.00AF: logi_dj_probe: parse failed [ 1805.166461][ T6239] logitech-djreceiver 0003:046D:C534.00AF: probe with driver logitech-djreceiver failed with error -22 [ 1805.304763][ T6043] hid-generic 0003:8000:0002.00B0: item fetching failed at offset 0/1 [ 1805.314746][ T6043] hid-generic 0003:8000:0002.00B0: probe with driver hid-generic failed with error -22 [ 1805.334521][T30132] usb 4-1: USB disconnect, device number 32 [ 1805.941017][ T3947] tipc: Bearer : already 2 bearers with priority 10 [ 1805.949036][ T3947] tipc: Bearer : trying with adjusted priority [ 1805.955895][ T3947] tipc: Enabling not permitted [ 1805.966318][ T3947] tipc: Enabling of bearer rejected, failed to enable media [ 1806.863151][ T3988] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1807.279477][ T30] audit: type=1326 audit(1752364238.458:7479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4011 comm="syz.4.30389" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1807.301567][ C0] vkms_vblank_simulate: vblank timer overrun [ 1807.313878][ T30] audit: type=1326 audit(1752364238.458:7480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4011 comm="syz.4.30389" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1807.335957][ C0] vkms_vblank_simulate: vblank timer overrun [ 1807.344431][ T30] audit: type=1326 audit(1752364238.498:7481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4011 comm="syz.4.30389" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1807.366551][ C0] vkms_vblank_simulate: vblank timer overrun [ 1807.403139][ T6239] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1807.452177][ T30] audit: type=1326 audit(1752364238.498:7482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4011 comm="syz.4.30389" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1807.515397][ T30] audit: type=1326 audit(1752364238.498:7483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4011 comm="syz.4.30389" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1807.561860][ T30] audit: type=1326 audit(1752364238.558:7484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4011 comm="syz.4.30389" exe="/root/syz-executor" sig=0 arch=40000003 syscall=237 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1807.583954][ C0] vkms_vblank_simulate: vblank timer overrun [ 1807.616264][ T6239] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1807.633563][ T6239] usb 2-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 1807.643140][ T30] audit: type=1326 audit(1752364238.558:7485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4011 comm="syz.4.30389" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1807.665262][ C0] vkms_vblank_simulate: vblank timer overrun [ 1807.672228][ T6239] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1807.682846][ T30] audit: type=1326 audit(1752364238.558:7486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4011 comm="syz.4.30389" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1807.706247][ T6239] usb 2-1: config 0 descriptor?? [ 1807.781487][ T4027] xt_CT: No such helper "snmp" [ 1807.978180][ T4042] tipc: Enabling of bearer rejected, failed to enable media [ 1808.138224][ T6239] lenovo 0003:17EF:60A3.00B1: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.1-1/input0 [ 1808.350256][ T6239] usb 2-1: USB disconnect, device number 44 [ 1808.508364][ T24] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1808.685815][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1808.706507][ T24] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1808.734885][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1808.773856][ T24] usb 4-1: config 0 descriptor?? [ 1809.029086][ T4099] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.30419'. [ 1809.211915][ T24] lenovo 0003:17EF:6047.00B2: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 1809.401982][ T24] lenovo 0003:17EF:6047.00B2: Failed to switch F7/9/11 mode: -71 [ 1809.421532][ T24] lenovo 0003:17EF:6047.00B2: Failed to switch middle button: -71 [ 1809.453670][ T24] lenovo 0003:17EF:6047.00B2: Fn-lock setting failed: -71 [ 1809.462933][ T24] lenovo 0003:17EF:6047.00B2: Sensitivity setting failed: -71 [ 1809.516160][ T24] usb 4-1: USB disconnect, device number 33 [ 1809.554464][ T4126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1809.563561][ T4126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1809.693601][ T4126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1809.716070][ T4126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1809.813927][ T4126] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1809.824847][ T4126] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1809.833955][ T4126] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1809.845089][ T4126] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1810.231071][ T4167] GUP no longer grows the stack in syz.1.30439 (4167): 80005000-80008000 (80004000) [ 1810.244751][ T4167] CPU: 0 UID: 0 PID: 4167 Comm: syz.1.30439 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 1810.244779][ T4167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1810.244793][ T4167] Call Trace: [ 1810.244801][ T4167] [ 1810.244811][ T4167] dump_stack_lvl+0x189/0x250 [ 1810.244842][ T4167] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1810.244874][ T4167] ? __pfx__printk+0x10/0x10 [ 1810.244896][ T4167] ? find_vma+0xe7/0x160 [ 1810.244931][ T4167] fixup_user_fault+0x661/0x720 [ 1810.244958][ T4167] fault_in_user_writeable+0x72/0xe0 [ 1810.244983][ T4167] futex_lock_pi+0x283/0xa60 [ 1810.245018][ T4167] ? __pfx_futex_lock_pi+0x10/0x10 [ 1810.245041][ T4167] ? get_futex_key+0x880/0x1640 [ 1810.245093][ T4167] ? __pfx_futex_wake_mark+0x10/0x10 [ 1810.245133][ T4167] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 1810.245162][ T4167] do_futex+0x292/0x420 [ 1810.245192][ T4167] ? __pfx_do_futex+0x10/0x10 [ 1810.245215][ T4167] ? __vm_munmap+0x301/0x3d0 [ 1810.245241][ T4167] __se_sys_futex_time32+0x360/0x3e0 [ 1810.245272][ T4167] ? __pfx___se_sys_futex_time32+0x10/0x10 [ 1810.245297][ T4167] ? rcu_is_watching+0x15/0xb0 [ 1810.245322][ T4167] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1810.245342][ T4167] ? __ia32_sys_futex_time32+0x21/0xf0 [ 1810.245371][ T4167] __do_fast_syscall_32+0xb6/0x2b0 [ 1810.245391][ T4167] ? lockdep_hardirqs_on+0x9c/0x150 [ 1810.245420][ T4167] do_fast_syscall_32+0x34/0x80 [ 1810.245440][ T4167] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1810.245461][ T4167] RIP: 0023:0xf709e539 [ 1810.245478][ T4167] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1810.245495][ T4167] RSP: 002b:00000000f508e55c EFLAGS: 00000206 ORIG_RAX: 00000000000000f0 [ 1810.245514][ T4167] RAX: ffffffffffffffda RBX: 0000000080004000 RCX: 000000000000008d [ 1810.245528][ T4167] RDX: 00000000fffffffd RSI: 0000000000000000 RDI: 0000000000000000 [ 1810.245539][ T4167] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1810.245551][ T4167] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1810.245562][ T4167] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1810.245590][ T4167] [ 1810.467807][ C0] vkms_vblank_simulate: vblank timer overrun [ 1810.864485][ T4192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30449'. [ 1810.874121][ T4192] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 1810.883142][ T4192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1810.987330][T30132] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 1811.176699][T30132] usb 2-1: config 0 has no interfaces? [ 1811.183019][T30132] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 1811.192454][T30132] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1811.208198][T30132] usb 2-1: config 0 descriptor?? [ 1811.437694][T30132] usb 2-1: USB disconnect, device number 45 [ 1812.859269][ T4256] tipc: Resetting bearer [ 1812.883119][ T4256] tipc: Resetting bearer [ 1813.368982][ T4256] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1813.388282][ T4256] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1813.408495][ T4256] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1813.428119][ T4256] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1813.509614][ T4272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30479'. [ 1813.536404][ T4272] netlink: 24 bytes leftover after parsing attributes in process `syz.0.30479'. [ 1813.578256][ T4273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30479'. [ 1813.607322][ T4273] netlink: 24 bytes leftover after parsing attributes in process `syz.0.30479'. [ 1814.627907][ T4332] netlink: 100 bytes leftover after parsing attributes in process `syz.4.30507'. [ 1815.497740][ T24] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1815.515116][ T4376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30523'. [ 1815.669703][T30132] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1815.697308][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 1815.704459][ T24] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 1815.714218][ T24] usb 4-1: config 0 has no interface number 0 [ 1815.720716][ T24] usb 4-1: config 0 interface 29 has no altsetting 0 [ 1815.737916][ T24] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1815.755651][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1815.764879][ T24] usb 4-1: Product: syz [ 1815.774428][ T24] usb 4-1: Manufacturer: syz [ 1815.784517][ T24] usb 4-1: SerialNumber: syz [ 1815.792729][ T24] usb 4-1: config 0 descriptor?? [ 1815.845054][T30132] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 1815.853965][T30132] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1815.876748][ T30] audit: type=1326 audit(1752364247.058:7487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4393 comm="syz.0.30530" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1815.898884][ C0] vkms_vblank_simulate: vblank timer overrun [ 1815.905853][T30132] usb 5-1: config 0 has no interface number 0 [ 1815.931890][T30132] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1815.957327][ T30] audit: type=1326 audit(1752364247.058:7488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4393 comm="syz.0.30530" exe="/root/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1815.979830][T30132] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1816.009898][T30132] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1816.027544][T30132] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1816.035614][T30132] usb 5-1: Product: syz [ 1816.039993][ T30] audit: type=1326 audit(1752364247.058:7489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4393 comm="syz.0.30530" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1816.063263][ T24] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 1816.087792][T30132] usb 5-1: Manufacturer: syz [ 1816.092441][T30132] usb 5-1: SerialNumber: syz [ 1816.116931][ T30] audit: type=1326 audit(1752364247.058:7490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4393 comm="syz.0.30530" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1816.140536][T30132] usb 5-1: config 0 descriptor?? [ 1816.179146][ T30] audit: type=1326 audit(1752364247.058:7491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4393 comm="syz.0.30530" exe="/root/syz-executor" sig=0 arch=40000003 syscall=278 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1816.201238][ C0] vkms_vblank_simulate: vblank timer overrun [ 1816.217449][ T30] audit: type=1326 audit(1752364247.058:7492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4393 comm="syz.0.30530" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1816.267601][ T30] audit: type=1326 audit(1752364247.058:7493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4393 comm="syz.0.30530" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1816.293524][ T24] peak_usb 4-1:0.29 can0: sending command failure: -8 [ 1816.324824][ T24] peak_usb 4-1:0.29 can0: sending command failure: -8 [ 1816.349980][ T24] peak_usb 4-1:0.29 can0: sending command failure: -8 [ 1816.433301][ T4412] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.30536'. [ 1816.459994][ T24] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -8 [ 1816.500265][ T24] usb 4-1: USB disconnect, device number 34 [ 1816.678851][ T4428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.30541'. [ 1816.699199][ T4428] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1816.781008][T30132] usb 5-1: USB disconnect, device number 47 [ 1817.687937][ T4483] netlink: 20 bytes leftover after parsing attributes in process `syz.3.30562'. [ 1818.054520][ T4503] netlink: 'syz.1.30570': attribute type 1 has an invalid length. [ 1818.268385][ T24] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1818.427540][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 1818.440672][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1818.476932][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1818.502281][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 1818.522802][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1818.555277][ T24] usb 4-1: config 0 descriptor?? [ 1819.024251][ T24] apple 0003:05AC:027C.00B3: hidraw0: USB HID v0.00 Device [HID 05ac:027c] on usb-dummy_hcd.3-1/input0 [ 1819.258787][ T24] usb 4-1: USB disconnect, device number 35 [ 1819.667469][ T978] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1819.853285][ T978] usb 5-1: Using ep0 maxpacket: 8 [ 1819.878334][ T978] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1819.898503][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1819.917427][ T978] usb 5-1: Product: syz [ 1819.921819][ T978] usb 5-1: Manufacturer: syz [ 1819.926451][ T978] usb 5-1: SerialNumber: syz [ 1819.948393][ T978] usb 5-1: config 0 descriptor?? [ 1820.178030][ T978] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1820.355391][ T4593] veth0_macvtap: left allmulticast mode [ 1820.476774][ T4593] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1820.492698][ T4593] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1820.503218][ T4593] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1820.545746][ T4593] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1820.630230][ T978] usb write operation failed. (-71) [ 1820.641286][ T978] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1820.665421][ T978] dvbdev: DVB: registering new adapter (Terratec H7) [ 1820.675854][ T978] usb 5-1: media controller created [ 1820.684662][ T978] usb read operation failed. (-71) [ 1820.698598][ T978] usb write operation failed. (-71) [ 1820.714717][ T978] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1820.758513][ T978] usb 5-1: USB disconnect, device number 48 [ 1822.968484][T30132] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1823.130938][T30132] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1823.152335][T30132] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1823.168065][T30132] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1823.181422][T30132] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 1823.190974][T30132] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1823.206491][T30132] usb 3-1: config 0 descriptor?? [ 1823.267921][ T978] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1823.367479][ T6043] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1823.447654][ T978] usb 2-1: Using ep0 maxpacket: 16 [ 1823.454871][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1823.471654][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1823.483863][ T978] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1823.498647][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1823.521266][ T978] usb 2-1: config 0 descriptor?? [ 1823.527578][ T6043] usb 5-1: Using ep0 maxpacket: 8 [ 1823.543627][ T6043] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1823.572444][ T6043] usb 5-1: config 4 interface 0 has no altsetting 0 [ 1823.584558][ T6043] usb 5-1: string descriptor 0 read error: -22 [ 1823.596934][ T6043] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1823.608862][ T6043] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1823.625508][T30132] hid-udraw 0003:20D6:CB17.00B4: item fetching failed at offset 5/7 [ 1823.639340][T30132] hid-udraw 0003:20D6:CB17.00B4: parse failed [ 1823.651151][ T6043] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1823.660116][T30132] hid-udraw 0003:20D6:CB17.00B4: probe with driver hid-udraw failed with error -22 [ 1823.704847][ T6043] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1823.725439][ T6043] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1823.740561][ T6043] usb 5-1: media controller created [ 1823.772612][ T6043] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1823.831746][T10895] usb 3-1: USB disconnect, device number 32 [ 1823.847758][ T6043] zl10353_read_register: readreg error (reg=127, ret==0) [ 1823.893700][ T4778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30659'. [ 1823.943369][ T6043] usb 5-1: USB disconnect, device number 49 [ 1823.970399][ T978] hid-picolcd 0003:04D8:F002.00B5: unbalanced collection at end of report description [ 1823.994290][ T978] hid-picolcd 0003:04D8:F002.00B5: device report parse failed [ 1824.011608][ T978] hid-picolcd 0003:04D8:F002.00B5: probe with driver hid-picolcd failed with error -22 [ 1824.187024][ T6239] usb 2-1: USB disconnect, device number 46 [ 1824.418063][T30132] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1824.592779][T30132] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1824.606177][T30132] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1824.621374][T30132] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1824.633297][T30132] usb 4-1: config 220 has no interface number 2 [ 1824.644073][T30132] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1824.663442][T30132] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1824.670596][T30132] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1824.687760][T30132] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1824.701689][T30132] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1824.719029][T30132] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1824.748868][T30132] usb 4-1: Product: syz [ 1824.753118][T30132] usb 4-1: Manufacturer: syz [ 1824.763405][T30132] usb 4-1: SerialNumber: syz [ 1825.021549][T30132] usb 4-1: selecting invalid altsetting 0 [ 1825.040369][T30132] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 1825.046778][T30132] usb 4-1: No valid video chain found. [ 1825.095991][T30132] usb 4-1: selecting invalid altsetting 0 [ 1825.107820][T30132] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1825.133015][T30132] usb 4-1: USB disconnect, device number 36 [ 1826.047478][ T24] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1826.153839][ T4889] netlink: 56 bytes leftover after parsing attributes in process `syz.3.30691'. [ 1826.172813][ T4889] netlink: 16 bytes leftover after parsing attributes in process `syz.3.30691'. [ 1826.238038][ T24] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 1826.257324][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1826.294854][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 1826.314361][ T24] usb 2-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 1826.337727][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1826.369467][ T24] usb 2-1: config 0 descriptor?? [ 1826.452667][ T4902] ALSA: mixer_oss: invalid OSS volume '' [ 1826.787573][ T24] uclogic 0003:28BD:0075.00B6: interface is invalid, ignoring [ 1826.989699][ T24] usb 2-1: USB disconnect, device number 47 [ 1827.267437][T30132] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1827.394177][ T4965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.30717'. [ 1827.439525][T30132] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1827.449746][T30132] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1827.468022][ T4968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.30717'. [ 1827.483693][T30132] usb 4-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 1827.502781][T30132] usb 4-1: config 220 has no interface number 2 [ 1827.514938][T30132] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1827.546219][T30132] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1827.558159][T30132] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1827.595812][T30132] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1827.632731][T30132] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1827.644065][T30132] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1827.666462][T30132] usb 4-1: Product: syz [ 1827.680893][T30132] usb 4-1: Manufacturer: syz [ 1827.686329][T30132] usb 4-1: SerialNumber: syz [ 1827.968660][T30132] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 1827.993201][T30132] usb 4-1: No valid video chain found. [ 1828.020803][T30132] usb 4-1: selecting invalid altsetting 0 [ 1828.204870][T30132] usb 4-1: selecting invalid altsetting 0 [ 1828.250643][T30132] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1828.283114][T30132] usb 4-1: USB disconnect, device number 37 [ 1828.805278][ T5014] netlink: 'syz.1.30734': attribute type 1 has an invalid length. [ 1828.836409][ T5015] : entered promiscuous mode [ 1828.845814][ T5014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1829.249878][ T5037] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1829.249951][ T5037] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1829.249979][ T5037] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1829.877770][ T24] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1830.056866][ T24] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 1830.070166][ T24] usb 4-1: config 0 has no interface number 0 [ 1830.089933][ T24] usb 4-1: config 0 interface 16 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1830.131088][ T24] usb 4-1: config 0 interface 16 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1830.143858][ T24] usb 4-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1830.163296][ T24] usb 4-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 1830.175139][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1830.203673][ T24] usb 4-1: config 0 descriptor?? [ 1830.650983][ T24] uclogic 0003:28BD:0905.00B7: interface is invalid, ignoring [ 1830.854878][ T24] usb 4-1: USB disconnect, device number 38 [ 1831.694450][ T30] audit: type=1326 audit(1752364262.878:7494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5154 comm="syz.2.30784" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1831.716573][ C0] vkms_vblank_simulate: vblank timer overrun [ 1831.753319][ T30] audit: type=1326 audit(1752364262.878:7495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5154 comm="syz.2.30784" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1831.799528][ T30] audit: type=1326 audit(1752364262.878:7496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5154 comm="syz.2.30784" exe="/root/syz-executor" sig=0 arch=40000003 syscall=231 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1831.865650][ T30] audit: type=1326 audit(1752364262.878:7497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5154 comm="syz.2.30784" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1831.900187][ T30] audit: type=1326 audit(1752364262.878:7498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5154 comm="syz.2.30784" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1832.677807][ T30] audit: type=1800 audit(1752364263.868:7499): pid=5198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.30799" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1832.876103][ T5212] gtp0: entered promiscuous mode [ 1832.898571][ T5212] gtp0: entered allmulticast mode [ 1833.547414][ T6239] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1833.707518][ T6239] usb 2-1: Using ep0 maxpacket: 8 [ 1833.741045][ T6239] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1833.767834][ T6239] usb 2-1: config 4 interface 0 has no altsetting 0 [ 1833.777738][ T6239] usb 2-1: string descriptor 0 read error: -22 [ 1833.784093][ T6239] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1833.795556][ T6239] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1833.841605][ T6239] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1833.883726][ T6239] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1833.934565][ T6239] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1833.950809][ T6239] usb 2-1: media controller created [ 1833.995758][ T6239] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1834.078390][ T6239] zl10353_read_register: readreg error (reg=127, ret==0) [ 1834.172911][ T6239] usb 2-1: USB disconnect, device number 48 [ 1834.337761][ T24] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1834.537546][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 1834.557114][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1834.577508][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1834.599151][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1834.628794][ T24] usb 5-1: config 0 descriptor?? [ 1834.981897][ T30] audit: type=1804 audit(1752364266.168:7500): pid=5318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.30836" name="/newroot/6276/file0" dev="tmpfs" ino=31533 res=1 errno=0 [ 1835.035850][ T30] audit: type=1800 audit(1752364266.168:7501): pid=5318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.30836" name="file0" dev="tmpfs" ino=31533 res=0 errno=0 [ 1835.073101][ T24] apple 0003:05AC:024B.00B8: item fetching failed at offset 2/69 [ 1835.107602][ T24] apple 0003:05AC:024B.00B8: parse failed [ 1835.119968][ T24] apple 0003:05AC:024B.00B8: probe with driver apple failed with error -22 [ 1835.301552][ T24] usb 5-1: USB disconnect, device number 50 [ 1835.955678][ T5360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30851'. [ 1835.975422][ T5360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.30851'. [ 1836.483248][ T978] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 1836.649376][ T978] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1836.680821][ T978] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1836.697366][ T978] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1836.715477][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1836.738374][ T978] usb 4-1: config 0 descriptor?? [ 1836.759117][ T5373] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1837.206207][ T978] acrux 0003:1A34:0802.00B9: unknown main item tag 0x0 [ 1837.221033][ T978] acrux 0003:1A34:0802.00B9: unknown main item tag 0x0 [ 1837.255799][ T978] acrux 0003:1A34:0802.00B9: hidraw0: USB HID v80.00 Device [HID 1a34:0802] on usb-dummy_hcd.3-1/input0 [ 1837.303039][ T978] acrux 0003:1A34:0802.00B9: no inputs found [ 1837.322120][ T978] acrux 0003:1A34:0802.00B9: Failed to enable force feedback support, error: -19 [ 1837.414889][ T978] usb 4-1: USB disconnect, device number 39 [ 1837.635748][ T5439] fido_id[5439]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1838.617452][ T6239] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1838.640920][ T5506] netlink: 24 bytes leftover after parsing attributes in process `syz.1.30905'. [ 1838.769176][ T6239] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1838.769219][ T6239] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 1838.769239][ T6239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1838.772263][ T6239] usb 4-1: config 0 descriptor?? [ 1839.212054][ T6239] itetech 0003:258A:6A88.00BA: item fetching failed at offset 3/7 [ 1839.228084][ T6239] itetech 0003:258A:6A88.00BA: probe with driver itetech failed with error -22 [ 1839.417502][ T978] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1839.436506][ T24] usb 4-1: USB disconnect, device number 40 [ 1839.585723][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1839.604115][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1839.631024][ T978] usb 3-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 1839.640678][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1839.652355][ T978] usb 3-1: config 0 descriptor?? [ 1839.795207][ T30] audit: type=1326 audit(1752364270.978:7502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5523 comm="syz.4.30911" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7fc00000 [ 1839.798753][ T5573] bridge7: entered promiscuous mode [ 1839.822955][ T5573] bridge7: entered allmulticast mode [ 1839.844802][ T5573] team0: Port device bridge7 added [ 1840.020434][ T5581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30930'. [ 1840.036871][ T5581] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1840.081651][ T978] apple 0003:05AC:0262.00BB: unbalanced delimiter at end of report description [ 1840.108418][ T978] apple 0003:05AC:0262.00BB: parse failed [ 1840.114489][ T978] apple 0003:05AC:0262.00BB: probe with driver apple failed with error -22 [ 1840.315554][ T6239] usb 3-1: USB disconnect, device number 33 [ 1840.991599][ T5631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1841.351503][ T5647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30952'. [ 1841.397459][ T5647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.30952'. [ 1841.773196][ T5676] netlink: 'syz.1.30962': attribute type 2 has an invalid length. [ 1842.064435][ T5694] loop4: detected capacity change from 0 to 7 [ 1842.124443][ T5694] Dev loop4: unable to read RDB block 7 [ 1842.142884][ T5694] loop4: unable to read partition table [ 1842.177674][ T5694] loop4: partition table beyond EOD, truncated [ 1842.194623][ T5694] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 1843.298166][ T978] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1843.308599][ T6239] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1843.359408][ T5756] netlink: 24 bytes leftover after parsing attributes in process `syz.3.30994'. [ 1843.388980][ T5760] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 1843.388980][ T5760] program syz.0.30995 not setting count and/or reply_len properly [ 1843.478024][ T6239] usb 2-1: Using ep0 maxpacket: 16 [ 1843.490521][ T978] usb 3-1: Using ep0 maxpacket: 32 [ 1843.495526][ T6239] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1843.499455][ T978] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1843.515627][ T6239] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1843.527640][ T6239] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=14 [ 1843.537352][ T978] usb 3-1: config 0 has no interface number 0 [ 1843.544966][ T6239] usb 2-1: Manufacturer: syz [ 1843.556916][ T6239] usb 2-1: SerialNumber: syz [ 1843.567121][ T978] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1843.578565][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1843.586992][ T978] usb 3-1: Product: syz [ 1843.593231][ T978] usb 3-1: Manufacturer: syz [ 1843.598162][ T6239] usb 2-1: config 0 descriptor?? [ 1843.600694][ T978] usb 3-1: SerialNumber: syz [ 1843.620814][ T6239] em28xx 2-1:0.0: New device syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1843.627973][ T978] usb 3-1: config 0 descriptor?? [ 1843.640578][ T6239] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 1843.660147][ T978] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1843.687983][ T978] usb 3-1: selecting invalid altsetting 1 [ 1843.693910][ T978] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1843.725268][ T978] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1843.748430][ T978] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1843.764753][ T978] usb 3-1: media controller created [ 1843.800517][ T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1843.863994][ T978] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1843.872627][ T978] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1843.881820][ T978] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1843.894369][ T6239] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1843.968899][ T978] usb 3-1: USB disconnect, device number 34 [ 1843.974526][ T6239] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1843.986147][ T6239] em28xx 2-1:0.0: board has no eeprom [ 1844.057315][ T6239] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1844.065261][ T6239] em28xx 2-1:0.0: dvb set to bulk mode. [ 1844.070952][T30132] em28xx 2-1:0.0: Binding DVB extension [ 1844.097107][ T6239] usb 2-1: USB disconnect, device number 49 [ 1844.123452][ T6239] em28xx 2-1:0.0: Disconnecting em28xx [ 1844.135200][T30132] em28xx 2-1:0.0: Registering input extension [ 1844.154666][ T6239] em28xx 2-1:0.0: Closing input extension [ 1844.178319][ T6239] em28xx 2-1:0.0: Freeing device [ 1844.539557][ T5829] netem: incorrect ge model size [ 1844.557447][ T5829] netem: change failed [ 1845.324113][ T5872] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 1845.537746][ T5885] IPVS: Error connecting to the multicast addr [ 1845.883920][ T5906] netlink: 'syz.3.31035': attribute type 1 has an invalid length. [ 1845.981921][ T5910] netlink: 44 bytes leftover after parsing attributes in process `syz.1.31037'. [ 1846.034215][ T30] audit: type=1326 audit(1752364277.218:7503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5861 comm="syz.2.31019" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7fc00000 [ 1846.406043][ T5938] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 1846.412614][ T5938] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1846.429569][ T5938] vhci_hcd vhci_hcd.0: Device attached [ 1846.450850][ T5940] vhci_hcd: connection closed [ 1846.452723][ T3492] vhci_hcd: stop threads [ 1846.452746][ T3492] vhci_hcd: release socket [ 1846.452773][ T3492] vhci_hcd: disconnect device [ 1847.148383][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.31062'. [ 1847.178778][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.31062'. [ 1847.596125][ T6002] sch_tbf: peakrate 64 is lower than or equals to rate 2147483649 ! [ 1848.820586][ T6085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.31101'. [ 1848.897449][ T978] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1848.906591][ T6093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.31103'. [ 1848.933082][ T6093] macvtap0: entered promiscuous mode [ 1848.942269][ T6093] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 1848.954881][ T6093] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 1849.057616][ T978] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1849.067611][ T6239] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1849.081496][ T978] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1849.108560][ T978] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1849.135209][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1849.165108][ T6074] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1849.189952][ T978] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1849.232156][ T6239] usb 5-1: Using ep0 maxpacket: 32 [ 1849.257733][ T6239] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 1849.281422][ T6239] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1849.299054][ T6239] usb 5-1: Product: syz [ 1849.303461][ T6239] usb 5-1: Manufacturer: syz [ 1849.316757][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31110'. [ 1849.326595][ T6239] usb 5-1: SerialNumber: syz [ 1849.340986][ T6239] usb 5-1: config 0 descriptor?? [ 1849.476263][T30132] usb 2-1: USB disconnect, device number 50 [ 1849.506297][ T6133] netlink: 4112 bytes leftover after parsing attributes in process `syz.3.31112'. [ 1849.551523][ T6133] netlink: 65 bytes leftover after parsing attributes in process `syz.3.31112'. [ 1849.576067][ T6133] tipc: Enabling of bearer rejected, failed to enable media [ 1849.578585][ T6239] snd-usb-6fire 5-1:0.0: unknown device firmware state received from device: [ 1849.596830][ T6239] eb 9a 47 80 9b f8 7a f0 [ 1849.601909][ T6239] snd-usb-6fire 5-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 1849.834496][ T978] usb 5-1: USB disconnect, device number 51 [ 1850.160439][ T5206] Bluetooth: hci1: command 0x0406 tx timeout [ 1850.233870][ T6210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31127'. [ 1850.234669][ T6210] netlink: 100 bytes leftover after parsing attributes in process `syz.1.31127'. [ 1850.234688][ T6210] netlink: 100 bytes leftover after parsing attributes in process `syz.1.31127'. [ 1851.211444][T30132] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1851.308534][ T6271] netem: change failed [ 1851.393309][T30132] usb 2-1: Using ep0 maxpacket: 16 [ 1851.419968][T30132] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1851.447321][T30132] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1851.457131][T30132] usb 2-1: New USB device found, idVendor=0dac, idProduct=024b, bcdDevice= 0.04 [ 1851.511958][T30132] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1851.548416][T30132] usb 2-1: config 0 descriptor?? [ 1851.724649][ T6292] loop6: detected capacity change from 0 to 524287999 [ 1851.981775][T30132] hid (null): invalid report_size 24312 [ 1851.989544][T30132] hid (null): report_id 1312380026 is invalid [ 1852.003352][T30132] hid (null): unknown global tag 0xe [ 1852.024186][T30132] hid-generic 0003:0DAC:024B.00BC: unknown main item tag 0x6 [ 1852.051067][T30132] hid-generic 0003:0DAC:024B.00BC: invalid report_size 24312 [ 1852.075585][T30132] hid-generic 0003:0DAC:024B.00BC: item 0 2 1 7 parsing failed [ 1852.113203][T30132] hid-generic 0003:0DAC:024B.00BC: probe with driver hid-generic failed with error -22 [ 1852.241012][T30132] usb 2-1: USB disconnect, device number 51 [ 1853.149502][ T6367] batadv_slave_0: entered promiscuous mode [ 1853.203779][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.210642][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.310035][ T6366] batadv_slave_0: left promiscuous mode [ 1853.383263][ T6377] input: syz0 as /devices/virtual/input/input215 [ 1853.690774][ T6390] program syz.3.31183 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1853.756393][ T6388] kvm: kvm [6387]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x7 [ 1854.253988][ T6407] __nla_validate_parse: 1 callbacks suppressed [ 1854.254006][ T6407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31189'. [ 1854.772860][ T30] audit: type=1326 audit(1752364285.958:7504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6431 comm="syz.2.31200" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x0 [ 1854.854752][ T6444] input: syz1 as /devices/virtual/input/input216 [ 1854.968105][T30132] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1855.137295][T30132] usb 2-1: Using ep0 maxpacket: 32 [ 1855.165656][T30132] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1855.189877][T30132] usb 2-1: config 0 has no interface number 0 [ 1855.206703][T30132] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1855.219298][T30132] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1855.230678][T30132] usb 2-1: Product: syz [ 1855.234886][T30132] usb 2-1: Manufacturer: syz [ 1855.242020][T30132] usb 2-1: SerialNumber: syz [ 1855.260740][T30132] usb 2-1: config 0 descriptor?? [ 1855.274651][T30132] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1855.490182][T30132] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1855.522474][T30132] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1855.969268][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1855.977460][T30132] usb 2-1: USB disconnect, device number 52 [ 1856.021069][T30132] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1856.060831][T30132] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1856.104140][T30132] quatech2 2-1:0.51: device disconnected [ 1857.267496][ T978] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1857.460167][ T978] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1857.480104][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1857.514628][ T978] usb 4-1: config 0 descriptor?? [ 1857.549911][ T978] cp210x 4-1:0.0: cp210x converter detected [ 1857.828692][ T30] audit: type=1326 audit(1752364289.018:7505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.2.31245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1857.887282][ T30] audit: type=1326 audit(1752364289.018:7506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.2.31245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1857.945127][ T30] audit: type=1326 audit(1752364289.058:7507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.2.31245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1857.969252][ T978] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1858.007412][ T978] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1858.031281][ T30] audit: type=1326 audit(1752364289.058:7508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.2.31245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1858.079966][ T30] audit: type=1326 audit(1752364289.058:7509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.2.31245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1858.125062][ T30] audit: type=1326 audit(1752364289.058:7510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.2.31245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1858.155086][ T30] audit: type=1326 audit(1752364289.058:7511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.2.31245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1858.183223][ T30] audit: type=1326 audit(1752364289.058:7512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.2.31245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1858.239573][ T978] usb 4-1: USB disconnect, device number 41 [ 1858.260101][ T978] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1858.291616][ T978] cp210x 4-1:0.0: device disconnected [ 1859.208040][ T24] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1859.387785][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 1859.396738][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1859.426032][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1859.444582][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1859.472596][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1859.482710][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1859.529177][ T24] usb 5-1: config 0 descriptor?? [ 1859.865734][ T6748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.31278'. [ 1859.968574][ T24] microsoft 0003:045E:07DA.00BD: ignoring exceeding usage max [ 1859.983138][ T24] microsoft 0003:045E:07DA.00BD: unknown main item tag 0x0 [ 1859.997779][ T24] microsoft 0003:045E:07DA.00BD: unknown main item tag 0x0 [ 1860.007394][ T24] microsoft 0003:045E:07DA.00BD: unknown main item tag 0x0 [ 1860.014655][ T24] microsoft 0003:045E:07DA.00BD: unknown main item tag 0x0 [ 1860.023265][ T24] microsoft 0003:045E:07DA.00BD: unknown main item tag 0x0 [ 1860.063463][ T24] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.00BD/input/input217 [ 1860.107951][ T24] microsoft 0003:045E:07DA.00BD: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1860.295947][T30132] usb 5-1: USB disconnect, device number 52 [ 1860.814961][ T6798] netlink: 428 bytes leftover after parsing attributes in process `syz.3.31287'. [ 1860.834932][ T6798] netlink: 32 bytes leftover after parsing attributes in process `syz.3.31287'. [ 1861.003906][ T6803] netlink: 268 bytes leftover after parsing attributes in process `syz.4.31289'. [ 1861.467460][ T6824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.31296'. [ 1861.641811][ T6834] netlink: 24 bytes leftover after parsing attributes in process `syz.4.31300'. [ 1862.826418][ T6880] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 1863.060236][ T6897] openvswitch: netlink: VXLAN extension 0 has unexpected len 3 expected 0 [ 1865.612816][ T6980] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1866.092278][ T7001] pim6reg: entered allmulticast mode [ 1866.120295][ T7001] pim6reg: left allmulticast mode [ 1866.963723][ T7045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.31372'. [ 1866.979967][ T7045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.31372'. [ 1867.627755][T30132] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1867.799965][T30132] usb 3-1: Using ep0 maxpacket: 8 [ 1867.811464][T30132] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1867.821643][T30132] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1867.843847][T30132] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1867.874295][T30132] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1867.907686][T30132] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1867.926061][T30132] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1867.955049][T30132] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1868.168209][ T7091] kvm: kvm [7088]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x200000000400 [ 1868.210094][T30132] usb 3-1: GET_CAPABILITIES returned 0 [ 1868.224829][T30132] usbtmc 3-1:16.0: can't read capabilities [ 1868.230980][ T7099] vlan3: entered allmulticast mode [ 1868.231003][ T7099] veth1: entered allmulticast mode [ 1868.483555][T30132] usb 3-1: USB disconnect, device number 35 [ 1870.037511][T30132] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1870.197652][T30132] usb 3-1: Using ep0 maxpacket: 16 [ 1870.224692][T30132] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1870.233213][T30132] usb 3-1: config 0 has no interface number 0 [ 1870.240533][T30132] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1870.261802][T30132] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1870.289587][T30132] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1870.317824][T30132] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1870.326057][T30132] usb 3-1: Product: syz [ 1870.337378][T30132] usb 3-1: SerialNumber: syz [ 1870.368338][T30132] usb 3-1: config 0 descriptor?? [ 1870.381003][T30132] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 1870.404259][T30132] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input219 [ 1870.422192][ T7214] netlink: 16 bytes leftover after parsing attributes in process `syz.4.31423'. [ 1870.613764][ C0] cm109_urb_ctl_callback: 29 callbacks suppressed [ 1870.613794][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1870.627659][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1870.634843][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1870.642226][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1870.650420][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1870.657629][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1870.664792][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1870.672015][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1870.679186][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1870.686366][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1870.694589][T30132] usb 3-1: USB disconnect, device number 36 [ 1870.700623][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1870.724651][T30132] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1870.870826][ T7242] netlink: 'syz.4.31426': attribute type 5 has an invalid length. [ 1870.896435][ T7242] netlink: 'syz.4.31426': attribute type 5 has an invalid length. [ 1871.072403][ T7252] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 1872.730575][ T7316] pim6reg: entered allmulticast mode [ 1872.741435][ T7316] pim6reg: left allmulticast mode [ 1873.543394][ T7352] pim6reg: entered allmulticast mode [ 1873.568116][ T7352] pim6reg: left allmulticast mode [ 1874.562432][ T7409] netlink: 'syz.2.31487': attribute type 11 has an invalid length. [ 1875.517883][T30132] usb 4-1: new low-speed USB device number 42 using dummy_hcd [ 1875.679488][T30132] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1875.689928][T30132] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1875.699417][T30132] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1875.711694][T30132] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1875.723261][T30132] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1875.734647][T30132] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1875.744139][T30132] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1875.755885][ T7440] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1875.772211][T30132] hub 4-1:1.0: bad descriptor, ignoring hub [ 1875.779110][T30132] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1875.786946][T30132] cdc_wdm 4-1:1.0: skipping garbage [ 1875.793066][T30132] cdc_wdm 4-1:1.0: skipping garbage [ 1875.801125][T30132] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1875.807827][T30132] cdc_wdm 4-1:1.0: Unknown control protocol [ 1875.895882][ T30] audit: type=1326 audit(1752364307.078:7513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7429 comm="syz.1.31503" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7fc00000 [ 1876.630918][ T7440] usb 4-1: reset low-speed USB device number 42 using dummy_hcd [ 1876.667424][ T978] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1876.821461][ T978] usb 5-1: Using ep0 maxpacket: 32 [ 1876.830738][ T978] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1876.841274][ T978] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1876.852999][ T978] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1876.863559][ T978] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1876.876913][ T978] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1876.884234][ T978] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1876.893864][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1876.905293][ T978] usb 5-1: config 0 descriptor?? [ 1876.977615][ T7460] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1877.006126][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1877.013085][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1877.342535][ T978] hid-thrustmaster 0003:044F:B65D.00BE: unknown main item tag 0x0 [ 1877.377818][ T6043] usb 4-1: USB disconnect, device number 42 [ 1877.383987][ T978] hid-thrustmaster 0003:044F:B65D.00BE: unknown main item tag 0x0 [ 1877.403498][ T978] hid-thrustmaster 0003:044F:B65D.00BE: unknown main item tag 0x0 [ 1877.424169][ T978] hid-thrustmaster 0003:044F:B65D.00BE: unknown main item tag 0x0 [ 1877.433577][ T978] hid-thrustmaster 0003:044F:B65D.00BE: unknown main item tag 0x0 [ 1877.450119][ T978] hid-thrustmaster 0003:044F:B65D.00BE: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 1877.465054][ T978] hid-thrustmaster 0003:044F:B65D.00BE: Wrong number of endpoints? [ 1877.569841][ C1] hid-thrustmaster 0003:044F:B65D.00BE: Unknown packet type 0x0, unable to proceed further with wheel init [ 1877.784186][ T6239] usb 5-1: USB disconnect, device number 53 [ 1878.772244][ T6239] usb 3-1: new low-speed USB device number 37 using dummy_hcd [ 1878.960730][ T6239] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1878.977806][ T6239] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1878.997324][ T6239] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1879.027283][ T6239] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1879.047389][ T6239] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1879.077371][ T6239] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1879.095490][ T6239] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1879.126931][ T7598] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1879.159474][ T6239] hub 3-1:1.0: bad descriptor, ignoring hub [ 1879.179908][ T6239] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1879.198418][ T6239] cdc_wdm 3-1:1.0: skipping garbage [ 1879.203683][ T6239] cdc_wdm 3-1:1.0: skipping garbage [ 1879.245391][ T6239] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1879.257466][ T6239] cdc_wdm 3-1:1.0: Unknown control protocol [ 1879.406129][ T7630] macvlan0: entered promiscuous mode [ 1879.411895][ T7630] netlink: 'syz.0.31547': attribute type 1 has an invalid length. [ 1879.797875][ T7647] netlink: 40 bytes leftover after parsing attributes in process `syz.4.31551'. [ 1879.823999][ T7645] ip6gretap2: entered promiscuous mode [ 1879.837009][ T7645] ip6gretap2: entered allmulticast mode [ 1879.967830][ T7598] usb 3-1: reset low-speed USB device number 37 using dummy_hcd [ 1880.063346][ T7658] tap0: tun_chr_ioctl cmd 2147767507 [ 1880.320874][ T7631] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1880.533148][ T30] audit: type=1326 audit(1752364311.718:7514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7715 comm="syz.0.31572" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1880.573875][ T7720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.31563'. [ 1880.587838][ T7720] netlink: 16 bytes leftover after parsing attributes in process `syz.4.31563'. [ 1880.607495][ T30] audit: type=1326 audit(1752364311.718:7515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7715 comm="syz.0.31572" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1880.629651][ C0] vkms_vblank_simulate: vblank timer overrun [ 1880.668085][ T6239] usb 3-1: USB disconnect, device number 37 [ 1880.706550][ T30] audit: type=1326 audit(1752364311.718:7516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7715 comm="syz.0.31572" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1880.728602][ C0] vkms_vblank_simulate: vblank timer overrun [ 1880.807560][ T30] audit: type=1326 audit(1752364311.728:7517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7715 comm="syz.0.31572" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1880.829669][ C0] vkms_vblank_simulate: vblank timer overrun [ 1881.486297][ T7765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31576'. [ 1881.775148][ T7779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31584'. [ 1881.784797][ T7779] netlink: 'syz.1.31584': attribute type 5 has an invalid length. [ 1882.101571][ T7792] kvm: kvm [7791]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x3 [ 1882.366252][ T7805] sctp: [Deprecated]: syz.1.31592 (pid 7805) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1882.366252][ T7805] Use struct sctp_sack_info instead [ 1882.803092][ T7825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.31600'. [ 1882.925077][ T7825] netlink: 39 bytes leftover after parsing attributes in process `syz.3.31600'. [ 1883.004081][ T7831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.31602'. [ 1883.284057][ T7842] netlink: 32 bytes leftover after parsing attributes in process `syz.3.31607'. [ 1883.414184][ T7844] tap0: tun_chr_ioctl cmd 1074025677 [ 1883.427906][ T7844] tap0: linktype set to 0 [ 1883.876485][ T7869] netlink: 40 bytes leftover after parsing attributes in process `syz.1.31614'. [ 1884.331767][ T7887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1884.618940][ T7898] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1886.607766][ T6043] usb 5-1: new low-speed USB device number 54 using dummy_hcd [ 1886.767968][ T978] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1886.794488][ T6043] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1886.815325][ T6043] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1886.826011][ T6043] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1886.845672][ T6043] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1886.857001][ T6043] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1886.874690][ T6043] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1886.884678][ T6043] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1886.908735][ T7960] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1886.932830][ T6043] hub 5-1:1.0: bad descriptor, ignoring hub [ 1886.954073][ T978] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1886.973242][ T6043] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1886.982570][ T978] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1886.996670][ T6043] cdc_wdm 5-1:1.0: skipping garbage [ 1887.004238][ T6043] cdc_wdm 5-1:1.0: skipping garbage [ 1887.010053][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1887.025741][ T6043] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1887.040307][ T978] usb 4-1: config 0 descriptor?? [ 1887.047660][ T6043] cdc_wdm 5-1:1.0: Unknown control protocol [ 1887.463379][ T978] ath6kl: Unsupported hardware version: 0x0 [ 1887.487438][ T978] ath6kl: Failed to init ath6kl core: -22 [ 1887.493962][ T978] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 1887.668405][ T6239] usb 4-1: USB disconnect, device number 43 [ 1887.739657][ T7960] usb 5-1: reset low-speed USB device number 54 using dummy_hcd [ 1887.985184][ T8030] netlink: 'syz.2.31661': attribute type 11 has an invalid length. [ 1887.993745][ T8030] netlink: 36 bytes leftover after parsing attributes in process `syz.2.31661'. [ 1888.050480][ T7991] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1888.097531][ T6239] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1888.247592][ T6239] usb 2-1: Using ep0 maxpacket: 16 [ 1888.257997][ T6239] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1888.280327][ T6239] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1888.298744][ T6239] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1888.308092][ T6239] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1888.321973][ T6239] usb 2-1: config 0 descriptor?? [ 1888.387861][ T1211] usb 5-1: USB disconnect, device number 54 [ 1888.681322][ T8075] loop4: detected capacity change from 0 to 524255232 [ 1888.774927][ T6239] corsair 0003:1B1C:1B02.00BF: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 1889.175902][ T6239] usb 2-1: USB disconnect, device number 53 [ 1889.192300][ T8102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31679'. [ 1889.224528][ T8102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.31679'. [ 1889.352717][ T8120] netlink: 72 bytes leftover after parsing attributes in process `syz.2.31681'. [ 1889.860302][ T8153] fuse: Invalid gid '00000000000000000232' [ 1890.075619][ T8164] wg1: entered promiscuous mode [ 1890.087653][ T8164] wg1: entered allmulticast mode [ 1890.637915][ T6239] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1890.827300][ T6239] usb 3-1: Using ep0 maxpacket: 32 [ 1890.834547][ T6239] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1890.844089][ T6239] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1890.869557][ T6239] usb 3-1: config 0 descriptor?? [ 1891.093195][ T6239] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1891.123769][ T6239] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1891.150619][ T6239] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1891.166760][ T6239] usb 3-1: media controller created [ 1891.196522][ T6239] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1891.294917][ T6239] az6027: usb out operation failed. (-71) [ 1891.303003][ T6239] az6027: usb out operation failed. (-71) [ 1891.309352][ T6239] stb0899_attach: Driver disabled by Kconfig [ 1891.315759][ T6239] az6027: no front-end attached [ 1891.315759][ T6239] [ 1891.323938][ T6239] az6027: usb out operation failed. (-71) [ 1891.330649][ T6239] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1891.341854][ T6239] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input220 [ 1891.356287][ T6239] dvb-usb: schedule remote query interval to 400 msecs. [ 1891.364453][ T6239] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1891.377826][ T6239] usb 3-1: USB disconnect, device number 38 [ 1891.427377][ T1211] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1891.474779][ T6239] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1891.607931][ T1211] usb 2-1: Using ep0 maxpacket: 32 [ 1891.618065][ T1211] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1891.628425][ T1211] usb 2-1: config 0 has no interface number 0 [ 1891.658717][ T1211] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1891.669335][ T1211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1891.687370][ T1211] usb 2-1: Product: syz [ 1891.691585][ T1211] usb 2-1: Manufacturer: syz [ 1891.696301][ T1211] usb 2-1: SerialNumber: syz [ 1891.710773][ T1211] usb 2-1: config 0 descriptor?? [ 1891.723848][ T1211] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1891.933912][ T1211] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1891.952362][ T1211] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1892.367113][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1892.377505][ T1211] usb 2-1: USB disconnect, device number 54 [ 1892.388242][ T1211] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1892.402510][ T1211] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1892.416626][ T1211] quatech2 2-1:0.51: device disconnected [ 1894.445738][ T8392] CUSE: info not properly terminated [ 1894.871577][ T8413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.31771'. [ 1895.757453][ T978] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1895.787370][ T6043] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1895.907285][ T978] usb 5-1: Using ep0 maxpacket: 8 [ 1895.913682][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1895.931492][ T978] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1895.940866][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1895.949089][ T6043] usb 2-1: Using ep0 maxpacket: 32 [ 1895.957432][ T978] usb 5-1: config 0 descriptor?? [ 1895.964699][ T6043] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1895.975988][ T6043] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1895.986840][ T6043] usb 2-1: config 0 descriptor?? [ 1896.176552][ T978] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1896.204100][ T6043] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1896.231692][ T6043] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1896.246718][ T6043] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1896.256432][ T6043] usb 2-1: media controller created [ 1896.286978][ T8469] netlink: 16 bytes leftover after parsing attributes in process `syz.3.31787'. [ 1896.294881][ T6043] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1896.301275][ T8469] netlink: 16 bytes leftover after parsing attributes in process `syz.3.31787'. [ 1896.406867][ T6043] az6027: usb out operation failed. (-71) [ 1896.414859][ T1211] usb 5-1: USB disconnect, device number 55 [ 1896.435246][ T6043] az6027: usb out operation failed. (-71) [ 1896.456605][ T6043] stb0899_attach: Driver disabled by Kconfig [ 1896.475911][ T6043] az6027: no front-end attached [ 1896.475911][ T6043] [ 1896.486790][ T6043] az6027: usb out operation failed. (-71) [ 1896.492981][ T6043] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1896.506429][ T6043] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input221 [ 1896.535688][ T6043] dvb-usb: schedule remote query interval to 400 msecs. [ 1896.547782][ T6043] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1896.597095][ T6043] usb 2-1: USB disconnect, device number 55 [ 1896.714788][ T6043] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1896.810494][ T8512] netlink: 11 bytes leftover after parsing attributes in process `syz.2.31794'. [ 1897.572504][ T6043] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1897.749572][ T6043] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1897.759694][ T6043] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1897.768899][ T6043] usb 2-1: Product: syz [ 1897.773188][ T6043] usb 2-1: Manufacturer: syz [ 1897.778353][ T6043] usb 2-1: SerialNumber: syz [ 1897.795217][ T6043] usb 2-1: config 0 descriptor?? [ 1898.408834][ T978] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1898.424565][ T6043] usb 2-1: f81604_read: reg: 105 failed: -EPROTO [ 1898.442321][ T6043] f81604 2-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 1898.456408][ T6043] f81604 2-1:0.0: probe with driver f81604 failed with error -71 [ 1898.496253][ T6043] usb 2-1: USB disconnect, device number 56 [ 1898.588100][ T978] usb 4-1: Using ep0 maxpacket: 16 [ 1898.605512][ T978] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1898.613276][ T30] audit: type=1326 audit(1752364329.788:7518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8600 comm="syz.0.31819" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1898.642193][ T978] usb 4-1: config 0 has no interface number 0 [ 1898.649219][ T978] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1898.661228][ T978] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1898.671773][ T978] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1898.681224][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1898.692291][ T30] audit: type=1326 audit(1752364329.788:7519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8600 comm="syz.0.31819" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1898.715832][ T978] usb 4-1: config 0 descriptor?? [ 1898.734385][ T30] audit: type=1326 audit(1752364329.788:7520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8600 comm="syz.0.31819" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1898.765525][ T30] audit: type=1326 audit(1752364329.788:7521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8600 comm="syz.0.31819" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1898.795305][ T30] audit: type=1326 audit(1752364329.788:7522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8600 comm="syz.0.31819" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1898.832257][ T30] audit: type=1326 audit(1752364329.788:7523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8600 comm="syz.0.31819" exe="/root/syz-executor" sig=0 arch=40000003 syscall=393 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1898.865287][ T30] audit: type=1326 audit(1752364329.788:7524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8600 comm="syz.0.31819" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1898.916063][ T30] audit: type=1326 audit(1752364329.788:7525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8600 comm="syz.0.31819" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1899.147358][ T1211] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1899.257429][ T6043] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1899.317530][ T1211] usb 5-1: Using ep0 maxpacket: 32 [ 1899.328947][ T1211] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1899.337627][ T1211] usb 5-1: config 0 has no interface number 0 [ 1899.343781][ T1211] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1899.355372][ T1211] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1899.362371][ T978] uclogic 0003:28BD:0071.00C0: pen parameters not found [ 1899.373367][ T1211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1899.382366][ T978] uclogic 0003:28BD:0071.00C0: interface is invalid, ignoring [ 1899.393246][ T1211] usb 5-1: Product: syz [ 1899.403384][ T1211] usb 5-1: Manufacturer: syz [ 1899.410773][ T6043] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1899.413514][ T1211] usb 5-1: SerialNumber: syz [ 1899.430699][ T978] usb 4-1: USB disconnect, device number 44 [ 1899.436910][ T6043] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1899.442902][ T1211] usb 5-1: config 0 descriptor?? [ 1899.456413][ T6043] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1899.481010][ T6043] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1899.495278][ T6043] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1899.496201][ T1211] smsc75xx v1.0.0 [ 1899.520449][ T6043] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1899.528097][ T1211] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1899.537447][ T6043] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1899.547496][ T1211] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 1899.553893][ T6043] usb 3-1: Product: syz [ 1899.560667][ T6043] usb 3-1: Manufacturer: syz [ 1899.583095][ T6043] cdc_wdm 3-1:1.0: skipping garbage [ 1899.589660][ T6043] cdc_wdm 3-1:1.0: skipping garbage [ 1899.608482][ T6043] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1899.616088][ T6043] cdc_wdm 3-1:1.0: Unknown control protocol [ 1899.727834][ T1211] usb 5-1: USB disconnect, device number 56 [ 1899.804329][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1899.810990][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1899.818220][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1899.824864][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1899.837518][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1899.844178][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1899.850623][ T6239] usb 3-1: USB disconnect, device number 39 [ 1899.857332][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1899.863954][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1899.870048][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1899.878819][ C0] vkms_vblank_simulate: vblank timer overrun [ 1900.882589][ T8708] tap0: tun_chr_ioctl cmd 1074025677 [ 1900.907713][ T8708] tap0: linktype set to 823 [ 1901.103344][ T8727] netlink: 'syz.1.31851': attribute type 1 has an invalid length. [ 1901.130087][ T8727] netlink: 'syz.1.31851': attribute type 2 has an invalid length. [ 1902.355517][ T8785] loop9: detected capacity change from 0 to 3 [ 1902.377735][ T632] Dev loop9: unable to read RDB block 3 [ 1902.392325][ T632] loop9: unable to read partition table [ 1902.402324][ T632] loop9: partition table beyond EOD, truncated [ 1902.434692][ T8785] Dev loop9: unable to read RDB block 3 [ 1902.457863][ T8785] loop9: unable to read partition table [ 1902.464443][ T8785] loop9: partition table beyond EOD, truncated [ 1902.493975][ T8785] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1902.892687][ T30] audit: type=1326 audit(1752364334.078:7526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8808 comm="syz.0.31876" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1902.958155][ T30] audit: type=1326 audit(1752364334.108:7527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8808 comm="syz.0.31876" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1903.618412][ T8841] netem: incorrect ge model size [ 1903.623813][ T8841] netem: change failed [ 1903.854980][ T8849] netlink: 'syz.3.31891': attribute type 1 has an invalid length. [ 1903.894965][ T8849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1905.375931][ T8918] netlink: 'syz.0.31916': attribute type 11 has an invalid length. [ 1906.601948][ T8961] input: syz0 as /devices/virtual/input/input222 [ 1907.178285][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1907.178303][ T30] audit: type=1326 audit(1752364338.368:7534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8993 comm="syz.4.31939" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x0 [ 1908.211147][ T9036] could not allocate digest TFM handle _!5(iHP,omxę*71U"~ 2.>~e>/y [ 1909.092764][ T30] audit: type=1326 audit(1752364340.278:7535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9083 comm="syz.4.31970" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1909.118253][ T30] audit: type=1326 audit(1752364340.278:7536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9083 comm="syz.4.31970" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1909.142821][ T30] audit: type=1326 audit(1752364340.298:7537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9083 comm="syz.4.31970" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1909.218031][ T30] audit: type=1326 audit(1752364340.308:7538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9083 comm="syz.4.31970" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1909.240735][ T30] audit: type=1326 audit(1752364340.308:7539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9083 comm="syz.4.31970" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1909.285268][ T30] audit: type=1326 audit(1752364340.328:7540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9083 comm="syz.4.31970" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1909.377787][ T30] audit: type=1326 audit(1752364340.328:7541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9083 comm="" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1909.449982][ T30] audit: type=1326 audit(1752364340.328:7542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9083 comm="" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1909.516280][ T30] audit: type=1326 audit(1752364340.328:7543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9083 comm="" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1912.909455][ T9212] netlink: 16 bytes leftover after parsing attributes in process `syz.3.32017'. [ 1914.342199][ T9276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.32045'. [ 1914.399490][ T9276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.32045'. [ 1914.650459][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.656943][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.858203][ T9303] sctp: [Deprecated]: syz.1.32057 (pid 9303) Use of int in max_burst socket option deprecated. [ 1914.858203][ T9303] Use struct sctp_assoc_value instead [ 1914.984669][ T9311] geneve2: entered allmulticast mode [ 1915.777355][ T978] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 1915.939017][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1915.978029][ T978] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1916.006676][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1916.029648][ T978] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1916.039236][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1916.047780][ T978] usb 4-1: Product: syz [ 1916.052477][ T978] usb 4-1: Manufacturer: syz [ 1916.057102][ T978] usb 4-1: SerialNumber: syz [ 1916.065269][ T978] usb 4-1: config 0 descriptor?? [ 1916.074900][ T9340] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1916.090005][ T9340] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1916.117654][ T978] usb 4-1: ucan: probing device on interface #0 [ 1916.723325][ T978] ucan 4-1:0.0: probe with driver ucan failed with error -22 [ 1916.930241][ T6239] usb 4-1: USB disconnect, device number 45 [ 1916.952636][ T9412] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1917.013797][ T9418] netlink: 37 bytes leftover after parsing attributes in process `syz.2.32090'. [ 1917.593865][ T9447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32102'. [ 1918.017373][ T978] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1918.177546][ T978] usb 3-1: Using ep0 maxpacket: 16 [ 1918.184317][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1918.205400][ T978] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1918.215287][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1918.255397][ T978] usb 3-1: config 0 descriptor?? [ 1918.685580][ T978] mcp2221 0003:04D8:00DD.00C1: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1919.090067][ T978] usb 3-1: USB disconnect, device number 40 [ 1919.475542][ T9546] delete_channel: no stack [ 1919.758098][ T9559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32134'. [ 1920.260153][ T9582] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1920.580346][ T9597] netlink: 'syz.4.32149': attribute type 2 has an invalid length. [ 1921.505335][ T9643] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1922.489206][ T9686] input: syz0 as /devices/virtual/input/input223 [ 1922.790915][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1922.790932][ T30] audit: type=1326 audit(1752364353.978:7550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.3.32190" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1922.852777][ T30] audit: type=1326 audit(1752364353.978:7551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.3.32190" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1922.903057][ T30] audit: type=1326 audit(1752364353.988:7552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.3.32190" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1922.956587][ T30] audit: type=1326 audit(1752364353.988:7553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.3.32190" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1923.036625][ T30] audit: type=1326 audit(1752364353.998:7554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.3.32190" exe="/root/syz-executor" sig=0 arch=40000003 syscall=363 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1923.102164][ T30] audit: type=1326 audit(1752364353.998:7555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.3.32190" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1923.146133][ T30] audit: type=1326 audit(1752364354.008:7556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.3.32190" exe="/root/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1923.217551][ T30] audit: type=1326 audit(1752364354.008:7557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.3.32190" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1924.168660][ T9756] sch_fq: defrate 2048 ignored. [ 1925.700087][ T9813] netlink: 'syz.4.32231': attribute type 14 has an invalid length. [ 1926.145526][ T9830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.32238'. [ 1926.348534][ T9840] netlink: 'syz.3.32242': attribute type 7 has an invalid length. [ 1926.817268][ T30] audit: type=1326 audit(1752364357.988:7558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9854 comm="syz.3.32250" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f92539 code=0x0 [ 1926.872696][ T9857] bond_slave_0: entered promiscuous mode [ 1926.894099][ T9857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1926.913692][ T9857] Cannot create hsr debugfs directory [ 1926.924065][ T9857] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1926.957984][ T9857] hsr0: Slave B (bond_slave_0) is not up; please bring it up to get a fully working HSR network [ 1926.988063][ T9857] hsr0: entered promiscuous mode [ 1927.247348][ T978] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1927.330658][ T9884] loop7: detected capacity change from 0 to 7 [ 1927.343133][ T9884] Dev loop7: unable to read RDB block 7 [ 1927.352060][ T9884] loop7: AHDI p1 p2 [ 1927.356024][ T9884] loop7: partition table partially beyond EOD, truncated [ 1927.363900][ T9884] loop7: p1 start 1702000233 is beyond EOD, truncated [ 1927.397530][ T978] usb 5-1: Using ep0 maxpacket: 16 [ 1927.420005][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1927.437969][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1927.477396][ T978] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1927.509672][ T978] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1927.512532][ T9890] netlink: 136 bytes leftover after parsing attributes in process `syz.0.32258'. [ 1927.534440][ T9890] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1927.534448][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1927.551004][ T978] usb 5-1: config 0 descriptor?? [ 1927.999840][ T978] microsoft 0003:045E:07DA.00C2: unknown main item tag 0x0 [ 1928.025298][ T978] microsoft 0003:045E:07DA.00C2: ignoring exceeding usage max [ 1928.046612][ T978] microsoft 0003:045E:07DA.00C2: unknown main item tag 0x0 [ 1928.068148][ T978] microsoft 0003:045E:07DA.00C2: unknown main item tag 0x0 [ 1928.085721][ T978] microsoft 0003:045E:07DA.00C2: unknown main item tag 0x0 [ 1928.097506][ T978] microsoft 0003:045E:07DA.00C2: unknown main item tag 0x0 [ 1928.107113][ T978] microsoft 0003:045E:07DA.00C2: unknown main item tag 0x0 [ 1928.124495][ T978] microsoft 0003:045E:07DA.00C2: unknown main item tag 0x0 [ 1928.132269][ T978] microsoft 0003:045E:07DA.00C2: unknown main item tag 0x0 [ 1928.144798][ T978] microsoft 0003:045E:07DA.00C2: unknown main item tag 0x0 [ 1928.157117][ T9922] netlink: 16 bytes leftover after parsing attributes in process `syz.2.32271'. [ 1928.174279][ T978] microsoft 0003:045E:07DA.00C2: unknown main item tag 0x0 [ 1928.183945][ T978] microsoft 0003:045E:07DA.00C2: unknown main item tag 0x0 [ 1928.203710][ T978] ================================================================== [ 1928.211829][ T978] BUG: KASAN: slab-out-of-bounds in mon_bin_event+0x1211/0x2250 [ 1928.219501][ T978] Read of size 3776 at addr ffff8880305a50e1 by task kworker/1:2/978 [ 1928.227593][ T978] [ 1928.229935][ T978] CPU: 1 UID: 0 PID: 978 Comm: kworker/1:2 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 1928.229960][ T978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1928.229975][ T978] Workqueue: usb_hub_wq hub_event [ 1928.230000][ T978] Call Trace: [ 1928.230009][ T978] [ 1928.230019][ T978] dump_stack_lvl+0x189/0x250 [ 1928.230043][ T978] ? __kasan_check_byte+0x12/0x40 [ 1928.230066][ T978] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1928.230088][ T978] ? lock_release+0x4b/0x3e0 [ 1928.230110][ T978] ? __virt_addr_valid+0x4a5/0x5c0 [ 1928.230134][ T978] print_report+0xca/0x230 [ 1928.230151][ T978] ? mon_bin_event+0x1211/0x2250 [ 1928.230175][ T978] kasan_report+0x118/0x150 [ 1928.230197][ T978] ? mon_bin_event+0x1211/0x2250 [ 1928.230225][ T978] kasan_check_range+0x2b0/0x2c0 [ 1928.230247][ T978] ? mon_bin_event+0x1211/0x2250 [ 1928.230271][ T978] __asan_memcpy+0x29/0x70 [ 1928.230289][ T978] mon_bin_event+0x1211/0x2250 [ 1928.230323][ T978] ? __pfx_mon_bin_event+0x10/0x10 [ 1928.230345][ T978] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1928.230369][ T978] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1928.230392][ T978] ? __driver_probe_device+0x18c/0x2f0 [ 1928.230416][ T978] ? __device_attach_driver+0x2ce/0x530 [ 1928.230438][ T978] ? bus_for_each_drv+0x251/0x2e0 [ 1928.230455][ T978] ? __device_attach+0x2b8/0x400 [ 1928.230476][ T978] ? bus_probe_device+0x185/0x260 [ 1928.230494][ T978] ? hid_add_device+0x398/0x540 [ 1928.230527][ T978] ? __pfx_mon_bin_submit+0x10/0x10 [ 1928.230552][ T978] mon_submit+0x196/0x210 [ 1928.230576][ T978] usb_hcd_submit_urb+0x11a/0x1aa0 [ 1928.230604][ T978] usb_start_wait_urb+0x114/0x4c0 [ 1928.230625][ T978] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1928.230651][ T978] usb_control_msg+0x232/0x3e0 [ 1928.230671][ T978] usbhid_raw_request+0x3cd/0x4e0 [ 1928.230700][ T978] __hid_request+0x1be/0x370 [ 1928.230721][ T978] hidinput_connect+0x218a/0x3030 [ 1928.230757][ T978] hid_connect+0x499/0x1980 [ 1928.230780][ T978] ? usbhid_start+0x1a92/0x24b0 [ 1928.230804][ T978] ? __pfx_hid_connect+0x10/0x10 [ 1928.230830][ T978] hid_hw_start+0xa8/0x120 [ 1928.230848][ T978] ms_probe+0x180/0x430 [ 1928.230873][ T978] hid_device_probe+0x39d/0x710 [ 1928.230894][ T978] ? driver_sysfs_add+0x1fe/0x210 [ 1928.230917][ T978] ? __pfx_hid_device_probe+0x10/0x10 [ 1928.230936][ T978] really_probe+0x26a/0x9a0 [ 1928.230962][ T978] __driver_probe_device+0x18c/0x2f0 [ 1928.230985][ T978] driver_probe_device+0x4f/0x430 [ 1928.231009][ T978] __device_attach_driver+0x2ce/0x530 [ 1928.231034][ T978] bus_for_each_drv+0x251/0x2e0 [ 1928.231052][ T978] ? __pfx___device_attach_driver+0x10/0x10 [ 1928.231075][ T978] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1928.231092][ T978] ? __lock_acquire+0xab9/0xd20 [ 1928.231114][ T978] __device_attach+0x2b8/0x400 [ 1928.231136][ T978] ? __pfx___device_attach+0x10/0x10 [ 1928.231159][ T978] ? do_raw_spin_unlock+0x122/0x240 [ 1928.231183][ T978] bus_probe_device+0x185/0x260 [ 1928.231203][ T978] device_add+0x7b6/0xb50 [ 1928.231225][ T978] hid_add_device+0x398/0x540 [ 1928.231246][ T978] usbhid_probe+0xe13/0x12a0 [ 1928.231274][ T978] usb_probe_interface+0x641/0xbc0 [ 1928.231300][ T978] ? __pfx_usb_probe_interface+0x10/0x10 [ 1928.231320][ T978] really_probe+0x26a/0x9a0 [ 1928.231345][ T978] __driver_probe_device+0x18c/0x2f0 [ 1928.231368][ T978] driver_probe_device+0x4f/0x430 [ 1928.231392][ T978] __device_attach_driver+0x2ce/0x530 [ 1928.231417][ T978] bus_for_each_drv+0x251/0x2e0 [ 1928.231435][ T978] ? __pfx___device_attach_driver+0x10/0x10 [ 1928.231464][ T978] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1928.231486][ T978] __device_attach+0x2b8/0x400 [ 1928.231514][ T978] ? __pfx___device_attach+0x10/0x10 [ 1928.231537][ T978] ? do_raw_spin_unlock+0x122/0x240 [ 1928.231562][ T978] bus_probe_device+0x185/0x260 [ 1928.231583][ T978] device_add+0x7b6/0xb50 [ 1928.231605][ T978] usb_set_configuration+0x1a87/0x20e0 [ 1928.231637][ T978] usb_generic_driver_probe+0x8d/0x150 [ 1928.231658][ T978] usb_probe_device+0x1c4/0x390 [ 1928.231680][ T978] ? __pfx_usb_probe_device+0x10/0x10 [ 1928.231699][ T978] really_probe+0x26a/0x9a0 [ 1928.231724][ T978] __driver_probe_device+0x18c/0x2f0 [ 1928.231747][ T978] driver_probe_device+0x4f/0x430 [ 1928.231770][ T978] __device_attach_driver+0x2ce/0x530 [ 1928.231794][ T978] bus_for_each_drv+0x251/0x2e0 [ 1928.231813][ T978] ? __pfx___device_attach_driver+0x10/0x10 [ 1928.231835][ T978] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1928.231857][ T978] __device_attach+0x2b8/0x400 [ 1928.231879][ T978] ? __pfx___device_attach+0x10/0x10 [ 1928.231902][ T978] ? do_raw_spin_unlock+0x122/0x240 [ 1928.231927][ T978] bus_probe_device+0x185/0x260 [ 1928.231945][ T978] device_add+0x7b6/0xb50 [ 1928.231965][ T978] usb_new_device+0xa39/0x16c0 [ 1928.231994][ T978] ? __pfx_usb_new_device+0x10/0x10 [ 1928.232020][ T978] ? _raw_spin_unlock_irq+0x23/0x50 [ 1928.232045][ T978] ? lockdep_hardirqs_on+0x9c/0x150 [ 1928.232071][ T978] hub_event+0x2941/0x4a00 [ 1928.232112][ T978] ? __pfx_hub_event+0x10/0x10 [ 1928.232130][ T978] ? process_scheduled_works+0x9ef/0x17b0 [ 1928.232153][ T978] ? _raw_spin_unlock_irq+0x23/0x50 [ 1928.232174][ T978] ? process_scheduled_works+0x9ef/0x17b0 [ 1928.232193][ T978] ? process_scheduled_works+0x9ef/0x17b0 [ 1928.232213][ T978] process_scheduled_works+0xae1/0x17b0 [ 1928.232244][ T978] ? __pfx_process_scheduled_works+0x10/0x10 [ 1928.232271][ T978] worker_thread+0x8a0/0xda0 [ 1928.232302][ T978] kthread+0x70e/0x8a0 [ 1928.232323][ T978] ? __pfx_worker_thread+0x10/0x10 [ 1928.232339][ T978] ? __pfx_kthread+0x10/0x10 [ 1928.232360][ T978] ? _raw_spin_unlock_irq+0x23/0x50 [ 1928.232380][ T978] ? lockdep_hardirqs_on+0x9c/0x150 [ 1928.232401][ T978] ? __pfx_kthread+0x10/0x10 [ 1928.232424][ T978] ret_from_fork+0x3fc/0x770 [ 1928.232444][ T978] ? __pfx_ret_from_fork+0x10/0x10 [ 1928.232463][ T978] ? __switch_to_asm+0x39/0x70 [ 1928.232484][ T978] ? __switch_to_asm+0x33/0x70 [ 1928.232505][ T978] ? __pfx_kthread+0x10/0x10 [ 1928.232538][ T978] ret_from_fork_asm+0x1a/0x30 [ 1928.232568][ T978] [ 1928.232575][ T978] [ 1928.814212][ T978] Allocated by task 978: [ 1928.818467][ T978] kasan_save_track+0x3e/0x80 [ 1928.823141][ T978] __kasan_kmalloc+0x93/0xb0 [ 1928.827719][ T978] __kmalloc_noprof+0x27a/0x4f0 [ 1928.832566][ T978] __hid_request+0x94/0x370 [ 1928.837055][ T978] hidinput_connect+0x218a/0x3030 [ 1928.842073][ T978] hid_connect+0x499/0x1980 [ 1928.846565][ T978] hid_hw_start+0xa8/0x120 [ 1928.850967][ T978] ms_probe+0x180/0x430 [ 1928.855130][ T978] hid_device_probe+0x39d/0x710 [ 1928.860061][ T978] really_probe+0x26a/0x9a0 [ 1928.864558][ T978] __driver_probe_device+0x18c/0x2f0 [ 1928.869836][ T978] driver_probe_device+0x4f/0x430 [ 1928.874853][ T978] __device_attach_driver+0x2ce/0x530 [ 1928.880220][ T978] bus_for_each_drv+0x251/0x2e0 [ 1928.885062][ T978] __device_attach+0x2b8/0x400 [ 1928.889822][ T978] bus_probe_device+0x185/0x260 [ 1928.894669][ T978] device_add+0x7b6/0xb50 [ 1928.898991][ T978] hid_add_device+0x398/0x540 [ 1928.903660][ T978] usbhid_probe+0xe13/0x12a0 [ 1928.908247][ T978] usb_probe_interface+0x641/0xbc0 [ 1928.913350][ T978] really_probe+0x26a/0x9a0 [ 1928.917846][ T978] __driver_probe_device+0x18c/0x2f0 [ 1928.923120][ T978] driver_probe_device+0x4f/0x430 [ 1928.928137][ T978] __device_attach_driver+0x2ce/0x530 [ 1928.933504][ T978] bus_for_each_drv+0x251/0x2e0 [ 1928.938344][ T978] __device_attach+0x2b8/0x400 [ 1928.943101][ T978] bus_probe_device+0x185/0x260 [ 1928.947939][ T978] device_add+0x7b6/0xb50 [ 1928.952261][ T978] usb_set_configuration+0x1a87/0x20e0 [ 1928.957718][ T978] usb_generic_driver_probe+0x8d/0x150 [ 1928.963171][ T978] usb_probe_device+0x1c4/0x390 [ 1928.968015][ T978] really_probe+0x26a/0x9a0 [ 1928.972511][ T978] __driver_probe_device+0x18c/0x2f0 [ 1928.977790][ T978] driver_probe_device+0x4f/0x430 [ 1928.982809][ T978] __device_attach_driver+0x2ce/0x530 [ 1928.988174][ T978] bus_for_each_drv+0x251/0x2e0 [ 1928.993041][ T978] __device_attach+0x2b8/0x400 [ 1928.997796][ T978] bus_probe_device+0x185/0x260 [ 1929.002638][ T978] device_add+0x7b6/0xb50 [ 1929.006959][ T978] usb_new_device+0xa39/0x16c0 [ 1929.011744][ T978] hub_event+0x2941/0x4a00 [ 1929.016170][ T978] process_scheduled_works+0xae1/0x17b0 [ 1929.021722][ T978] worker_thread+0x8a0/0xda0 [ 1929.026309][ T978] kthread+0x70e/0x8a0 [ 1929.030374][ T978] ret_from_fork+0x3fc/0x770 [ 1929.034953][ T978] ret_from_fork_asm+0x1a/0x30 [ 1929.039714][ T978] [ 1929.042033][ T978] The buggy address belongs to the object at ffff8880305a50e0 [ 1929.042033][ T978] which belongs to the cache kmalloc-8 of size 8 [ 1929.055733][ T978] The buggy address is located 1 bytes inside of [ 1929.055733][ T978] allocated 7-byte region [ffff8880305a50e0, ffff8880305a50e7) [ 1929.069521][ T978] [ 1929.071833][ T978] The buggy address belongs to the physical page: [ 1929.078230][ T978] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x305a5 [ 1929.086987][ T978] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1929.094086][ T978] page_type: f5(slab) [ 1929.098058][ T978] raw: 00fff00000000000 ffff88801a441500 dead000000000100 dead000000000122 [ 1929.106630][ T978] raw: 0000000000000000 0000000080800080 00000000f5000000 0000000000000000 [ 1929.115197][ T978] page dumped because: kasan: bad access detected [ 1929.121609][ T978] page_owner tracks the page as allocated [ 1929.127310][ T978] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6139, tgid 6139 (syz-executor), ts 852496337283, free_ts 852496315422 [ 1929.146774][ T978] post_alloc_hook+0x240/0x2a0 [ 1929.151550][ T978] get_page_from_freelist+0x21e4/0x22c0 [ 1929.157092][ T978] __alloc_frozen_pages_noprof+0x181/0x370 [ 1929.162897][ T978] alloc_pages_mpol+0x232/0x4a0 [ 1929.167740][ T978] allocate_slab+0x8a/0x3b0 [ 1929.172250][ T978] ___slab_alloc+0xbfc/0x1480 [ 1929.176918][ T978] __kmalloc_node_noprof+0x2fd/0x4e0 [ 1929.182194][ T978] __vmalloc_node_range_noprof+0x5a9/0x12f0 [ 1929.188076][ T978] vzalloc_noprof+0xb2/0xf0 [ 1929.192574][ T978] alloc_counters+0xd3/0x6d0 [ 1929.197157][ T978] compat_copy_entries_to_user+0xa4/0x520 [ 1929.202871][ T978] do_ip6t_get_ctl+0xb89/0x1180 [ 1929.207714][ T978] nf_getsockopt+0x26b/0x290 [ 1929.212302][ T978] ipv6_getsockopt+0x1ed/0x290 [ 1929.217059][ T978] do_sock_getsockopt+0x35d/0x650 [ 1929.222072][ T978] __sys_getsockopt+0x128/0x1d0 [ 1929.226914][ T978] page last free pid 6139 tgid 6139 stack trace: [ 1929.233233][ T978] __free_frozen_pages+0xc71/0xe70 [ 1929.238349][ T978] kasan_populate_vmalloc+0x18a/0x1a0 [ 1929.243711][ T978] alloc_vmap_area+0xd51/0x1490 [ 1929.248560][ T978] __get_vm_area_node+0x1f8/0x300 [ 1929.253576][ T978] __vmalloc_node_range_noprof+0x301/0x12f0 [ 1929.259460][ T978] vzalloc_noprof+0xb2/0xf0 [ 1929.263954][ T978] alloc_counters+0xd3/0x6d0 [ 1929.268537][ T978] compat_copy_entries_to_user+0xa4/0x520 [ 1929.274249][ T978] do_ip6t_get_ctl+0xb89/0x1180 [ 1929.279095][ T978] nf_getsockopt+0x26b/0x290 [ 1929.283679][ T978] ipv6_getsockopt+0x1ed/0x290 [ 1929.288438][ T978] do_sock_getsockopt+0x35d/0x650 [ 1929.293455][ T978] __sys_getsockopt+0x128/0x1d0 [ 1929.298298][ T978] __ia32_compat_sys_socketcall+0x824/0x9c0 [ 1929.304184][ T978] __do_fast_syscall_32+0xb6/0x2b0 [ 1929.309287][ T978] do_fast_syscall_32+0x34/0x80 [ 1929.314126][ T978] [ 1929.316523][ T978] Memory state around the buggy address: [ 1929.322141][ T978] ffff8880305a4f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1929.330190][ T978] ffff8880305a5000: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 1929.338242][ T978] >ffff8880305a5080: fa fc fc fc fa fc fc fc fa fc fc fc 07 fc fc fc [ 1929.346289][ T978] ^ [ 1929.353468][ T978] ffff8880305a5100: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 1929.361523][ T978] ffff8880305a5180: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 1929.369577][ T978] ================================================================== [ 1929.377651][ T978] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1929.384837][ T978] CPU: 1 UID: 0 PID: 978 Comm: kworker/1:2 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 1929.396803][ T978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1929.406851][ T978] Workqueue: usb_hub_wq hub_event [ 1929.411879][ T978] Call Trace: [ 1929.415150][ T978] [ 1929.418076][ T978] dump_stack_lvl+0x99/0x250 [ 1929.422661][ T978] ? __asan_memcpy+0x40/0x70 [ 1929.427246][ T978] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1929.432435][ T978] ? __pfx__printk+0x10/0x10 [ 1929.437023][ T978] panic+0x2db/0x790 [ 1929.441000][ T978] ? __pfx_panic+0x10/0x10 [ 1929.445414][ T978] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1929.451305][ T978] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1929.457636][ T978] ? print_memory_metadata+0x314/0x400 [ 1929.463092][ T978] ? mon_bin_event+0x1211/0x2250 [ 1929.468029][ T978] check_panic_on_warn+0x89/0xb0 [ 1929.472968][ T978] ? mon_bin_event+0x1211/0x2250 [ 1929.477905][ T978] end_report+0x78/0x160 [ 1929.482141][ T978] kasan_report+0x129/0x150 [ 1929.486638][ T978] ? mon_bin_event+0x1211/0x2250 [ 1929.491578][ T978] kasan_check_range+0x2b0/0x2c0 [ 1929.496510][ T978] ? mon_bin_event+0x1211/0x2250 [ 1929.501447][ T978] __asan_memcpy+0x29/0x70 [ 1929.505904][ T978] mon_bin_event+0x1211/0x2250 [ 1929.510673][ T978] ? __pfx_mon_bin_event+0x10/0x10 [ 1929.515783][ T978] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1929.521151][ T978] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1929.527039][ T978] ? __driver_probe_device+0x18c/0x2f0 [ 1929.532497][ T978] ? __device_attach_driver+0x2ce/0x530 [ 1929.538042][ T978] ? bus_for_each_drv+0x251/0x2e0 [ 1929.543060][ T978] ? __device_attach+0x2b8/0x400 [ 1929.547989][ T978] ? bus_probe_device+0x185/0x260 [ 1929.553028][ T978] ? hid_add_device+0x398/0x540 [ 1929.557870][ T978] ? __pfx_mon_bin_submit+0x10/0x10 [ 1929.563076][ T978] mon_submit+0x196/0x210 [ 1929.567399][ T978] usb_hcd_submit_urb+0x11a/0x1aa0 [ 1929.572512][ T978] usb_start_wait_urb+0x114/0x4c0 [ 1929.577530][ T978] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1929.583068][ T978] usb_control_msg+0x232/0x3e0 [ 1929.587823][ T978] usbhid_raw_request+0x3cd/0x4e0 [ 1929.592847][ T978] __hid_request+0x1be/0x370 [ 1929.597437][ T978] hidinput_connect+0x218a/0x3030 [ 1929.602487][ T978] hid_connect+0x499/0x1980 [ 1929.606987][ T978] ? usbhid_start+0x1a92/0x24b0 [ 1929.611837][ T978] ? __pfx_hid_connect+0x10/0x10 [ 1929.616773][ T978] hid_hw_start+0xa8/0x120 [ 1929.621181][ T978] ms_probe+0x180/0x430 [ 1929.625333][ T978] hid_device_probe+0x39d/0x710 [ 1929.630177][ T978] ? driver_sysfs_add+0x1fe/0x210 [ 1929.635195][ T978] ? __pfx_hid_device_probe+0x10/0x10 [ 1929.640564][ T978] really_probe+0x26a/0x9a0 [ 1929.645064][ T978] __driver_probe_device+0x18c/0x2f0 [ 1929.650343][ T978] driver_probe_device+0x4f/0x430 [ 1929.655365][ T978] __device_attach_driver+0x2ce/0x530 [ 1929.660734][ T978] bus_for_each_drv+0x251/0x2e0 [ 1929.665573][ T978] ? __pfx___device_attach_driver+0x10/0x10 [ 1929.671460][ T978] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1929.676820][ T978] ? __lock_acquire+0xab9/0xd20 [ 1929.681665][ T978] __device_attach+0x2b8/0x400 [ 1929.686431][ T978] ? __pfx___device_attach+0x10/0x10 [ 1929.691713][ T978] ? do_raw_spin_unlock+0x122/0x240 [ 1929.696910][ T978] bus_probe_device+0x185/0x260 [ 1929.701750][ T978] device_add+0x7b6/0xb50 [ 1929.706073][ T978] hid_add_device+0x398/0x540 [ 1929.710743][ T978] usbhid_probe+0xe13/0x12a0 [ 1929.715331][ T978] usb_probe_interface+0x641/0xbc0 [ 1929.720438][ T978] ? __pfx_usb_probe_interface+0x10/0x10 [ 1929.726064][ T978] really_probe+0x26a/0x9a0 [ 1929.730564][ T978] __driver_probe_device+0x18c/0x2f0 [ 1929.735842][ T978] driver_probe_device+0x4f/0x430 [ 1929.740862][ T978] __device_attach_driver+0x2ce/0x530 [ 1929.746228][ T978] bus_for_each_drv+0x251/0x2e0 [ 1929.751070][ T978] ? __pfx___device_attach_driver+0x10/0x10 [ 1929.756958][ T978] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1929.762323][ T978] __device_attach+0x2b8/0x400 [ 1929.767083][ T978] ? __pfx___device_attach+0x10/0x10 [ 1929.772364][ T978] ? do_raw_spin_unlock+0x122/0x240 [ 1929.777557][ T978] bus_probe_device+0x185/0x260 [ 1929.782401][ T978] device_add+0x7b6/0xb50 [ 1929.786724][ T978] usb_set_configuration+0x1a87/0x20e0 [ 1929.792183][ T978] usb_generic_driver_probe+0x8d/0x150 [ 1929.797632][ T978] usb_probe_device+0x1c4/0x390 [ 1929.802476][ T978] ? __pfx_usb_probe_device+0x10/0x10 [ 1929.807836][ T978] really_probe+0x26a/0x9a0 [ 1929.812338][ T978] __driver_probe_device+0x18c/0x2f0 [ 1929.817617][ T978] driver_probe_device+0x4f/0x430 [ 1929.822636][ T978] __device_attach_driver+0x2ce/0x530 [ 1929.828015][ T978] bus_for_each_drv+0x251/0x2e0 [ 1929.832855][ T978] ? __pfx___device_attach_driver+0x10/0x10 [ 1929.838743][ T978] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1929.844113][ T978] __device_attach+0x2b8/0x400 [ 1929.848872][ T978] ? __pfx___device_attach+0x10/0x10 [ 1929.854151][ T978] ? do_raw_spin_unlock+0x122/0x240 [ 1929.859348][ T978] bus_probe_device+0x185/0x260 [ 1929.864190][ T978] device_add+0x7b6/0xb50 [ 1929.868516][ T978] usb_new_device+0xa39/0x16c0 [ 1929.873281][ T978] ? __pfx_usb_new_device+0x10/0x10 [ 1929.878474][ T978] ? _raw_spin_unlock_irq+0x23/0x50 [ 1929.883667][ T978] ? lockdep_hardirqs_on+0x9c/0x150 [ 1929.888867][ T978] hub_event+0x2941/0x4a00 [ 1929.893293][ T978] ? __pfx_hub_event+0x10/0x10 [ 1929.898048][ T978] ? process_scheduled_works+0x9ef/0x17b0 [ 1929.903761][ T978] ? _raw_spin_unlock_irq+0x23/0x50 [ 1929.909059][ T978] ? process_scheduled_works+0x9ef/0x17b0 [ 1929.914813][ T978] ? process_scheduled_works+0x9ef/0x17b0 [ 1929.920535][ T978] process_scheduled_works+0xae1/0x17b0 [ 1929.926085][ T978] ? __pfx_process_scheduled_works+0x10/0x10 [ 1929.932060][ T978] worker_thread+0x8a0/0xda0 [ 1929.936650][ T978] kthread+0x70e/0x8a0 [ 1929.940716][ T978] ? __pfx_worker_thread+0x10/0x10 [ 1929.945818][ T978] ? __pfx_kthread+0x10/0x10 [ 1929.950410][ T978] ? _raw_spin_unlock_irq+0x23/0x50 [ 1929.955604][ T978] ? lockdep_hardirqs_on+0x9c/0x150 [ 1929.960799][ T978] ? __pfx_kthread+0x10/0x10 [ 1929.965383][ T978] ret_from_fork+0x3fc/0x770 [ 1929.969987][ T978] ? __pfx_ret_from_fork+0x10/0x10 [ 1929.975115][ T978] ? __switch_to_asm+0x39/0x70 [ 1929.979883][ T978] ? __switch_to_asm+0x33/0x70 [ 1929.984642][ T978] ? __pfx_kthread+0x10/0x10 [ 1929.989231][ T978] ret_from_fork_asm+0x1a/0x30 [ 1929.993993][ T978] [ 1929.997249][ T978] Kernel Offset: disabled [ 1930.001567][ T978] Rebooting in 86400 seconds..