last executing test programs: 3.359825652s ago: executing program 1 (id=24170): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000000)={0xc, r1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0x1f}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000340)={0x8, r1}) 3.358703774s ago: executing program 1 (id=24171): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) io_setup(0x58, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) close(0x4) write(r0, 0x0, 0x0) 3.257621813s ago: executing program 1 (id=24174): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 3.084213289s ago: executing program 1 (id=24176): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) 2.440425582s ago: executing program 1 (id=24184): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000240)=0x2) 1.856733942s ago: executing program 3 (id=24187): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) close(r0) 1.739680134s ago: executing program 3 (id=24189): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) unshare(0x40400) readv(r0, 0x0, 0x0) write$cgroup_pid(r0, 0x0, 0x0) 1.396565694s ago: executing program 4 (id=24194): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 1.378092671s ago: executing program 3 (id=24196): r0 = syz_io_uring_setup(0x4c79, &(0x7f0000000000)={0x0, 0x1f4b, 0x40, 0x3, 0x3e}, &(0x7f00000000c0), &(0x7f0000000100)) r1 = socket$l2tp6(0xa, 0x2, 0x73) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x9, 0xf], 0x2) 1.104864714s ago: executing program 4 (id=24201): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x3, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 1.020394929s ago: executing program 4 (id=24203): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x400c840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 864.768692ms ago: executing program 4 (id=24205): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz0\x00'}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r0, 0x5501) 814.529432ms ago: executing program 4 (id=24207): r0 = landlock_create_ruleset(&(0x7f0000000200)={0x6053, 0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') 744.462815ms ago: executing program 4 (id=24209): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000200)=""/73, 0x49) 687.345531ms ago: executing program 2 (id=24212): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000022c0)=@deltfilter={0x40, 0x2d, 0x2, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0x10}, {0x7ffa, 0x2}, {0x9, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x54}, @filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_EMATCHES={0x4}]}}]}, 0x40}}, 0x4080) 637.869206ms ago: executing program 2 (id=24213): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 576.347856ms ago: executing program 2 (id=24215): r0 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) r1 = epoll_create(0x4) epoll_pwait2(r1, &(0x7f0000000380)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000009}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000040)={0x5, {"4e068be8035430cf8aa115d0d8d0f21c", "af86e7d62fdce0b68c2a7502b5b00c9f", "fad16f5a00"}, 0xe, 0x5}) 575.590189ms ago: executing program 0 (id=24216): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) tkill(r0, 0x12) wait4(0x0, 0x0, 0x8, 0x0) 556.898879ms ago: executing program 1 (id=24217): r0 = open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r1, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1cd403, 0x1) fcntl$setlease(r0, 0x400, 0x0) 499.618888ms ago: executing program 0 (id=24218): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) cachestat(r1, 0x0, 0x0, 0x0) 460.23447ms ago: executing program 0 (id=24219): sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b21"], 0x208}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000014000580080001"], 0x5c}}, 0x0) 428.539102ms ago: executing program 2 (id=24220): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) 396.538282ms ago: executing program 0 (id=24221): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x60, 0x10, 0x403, 0x300, 0x2000000, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0xf}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) 336.643259ms ago: executing program 0 (id=24222): creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x8c7) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000740), 0x0, 0x0, 0x2) 276.605489ms ago: executing program 2 (id=24223): r0 = syz_io_uring_setup(0x88f, &(0x7f00000010c0)={0x0, 0xc941, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$can_j1939(0x1d, 0x2, 0x7) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x73, &(0x7f00000000c0)=@can, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) 255.99052ms ago: executing program 3 (id=24224): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)={[{0x2b, 'memory'}]}, 0x8) 209.593531ms ago: executing program 0 (id=24225): syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) r0 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0x2, 0xbfdffdfc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0xffffffff, 0x0, 0x0, 0x0) 158.974867ms ago: executing program 3 (id=24226): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x2, 0x80000000, 0xd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2d8a7313}, 0x94) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}}) 98.115066ms ago: executing program 3 (id=24227): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x3}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) 0s ago: executing program 2 (id=24228): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0xdd, 0x4, 0x6, 0x21, 0xfe, 0x3, 0xd2, 0xa0, 0x7, 0xff, 0x3, 0x2, 0x86, 0x24}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r1, 0x2398, 0x5344}, &(0x7f0000000280)=0x8) kernel console output (not intermixed with test programs): d USB device number 12 using dummy_hcd [ 1043.858484][T13446] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1043.874378][T13446] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1043.905813][T13446] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1043.939856][T13446] usb 4-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 1043.976584][T13446] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.999927][T13446] usb 4-1: config 0 descriptor?? [ 1044.027037][ T6939] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1044.373586][ T6995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22517'. [ 1044.494659][T13446] aureal 0003:0755:2626.00D7: fixing Aureal Cy se W-01RN USB_V3.1 report descriptor. [ 1044.534928][ T1210] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1044.637644][T13446] aureal 0003:0755:2626.00D7: unknown main item tag 0x6 [ 1044.644637][T13446] aureal 0003:0755:2626.00D7: report_id 29495 is invalid [ 1044.651985][T13446] aureal 0003:0755:2626.00D7: item 0 2 1 8 parsing failed [ 1044.660182][T13446] aureal 0003:0755:2626.00D7: probe with driver aureal failed with error -22 [ 1044.674998][ T1210] usb 5-1: device descriptor read/64, error -71 [ 1044.675455][T13446] usb 4-1: USB disconnect, device number 12 [ 1044.924893][ T1210] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1045.064962][ T1210] usb 5-1: device descriptor read/64, error -71 [ 1045.175275][ T1210] usb usb5-port1: attempt power cycle [ 1045.349452][ T7059] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1045.503189][ T7069] netlink: 16 bytes leftover after parsing attributes in process `syz.1.22536'. [ 1045.522115][ T7069] bond0: entered promiscuous mode [ 1045.527543][ T1210] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1045.535985][ T7069] bond6: entered promiscuous mode [ 1045.543665][ T7069] bond0: left promiscuous mode [ 1045.549541][ T7069] bond6: left promiscuous mode [ 1045.556638][ T1210] usb 5-1: device descriptor read/8, error -71 [ 1045.804914][ T1210] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1045.825637][ T1210] usb 5-1: device descriptor read/8, error -71 [ 1045.935589][ T1210] usb usb5-port1: unable to enumerate USB device [ 1046.509070][ T7104] netlink: 64 bytes leftover after parsing attributes in process `syz.3.22548'. [ 1047.717029][ T6031] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 1047.744867][ T1210] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 1047.888331][ T6031] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1047.898563][ T6031] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.909618][ T1210] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1047.922124][ T6031] usb 3-1: config 0 descriptor?? [ 1047.927176][ T1210] usb 4-1: config 0 has no interface number 0 [ 1047.933328][ T1210] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1047.948802][ T6031] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1047.957782][ T1210] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1047.969416][ T1210] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1047.979269][ T1210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.993194][ T1210] usb 4-1: config 0 descriptor?? [ 1047.999210][ T7156] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1048.021159][ T1210] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1048.255118][T13446] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1048.265441][ T10] usb 4-1: USB disconnect, device number 13 [ 1048.265576][ C1] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1048.425355][T13446] usb 2-1: Using ep0 maxpacket: 16 [ 1048.441314][T13446] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.452535][T13446] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1048.464642][T13446] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1048.474563][T13446] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1048.485016][T13446] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1048.500635][T13446] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1048.509922][T13446] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1048.518153][T13446] usb 2-1: Manufacturer: syz [ 1048.526252][T13446] usb 2-1: config 0 descriptor?? [ 1048.563477][ T6031] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1048.576757][ T6031] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1048.771645][ T6031] usb 3-1: USB disconnect, device number 17 [ 1048.786675][T13446] rc_core: IR keymap rc-hauppauge not found [ 1048.793992][T13446] Registered IR keymap rc-empty [ 1048.799053][ T10] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1048.807425][T13446] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1048.825327][T13446] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1048.855848][T13446] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1048.869561][T13446] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input192 [ 1048.884286][T13446] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1048.906751][T13446] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1048.925165][T13446] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1048.939657][ T7182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1048.948544][T13446] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1048.955815][ T7182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1048.975166][T13446] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1048.984888][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1048.993042][ T10] usb 5-1: config 0 has no interface number 0 [ 1048.999798][T13446] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1049.010265][ T10] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1049.019695][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.028560][T13446] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1049.036192][ T10] usb 5-1: Product: syz [ 1049.040449][ T10] usb 5-1: Manufacturer: syz [ 1049.045272][ T10] usb 5-1: SerialNumber: syz [ 1049.054145][ T10] usb 5-1: config 0 descriptor?? [ 1049.060261][T13446] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1049.061740][ T7225] netlink: 36 bytes leftover after parsing attributes in process `syz.3.22577'. [ 1049.078486][ T7225] netem: incorrect gi model size [ 1049.084367][ T7225] netem: change failed [ 1049.095161][T13446] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1049.126626][T13446] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1049.151056][T13446] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1049.165766][T13446] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1049.325890][ T10] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1049.332886][ T1210] usb 2-1: USB disconnect, device number 11 [ 1049.351971][ T10] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1049.385991][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1049.398858][ T10] usb 5-1: media controller created [ 1049.423280][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1049.541355][ T10] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 1049.598121][ T10] usb 5-1: USB disconnect, device number 126 [ 1050.110740][ T7296] netlink: 'syz.1.22593': attribute type 5 has an invalid length. [ 1050.888397][ T7351] netlink: 52 bytes leftover after parsing attributes in process `syz.4.22615'. [ 1051.544872][ T6031] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1051.694912][ T6031] usb 5-1: Using ep0 maxpacket: 8 [ 1051.701549][ T6031] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1051.710223][ T6031] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1051.720412][ T6031] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1051.731044][ T6031] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1051.741750][ T6031] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1051.744919][T13446] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1051.763560][ T6031] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1051.773189][ T6031] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.950514][T13446] usb 2-1: Using ep0 maxpacket: 8 [ 1051.969037][T13446] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1051.978940][T13446] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.994264][ T6031] usb 5-1: GET_CAPABILITIES returned 0 [ 1051.997471][T13446] usb 2-1: Product: syz [ 1052.003900][T13446] usb 2-1: Manufacturer: syz [ 1052.005879][ T6031] usbtmc 5-1:16.0: can't read capabilities [ 1052.027308][T13446] usb 2-1: SerialNumber: syz [ 1052.040549][T13446] usb 2-1: config 0 descriptor?? [ 1052.209053][ T7403] netlink: 'syz.3.22632': attribute type 11 has an invalid length. [ 1052.230104][ T7403] netlink: 36 bytes leftover after parsing attributes in process `syz.3.22632'. [ 1052.271093][T13446] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1052.435795][ T6031] usb 5-1: USB disconnect, device number 127 [ 1052.870373][ T7440] netlink: 112 bytes leftover after parsing attributes in process `syz.3.22644'. [ 1052.884517][T13446] usb write operation failed. (-71) [ 1052.894466][T13446] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1052.909327][T13446] dvbdev: DVB: registering new adapter (Terratec H7) [ 1052.916905][T13446] usb 2-1: media controller created [ 1052.922537][T13446] usb read operation failed. (-71) [ 1052.928296][T13446] usb write operation failed. (-71) [ 1052.940700][T13446] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1052.962285][T13446] usb 2-1: USB disconnect, device number 12 [ 1053.424959][ T6031] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1053.583285][ T7501] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.22663'. [ 1053.595171][ T6031] usb 5-1: Using ep0 maxpacket: 32 [ 1053.621868][ T6031] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1053.633949][ T6031] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1053.640716][ T6031] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1053.650414][ T6031] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.677549][ T7508] netlink: 'syz.1.22665': attribute type 14 has an invalid length. [ 1053.679931][ T6031] usb 5-1: config 0 descriptor?? [ 1053.857436][T20703] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1054.021789][T20703] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1054.038356][T20703] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1054.048481][T20703] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1054.058050][T20703] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.070210][T20703] usb 4-1: config 0 descriptor?? [ 1054.140100][ T6031] corsair-cpro 0003:1B1C:0C10.00D8: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 1054.156378][T13446] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1054.264530][ T7549] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22676'. [ 1054.327359][T13446] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1054.340778][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.347593][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.361655][T13446] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1054.372674][T13446] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1054.382816][T13446] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.400704][T13446] usb 3-1: config 0 descriptor?? [ 1054.494555][T20703] playstation 0003:054C:0DF2.00D9: unknown main item tag 0x0 [ 1054.503033][T20703] playstation 0003:054C:0DF2.00D9: unknown main item tag 0x0 [ 1054.510850][T20703] playstation 0003:054C:0DF2.00D9: unknown main item tag 0x0 [ 1054.518803][T20703] playstation 0003:054C:0DF2.00D9: unknown main item tag 0x0 [ 1054.537114][ T6031] corsair-cpro 0003:1B1C:0C10.00D8: probe with driver corsair-cpro failed with error -71 [ 1054.547057][T20703] playstation 0003:054C:0DF2.00D9: unknown main item tag 0x0 [ 1054.570022][T20703] playstation 0003:054C:0DF2.00D9: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 1054.588228][ T6031] usb 5-1: USB disconnect, device number 2 [ 1054.605922][ T7568] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1054.826492][T13446] playstation 0003:054C:0DF2.00DA: unknown main item tag 0x0 [ 1054.835398][T13446] playstation 0003:054C:0DF2.00DA: unknown main item tag 0x0 [ 1054.842813][T13446] playstation 0003:054C:0DF2.00DA: unknown main item tag 0x0 [ 1054.850782][T13446] playstation 0003:054C:0DF2.00DA: unknown main item tag 0x0 [ 1054.858247][T13446] playstation 0003:054C:0DF2.00DA: unknown main item tag 0x0 [ 1054.868279][T13446] playstation 0003:054C:0DF2.00DA: hidraw1: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 1054.889653][T20703] playstation 0003:054C:0DF2.00D9: Failed to retrieve feature with reportID 32: -71 [ 1054.903483][T20703] playstation 0003:054C:0DF2.00D9: Failed to retrieve DualSense firmware info: -71 [ 1054.917811][T20703] playstation 0003:054C:0DF2.00D9: Failed to get firmware info from DualSense [ 1054.927378][T20703] playstation 0003:054C:0DF2.00D9: Failed to create dualsense. [ 1054.940364][T20703] playstation 0003:054C:0DF2.00D9: probe with driver playstation failed with error -71 [ 1054.955167][T20703] usb 4-1: USB disconnect, device number 14 [ 1055.026162][T13446] playstation 0003:054C:0DF2.00DA: Invalid reportID received, expected 9 got 169 [ 1055.035440][T13446] playstation 0003:054C:0DF2.00DA: Failed to retrieve DualSense pairing info: -22 [ 1055.044660][T13446] playstation 0003:054C:0DF2.00DA: Failed to get MAC address from DualSense [ 1055.053778][T13446] playstation 0003:054C:0DF2.00DA: Failed to create dualsense. [ 1055.063201][T13446] playstation 0003:054C:0DF2.00DA: probe with driver playstation failed with error -22 [ 1055.228907][T13446] usb 3-1: USB disconnect, device number 18 [ 1055.424848][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1055.587298][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1055.597929][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1055.608448][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1055.621096][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1055.630451][ T10] usb 5-1: SerialNumber: syz [ 1055.824938][ T6031] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1055.859555][ T10] usb 5-1: 0:2 : does not exist [ 1055.959737][ T10] usb 5-1: USB disconnect, device number 3 [ 1055.976862][ T6031] usb 2-1: Using ep0 maxpacket: 16 [ 1055.985052][ T6031] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1056.004450][ T1715] udevd[1715]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1056.009136][ T6031] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1056.073924][ T6031] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.097076][ T6031] usb 2-1: config 0 descriptor?? [ 1056.438373][ T7685] input: syz1 as /devices/virtual/input/input194 [ 1056.469555][ T1715] udevd[1715]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1056.516783][ T6031] mcp2221 0003:04D8:00DD.00DB: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1056.629154][ T29] audit: type=1326 audit(1771564579.911:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7694 comm="syz.4.22704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d319c629 code=0x7ffc0000 [ 1056.655741][ T29] audit: type=1326 audit(1771564579.911:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7694 comm="syz.4.22704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d319c629 code=0x7ffc0000 [ 1056.688009][ T29] audit: type=1326 audit(1771564579.911:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7694 comm="syz.4.22704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fc3d319c629 code=0x7ffc0000 [ 1056.711037][ T29] audit: type=1326 audit(1771564579.911:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7694 comm="syz.4.22704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d319c629 code=0x7ffc0000 [ 1056.774985][ T29] audit: type=1326 audit(1771564579.911:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7694 comm="syz.4.22704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d319c629 code=0x7ffc0000 [ 1056.806278][ T29] audit: type=1326 audit(1771564579.911:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7694 comm="syz.4.22704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7fc3d319c629 code=0x7ffc0000 [ 1056.889231][ T29] audit: type=1326 audit(1771564579.911:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7694 comm="syz.4.22704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d319c629 code=0x7ffc0000 [ 1056.913117][ T29] audit: type=1326 audit(1771564579.911:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7694 comm="syz.4.22704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d319c629 code=0x7ffc0000 [ 1056.958513][ T6031] usb 2-1: USB disconnect, device number 13 [ 1057.036627][ T7721] PID 7721 killed due to inadequate hugepage pool [ 1057.104858][T20703] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1057.256413][T20703] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1057.281126][T20703] usb 5-1: config 0 has no interfaces? [ 1057.294832][T20703] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1057.314503][T20703] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.337305][T20703] usb 5-1: config 0 descriptor?? [ 1057.558146][ T7744] loop4: detected capacity change from 0 to 1 [ 1057.593471][ T1715] Dev loop4: unable to read RDB block 1 [ 1057.610897][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22713'. [ 1057.611275][ T1715] loop4: unable to read partition table [ 1057.647130][ T10] usb 5-1: USB disconnect, device number 4 [ 1057.665106][ T1715] loop4: partition table beyond EOD, truncated [ 1057.692230][ T7744] Dev loop4: unable to read RDB block 1 [ 1057.704298][ T7744] loop4: unable to read partition table [ 1057.715958][ T7744] loop4: partition table beyond EOD, truncated [ 1057.725140][ T7744] loop_reread_partitions: partition scan of loop4 (þ被xü^>Ñà– ) failed (rc=-5) [ 1057.855321][ T7762] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1059.154862][T20703] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1059.256276][ T7834] bond0: entered promiscuous mode [ 1059.260596][ T7838] ALSA: mixer_oss: invalid OSS volume '' [ 1059.262436][ T7834] batadv_slave_0: entered promiscuous mode [ 1059.282038][ T7834] debugfs: 'hsr0' already exists in 'hsr' [ 1059.296712][ T7834] Cannot create hsr debugfs directory [ 1059.315269][T20703] usb 2-1: Using ep0 maxpacket: 16 [ 1059.336904][T20703] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1059.358716][T20703] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1059.390752][T20703] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1059.400816][T20703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.409012][T20703] usb 2-1: Product: syz [ 1059.413259][T20703] usb 2-1: Manufacturer: syz [ 1059.418132][T20703] usb 2-1: SerialNumber: syz [ 1059.429785][T20703] usb 2-1: config 0 descriptor?? [ 1059.442257][T20703] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1059.462706][T20703] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1060.046863][T20703] em28xx 2-1:0.0: chip ID is em28178 [ 1060.095176][ T5994] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1060.261398][ T10] usb 2-1: USB disconnect, device number 14 [ 1060.269252][ T10] em28xx 2-1:0.0: Disconnecting em28xx [ 1060.274923][ T5994] usb 4-1: Using ep0 maxpacket: 16 [ 1060.284123][ T10] em28xx 2-1:0.0: Freeing device [ 1060.287037][ T5994] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.300355][ T5994] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1060.312667][ T5994] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1060.322958][ T5994] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1060.334675][ T5994] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1060.349026][ T5994] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1060.358360][ T5994] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1060.366475][ T5994] usb 4-1: Manufacturer: syz [ 1060.376354][ T5994] usb 4-1: config 0 descriptor?? [ 1060.385086][T13446] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1060.534935][T13446] usb 3-1: Using ep0 maxpacket: 8 [ 1060.542542][T13446] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1060.552122][T13446] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1060.572801][T13446] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1060.595928][T13446] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1060.619825][T13446] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1060.644821][ T5994] rc_core: IR keymap rc-hauppauge not found [ 1060.650803][ T5994] Registered IR keymap rc-empty [ 1060.651232][T13446] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1060.664004][ T5994] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1060.665379][T13446] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.684959][ T5994] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1060.716932][ T5994] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1060.756901][ T5994] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input195 [ 1060.789108][ T5994] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1060.792115][ T7913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22762'. [ 1060.815869][ T5994] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1060.836364][ T5994] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1060.870112][ T5994] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1060.895260][ T5994] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1060.917420][ T5994] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1060.919218][T13446] usb 3-1: GET_CAPABILITIES returned 0 [ 1060.938647][ T5994] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1060.945395][T13446] usbtmc 3-1:16.0: can't read capabilities [ 1060.976843][ T5994] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1060.995536][ T5994] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1061.025703][ T5994] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1061.061997][ T5994] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1061.072677][ T5994] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1061.086982][ T5994] usb 4-1: USB disconnect, device number 15 [ 1061.161232][ T6031] usb 3-1: USB disconnect, device number 19 [ 1061.442632][ T7968] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1061.497153][ T29] audit: type=1804 audit(1771564584.781:1128): pid=7975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.22772" name="/newroot/374/file1" dev="tmpfs" ino=1907 res=1 errno=0 [ 1061.605931][ T29] audit: type=1326 audit(1771564584.891:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.3.22774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0fbf9c629 code=0x7ffc0000 [ 1061.950038][ T8005] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22782'. [ 1062.025048][ T6031] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1062.065082][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 1062.065101][ T29] audit: type=1326 audit(1771564585.341:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8014 comm="syz.4.22784" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc3d319c629 code=0x0 [ 1062.198318][ T6031] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1062.218729][ T6031] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 1062.228789][ T6031] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.238344][ T6031] usb 4-1: Product: syz [ 1062.242631][ T6031] usb 4-1: Manufacturer: syz [ 1062.247351][ T6031] usb 4-1: SerialNumber: syz [ 1062.263493][ T6031] usb 4-1: config 0 descriptor?? [ 1062.401138][ T8038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22792'. [ 1062.412031][ T8038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22792'. [ 1062.478986][ T6031] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 1062.501964][ T6031] dvb_usb_af9035 4-1:0.0: probe with driver dvb_usb_af9035 failed with error -8 [ 1062.519974][ T6031] usb 4-1: USB disconnect, device number 16 [ 1063.253097][ T8096] netlink: 48 bytes leftover after parsing attributes in process `syz.3.22810'. [ 1063.318016][ T8099] sctp: [Deprecated]: syz.3.22811 (pid 8099) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1063.318016][ T8099] Use struct sctp_sack_info instead [ 1063.586309][T13446] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1063.782587][T13446] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.793509][T13446] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1063.807609][T13446] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1063.858605][T13446] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1063.876347][ T8131] netlink: 24 bytes leftover after parsing attributes in process `syz.3.22824'. [ 1063.877437][T13446] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.904516][T13446] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1063.913275][T13446] usb 5-1: invalid MIDI out EP 0 [ 1064.122189][T13446] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1064.191312][T20703] usb 5-1: USB disconnect, device number 5 [ 1064.206187][ T8168] sg_read: process 9839 (syz.1.22830) changed security contexts after opening file descriptor, this is not allowed. [ 1064.878186][ T8214] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1065.143524][ T8236] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22850'. [ 1065.344912][T20703] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1065.369576][ T8251] netlink: 44 bytes leftover after parsing attributes in process `syz.4.22854'. [ 1065.517102][T20703] usb 3-1: config 1 has an invalid descriptor of length 119, skipping remainder of the config [ 1065.528374][T20703] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1065.544318][T20703] usb 3-1: config 1 has no interface number 0 [ 1065.558949][T20703] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1065.587239][T20703] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1065.600327][T20703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.615605][T20703] usb 3-1: Product: syz [ 1065.625506][T20703] usb 3-1: Manufacturer: syz [ 1065.634874][T20703] usb 3-1: SerialNumber: syz [ 1065.657285][T20703] cdc_ncm 3-1:1.1: skipping garbage [ 1065.683048][T20703] usb 3-1: selecting invalid altsetting 1 [ 1066.286941][T20703] cdc_ncm 3-1:1.1: SET_CRC_MODE failed [ 1066.299326][T20703] cdc_ncm 3-1:1.1: SET_NTB_FORMAT failed [ 1066.324911][T20703] usb 3-1: selecting invalid altsetting 1 [ 1066.330706][T20703] cdc_ncm 3-1:1.1: bind() failure [ 1066.339671][T20703] usb 3-1: USB disconnect, device number 20 [ 1066.614957][ T5972] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 1066.788258][ T5972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1066.815117][ T5972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1066.830138][ T5972] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1066.842692][ T5972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.863442][ T5972] usb 4-1: config 0 descriptor?? [ 1067.288836][ T5972] hid-thrustmaster 0003:044F:B65D.00DC: unknown main item tag 0x0 [ 1067.305668][ T5972] hid-thrustmaster 0003:044F:B65D.00DC: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 1067.320783][ T5972] hid-thrustmaster 0003:044F:B65D.00DC: Wrong number of endpoints? [ 1067.507695][ C0] hid-thrustmaster 0003:044F:B65D.00DC: Unknown packet type 0x0, unable to proceed further with wheel init [ 1067.514911][T20703] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1067.609994][ T8371] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1067.676613][T20703] usb 2-1: Using ep0 maxpacket: 32 [ 1067.686463][T20703] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1067.694679][T20703] usb 2-1: config 0 has no interface number 0 [ 1067.706722][ T5972] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1067.711185][ T5994] usb 4-1: USB disconnect, device number 17 [ 1067.725330][T20703] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1067.743475][T20703] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1067.772582][T20703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.788039][T20703] usb 2-1: Product: syz [ 1067.792275][T20703] usb 2-1: Manufacturer: syz [ 1067.797065][T20703] usb 2-1: SerialNumber: syz [ 1067.803485][T20703] usb 2-1: config 0 descriptor?? [ 1067.876584][ T5972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1067.887636][ T5972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1067.897834][ T5972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1067.908898][ T5972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1067.921509][ T5972] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1067.930864][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.944792][ T5972] usb 5-1: Product: syz [ 1067.948978][ T5972] usb 5-1: Manufacturer: syz [ 1067.953561][ T5972] usb 5-1: SerialNumber: syz [ 1067.970484][ T5972] usb 5-1: config 0 descriptor?? [ 1068.200013][ T5972] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1068.402283][ T8362] usb 5-1: Couldn't submit interrupt_out_urb -90 [ 1068.416092][T13446] usb 5-1: USB disconnect, device number 6 [ 1068.629462][T20703] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 1068.638882][T20703] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 1068.646625][T20703] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1068.658411][T20703] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 1068.685433][T20703] usb 2-1: USB disconnect, device number 15 [ 1068.927818][ T8453] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.22909'. [ 1069.052776][ T8462] netlink: 'syz.2.22913': attribute type 21 has an invalid length. [ 1069.064826][ T8462] IPv6: NLM_F_CREATE should be specified when creating new route [ 1069.072721][ T8462] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1069.080005][ T8462] IPv6: NLM_F_CREATE should be set when creating new route [ 1069.087270][ T8462] IPv6: NLM_F_CREATE should be set when creating new route [ 1069.094498][ T8462] IPv6: NLM_F_CREATE should be set when creating new route [ 1069.103563][ T8464] netlink: 'syz.2.22913': attribute type 21 has an invalid length. [ 1069.112083][ T8464] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1069.625877][T13446] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1069.637975][ T8502] input: syz1 as /devices/virtual/input/input196 [ 1069.798867][T13446] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1069.810207][T13446] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.824864][T13446] usb 5-1: Product: syz [ 1069.829049][T13446] usb 5-1: Manufacturer: syz [ 1069.833649][T13446] usb 5-1: SerialNumber: syz [ 1069.847822][T13446] usb 5-1: config 0 descriptor?? [ 1070.073684][T13446] usb 5-1: USB disconnect, device number 7 [ 1070.205225][T20703] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1070.398855][T20703] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1070.412320][T20703] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1070.428327][T20703] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1070.437630][T20703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.455779][T20703] usb 3-1: config 0 descriptor?? [ 1070.521147][ T29] audit: type=1326 audit(1771564593.801:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.3.22945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0fbf9c629 code=0x7ffc0000 [ 1070.560616][ T29] audit: type=1326 audit(1771564593.801:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.3.22945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0fbf9c629 code=0x7ffc0000 [ 1070.591257][ T29] audit: type=1326 audit(1771564593.801:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.3.22945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0fbf9c629 code=0x7ffc0000 [ 1070.614434][ T29] audit: type=1326 audit(1771564593.801:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.3.22945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb0fbf9c629 code=0x7ffc0000 [ 1070.639230][ T29] audit: type=1326 audit(1771564593.801:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.3.22945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0fbf9c629 code=0x7ffc0000 [ 1070.662033][ T29] audit: type=1326 audit(1771564593.801:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.3.22945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0fbf9c629 code=0x7ffc0000 [ 1070.686434][ T29] audit: type=1326 audit(1771564593.801:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.3.22945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0fbf9c629 code=0x7ffc0000 [ 1070.714912][ T29] audit: type=1326 audit(1771564593.811:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.3.22945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fb0fbf9c629 code=0x7ffc0000 [ 1070.741067][ T29] audit: type=1326 audit(1771564593.811:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.3.22945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0fbf9c629 code=0x7ffc0000 [ 1070.765038][ T29] audit: type=1326 audit(1771564593.811:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.3.22945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0fbf9c629 code=0x7ffc0000 [ 1070.877322][T20703] isku 0003:1E7D:319C.00DD: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 1071.068052][T20703] isku 0003:1E7D:319C.00DD: couldn't init struct isku_device [ 1071.085926][T20703] isku 0003:1E7D:319C.00DD: couldn't install keyboard [ 1071.105471][T20703] isku 0003:1E7D:319C.00DD: probe with driver isku failed with error -71 [ 1071.144707][T20703] usb 3-1: USB disconnect, device number 21 [ 1072.525114][T20703] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1072.676605][T20703] usb 2-1: Using ep0 maxpacket: 16 [ 1072.685487][T20703] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1072.694643][T20703] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1072.703941][T20703] usb 2-1: Product: syz [ 1072.708375][T20703] usb 2-1: Manufacturer: syz [ 1072.713084][T20703] usb 2-1: SerialNumber: syz [ 1072.721840][T20703] usb 2-1: config 0 descriptor?? [ 1072.941060][T13446] usb 2-1: USB disconnect, device number 16 [ 1073.989373][ T8800] netlink: 488 bytes leftover after parsing attributes in process `syz.1.23012'. [ 1074.029209][ T8800] netlink: 488 bytes leftover after parsing attributes in process `syz.1.23012'. [ 1074.284943][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1074.476870][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1074.488417][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1074.502946][ T10] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1074.520948][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.532227][ T10] usb 5-1: config 0 descriptor?? [ 1074.574915][ T5994] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1074.737484][ T5994] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1074.752145][ T5994] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1074.767956][ T5994] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1074.780209][ T5994] usb 2-1: config 220 has no interface number 2 [ 1074.788957][ T5994] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1074.825025][ T5994] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1074.834859][ T5994] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1074.841751][ T5994] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1074.868001][ T5994] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1074.904818][ T5994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.918003][ T5994] usb 2-1: Product: syz [ 1074.922211][ T5994] usb 2-1: Manufacturer: syz [ 1074.940197][ T5994] usb 2-1: SerialNumber: syz [ 1075.033681][ T10] sony 0003:054C:024B.00DE: unknown main item tag 0x0 [ 1075.059250][ T10] sony 0003:054C:024B.00DE: unknown main item tag 0x0 [ 1075.076913][ T10] sony 0003:054C:024B.00DE: unexpected long global item [ 1075.096372][ T10] sony 0003:054C:024B.00DE: parse failed [ 1075.111856][ T10] sony 0003:054C:024B.00DE: probe with driver sony failed with error -22 [ 1075.191188][ T5994] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1075.226195][ T5994] uvcvideo 2-1:220.0: No valid video chain found. [ 1075.232732][ T5994] usb 2-1: selecting invalid altsetting 0 [ 1075.267398][ T5994] usb 2-1: selecting invalid altsetting 0 [ 1075.273172][ T5994] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1075.325112][ T5994] usb 2-1: USB disconnect, device number 17 [ 1075.421167][ T5972] usb 5-1: USB disconnect, device number 8 [ 1075.810880][ T8905] VFS: Mount too revealing [ 1075.934152][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23043'. [ 1076.692968][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1076.692985][ T29] audit: type=1326 audit(1771564599.971:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8952 comm="syz.2.23058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ded9c629 code=0x7ffc0000 [ 1076.727300][ T29] audit: type=1326 audit(1771564599.971:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8952 comm="syz.2.23058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ded9c629 code=0x7ffc0000 [ 1076.751636][ T29] audit: type=1326 audit(1771564599.971:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8952 comm="syz.2.23058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f57ded9c629 code=0x7ffc0000 [ 1076.775833][ T29] audit: type=1326 audit(1771564599.981:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8952 comm="syz.2.23058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ded9c629 code=0x7ffc0000 [ 1076.854834][ T29] audit: type=1326 audit(1771564599.981:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8952 comm="syz.2.23058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ded9c629 code=0x7ffc0000 [ 1076.898796][ T29] audit: type=1326 audit(1771564600.011:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8952 comm="syz.2.23058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f57ded9c629 code=0x7ffc0000 [ 1076.941780][ T29] audit: type=1800 audit(1771564600.011:1165): pid=8954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.23058" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1076.963837][ T29] audit: type=1326 audit(1771564600.011:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8952 comm="syz.2.23058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ded9c629 code=0x7ffc0000 [ 1076.993954][ T29] audit: type=1326 audit(1771564600.011:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8952 comm="syz.2.23058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ded9c629 code=0x7ffc0000 [ 1077.017620][ T29] audit: type=1326 audit(1771564600.031:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8952 comm="syz.2.23058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f57ded9c629 code=0x7ffc0000 [ 1077.094839][ T5994] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1077.244889][ T5994] usb 3-1: Using ep0 maxpacket: 32 [ 1077.251635][ T5994] usb 3-1: config 0 has no interfaces? [ 1077.261758][ T5994] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1077.271563][ T5994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.281238][ T5994] usb 3-1: Product: syz [ 1077.285565][ T5994] usb 3-1: Manufacturer: syz [ 1077.290222][ T5994] usb 3-1: SerialNumber: syz [ 1077.306255][ T5994] usb 3-1: config 0 descriptor?? [ 1077.520696][ T8958] netlink: 'syz.2.23062': attribute type 10 has an invalid length. [ 1077.538217][ T8958] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 1077.548921][ T8958] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1077.564680][ T5972] usb 3-1: USB disconnect, device number 22 [ 1077.583452][ T8957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1077.943126][ T9035] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1078.044838][ T5994] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1078.214899][ T5994] usb 5-1: Using ep0 maxpacket: 16 [ 1078.228681][ T9059] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1078.235442][ T5994] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1078.263157][ T5994] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1078.287715][ T5994] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1078.306394][ T5994] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1078.321678][ T5994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.339849][ T5994] usb 5-1: config 0 descriptor?? [ 1078.802098][ T5994] hid (null): unknown global tag 0xd [ 1078.808554][ T5994] hid (null): unknown global tag 0xe [ 1078.826603][ T5994] cougar 0003:060B:500A.00DF: unknown main item tag 0x0 [ 1078.833718][ T5994] cougar 0003:060B:500A.00DF: unknown main item tag 0x0 [ 1078.844899][ T5994] cougar 0003:060B:500A.00DF: unknown main item tag 0x0 [ 1078.851921][ T5994] cougar 0003:060B:500A.00DF: unknown main item tag 0x0 [ 1078.860375][ T5994] cougar 0003:060B:500A.00DF: unknown main item tag 0x0 [ 1078.867736][ T5994] cougar 0003:060B:500A.00DF: unknown main item tag 0x0 [ 1078.876641][ T5994] cougar 0003:060B:500A.00DF: unknown main item tag 0x0 [ 1078.883706][ T5994] cougar 0003:060B:500A.00DF: unknown main item tag 0x0 [ 1078.893184][ T5994] cougar 0003:060B:500A.00DF: unexpected long global item [ 1078.901511][ T5994] cougar 0003:060B:500A.00DF: parse failed [ 1078.908137][ T5994] cougar 0003:060B:500A.00DF: probe with driver cougar failed with error -22 [ 1078.917110][ T6031] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1079.018870][ T5994] usb 5-1: USB disconnect, device number 9 [ 1079.034999][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1079.077895][ T6031] usb 3-1: too many configurations: 53, using maximum allowed: 8 [ 1079.097443][ T6031] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1079.106671][ T6031] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.115066][ T6031] usb 3-1: Product: syz [ 1079.119378][ T6031] usb 3-1: Manufacturer: syz [ 1079.123961][ T6031] usb 3-1: SerialNumber: syz [ 1079.195677][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1079.202651][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1079.216754][ T10] usb 2-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 1079.226541][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.245785][ T10] usb 2-1: config 0 descriptor?? [ 1079.359343][ T9157] loop2: detected capacity change from 0 to 7 [ 1079.373925][ T9157] Dev loop2: unable to read RDB block 7 [ 1079.375713][ T6031] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1079.386052][ T9157] loop2: AHDI p1 p2 [ 1079.395689][ T9157] loop2: partition table partially beyond EOD, truncated [ 1079.398753][ T6031] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1079.404200][ T9157] loop2: p1 start 1700753509 is beyond EOD, [ 1079.413621][ T6031] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1079.413642][ T9157] truncated [ 1079.437849][ T6031] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1079.469043][ T6031] usb 3-1: USB disconnect, device number 23 [ 1079.629814][ T9175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23117'. [ 1079.642182][ T9175] netlink: 'syz.4.23117': attribute type 30 has an invalid length. [ 1079.651413][ T9175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23117'. [ 1079.682641][ T10] aquacomputer_d5next 0003:0C70:F003.00E0: hidraw0: USB HID v0.00 Device [HID 0c70:f003] on usb-dummy_hcd.1-1/input0 [ 1079.883811][ T10] usb 2-1: USB disconnect, device number 18 [ 1080.070059][ T9217] cifs: Unknown parameter 'fd' [ 1080.447354][ T9241] overlay: Unknown parameter 'ÅWõƒzÓ!ö?V1—|GŸ*‚, priority 0 [ 1094.860177][ T5994] usb 4-1: USB disconnect, device number 20 [ 1095.090328][T10194] netlink: 'syz.1.23391': attribute type 9 has an invalid length. [ 1095.106009][T10194] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.23391'. [ 1095.880732][T10257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23407'. [ 1096.005750][ T6031] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 1096.162176][ T6031] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1096.183905][ T6031] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1096.197181][ T6031] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1096.203916][ T6031] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 1096.220292][ T6031] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.234323][ T6031] usb 3-1: config 0 descriptor?? [ 1096.241580][T10236] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1096.303042][T10282] netlink: 'syz.4.23412': attribute type 3 has an invalid length. [ 1096.311676][T10282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23412'. [ 1096.458592][ T5972] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1096.648414][ T5972] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1096.665461][ T5972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.683849][ T5972] usb 2-1: Product: syz [ 1096.691015][ T6031] hid-u2fzero 0003:10C4:8ACF.00E5: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.2-1/input0 [ 1096.699069][ T5972] usb 2-1: Manufacturer: syz [ 1096.729373][ T5972] usb 2-1: SerialNumber: syz [ 1096.745914][ T6031] hid-u2fzero 0003:10C4:8ACF.00E5: U2F Zero LED initialised [ 1096.772283][ T6031] hid-u2fzero 0003:10C4:8ACF.00E5: U2F Zero RNG initialised [ 1096.905175][ T5994] usb 3-1: USB disconnect, device number 27 [ 1096.963873][ T5972] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1096.983742][ T5972] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1096.994657][ T5972] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1097.009512][ T5972] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1097.027356][ T5972] usb 2-1: USB disconnect, device number 21 [ 1098.085150][ T5994] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 1098.237588][T10397] fuse: Unknown parameter '1 [ 1098.237588][T10397] TracerPid: 0 [ 1098.237588][T10397] Uid: 0 0 0 0 [ 1098.237588][T10397] Gid: 0 0 0 0 [ 1098.237588][T10397] FDSize: 256 [ 1098.237588][T10397] Groups: 0 65534 [ 1098.237588][T10397] NStgid: 9660 [ 1098.237588][T10397] NSpid: 9661 [ 1098.237588][T10397] NSpgid: 9660 [ 1098.237588][T10397] NSsid: 0 [ 1098.237588][T10397] Kthread: 0 [ 1098.237588][T10397] VmPeak: 102224 kB [ 1098.237588][T10397] VmSize: 102224 kB [ 1098.237588][T10397] VmLck: 0 kB [ 1098.237588][T10397] VmPin: 0 kB [ 1098.237588][T10397] VmHWM: 23636 kB [ 1098.237588][T10397] VmRSS: 23636 kB [ 1098.237588][T10397] RssAnon: 1416 kB [ 1098.237588][T10397] RssFile: 22220 kB [ 1098.237588][T10397] RssShmem: 0 kB [ 1098.237588][T10397] VmData: 36580 kB [ 1098.237588][T10397] VmStk: 132 kB [ 1098.237588][T10397] VmExe: 1772 kB [ 1098.237588][T10397] VmLib: 8 kB [ 1098.237588][T10397] VmPTE: 132 kB [ 1098.237588][T10397] VmSwap: 0 kB [ 1098.237588][T10397] HugetlbPages: 0 kB [ 1098.237588][T10397] CoreDumping: 0 [ 1098.237588][T10397] THP_enabled: 1 [ 1098.237588][T10397] untag_mask: 0xffffffffffffffff [ 1098.237588][T10397] Threads: 2 [ 1098.237588][T10397] SigQ: 0/12993 [ 1098.237588][T10397] SigPnd: 0000000000000000 [ 1098.237588][T10397] ShdPnd: 0000000000000000 [ 1098.237588][T10397] SigBlk: 0000000000000000 [ 1098.237588][T10397] SigIgn: fffffffefffaba35 [ 1098.237588][T10397] SigCgt: 0000000100010440 [ 1098.237588][T10397] CapInh: 0000000000000000 [ 1098.237588][T10397] CapPrm: 000001ffff77ffff [ 1098.237588][T10397] CapEff: 000001ffff77ffff [ 1098.237588][T10397] CapBnd: 000001ffffffffff [ 1098.237588][T10397] CapAmb: 0000000000000000 [ 1098.237588][T10397] NoNewPrivs: 0 [ 1098.237588][T10397] Seccomp: 0 [ 1098.237588][T10397] Seccomp_filters: 0 [ 1098.237588][T10397] Speculation_Store_Bypass: thread vulnerable [ 1098.237588][T10397] SpeculationIndirectBranch: conditional enabled [ 1098.515126][ T5994] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1098.526432][ T5994] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1098.554820][ T5994] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1098.561471][ T5994] usb 2-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 1098.584802][ T5994] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.615402][ T5994] usb 2-1: config 0 descriptor?? [ 1099.030697][ T5994] hid_parser_main: 133 callbacks suppressed [ 1099.030721][ T5994] lenovo 0003:17EF:60EE.00E6: unknown main item tag 0x0 [ 1099.052384][ T5994] lenovo 0003:17EF:60EE.00E6: unknown main item tag 0x0 [ 1099.060645][ T5994] lenovo 0003:17EF:60EE.00E6: unknown main item tag 0x0 [ 1099.067671][ T5994] lenovo 0003:17EF:60EE.00E6: unknown main item tag 0x0 [ 1099.074635][ T5994] lenovo 0003:17EF:60EE.00E6: unknown main item tag 0x0 [ 1099.087068][ T5994] lenovo 0003:17EF:60EE.00E6: hidraw0: USB HID v0.01 Device [HID 17ef:60ee] on usb-dummy_hcd.1-1/input0 [ 1099.114973][ T6031] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1099.264905][ T6031] usb 3-1: Using ep0 maxpacket: 16 [ 1099.277716][ T6031] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1099.294994][ T6031] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1099.307204][ T6031] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.338608][ T6031] usb 3-1: config 0 descriptor?? [ 1099.429620][ T5994] lenovo 0003:17EF:60EE.00E6: Fn-lock setting failed: -71 [ 1099.437546][ T5994] lenovo 0003:17EF:60EE.00E6: Sensitivity setting failed: -71 [ 1099.471703][ T5994] usb 2-1: USB disconnect, device number 22 [ 1099.770580][ T6031] mcp2221 0003:04D8:00DD.00E7: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1100.143575][ T29] audit: type=1800 audit(1771564623.421:1184): pid=10511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.23465" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=24828 res=0 errno=0 [ 1100.210867][ T6031] usb 3-1: USB disconnect, device number 28 [ 1100.397254][T10538] netlink: 'syz.3.23471': attribute type 12 has an invalid length. [ 1100.913739][T10572] input: syz1 as /devices/virtual/input/input200 [ 1101.092529][T10587] input: syz1 as /devices/virtual/input/input201 [ 1101.450008][T10614] binder: 10612:10614 ioctl c018620c 200000000240 returned -22 [ 1101.522964][T10625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23502'. [ 1101.715188][ T5972] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1101.884949][ T5972] usb 4-1: Using ep0 maxpacket: 16 [ 1101.891525][ T5972] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1101.905464][ T5972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1101.917527][ T5972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1101.927769][ T5972] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1101.938072][ T5972] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1101.952958][ T5972] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1101.971048][ T5972] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1101.979497][ T5972] usb 4-1: Manufacturer: syz [ 1101.987219][ T5972] usb 4-1: config 0 descriptor?? [ 1102.265182][ T5972] rc_core: IR keymap rc-hauppauge not found [ 1102.279400][ T5972] Registered IR keymap rc-empty [ 1102.295040][ T5972] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1102.326244][ T5972] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1102.356280][ T5972] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1102.379032][ T5972] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input202 [ 1102.395025][ T5972] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1102.414942][ T5972] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1102.436550][ T5972] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1102.465035][ T5972] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1102.505486][ T5972] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1102.535116][ T5972] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1102.565675][ T5972] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1102.609982][ T5972] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1102.634908][ T5972] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1102.658694][ T5972] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1102.698415][ T5972] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1102.708468][ T5972] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1102.731530][ T5972] usb 4-1: USB disconnect, device number 21 [ 1103.528916][T10763] netlink: 20 bytes leftover after parsing attributes in process `syz.2.23538'. [ 1103.538245][T10763] netlink: 'syz.2.23538': attribute type 6 has an invalid length. [ 1103.546558][T10763] netlink: 36 bytes leftover after parsing attributes in process `syz.2.23538'. [ 1103.565146][ T5994] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1103.646113][T10771] kvm: kvm [10770]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffffffffffffff [ 1103.735369][ T5994] usb 4-1: Using ep0 maxpacket: 8 [ 1103.749075][ T5994] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1103.774925][ T5994] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.788552][ T5994] usb 4-1: Product: syz [ 1103.807016][ T5994] usb 4-1: Manufacturer: syz [ 1103.811658][ T5994] usb 4-1: SerialNumber: syz [ 1103.840809][ T5994] usb 4-1: config 0 descriptor?? [ 1103.866420][ T5994] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1104.461738][T10808] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.23551'. [ 1104.673868][ T5994] gspca_sq930x: ucbus_write failed -71 [ 1104.681587][ T5994] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 1104.698898][ T5994] usb 4-1: USB disconnect, device number 22 [ 1104.948732][T10837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23560'. [ 1104.969179][T10837] vlan3: entered allmulticast mode [ 1104.974336][T10837] vlan0: entered allmulticast mode [ 1104.980924][T10837] veth0_vlan: entered allmulticast mode [ 1106.217562][T10901] netlink: 40 bytes leftover after parsing attributes in process `syz.3.23585'. [ 1106.229436][T10901] netlink: 3 bytes leftover after parsing attributes in process `syz.3.23585'. [ 1106.387050][ T29] audit: type=1326 audit(1771564629.671:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10865 comm="syz.0.23571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa0c19c629 code=0x7fc00000 [ 1106.627791][T10928] netlink: 40 bytes leftover after parsing attributes in process `syz.3.23597'. [ 1106.701695][T10931] loop7: detected capacity change from 0 to 7 [ 1106.741104][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1106.750734][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1106.757351][T10935] batadv0: entered promiscuous mode [ 1106.773129][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1106.782756][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1106.786020][T10935] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1106.805072][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1106.814678][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1106.823163][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1106.832801][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1106.841341][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1106.850972][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1106.855131][T10935] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1106.869045][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1106.878631][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1106.886701][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1106.896367][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1106.904226][T10931] ldm_validate_partition_table(): Disk read failed. [ 1106.912997][T10935] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1106.925717][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1106.935378][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1106.943382][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1106.953011][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1106.977696][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1106.987336][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1107.044871][T10935] batadv0: left promiscuous mode [ 1107.050030][T10931] Dev loop7: unable to read RDB block 0 [ 1107.060634][T10931] loop7: unable to read partition table [ 1107.067258][T10931] loop7: partition table beyond EOD, truncated [ 1107.073440][T10931] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 1107.109952][T10950] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1107.224214][T10965] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1107.837270][T11011] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.23622'. [ 1107.915077][ T5972] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1107.932404][ T29] audit: type=1326 audit(1771564631.211:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11018 comm="syz.4.23624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d319c629 code=0x7ffc0000 [ 1107.957970][ T29] audit: type=1326 audit(1771564631.241:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11018 comm="syz.4.23624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d319c629 code=0x7ffc0000 [ 1107.965163][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1107.984455][ T29] audit: type=1326 audit(1771564631.271:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11018 comm="syz.4.23624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7fc3d319c629 code=0x7ffc0000 [ 1108.072805][ T29] audit: type=1326 audit(1771564631.271:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11018 comm="syz.4.23624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d319c629 code=0x7ffc0000 [ 1108.107620][ T29] audit: type=1326 audit(1771564631.271:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11018 comm="syz.4.23624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d319c629 code=0x7ffc0000 [ 1108.137046][ T29] audit: type=1326 audit(1771564631.301:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11018 comm="syz.4.23624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc3d319c629 code=0x7ffc0000 [ 1108.138420][ T5972] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.173704][ T5972] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1108.184781][ T5972] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1108.200694][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1108.211188][ T29] audit: type=1326 audit(1771564631.301:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11018 comm="syz.4.23624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d319c629 code=0x7ffc0000 [ 1108.214955][ T5972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1108.242376][ T10] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1108.255666][ T10] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1108.257562][ T29] audit: type=1326 audit(1771564631.301:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11018 comm="syz.4.23624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d319c629 code=0x7ffc0000 [ 1108.289042][ T10] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1108.299181][ T29] audit: type=1326 audit(1771564631.301:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11018 comm="syz.4.23624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7fc3d319c629 code=0x7ffc0000 [ 1108.325044][ T5972] usb 4-1: SerialNumber: syz [ 1108.330124][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1108.340099][ T10] usb 2-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1108.357852][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.368914][ T10] usb 2-1: Product: syz [ 1108.373160][ T10] usb 2-1: Manufacturer: syz [ 1108.381259][ T10] usb 2-1: SerialNumber: syz [ 1108.564306][ T5972] usb 4-1: 0:2 : does not exist [ 1108.619247][ T10] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1108.633456][ T5972] usb 4-1: USB disconnect, device number 23 [ 1108.700514][ T1715] udevd[1715]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1108.868263][ T10] usb 2-1: USB disconnect, device number 23 [ 1108.886769][ T10] usblp0: removed [ 1109.192894][T11117] loop5: detected capacity change from 0 to 7 [ 1109.208282][T11117] ldm_validate_partition_table(): Disk read failed. [ 1109.216954][T11117] Dev loop5: unable to read RDB block 0 [ 1109.223994][T11117] loop5: unable to read partition table [ 1109.231521][T11117] loop5: partition table beyond EOD, truncated [ 1109.255279][T11117] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ëÜ%õ«`ÉíÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ5) failed (rc=-5) [ 1109.486087][T11137] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1109.649406][T11154] netlink: 'syz.4.23649': attribute type 6 has an invalid length. [ 1109.707613][T11154] netlink: 'syz.4.23649': attribute type 6 has an invalid length. [ 1109.779673][T11163] tipc: New replicast peer: 255.255.255.255 [ 1109.787037][T11163] tipc: Enabled bearer , priority 0 [ 1110.041081][T11184] netlink: 48 bytes leftover after parsing attributes in process `syz.2.23669'. [ 1110.584980][T20703] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1110.749145][T20703] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1110.760357][T20703] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1110.770534][T20703] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1110.790855][T20703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.807369][T20703] usb 3-1: config 0 descriptor?? [ 1111.107124][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1111.227521][T20703] hid-led 0003:0FC5:B080.00E8: unknown main item tag 0x0 [ 1111.289323][ T10] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1111.298302][ T10] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1111.309841][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1111.321888][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1111.334174][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1111.347931][ T10] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1111.364942][ T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1111.394219][ T10] usb 2-1: Product: syz [ 1111.398735][ T10] usb 2-1: Manufacturer: syz [ 1111.428566][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 1111.470573][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 1111.478442][ T10] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1111.484437][ T10] cdc_wdm 2-1:1.0: Unknown control protocol [ 1111.641895][T20703] hid-led 0003:0FC5:B080.00E8: probe with driver hid-led failed with error -71 [ 1111.658066][T20703] usb 3-1: USB disconnect, device number 29 [ 1111.683259][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1111.689890][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1111.696318][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1111.702922][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1111.709709][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1111.716312][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1111.723377][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1111.729995][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1111.736850][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1111.743463][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1111.750796][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1111.757413][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1111.765062][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1111.771674][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1111.778836][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1111.785449][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1111.793183][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1111.799813][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1111.808896][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1111.815527][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1111.822103][ T10] usb 2-1: USB disconnect, device number 24 [ 1111.828157][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1112.198009][T11310] netlink: 24 bytes leftover after parsing attributes in process `syz.0.23706'. [ 1112.964917][T20703] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1113.118039][T20703] usb 5-1: Using ep0 maxpacket: 16 [ 1113.126182][T20703] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 1113.142839][T20703] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.167216][T20703] usb 5-1: config 0 has no interface number 0 [ 1113.187018][T20703] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 1113.203249][T20703] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.233983][T20703] usb 5-1: config 0 descriptor?? [ 1113.259728][T20703] uvcvideo 5-1:0.64: Found UVC 0.00 device (0bd3:0555) [ 1113.273360][T20703] uvcvideo 5-1:0.64: No valid video chain found. [ 1113.471302][T11394] netlink: 'syz.3.23737': attribute type 3 has an invalid length. [ 1113.479387][T11394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23737'. [ 1113.506870][T20703] usb 5-1: USB disconnect, device number 11 [ 1114.474951][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1114.515077][T13446] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1114.655880][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1114.663019][ T10] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 1114.671771][ T10] usb 3-1: config 2 has no interface number 0 [ 1114.678133][T13446] usb 2-1: Using ep0 maxpacket: 16 [ 1114.683654][ T10] usb 3-1: config 2 interface 88 has no altsetting 0 [ 1114.694592][T13446] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1114.706110][T13446] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1114.717243][T13446] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1114.730613][T13446] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1114.740759][ T10] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 1114.755073][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.763166][T13446] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.771346][ T10] usb 3-1: Product: syz [ 1114.776128][ T10] usb 3-1: Manufacturer: syz [ 1114.780733][ T10] usb 3-1: SerialNumber: syz [ 1114.789080][T13446] usb 2-1: config 0 descriptor?? [ 1115.206783][T13446] microsoft 0003:045E:07DA.00E9: ignoring exceeding usage max [ 1115.407875][T13446] microsoft 0003:045E:07DA.00E9: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1115.445771][T13446] microsoft 0003:045E:07DA.00E9: no inputs found [ 1115.455493][T13446] microsoft 0003:045E:07DA.00E9: could not initialize ff, continuing anyway [ 1115.472880][T13446] usb 2-1: USB disconnect, device number 25 [ 1115.565902][T11489] fido_id[11489]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1115.636274][ T10] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1115.653416][ T10] asix 3-1:2.88: probe with driver asix failed with error -71 [ 1115.667666][ T10] usb 3-1: USB disconnect, device number 30 [ 1115.778260][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.784814][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.364818][T20703] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1116.496273][T11548] netlink: set zone limit has 4 unknown bytes [ 1116.520190][T20703] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1116.531617][T20703] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.568777][T20703] usb 4-1: config 0 descriptor?? [ 1116.599934][T20703] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1117.420865][T20703] gspca_sunplus: reg_w_riv err -71 [ 1117.426216][T20703] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 1117.441151][T20703] usb 4-1: USB disconnect, device number 24 [ 1117.764933][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1117.916207][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.926481][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1117.937019][ T10] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1117.946740][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1117.955527][ T10] usb 3-1: SerialNumber: syz [ 1118.176939][ T10] usb 3-1: 0:2 : does not exist [ 1118.206972][ T10] usb 3-1: USB disconnect, device number 31 [ 1118.236565][ T1715] udevd[1715]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1118.374915][ T5994] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1118.384854][T13446] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1118.524953][ T5994] usb 5-1: Using ep0 maxpacket: 16 [ 1118.534185][ T5994] usb 5-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 1118.544138][ T5994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.552510][ T5994] usb 5-1: Product: syz [ 1118.554919][T13446] usb 4-1: Using ep0 maxpacket: 16 [ 1118.556900][ T5994] usb 5-1: Manufacturer: syz [ 1118.566642][ T5994] usb 5-1: SerialNumber: syz [ 1118.569082][T13446] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1118.581952][ T5994] usb 5-1: config 0 descriptor?? [ 1118.584764][T13446] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1118.591348][ T5994] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 1118.597002][T13446] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.612023][T13446] usb 4-1: Product: syz [ 1118.616452][T13446] usb 4-1: Manufacturer: syz [ 1118.621058][T13446] usb 4-1: SerialNumber: syz [ 1118.628275][T13446] usb 4-1: config 0 descriptor?? [ 1118.636972][T13446] hub 4-1:0.0: bad descriptor, ignoring hub [ 1118.642924][T13446] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1118.652729][T13446] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1118.798494][ T5994] gspca_sn9c2028: read1 error -32 [ 1119.047214][T11720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1119.244002][T20703] usb 5-1: USB disconnect, device number 12 [ 1119.295901][ T5994] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1119.465511][ T5994] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 1119.474693][ T5994] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.486177][ T5994] usb 3-1: config 0 has no interfaces? [ 1119.492771][ T5994] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.503123][ T5994] usb 3-1: config 0 has no interfaces? [ 1119.509814][ T5994] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.520211][ T5994] usb 3-1: config 0 has no interfaces? [ 1119.527614][ T5994] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.538237][ T5994] usb 3-1: config 0 has no interfaces? [ 1119.544824][ T5994] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.555162][ T5994] usb 3-1: config 0 has no interfaces? [ 1119.561581][ T5994] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.571778][ T5994] usb 3-1: config 0 has no interfaces? [ 1119.578250][ T5994] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.588545][ T5994] usb 3-1: config 0 has no interfaces? [ 1119.596587][ T5994] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.606802][ T5994] usb 3-1: config 0 has no interfaces? [ 1119.612320][ T5994] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1119.621695][ T5994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.632156][ T5994] usb 3-1: config 0 descriptor?? [ 1119.654836][T20703] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1119.814487][T20703] usb 2-1: Using ep0 maxpacket: 16 [ 1119.823025][T20703] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1119.835719][T20703] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1119.855600][T20703] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.865566][T13446] usb 3-1: USB disconnect, device number 32 [ 1119.879858][T20703] usb 2-1: config 0 descriptor?? [ 1120.306751][T20703] mcp2221 0003:04D8:00DD.00EA: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1120.728601][ T10] usb 2-1: USB disconnect, device number 26 [ 1121.060408][T11828] netlink: 'syz.2.23846': attribute type 9 has an invalid length. [ 1121.068361][T11828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23846'. [ 1121.163715][ T10] usb 4-1: USB disconnect, device number 25 [ 1121.422366][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1121.422384][ T29] audit: type=1326 audit(1771564644.701:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11866 comm="syz.2.23856" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57ded9c629 code=0x0 [ 1121.462015][T11869] C: renamed from team_slave_0 [ 1121.488539][T11869] netlink: 'syz.0.23858': attribute type 4 has an invalid length. [ 1121.504915][T11869] netlink: 116 bytes leftover after parsing attributes in process `syz.0.23858'. [ 1121.533736][T11869] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1121.707592][T11882] netlink: 44 bytes leftover after parsing attributes in process `syz.3.23863'. [ 1121.719906][T11882] netlink: 43 bytes leftover after parsing attributes in process `syz.3.23863'. [ 1121.729982][T11882] netlink: 'syz.3.23863': attribute type 5 has an invalid length. [ 1121.738707][T11882] netlink: 43 bytes leftover after parsing attributes in process `syz.3.23863'. [ 1122.301969][T11907] ALSA: mixer_oss: invalid OSS volume '' [ 1122.359407][T11914] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1122.554486][T11933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23885'. [ 1122.671123][T11938] netlink: 'syz.1.23887': attribute type 9 has an invalid length. [ 1122.680689][T11938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23887'. [ 1122.703364][T11938] macvlan0: entered promiscuous mode [ 1122.735415][T11938] macvlan0: entered allmulticast mode [ 1122.747492][T11938] hsr0: entered allmulticast mode [ 1122.761618][T11938] hsr_slave_0: entered allmulticast mode [ 1122.774845][T11938] hsr_slave_1: entered allmulticast mode [ 1123.006049][ T29] audit: type=1326 audit(1771564646.291:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11952 comm="syz.1.23891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc35e39c629 code=0x7ffc0000 [ 1123.054935][ T29] audit: type=1326 audit(1771564646.291:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11952 comm="syz.1.23891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc35e39c629 code=0x7ffc0000 [ 1123.099023][T11957] netlink: 4556 bytes leftover after parsing attributes in process `syz.3.23892'. [ 1123.117470][ T29] audit: type=1326 audit(1771564646.291:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11952 comm="syz.1.23891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc35e39c629 code=0x7ffc0000 [ 1123.165647][ T29] audit: type=1326 audit(1771564646.291:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11952 comm="syz.1.23891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc35e39c629 code=0x7ffc0000 [ 1123.188582][ T29] audit: type=1326 audit(1771564646.311:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11952 comm="syz.1.23891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc35e39c629 code=0x7ffc0000 [ 1123.213124][ T29] audit: type=1326 audit(1771564646.311:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11952 comm="syz.1.23891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc35e39c629 code=0x7ffc0000 [ 1123.310170][ T29] audit: type=1326 audit(1771564646.311:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11952 comm="syz.1.23891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc35e39c629 code=0x7ffc0000 [ 1123.337376][ T29] audit: type=1326 audit(1771564646.331:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11952 comm="syz.1.23891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc35e39c629 code=0x7ffc0000 [ 1123.360964][ T29] audit: type=1326 audit(1771564646.331:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11952 comm="syz.1.23891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc35e39c629 code=0x7ffc0000 [ 1124.585126][ T5994] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 1124.751364][ T5994] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1124.761341][ T5994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.772865][ T5994] usb 4-1: config 0 descriptor?? [ 1124.783633][ T5994] pwc: Samsung MPC-C10 USB webcam detected. [ 1124.861971][T12052] kvm_intel: kvm [12051]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x2 [ 1124.987287][ T5994] pwc: send_video_command error -71 [ 1125.004952][ T5994] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1125.014906][ T5994] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 1125.035281][ T5994] usb 4-1: USB disconnect, device number 26 [ 1125.344052][T12084] netlink: 16 bytes leftover after parsing attributes in process `syz.0.23936'. [ 1125.504804][ T5994] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1125.574518][T12095] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1125.582801][T12095] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1125.666492][ T5994] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1125.680326][ T5994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.697473][ T5994] usb 4-1: config 0 descriptor?? [ 1125.714424][ T5994] pwc: Samsung MPC-C10 USB webcam detected. [ 1125.914940][ T6031] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1126.055831][T12134] netlink: 64 bytes leftover after parsing attributes in process `syz.1.23954'. [ 1126.084887][ T6031] usb 3-1: Using ep0 maxpacket: 16 [ 1126.119233][ T6031] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1126.135202][ T5994] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1126.155197][ T6031] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1126.174689][ T5994] pwc: recv_control_msg error -71 req 02 val 2700 [ 1126.182318][ T5994] pwc: recv_control_msg error -71 req 04 val 1700 [ 1126.189050][ T6031] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1126.205335][ T5994] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1126.224910][ T5994] pwc: recv_control_msg error -71 req 04 val 1000 [ 1126.234199][ T6031] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1126.251841][ T5994] pwc: recv_control_msg error -71 req 04 val 1300 [ 1126.259493][ T6031] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1126.275004][ T6031] usb 3-1: SerialNumber: syz [ 1126.279785][ T5994] pwc: recv_control_msg error -71 req 04 val 1400 [ 1126.297644][ T5994] pwc: recv_control_msg error -71 req 02 val 2000 [ 1126.314808][ T6031] hub 3-1:1.0: bad descriptor, ignoring hub [ 1126.320744][ T6031] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1126.328145][ T5994] pwc: recv_control_msg error -71 req 02 val 2100 [ 1126.345208][ T5994] pwc: recv_control_msg error -71 req 02 val 2200 [ 1126.353071][ T6031] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1126.364850][ T5994] pwc: recv_control_msg error -71 req 06 val 0600 [ 1126.384878][ T5994] pwc: recv_control_msg error -71 req 04 val 1500 [ 1126.395894][ T5994] pwc: recv_control_msg error -71 req 02 val 2500 [ 1126.414946][ T5994] pwc: recv_control_msg error -71 req 02 val 2400 [ 1126.422352][ T5994] pwc: recv_control_msg error -71 req 02 val 2600 [ 1126.445190][ T5994] pwc: recv_control_msg error -71 req 02 val 2900 [ 1126.452084][ T5994] pwc: recv_control_msg error -71 req 02 val 2800 [ 1126.465413][ T5994] pwc: recv_control_msg error -71 req 04 val 1100 [ 1126.479996][ T5994] pwc: recv_control_msg error -71 req 04 val 1200 [ 1126.515403][ T5994] pwc: Registered as video103. [ 1126.532264][ T5994] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input204 [ 1126.588516][ T5994] usb 4-1: USB disconnect, device number 27 [ 1126.665101][ T6031] usb 3-1: USB disconnect, device number 33 [ 1126.843682][T12182] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.23964'. [ 1127.383970][ T6031] hid-generic 0000:0000:0004.00EB: unknown main item tag 0x0 [ 1127.393413][ T6031] hid-generic 0000:0000:0004.00EB: unknown main item tag 0x0 [ 1127.404080][ T6031] hid-generic 0000:0000:0004.00EB: unknown main item tag 0x0 [ 1127.411800][ T6031] hid-generic 0000:0000:0004.00EB: unknown main item tag 0x0 [ 1127.419966][ T6031] hid-generic 0000:0000:0004.00EB: unknown main item tag 0x0 [ 1127.429989][ T6031] hid-generic 0000:0000:0004.00EB: unknown main item tag 0x0 [ 1127.438090][ T6031] hid-generic 0000:0000:0004.00EB: unknown main item tag 0x0 [ 1127.445749][ T6031] hid-generic 0000:0000:0004.00EB: unknown main item tag 0x0 [ 1127.453136][ T6031] hid-generic 0000:0000:0004.00EB: unknown main item tag 0x0 [ 1127.470867][ T6031] hid-generic 0000:0000:0004.00EB: unknown main item tag 0x0 [ 1127.495052][ T6031] hid-generic 0000:0000:0004.00EB: hidraw0: HID v0.03 Device [syz1] on syz0 [ 1127.543649][T12224] netlink: 212356 bytes leftover after parsing attributes in process `syz.1.23978'. [ 1127.608987][T12218] fido_id[12218]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1128.480272][T12286] netlink: 136 bytes leftover after parsing attributes in process `syz.4.24003'. [ 1128.507162][T12286] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1129.015306][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1129.187228][ T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1129.197590][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.211402][ T10] usb 5-1: config 0 descriptor?? [ 1129.220635][ T10] cp210x 5-1:0.0: cp210x converter detected [ 1129.685619][ T10] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1129.713680][ T10] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1129.920482][ T10] usb 5-1: USB disconnect, device number 13 [ 1129.940145][T12371] sctp: [Deprecated]: syz.1.24030 (pid 12371) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1129.940145][T12371] Use struct sctp_sack_info instead [ 1129.941537][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1130.009523][ T10] cp210x 5-1:0.0: device disconnected [ 1130.465688][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 1130.465706][ T29] audit: type=1326 audit(1771564653.751:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12402 comm="syz.4.24039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d319c629 code=0x7ffc0000 [ 1130.505746][ T29] audit: type=1326 audit(1771564653.751:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12402 comm="syz.4.24039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d319c629 code=0x7ffc0000 [ 1130.529832][ T29] audit: type=1326 audit(1771564653.751:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12402 comm="syz.4.24039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d319c629 code=0x7ffc0000 [ 1130.530738][ T980] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1130.553248][ T29] audit: type=1326 audit(1771564653.751:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12402 comm="syz.4.24039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d319c629 code=0x7ffc0000 [ 1130.553292][ T29] audit: type=1326 audit(1771564653.751:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12402 comm="syz.4.24039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d319c629 code=0x7ffc0000 [ 1130.553331][ T29] audit: type=1326 audit(1771564653.751:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12402 comm="syz.4.24039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d319c629 code=0x7ffc0000 [ 1130.553369][ T29] audit: type=1326 audit(1771564653.751:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12402 comm="syz.4.24039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fc3d319c629 code=0x7ffc0000 [ 1130.553403][ T29] audit: type=1326 audit(1771564653.751:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12402 comm="syz.4.24039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d319c629 code=0x7ffc0000 [ 1130.553436][ T29] audit: type=1326 audit(1771564653.751:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12402 comm="syz.4.24039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d319c629 code=0x7ffc0000 [ 1130.553472][ T29] audit: type=1326 audit(1771564653.751:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12402 comm="syz.4.24039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc3d319c629 code=0x7ffc0000 [ 1131.085712][ T980] usb 2-1: Using ep0 maxpacket: 32 [ 1131.113718][ T980] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1131.122676][ T980] usb 2-1: config 0 has no interface number 0 [ 1131.149499][ T980] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1131.158891][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.185033][ T980] usb 2-1: Product: syz [ 1131.189250][ T980] usb 2-1: Manufacturer: syz [ 1131.193851][ T980] usb 2-1: SerialNumber: syz [ 1131.215783][ T980] usb 2-1: config 0 descriptor?? [ 1131.236089][ T980] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1131.447450][ T980] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1131.468141][ T980] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1131.695023][T12398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1131.707837][T12398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1131.728216][T12463] netlink: 212924 bytes leftover after parsing attributes in process `syz.2.24051'. [ 1131.925575][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1131.926813][ T5994] usb 2-1: USB disconnect, device number 27 [ 1131.951947][ T5994] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1131.973922][ T5994] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1131.993073][ T5994] quatech2 2-1:0.51: device disconnected [ 1132.664850][ T5994] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1132.774971][T13446] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 1132.824800][ T5994] usb 5-1: Using ep0 maxpacket: 16 [ 1132.836135][ T5994] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1132.848958][ T5994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1132.863152][ T5994] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1132.877308][ T5994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.885765][ T5994] usb 5-1: Product: syz [ 1132.890010][ T5994] usb 5-1: Manufacturer: syz [ 1132.894681][ T5994] usb 5-1: SerialNumber: syz [ 1132.905767][ T5994] usb 5-1: config 0 descriptor?? [ 1132.919080][ T5994] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1132.929574][ T5994] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1132.949492][T13446] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1132.958758][T13446] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.971396][T13446] usb 2-1: config 0 descriptor?? [ 1133.186665][T13446] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1133.433100][T13446] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1133.449391][T13446] [drm] Initialized udl on minor 2 [ 1133.544523][ T5994] em28xx 5-1:0.0: chip ID is em2874 [ 1133.700172][T12579] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1133.792743][T13446] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 1133.815643][T13446] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1133.846740][ T6031] usb 5-1: USB disconnect, device number 14 [ 1133.849829][ T10] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1133.854158][ T6031] em28xx 5-1:0.0: Disconnecting em28xx [ 1133.865635][T13446] usb 2-1: USB disconnect, device number 28 [ 1133.889393][ T6031] em28xx 5-1:0.0: Freeing device [ 1133.903834][ T10] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1133.944992][ T5994] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1134.110057][T12624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24091'. [ 1134.146958][ T5994] usb 3-1: Using ep0 maxpacket: 16 [ 1134.164623][ T5994] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1134.186433][ T5994] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1134.205575][ T5994] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1134.221711][ T5994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.234215][ T5994] usb 3-1: config 0 descriptor?? [ 1134.676274][ T5994] corsair 0003:1B1C:1B02.00EC: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 1134.864501][ T5994] corsair 0003:1B1C:1B02.00EC: Read invalid backlight brightness: 34. [ 1135.116902][ T10] usb 3-1: USB disconnect, device number 34 [ 1135.645993][ T980] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1135.817150][ T980] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1135.837046][ T980] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1135.848006][ T980] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1135.864954][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1135.873060][ T980] usb 4-1: SerialNumber: syz [ 1136.106722][ T980] usb 4-1: 0:2 : does not exist [ 1136.117978][ T980] usb 4-1: usbmixer: too many channels (61) in unit 5 [ 1136.166871][ T980] usb 4-1: USB disconnect, device number 28 [ 1137.215190][T12770] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 1137.221743][T12770] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1137.237542][T12763] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1137.244084][T12763] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1137.247157][T12777] loop5: detected capacity change from 0 to 7 [ 1137.262139][T12770] vhci_hcd vhci_hcd.0: Device attached [ 1137.268465][T12777] Dev loop5: unable to read RDB block 7 [ 1137.276395][T12777] loop5: unable to read partition table [ 1137.282401][T12777] loop5: partition table beyond EOD, truncated [ 1137.289414][T12779] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(9) [ 1137.295934][T12779] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1137.307090][T12777] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1137.310262][T12763] vhci_hcd vhci_hcd.0: Device attached [ 1137.325419][T12779] vhci_hcd vhci_hcd.0: Device attached [ 1137.386725][T12763] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1137.393275][T12763] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1137.403876][T12763] vhci_hcd vhci_hcd.0: Device attached [ 1137.417858][T12780] vhci_hcd: connection closed [ 1137.417995][ T1146] vhci_hcd vhci_hcd.3: stop threads [ 1137.418428][T12785] vhci_hcd: connection closed [ 1137.422703][ T1146] vhci_hcd vhci_hcd.3: release socket [ 1137.422806][ T1146] vhci_hcd vhci_hcd.3: disconnect device [ 1137.446491][T12771] vhci_hcd: connection closed [ 1137.446633][T12768] vhci_hcd: connection closed [ 1137.452929][ T1146] vhci_hcd vhci_hcd.3: stop threads [ 1137.463363][ T1146] vhci_hcd vhci_hcd.3: release socket [ 1137.470033][ T1146] vhci_hcd vhci_hcd.3: disconnect device [ 1137.476711][ T1146] vhci_hcd vhci_hcd.3: stop threads [ 1137.482118][ T1146] vhci_hcd vhci_hcd.3: release socket [ 1137.488221][ T1146] vhci_hcd vhci_hcd.3: disconnect device [ 1137.497607][ T1146] vhci_hcd vhci_hcd.3: stop threads [ 1137.502833][ T1146] vhci_hcd vhci_hcd.3: release socket [ 1137.508562][ T6031] usb 39-2: new low-speed USB device number 3 using vhci_hcd [ 1137.516967][ T6031] usb 39-2: enqueue for inactive port 1 [ 1137.524074][ T1146] vhci_hcd vhci_hcd.3: disconnect device [ 1137.584949][ T6031] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1137.636089][T12800] netlink: 32 bytes leftover after parsing attributes in process `syz.0.24135'. [ 1138.345153][ T980] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1138.518603][ T980] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1138.534982][ T980] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1138.544288][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.555400][ T980] usb 3-1: config 0 descriptor?? [ 1138.564302][ T980] pwc: Askey VC010 type 2 USB webcam detected. [ 1138.628029][ T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1138.808641][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1138.839339][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1138.866549][ T10] usb 2-1: config 1 has no interface number 0 [ 1138.875833][ T10] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1138.880399][T12830] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1138.905528][ T10] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1138.965108][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1138.973405][T12832] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.24146'. [ 1138.974426][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.995063][ T980] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1139.014592][ T980] pwc: recv_control_msg error -32 req 02 val 2700 [ 1139.033574][ T10] usb 2-1: Product: syz [ 1139.043523][ T10] usb 2-1: Manufacturer: syz [ 1139.058458][ T10] usb 2-1: SerialNumber: syz [ 1139.086636][ T10] usb 2-1: selecting invalid altsetting 1 [ 1139.243064][ T980] pwc: recv_control_msg error -71 req 04 val 1000 [ 1139.254196][ T980] pwc: recv_control_msg error -71 req 04 val 1300 [ 1139.274269][ T980] pwc: recv_control_msg error -71 req 04 val 1400 [ 1139.281988][ T980] pwc: recv_control_msg error -71 req 02 val 2000 [ 1139.301318][ T980] pwc: recv_control_msg error -71 req 02 val 2100 [ 1139.318685][ T980] pwc: recv_control_msg error -71 req 04 val 1500 [ 1139.345167][ T980] pwc: recv_control_msg error -71 req 02 val 2500 [ 1139.352244][ T980] pwc: recv_control_msg error -71 req 02 val 2400 [ 1139.361896][ T980] pwc: recv_control_msg error -71 req 02 val 2600 [ 1139.372411][ T980] pwc: recv_control_msg error -71 req 02 val 2900 [ 1139.380218][ T980] pwc: recv_control_msg error -71 req 02 val 2800 [ 1139.387991][ T980] pwc: recv_control_msg error -71 req 04 val 1100 [ 1139.396128][ T980] pwc: recv_control_msg error -71 req 04 val 1200 [ 1139.418440][ T980] pwc: Registered as video103. [ 1139.439220][ T980] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input205 [ 1139.477757][ T980] usb 3-1: USB disconnect, device number 35 [ 1139.498476][ T10] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS [ 1139.504540][ T10] cdc_ncm 2-1:1.1: bind() failure [ 1139.597877][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1139.597894][ T29] audit: type=1326 audit(1771564662.881:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12866 comm="syz.0.24151" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa0c19c629 code=0x0 [ 1140.245127][ T980] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1140.394929][ T980] usb 3-1: Using ep0 maxpacket: 16 [ 1140.395919][ T5994] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1140.402705][ T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1140.419659][ T980] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1140.428896][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.440216][ T980] usb 3-1: config 0 descriptor?? [ 1140.564991][ T5994] usb 5-1: Using ep0 maxpacket: 8 [ 1140.572044][ T5994] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1140.582271][ T5994] usb 5-1: config 4 interface 0 has no altsetting 0 [ 1140.592009][ T5994] usb 5-1: string descriptor 0 read error: -22 [ 1140.599924][ T5994] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1140.610515][ T5994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.629493][ T5994] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1140.642955][ T5994] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1140.656786][ T5994] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1140.669133][ T5994] usb 5-1: media controller created [ 1140.689074][ T5994] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1140.827027][ T5994] zl10353_read_register: readreg error (reg=127, ret==0) [ 1140.866885][ T980] hid_parser_main: 91 callbacks suppressed [ 1140.866906][ T980] cm6533_jd 0003:0D8C:0022.00ED: unknown main item tag 0x0 [ 1140.881218][ T5994] usb 5-1: USB disconnect, device number 15 [ 1140.901600][ T980] cm6533_jd 0003:0D8C:0022.00ED: unknown main item tag 0x0 [ 1140.918282][ T980] cm6533_jd 0003:0D8C:0022.00ED: unknown main item tag 0x0 [ 1140.928165][ T980] cm6533_jd 0003:0D8C:0022.00ED: unknown main item tag 0x0 [ 1140.942232][ T980] cm6533_jd 0003:0D8C:0022.00ED: unknown main item tag 0x0 [ 1140.956159][ T980] cm6533_jd 0003:0D8C:0022.00ED: hiddev0,hidraw0: USB HID v0.05 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 1141.150950][ T5994] usb 3-1: USB disconnect, device number 36 [ 1141.388248][ T5994] usb 2-1: USB disconnect, device number 29 [ 1141.430781][T12962] ip6tnl9: entered allmulticast mode [ 1141.604901][ T980] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1141.756218][ T980] usb 5-1: Using ep0 maxpacket: 8 [ 1141.766311][ T980] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1141.777499][ T980] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1141.793342][ T980] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1141.803655][ T980] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1141.817234][ T980] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1141.832006][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.090703][ T980] usb 5-1: GET_CAPABILITIES returned 0 [ 1142.098079][ T980] usbtmc 5-1:16.0: can't read capabilities [ 1142.322055][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1142.353175][ T980] usb 5-1: USB disconnect, device number 16 [ 1142.805475][T12169] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1142.990371][T12169] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1143.022854][T12169] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1143.042501][T12169] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1143.097938][T12169] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1143.124343][T12169] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.135915][T12169] usb 2-1: config 0 descriptor?? [ 1143.638490][T12169] plantronics 0003:047F:FFFF.00EE: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1143.859580][T13070] vivid-000: disconnect [ 1143.883540][T13070] vivid-000: reconnect [ 1143.894347][T12169] usb 2-1: USB disconnect, device number 30 [ 1143.992723][T13089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24203'. [ 1144.108560][T13128] input: syz0 as /devices/virtual/input/input206 [ 1144.494893][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1144.541591][T13166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24219'. [ 1144.551382][T13166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24219'. [ 1144.655629][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1144.688479][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1144.715882][ T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1144.753166][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.774037][ T10] usb 5-1: config 0 descriptor?? [ 1145.028807][T13185] ================================================================== [ 1145.036914][T13185] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1145.045520][T13185] Write of size 2560 at addr ffffc90006b59b00 by task vivid-000-vid-c/13185 [ 1145.054179][T13185] [ 1145.056501][T13185] CPU: 0 UID: 0 PID: 13185 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) [ 1145.056522][T13185] Tainted: [L]=SOFTLOCKUP [ 1145.056528][T13185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1145.056537][T13185] Call Trace: [ 1145.056544][T13185] [ 1145.056551][T13185] dump_stack_lvl+0xe8/0x150 [ 1145.056572][T13185] print_report+0xba/0x230 [ 1145.056589][T13185] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1145.056609][T13185] kasan_report+0x117/0x150 [ 1145.056625][T13185] ? trace_irq_disable+0x3b/0x150 [ 1145.056646][T13185] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1145.056667][T13185] kasan_check_range+0x264/0x2c0 [ 1145.056683][T13185] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1145.056702][T13185] __asan_memcpy+0x40/0x70 [ 1145.056721][T13185] tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1145.056763][T13185] vivid_thread_vid_cap_tick+0x1035/0x6040 [ 1145.056783][T13185] ? __lock_acquire+0x6b5/0x2cf0 [ 1145.056804][T13185] ? do_raw_spin_lock+0x12b/0x2f0 [ 1145.056819][T13185] ? do_raw_spin_lock+0x12b/0x2f0 [ 1145.056834][T13185] ? __lock_acquire+0x6b5/0x2cf0 [ 1145.056851][T13185] ? __lock_acquire+0x6b5/0x2cf0 [ 1145.056870][T13185] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 1145.056894][T13185] vivid_thread_vid_cap+0x909/0x1190 [ 1145.056919][T13185] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1145.056938][T13185] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1145.056952][T13185] ? __kthread_parkme+0x7a/0x1f0 [ 1145.056973][T13185] kthread+0x388/0x470 [ 1145.056986][T13185] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1145.057001][T13185] ? __pfx_kthread+0x10/0x10 [ 1145.057014][T13185] ret_from_fork+0x51e/0xb90 [ 1145.057032][T13185] ? __pfx_ret_from_fork+0x10/0x10 [ 1145.057048][T13185] ? __switch_to+0xc7d/0x1450 [ 1145.057063][T13185] ? __pfx_kthread+0x10/0x10 [ 1145.057076][T13185] ret_from_fork_asm+0x1a/0x30 [ 1145.057098][T13185] [ 1145.057103][T13185] [ 1145.240765][T13185] The buggy address belongs to a 225-page vmalloc region starting at 0xffffc90006a79000 allocated at vb2_vmalloc_alloc+0xef/0x360 [ 1145.254126][T13185] The buggy address belongs to the physical page: [ 1145.260524][T13185] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807dabc000 pfn:0x7dabc [ 1145.270571][T13185] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1145.277683][T13185] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1145.286594][T13185] raw: ffff88807dabc000 0000000000000000 00000001ffffffff 0000000000000000 [ 1145.295154][T13185] page dumped because: kasan: bad access detected [ 1145.301564][T13185] page_owner tracks the page as allocated [ 1145.307257][T13185] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 13184, tgid 13183 (syz.3.24227), ts 1144929041862, free_ts 1144928581893 [ 1145.326858][T13185] post_alloc_hook+0x231/0x280 [ 1145.331606][T13185] get_page_from_freelist+0x24dc/0x2580 [ 1145.337135][T13185] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1145.342924][T13185] alloc_pages_bulk_noprof+0x558/0x700 [ 1145.348363][T13185] alloc_pages_bulk_mempolicy_noprof+0x34e/0x1680 [ 1145.354759][T13185] __vmalloc_node_range_noprof+0xa32/0x1730 [ 1145.360637][T13185] vmalloc_user_noprof+0xad/0xe0 [ 1145.365554][T13185] vb2_vmalloc_alloc+0xef/0x360 [ 1145.370393][T13185] __vb2_queue_alloc+0x9c5/0x15a0 [ 1145.375466][T13185] vb2_core_reqbufs+0xc1f/0x1410 [ 1145.380389][T13185] vb2_ioctl_reqbufs+0x4c0/0x830 [ 1145.385306][T13185] __video_do_ioctl+0x889/0xc50 [ 1145.390148][T13185] video_usercopy+0x876/0x14b0 [ 1145.394907][T13185] v4l2_ioctl+0x18d/0x1e0 [ 1145.399227][T13185] __se_sys_ioctl+0xfc/0x170 [ 1145.403805][T13185] do_syscall_64+0x14d/0xf80 [ 1145.408389][T13185] page last free pid 13184 tgid 13183 stack trace: [ 1145.414960][T13185] __free_frozen_pages+0xc2b/0xdb0 [ 1145.420121][T13185] __kasan_populate_vmalloc+0x1b2/0x1d0 [ 1145.425655][T13185] alloc_vmap_area+0xd73/0x14b0 [ 1145.430494][T13185] __get_vm_area_node+0x1f8/0x300 [ 1145.435503][T13185] __vmalloc_node_range_noprof+0x372/0x1730 [ 1145.441377][T13185] vmalloc_user_noprof+0xad/0xe0 [ 1145.446382][T13185] vb2_vmalloc_alloc+0xef/0x360 [ 1145.451216][T13185] __vb2_queue_alloc+0x9c5/0x15a0 [ 1145.456221][T13185] vb2_core_reqbufs+0xc1f/0x1410 [ 1145.461145][T13185] vb2_ioctl_reqbufs+0x4c0/0x830 [ 1145.466063][T13185] __video_do_ioctl+0x889/0xc50 [ 1145.470893][T13185] video_usercopy+0x876/0x14b0 [ 1145.475638][T13185] v4l2_ioctl+0x18d/0x1e0 [ 1145.479959][T13185] __se_sys_ioctl+0xfc/0x170 [ 1145.484536][T13185] do_syscall_64+0x14d/0xf80 [ 1145.489113][T13185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.494991][T13185] [ 1145.497381][T13185] Memory state around the buggy address: [ 1145.502987][T13185] ffffc90006b59f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1145.511036][T13185] ffffc90006b59f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1145.519076][T13185] >ffffc90006b5a000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1145.527119][T13185] ^ [ 1145.531181][T13185] ffffc90006b5a080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1145.539239][T13185] ffffc90006b5a100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1145.547291][T13185] ================================================================== [ 1145.597454][T13185] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1145.604697][T13185] CPU: 0 UID: 0 PID: 13185 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) [ 1145.616072][T13185] Tainted: [L]=SOFTLOCKUP [ 1145.620389][T13185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1145.630462][T13185] Call Trace: [ 1145.633743][T13185] [ 1145.636673][T13185] vpanic+0x56c/0xa60 [ 1145.640670][T13185] ? __pfx_vpanic+0x10/0x10 [ 1145.645180][T13185] ? __pfx___schedule+0x10/0x10 [ 1145.650044][T13185] panic+0xc5/0xd0 [ 1145.653779][T13185] ? __pfx_panic+0x10/0x10 [ 1145.658213][T13185] ? preempt_schedule_common+0x82/0xd0 [ 1145.663684][T13185] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1145.669331][T13185] check_panic_on_warn+0x89/0xb0 [ 1145.674278][T13185] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1145.679929][T13185] end_report+0x73/0x180 [ 1145.684179][T13185] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1145.689820][T13185] kasan_report+0x128/0x150 [ 1145.694330][T13185] ? trace_irq_disable+0x3b/0x150 [ 1145.699374][T13185] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1145.705027][T13185] kasan_check_range+0x264/0x2c0 [ 1145.709974][T13185] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1145.715618][T13185] __asan_memcpy+0x40/0x70 [ 1145.720050][T13185] tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1145.725624][T13185] vivid_thread_vid_cap_tick+0x1035/0x6040 [ 1145.731461][T13185] ? __lock_acquire+0x6b5/0x2cf0 [ 1145.736419][T13185] ? do_raw_spin_lock+0x12b/0x2f0 [ 1145.741453][T13185] ? do_raw_spin_lock+0x12b/0x2f0 [ 1145.746482][T13185] ? __lock_acquire+0x6b5/0x2cf0 [ 1145.751430][T13185] ? __lock_acquire+0x6b5/0x2cf0 [ 1145.756479][T13185] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 1145.762658][T13185] vivid_thread_vid_cap+0x909/0x1190 [ 1145.767965][T13185] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1145.773704][T13185] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1145.779777][T13185] ? __kthread_parkme+0x7a/0x1f0 [ 1145.784726][T13185] kthread+0x388/0x470 [ 1145.788798][T13185] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1145.794519][T13185] ? __pfx_kthread+0x10/0x10 [ 1145.799118][T13185] ret_from_fork+0x51e/0xb90 [ 1145.803716][T13185] ? __pfx_ret_from_fork+0x10/0x10 [ 1145.808830][T13185] ? __switch_to+0xc7d/0x1450 [ 1145.813512][T13185] ? __pfx_kthread+0x10/0x10 [ 1145.818111][T13185] ret_from_fork_asm+0x1a/0x30 [ 1145.822890][T13185] [ 1145.826285][T13185] Kernel Offset: disabled [ 1145.830596][T13185] Rebooting in 86400 seconds..