last executing test programs: 4.566879782s ago: executing program 4 (id=9121): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000080), 0x4) getsockopt$inet6_int(r0, 0x29, 0x10, 0x0, &(0x7f0000000340)) 4.379435238s ago: executing program 4 (id=9123): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000140), &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000740)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r1, r1, r0}, &(0x7f0000003380)=""/4094, 0xffe, 0x0) 3.792664743s ago: executing program 4 (id=9128): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) 3.542811596s ago: executing program 4 (id=9134): r0 = io_uring_setup(0x7c84, &(0x7f0000000100)={0x0, 0x1e78, 0x40, 0x2, 0x80002c7}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f00000003c0), 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) 3.313536539s ago: executing program 1 (id=9137): r0 = mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x4, 0x9}) mq_timedreceive(r0, &(0x7f0000000140)=""/117, 0x75, 0xf0ffffff7f0000, 0x0) mq_timedreceive(r0, &(0x7f00000000c0)=""/49, 0x31, 0x5, 0x0) 3.279642487s ago: executing program 4 (id=9138): syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@wr_drn={0x68, 0x20, {0x1, 0xffffffffffffffff}}], 0x20}) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0xc0105702, &(0x7f00000000c0)) 3.120454068s ago: executing program 1 (id=9140): r0 = memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) 3.120274047s ago: executing program 4 (id=9141): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020ec13060000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000000)={0x14, &(0x7f0000000180)={0x20, 0x2, 0xf0, {0xf0, 0x10, "4736b1d2b6efbc025e6d84a0cb43c5f6dd128114fc722da387511dd10c20d863ead4fc68b42e9eb72036f9284f26b075fce1c1ee37e273c1d54d1b7e65516bf8fafa7e9db77e4a50f28376943a1c0a5cc0ba8fd6bbb9ecd750a75e48db067fa3ebbaf8ed47fa91ea4baf9f641f58a1e30d1505e85a7278aa98cc0c7da343d169b48564bfa2eaf1a4c0f35668fb11103f67360a31c0db2160556e67071f822f7e0cfa8ca8a73a433a5cc3ee842464ea76057ced67f1c0cc0a17b78f79ee9c03c25ab702ef25268dbade3df78e14b338e0dd5d5735ed7d7ca1d4b5a454effb79b839f8e38f90b3a42e1e9ad85ee436"}}, 0x0}, 0x0) 2.90798295s ago: executing program 1 (id=9146): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) unshare(0x20400) inotify_add_watch(r0, 0x0, 0x4000002) 2.736009278s ago: executing program 1 (id=9149): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x9d96c000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 2.675372755s ago: executing program 3 (id=9150): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) 2.434127437s ago: executing program 3 (id=9152): r0 = io_uring_setup(0x5594, &(0x7f0000000080)={0x0, 0xb2d0, 0x0, 0x1, 0xb8}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002700)=""/4096, 0x1000}], &(0x7f0000000140)=[0xba], 0x1}, 0x20) 1.965100576s ago: executing program 3 (id=9158): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001640)=[&(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x7, 0x4, r0, 0x0, 0x0, 0x5}]) 1.782219168s ago: executing program 3 (id=9160): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2801824, &(0x7f0000001500)=ANY=[], 0x0, 0x0, 0x0) 1.641400654s ago: executing program 3 (id=9162): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) 1.462644014s ago: executing program 3 (id=9163): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000206d049cc20000000000010902a400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, &(0x7f0000000840)={0x40, 0x7, 0x5, {0x5, 0x23, "b1b564"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.06665698s ago: executing program 0 (id=9167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x1a0, 0x6, 0xa, 0x60b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x174, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}, {0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x7}}}, 0x1c8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 936.675461ms ago: executing program 2 (id=9168): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0920000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000046000000760000003f98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 916.905418ms ago: executing program 1 (id=9169): io_setup(0x1, &(0x7f00000004c0)) io_setup(0x3, &(0x7f0000000180)) io_setup(0x7fff, &(0x7f0000000040)) 838.002956ms ago: executing program 0 (id=9170): capset(&(0x7f0000000180)={0x20080522}, &(0x7f00000001c0)={0x2, 0x2, 0x5, 0x0, 0xc25, 0x7}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 702.62082ms ago: executing program 2 (id=9171): r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040), &(0x7f0000000340), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ed071, 0xffffffffffffffff, 0xfffff000) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) 670.449461ms ago: executing program 0 (id=9172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b160000000000000000020000084c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140240000000800034000000014080002400000000208000740000000100900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 591.551256ms ago: executing program 2 (id=9173): syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x40c01) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x2) 536.799237ms ago: executing program 1 (id=9174): bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r0 = syz_io_uring_setup(0x1f89, &(0x7f0000000080)={0x0, 0x0, 0x13580, 0x100, 0x2}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000000)) io_uring_enter(r0, 0x15f1, 0x27e9, 0x4b, 0x0, 0x0) 458.808341ms ago: executing program 0 (id=9175): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) write$sequencer(r0, &(0x7f0000000040)=[@t={0x81, 0x8, 0x8, 0x9, @generic=0x8}], 0x8) 455.287372ms ago: executing program 2 (id=9176): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000006900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000003c0)=""/4092, 0xffc}, {&(0x7f0000001e40)=""/232, 0xe8}, {&(0x7f0000001700)=""/161, 0xa1}], 0x3}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000001840)=""/165, 0xa5}, {&(0x7f0000001b00)=""/227, 0xe3}, {&(0x7f0000002e80)=""/251, 0xfb}, {&(0x7f0000001500)=""/245, 0xf5}, {&(0x7f0000001d40)=""/249, 0xf9}, {&(0x7f0000001680)=""/107, 0x6b}, {&(0x7f0000001a80)=""/85, 0x55}, {&(0x7f00000000c0)=""/82, 0x52}], 0x9}, 0x7f}], 0x4, 0x40012032, 0x0) 391.329433ms ago: executing program 2 (id=9177): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="11110200002006002400128009000100626f6e64000400001400028005000e000100000005000d"], 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 237.337115ms ago: executing program 0 (id=9178): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x2}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x81}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 123.229462ms ago: executing program 2 (id=9179): prctl$PR_SET_NAME(0x4, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_madvise(r0, 0x0, 0x0, 0xa, 0x0) 0s ago: executing program 0 (id=9180): semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f0000000200)=[{0x2, 0x0, 0x2000}, {0x1, 0x3, 0x1800}], 0x2) semctl$GETPID(0x0, 0x2, 0xb, 0x0) kernel console output (not intermixed with test programs): ip=0x7fdfbb59cdd9 code=0x7ffc0000 [ 502.703270][T13840] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 502.706892][ T6030] usb 2-1: USB disconnect, device number 11 [ 502.787864][ T30] audit: type=1326 audit(1777242037.525:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19611 comm="syz.3.6728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fdfbb59cdd9 code=0x7ffc0000 [ 502.850759][T13840] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 502.868079][ T30] audit: type=1326 audit(1777242037.525:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19611 comm="syz.3.6728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbb59cdd9 code=0x7ffc0000 [ 502.895774][T13840] usb 3-1: config 0 interface 0 has no altsetting 0 [ 502.918761][T13840] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 502.939131][T13840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 502.963741][ T30] audit: type=1326 audit(1777242037.525:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19611 comm="syz.3.6728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbb59cdd9 code=0x7ffc0000 [ 502.970417][T13840] usb 3-1: Product: syz [ 503.054575][T13840] usb 3-1: Manufacturer: syz [ 503.072083][T13840] usb 3-1: SerialNumber: syz [ 503.095860][T13840] usb 3-1: config 0 descriptor?? [ 503.112204][T13840] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 503.138108][T13840] pctv452e: pctv452e_power_ctrl: 1 [ 503.138108][T13840] [ 503.319666][T13840] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -71 [ 503.319666][T13840] [ 503.365401][T13840] dvb-usb: bulk message failed: -22 (5/0) [ 503.416738][T13840] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 503.483685][T13840] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 503.526782][T13840] usb 3-1: USB disconnect, device number 4 [ 503.609427][ T5964] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 503.658382][T19643] netlink: 'syz.4.6743': attribute type 9 has an invalid length. [ 503.749717][T19638] bond3: option primary_reselect: invalid value (21) [ 503.759754][T19638] bond3 (unregistering): Released all slaves [ 503.790182][ T5964] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 503.815937][ T5964] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 503.849465][ T5964] usb 1-1: config 1 has no interface number 0 [ 503.877866][ T5964] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 503.924653][ T5964] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 503.937830][ T5964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.966422][ T5964] usb 1-1: Product: syz [ 503.986774][ T5964] usb 1-1: Manufacturer: syz [ 503.996798][ T5964] usb 1-1: SerialNumber: syz [ 504.034857][ T5964] usb 1-1: selecting invalid altsetting 1 [ 504.438000][ T5964] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS [ 504.468924][ T5964] cdc_ncm 1-1:1.1: bind() failure [ 504.499863][ T5964] usb 1-1: USB disconnect, device number 104 [ 504.685492][T19678] netlink: 136 bytes leftover after parsing attributes in process `syz.1.6760'. [ 504.713059][T19678] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 505.197512][T19702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6771'. [ 505.675226][T19719] IPVS: set_ctl: invalid protocol: 255 172.20.20.45:286 [ 506.433404][T19750] netlink: 'syz.0.6794': attribute type 10 has an invalid length. [ 506.467399][T19750] openvswitch: netlink: Flow key attr not present in new flow. [ 506.721231][T19765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6801'. [ 506.969143][T19771] hma(sha224): entered promiscuous mode [ 508.178343][ T5964] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 508.347862][ T5964] usb 4-1: Using ep0 maxpacket: 8 [ 508.358336][ T5964] usb 4-1: config 0 has an invalid interface number: 33 but max is 1 [ 508.382468][ T5964] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.420195][ T5964] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 508.421402][T19834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6835'. [ 508.457723][ T5964] usb 4-1: config 0 has no interface number 0 [ 508.477605][ T5964] usb 4-1: config 0 interface 33 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 508.520338][ T5964] usb 4-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 508.543376][ T5964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.569864][ T5964] usb 4-1: Product: syz [ 508.594616][ T5964] usb 4-1: Manufacturer: syz [ 508.608990][ T5964] usb 4-1: SerialNumber: syz [ 508.632501][ T5964] usb 4-1: config 0 descriptor?? [ 508.663432][ T5964] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 508.681303][ T30] audit: type=1326 audit(1777242043.595:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19843 comm="syz.4.6840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba5d9cdd9 code=0x7ffc0000 [ 508.755064][ T30] audit: type=1326 audit(1777242043.595:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19843 comm="syz.4.6840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba5d9cdd9 code=0x7ffc0000 [ 508.829529][ T30] audit: type=1326 audit(1777242043.655:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19843 comm="syz.4.6840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f3ba5d9cdd9 code=0x7ffc0000 [ 508.904993][ T30] audit: type=1326 audit(1777242043.655:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19843 comm="syz.4.6840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba5d9cdd9 code=0x7ffc0000 [ 508.939353][ T2365] pvrusb2: Invalid write control endpoint [ 509.007598][ T2365] usb 4-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 509.065472][ T2365] usb 4-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 509.074491][T19848] netlink: 'syz.0.6841': attribute type 3 has an invalid length. [ 509.142004][ T5964] usb 4-1: USB disconnect, device number 11 [ 509.265096][T19858] binder: 19856:19858 ioctl 400c620e 200000000000 returned -22 [ 509.441246][T19864] netlink: 'syz.2.6849': attribute type 2 has an invalid length. [ 510.076721][T19900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6865'. [ 510.390035][T19907] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6869'. [ 510.475086][T19911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6871'. [ 511.600597][T19969] netlink: 'syz.3.6899': attribute type 10 has an invalid length. [ 511.834653][T19983] xt_TPROXY: Can be used only with -p tcp or -p udp [ 512.354596][T20000] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6914'. [ 512.386962][T20003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6916'. [ 512.417472][T20000] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6914'. [ 512.423612][T20005] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6917'. [ 512.624425][T20010] xt_nfacct: accounting object `syz1' does not exist [ 513.491658][T20044] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 513.619434][T20056] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6943'. [ 513.659077][T20056] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6943'. [ 514.017868][T13840] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 514.071517][ T30] audit: type=1326 audit(1777242048.995:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20073 comm="syz.0.6951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4719cdd9 code=0x7ffc0000 [ 514.147784][ T30] audit: type=1326 audit(1777242048.995:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20073 comm="syz.0.6951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4719cdd9 code=0x7ffc0000 [ 514.187988][T13840] usb 3-1: Using ep0 maxpacket: 32 [ 514.203601][T13840] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.217144][ T30] audit: type=1326 audit(1777242048.995:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20073 comm="syz.0.6951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7eff4719cdd9 code=0x7ffc0000 [ 514.252392][T13840] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.268415][ T30] audit: type=1326 audit(1777242048.995:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20073 comm="syz.0.6951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4719cdd9 code=0x7ffc0000 [ 514.291479][ T30] audit: type=1326 audit(1777242048.995:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20073 comm="syz.0.6951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4719cdd9 code=0x7ffc0000 [ 514.318585][T13840] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 514.342273][T13840] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 514.361237][T13840] usb 3-1: Product: syz [ 514.368785][T13840] usb 3-1: Manufacturer: syz [ 514.388435][T13840] hub 3-1:4.0: USB hub found [ 514.540055][T20091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6959'. [ 514.556186][T20089] 8021q: adding VLAN 0 to HW filter on device bond4 [ 514.574550][T20091] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 514.592366][T13840] hub 3-1:4.0: config failed, hub has too many ports! (err -19) [ 514.679089][T20093] netlink: 'syz.1.6961': attribute type 46 has an invalid length. [ 514.687194][T20093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6961'. [ 514.918062][T13840] usb 3-1: USB disconnect, device number 5 [ 515.047080][T20109] netlink: 'syz.4.6968': attribute type 61 has an invalid length. [ 515.071162][T20109] netlink: 'syz.4.6968': attribute type 62 has an invalid length. [ 515.167974][T20113] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6970'. [ 515.364145][T20121] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6974'. [ 516.402416][T20172] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.492116][T20178] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.722730][T20180] bond2 (unregistering): Released all slaves [ 516.814028][T20190] netlink: 'syz.0.7008': attribute type 21 has an invalid length. [ 516.843157][T20190] netlink: 'syz.0.7008': attribute type 6 has an invalid length. [ 517.556421][T20219] netlink: 'syz.3.7022': attribute type 21 has an invalid length. [ 518.120071][T20244] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 518.330594][ T6020] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 518.498046][ T6020] usb 1-1: Using ep0 maxpacket: 32 [ 518.531171][ T6020] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 33, changing to 7 [ 518.573387][ T6020] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 518.614508][ T6020] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.648704][ T6020] usb 1-1: Product: syz [ 518.666322][ T6020] usb 1-1: Manufacturer: syz [ 518.687048][ T6020] usb 1-1: SerialNumber: syz [ 518.769876][ T6020] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 519.078066][T20277] Sensor A: ================= START STATUS ================= [ 519.117400][T20277] Sensor A: Test Pattern: Horizontal 100% Colorbar [ 519.166866][ T6020] usb 1-1: USB disconnect, device number 105 [ 519.183813][T20277] Sensor A: Show Information: All [ 519.200503][T20277] Sensor A: Vertical Flip: false [ 519.228380][T20277] Sensor A: Horizontal Flip: true [ 519.252537][T20277] Sensor A: Brightness: 128 [ 519.272340][T20277] Sensor A: Contrast: 0 [ 519.288640][T20277] Sensor A: Hue: 0 [ 519.306643][T20277] Sensor A: Saturation: 0 [ 519.323346][T20277] Sensor A: Pixel Rate: 160000000 [ 519.341279][T20277] Sensor A: Horizontal Blanking: 800 [ 519.351049][T20277] Sensor A: Vertical Blanking: 3223 [ 519.357233][T20277] Sensor A: ================== END STATUS ================== [ 520.263242][T20326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 520.734729][T20350] netlink: 'syz.0.7080': attribute type 5 has an invalid length. [ 520.799255][T20350] ip6erspan1: entered promiscuous mode [ 521.021019][T20365] __nla_validate_parse: 1 callbacks suppressed [ 521.021038][T20365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7087'. [ 521.201415][T20373] netlink: 9 bytes leftover after parsing attributes in process `syz.1.7091'. [ 521.236852][T20373] 0·: renamed from hsr0 [ 521.260488][T20373] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 521.318109][T20373] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 521.358430][T20373] 0·: entered allmulticast mode [ 521.378025][T20373] hsr_slave_0: entered allmulticast mode [ 521.397316][T20373] hsr_slave_1: entered allmulticast mode [ 521.423171][T20373] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 521.518020][ T6078] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 521.588790][T20384] bond0 (unregistering): Released all slaves [ 521.681097][ T6078] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 521.710902][T20391] snd_dummy snd_dummy.0: control 3:5:3:syz1:9 is already present [ 521.723357][ T6078] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 521.750550][ T6078] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 521.780220][ T6078] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.821354][ T6078] usb 1-1: config 0 descriptor?? [ 522.261625][ T6078] Bluetooth: Can't get version to change to load ram patch err [ 522.275195][T20415] trusted_key: encrypted_key: keylen parameter is missing [ 522.289803][ T6078] Bluetooth: Loading patch file failed [ 522.309453][ T6078] ath3k 1-1:0.0: probe with driver ath3k failed with error -71 [ 522.334067][T20417] Zero length message leads to an empty skb [ 522.358178][ T6078] usb 1-1: USB disconnect, device number 106 [ 522.720734][T20431] xt_hashlimit: overflow, try lower: 0/0 [ 522.740833][T20434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7122'. [ 522.767181][T20435] netlink: 'syz.1.7121': attribute type 6 has an invalid length. [ 522.817806][T20435] IPv6: NLM_F_CREATE should be specified when creating new route [ 523.391833][T20457] bond3: option min_links: invalid value (18446744073709551608) [ 523.420974][T20457] bond3: option min_links: allowed values 0 - 2147483647 [ 523.454325][T20457] bond3 (unregistering): Released all slaves [ 524.760268][T20519] xt_CT: You must specify a L4 protocol and not use inversions on it [ 524.899348][T20525] xt_ecn: cannot match TCP bits for non-tcp packets [ 525.377940][ T6078] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 525.550265][ T6078] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 525.574978][T20550] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 525.596279][ T6078] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 525.632124][ T6078] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 525.649961][T20550] bond3 (unregistering): Released all slaves [ 525.681819][ T6078] usb 1-1: config 220 has no interface number 2 [ 525.710356][ T6078] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 525.754825][ T6078] usb 1-1: config 220 interface 0 has no altsetting 0 [ 525.775198][ T6078] usb 1-1: config 220 interface 76 has no altsetting 0 [ 525.797845][ T6078] usb 1-1: config 220 interface 1 has no altsetting 0 [ 525.823183][ T6078] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 525.842713][ T6078] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.868859][ T6078] usb 1-1: Product: syz [ 525.886552][ T6078] usb 1-1: Manufacturer: syz [ 525.908929][ T6078] usb 1-1: SerialNumber: syz [ 525.916030][T20566] netlink: 'syz.2.7185': attribute type 61 has an invalid length. [ 526.170445][ T6078] usb 1-1: selecting invalid altsetting 0 [ 526.218004][ T6078] usb 1-1: selecting invalid altsetting 0 [ 526.235489][ T6078] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 526.261776][ T6078] uvcvideo 1-1:220.0: No valid video chain found. [ 526.300505][ T6078] usb 1-1: selecting invalid altsetting 0 [ 526.333258][ T6078] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 526.378043][ T6078] usb 1-1: USB disconnect, device number 107 [ 527.193191][T20617] openvswitch: netlink: IP tunnel dst address not specified [ 527.864364][ T6078] IPVS: starting estimator thread 0... [ 527.868742][T20647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7226'. [ 527.967830][T20648] IPVS: using max 30 ests per chain, 72000 per kthread [ 528.657860][ T6020] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 528.802562][T20678] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7241'. [ 528.842227][ T6020] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 192, changing to 11 [ 528.869762][ T6020] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 528.887233][ T6020] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 528.906288][ T6020] usb 2-1: Manufacturer: syz [ 528.914362][ T6020] usb 2-1: SerialNumber: syz [ 528.940842][T13840] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 529.020190][T20684] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7244'. [ 529.113753][T13840] usb 3-1: too many configurations: 126, using maximum allowed: 8 [ 529.175235][T13840] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 529.194819][ T6020] usbhid 2-1:36.0: couldn't find an input interrupt endpoint [ 529.211932][T13840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.238913][ T6020] usb 2-1: USB disconnect, device number 12 [ 529.248394][T13840] usb 3-1: Product: syz [ 529.254098][T13840] usb 3-1: Manufacturer: syz [ 529.279036][T13840] usb 3-1: SerialNumber: syz [ 529.374353][T20692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7248'. [ 529.552765][T13840] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 529.571420][T13840] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 529.583296][T13840] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 529.598085][T13840] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 529.628361][T13840] usb 3-1: USB disconnect, device number 6 [ 529.998590][T20712] xt_connbytes: Forcing CT accounting to be enabled [ 530.405235][ T30] audit: type=1326 audit(1777242065.325:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20729 comm="syz.0.7266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4719cdd9 code=0x7ffc0000 [ 530.456595][ T30] audit: type=1326 audit(1777242065.325:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20729 comm="syz.0.7266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4719cdd9 code=0x7ffc0000 [ 530.480859][ T30] audit: type=1326 audit(1777242065.375:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20729 comm="syz.0.7266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7eff4719cdd9 code=0x7ffc0000 [ 530.528027][ T30] audit: type=1326 audit(1777242065.375:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20729 comm="syz.0.7266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4719cdd9 code=0x7ffc0000 [ 530.638260][T20734] bond0: option updelay: invalid value (18446744073709551615) [ 530.656184][ T30] audit: type=1326 audit(1777242065.375:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20729 comm="syz.0.7266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4719cdd9 code=0x7ffc0000 [ 530.691628][T20734] bond0: option updelay: allowed values 0 - 2147483647 [ 530.741942][T20734] bond0 (unregistering): Released all slaves [ 531.693483][T20784] netlink: 'syz.3.7292': attribute type 10 has an invalid length. [ 532.314116][T20809] netlink: 484 bytes leftover after parsing attributes in process `syz.0.7304'. [ 532.386079][T20815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 532.642988][ T6078] hid-generic 009C:0008:0003.0001: unknown main item tag 0x0 [ 532.674767][ T6078] hid-generic 009C:0008:0003.0001: unknown main item tag 0x0 [ 532.687999][T20829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7315'. [ 532.701657][ T6078] hid-generic 009C:0008:0003.0001: unknown main item tag 0x0 [ 532.732278][ T6078] hid-generic 009C:0008:0003.0001: unknown main item tag 0x0 [ 532.767784][ T6078] hid-generic 009C:0008:0003.0001: unknown main item tag 0x0 [ 532.798069][ T6078] hid-generic 009C:0008:0003.0001: unknown main item tag 0x0 [ 532.817748][ T6078] hid-generic 009C:0008:0003.0001: unknown main item tag 0x0 [ 532.849342][ T6078] hid-generic 009C:0008:0003.0001: unknown main item tag 0x0 [ 532.872146][ T6078] hid-generic 009C:0008:0003.0001: unknown main item tag 0x0 [ 532.907882][ T6078] hid-generic 009C:0008:0003.0001: unknown main item tag 0x0 [ 532.927287][T20837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7319'. [ 532.951878][T20839] vlan0: entered promiscuous mode [ 532.984623][T20837] ip6tnl1: entered allmulticast mode [ 532.999100][ T6078] hid-generic 009C:0008:0003.0001: hidraw0: HID v0.05 Device [syz1] on syz0 [ 533.292477][T20842] fido_id[20842]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 533.518630][T20860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7330'. [ 533.578049][T20860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7330'. [ 533.976700][T20882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7341'. [ 534.711325][T20916] bond0: option packets_per_slave: invalid value (18446744073709551615) [ 534.720805][T20916] bond0: option packets_per_slave: allowed values 0 - 65535 [ 534.745365][T20916] bond0 (unregistering): Released all slaves [ 535.257789][ T6020] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 535.308536][T20949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7374'. [ 535.413277][T20953] netlink: 'syz.3.7376': attribute type 1 has an invalid length. [ 535.444450][ T6020] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 535.461857][T20953] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7376'. [ 535.482377][ T6020] usb 3-1: config 1 has no interface number 0 [ 535.495941][ T6020] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 535.540435][ T6020] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 535.575183][ T6020] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 8 [ 535.597245][ T6020] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.664924][ T6020] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.693029][ T6020] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 535.709828][ T30] audit: type=1326 audit(1777242070.635:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20963 comm="syz.0.7383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4719cdd9 code=0x7ffc0000 [ 535.745622][ T6020] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.773830][ T6020] usb 3-1: Product: syz [ 535.790991][ T6020] usb 3-1: Manufacturer: syz [ 535.808775][ T30] audit: type=1326 audit(1777242070.665:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20963 comm="syz.0.7383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4719cdd9 code=0x7ffc0000 [ 535.831621][ T6020] usb 3-1: SerialNumber: syz [ 535.880847][T20935] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 535.897943][T20935] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 535.927233][ T30] audit: type=1326 audit(1777242070.665:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20963 comm="syz.0.7383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4719cdd9 code=0x7ffc0000 [ 535.995183][ T30] audit: type=1326 audit(1777242070.665:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20963 comm="syz.0.7383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7eff4719cdd9 code=0x7ffc0000 [ 536.079551][ T30] audit: type=1326 audit(1777242070.665:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20963 comm="syz.0.7383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4719cdd9 code=0x7ffc0000 [ 536.085136][T20978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7388'. [ 536.181359][ T30] audit: type=1326 audit(1777242070.665:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20963 comm="syz.0.7383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4719cdd9 code=0x7ffc0000 [ 536.184051][T20978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7388'. [ 536.216114][T20935] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 536.228582][T20935] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 536.268626][ T6020] usb 3-1: No status endpoint found [ 536.268924][T20978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7388'. [ 536.293846][ T30] audit: type=1326 audit(1777242070.665:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20963 comm="syz.0.7383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4719cdd9 code=0x7ffc0000 [ 536.338065][T20978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7388'. [ 536.375217][T20978] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 536.400470][ T30] audit: type=1326 audit(1777242070.665:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20963 comm="syz.0.7383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7eff4719cdd9 code=0x7ffc0000 [ 536.473038][ T30] audit: type=1326 audit(1777242070.665:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20963 comm="syz.0.7383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7eff4719cdd9 code=0x7ffc0000 [ 536.534120][ T6020] usb 3-1: USB disconnect, device number 7 [ 537.050344][ T30] audit: type=1326 audit(1777242071.975:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21011 comm="syz.4.7406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba5d9cdd9 code=0x7ffc0000 [ 537.139677][ T6020] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 537.180991][ T54] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 537.300652][ T6020] usb 2-1: Using ep0 maxpacket: 32 [ 537.316684][ T6020] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.342699][ T6020] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 537.356258][ T54] usb 1-1: Using ep0 maxpacket: 32 [ 537.386268][ T54] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 55, changing to 7 [ 537.405061][ T6020] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.425494][ T54] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 537.440220][ T6020] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 537.454252][ T54] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.473752][ T54] usb 1-1: Product: syz [ 537.490466][ T6020] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.502068][ T54] usb 1-1: Manufacturer: syz [ 537.522074][ T54] usb 1-1: SerialNumber: syz [ 537.527500][ T6020] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 537.562405][ T54] usb 1-1: Unsupported UAC3 BADD profile [ 537.582006][ T6020] usb 2-1: New USB device found, idVendor=04e7, idProduct=6651, bcdDevice=ba.8a [ 537.614081][ T6020] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.646543][ T6020] usb 2-1: Product: syz [ 537.664831][ T6020] usb 2-1: Manufacturer: syz [ 537.685042][ T6020] usb 2-1: SerialNumber: syz [ 537.714128][ T6020] usb 2-1: config 0 descriptor?? [ 537.751057][ T54] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 537.770956][ T6020] rndis_host 2-1:0.0: rndis: master #0/ffff88801b3c7000 slave #1/0000000000000000 [ 537.794885][ T6020] cdc_acm 2-1:0.0: Zero length descriptor references [ 537.810880][ T54] usb 1-1: USB disconnect, device number 108 [ 537.820710][ T6020] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22 [ 537.844179][T21034] [U]  [ 537.904068][ T5609] udevd[5609]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 538.028155][ T6020] usb 2-1: USB disconnect, device number 13 [ 538.081303][T21042] __nla_validate_parse: 2 callbacks suppressed [ 538.081321][T21042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7420'. [ 538.179902][T21046] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7422'. [ 538.199663][T21046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7422'. [ 538.307796][T21050] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7424'. [ 539.308158][T21096] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7447'. [ 539.967483][T21126] netlink: 'syz.4.7462': attribute type 1 has an invalid length. [ 540.048627][ T6020] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 540.209969][ T6020] usb 3-1: unable to get BOS descriptor or descriptor too short [ 540.247204][ T6020] usb 3-1: config 3 has an invalid interface number: 19 but max is 0 [ 540.272565][T21138] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 540.284100][ T6020] usb 3-1: config 3 has an invalid interface number: 4 but max is 0 [ 540.305429][ T6020] usb 3-1: config 3 has 2 interfaces, different from the descriptor's value: 1 [ 540.326519][ T6020] usb 3-1: config 3 has no interface number 0 [ 540.339298][ T6020] usb 3-1: config 3 has no interface number 1 [ 540.358823][ T6020] usb 3-1: config 3 interface 19 altsetting 9 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 540.424198][ T6020] usb 3-1: too many endpoints for config 3 interface 4 altsetting 131: 175, using maximum allowed: 30 [ 540.460269][ T6020] usb 3-1: config 3 interface 4 altsetting 131 bulk endpoint 0x8E has invalid maxpacket 32 [ 540.492970][ T6020] usb 3-1: config 3 interface 4 altsetting 131 endpoint 0xC has invalid wMaxPacketSize 0 [ 540.523758][ T6020] usb 3-1: config 3 interface 4 altsetting 131 bulk endpoint 0xC has invalid maxpacket 0 [ 540.567187][ T6020] usb 3-1: config 3 interface 4 altsetting 131 has 2 endpoint descriptors, different from the interface descriptor's value: 175 [ 540.604737][ T6020] usb 3-1: config 3 interface 19 has no altsetting 0 [ 540.621560][ T6020] usb 3-1: config 3 interface 4 has no altsetting 0 [ 540.640332][ T6020] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=53.f5 [ 540.660033][ T6020] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.692555][ T6020] usb 3-1: Product: syz [ 540.711626][ T6020] usb 3-1: Manufacturer: syz [ 540.736829][ T6020] usb 3-1: SerialNumber: syz [ 540.999027][ T6020] pl2303 3-1:3.19: required endpoints missing [ 541.045492][ T6020] pl2303 3-1:3.4: required interrupt-in endpoint missing [ 541.078064][ T6020] usb 3-1: USB disconnect, device number 8 [ 541.273758][T21172] netlink: 'syz.0.7485': attribute type 2 has an invalid length. [ 542.019671][T21202] xt_cgroup: path and classid specified [ 542.242141][T21208] vcan1: entered promiscuous mode [ 542.261597][T21214] netlink: 'syz.3.7505': attribute type 4 has an invalid length. [ 542.321013][T21214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7505'. [ 542.426357][T21218] netlink: 5 bytes leftover after parsing attributes in process `syz.2.7508'. [ 542.714409][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 542.714425][ T30] audit: type=1326 audit(1777242077.635:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21231 comm="syz.2.7514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c93f9cdd9 code=0x7ffc0000 [ 542.784368][ T30] audit: type=1326 audit(1777242077.675:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21231 comm="syz.2.7514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c93f9cdd9 code=0x7ffc0000 [ 542.866694][ T30] audit: type=1326 audit(1777242077.675:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21231 comm="syz.2.7514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f8c93f9cdd9 code=0x7ffc0000 [ 542.940871][ T30] audit: type=1326 audit(1777242077.865:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21231 comm="syz.2.7514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c93f9cdd9 code=0x7ffc0000 [ 543.047190][ T30] audit: type=1326 audit(1777242077.865:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21231 comm="syz.2.7514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c93f9cdd9 code=0x7ffc0000 [ 543.688219][T21275] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 544.634479][ T30] audit: type=1400 audit(1777242079.555:313): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=3A3A0AE10CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A552C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=21311 comm="syz.0.7554" [ 545.101340][T21328] netlink: 'syz.0.7561': attribute type 8 has an invalid length. [ 545.516589][T21344] MPI: mpi too large (107144 bits) [ 546.055614][T21368] hmaÓË224): entered promiscuous mode [ 546.842374][T21407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7600'. [ 547.010469][T21415] netlink: 5268 bytes leftover after parsing attributes in process `syz.2.7605'. [ 547.258139][ T6030] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 547.267075][T21428] program syz.3.7611 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 547.440282][ T6030] usb 2-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 547.464464][ T6030] usb 2-1: config 13 has 1 interface, different from the descriptor's value: 2 [ 547.498910][ T6030] usb 2-1: config 13 interface 0 has no altsetting 0 [ 547.543351][ T6030] usb 2-1: config 13 interface 0 has no altsetting 1 [ 547.572144][ T6030] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice=70.25 [ 547.604891][ T6030] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.641569][ T6030] usb 2-1: Product: syz [ 547.664669][ T6030] usb 2-1: Manufacturer: syz [ 547.680502][ T6030] usb 2-1: SerialNumber: syz [ 547.745926][T21448] netlink: 'syz.3.7621': attribute type 6 has an invalid length. [ 547.780407][T21448] netlink: 168 bytes leftover after parsing attributes in process `syz.3.7621'. [ 547.974271][T21455] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7624'. [ 548.224011][ T6030] snd-usb-audio 2-1:13.0: probe with driver snd-usb-audio failed with error -22 [ 548.265441][ T6030] usb 2-1: USB disconnect, device number 14 [ 548.327403][ T5609] udevd[5609]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:13.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 549.057789][ T6030] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 549.228358][ T6030] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 549.282790][ T6030] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 549.326136][ T6030] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 549.368650][ T6030] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 549.401671][ T6030] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.434245][ T6030] usb 3-1: config 0 descriptor?? [ 549.475858][ T6030] em28xx 3-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 549.515113][ T6030] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 549.627847][ T6020] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 549.719236][ T6030] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 549.738175][ T6030] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 549.756769][ T6030] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 549.775604][ T6030] em28xx 3-1:0.0: No AC97 audio processor [ 549.808873][ T6020] usb 2-1: Using ep0 maxpacket: 8 [ 549.833234][ T6020] usb 2-1: unable to get BOS descriptor or descriptor too short [ 549.842780][ T6030] usb 3-1: USB disconnect, device number 9 [ 549.881676][ T6020] usb 2-1: config 9 has an invalid interface number: 142 but max is 0 [ 549.896439][ T6030] em28xx 3-1:0.0: Disconnecting em28xx [ 549.916323][ T6020] usb 2-1: config 9 has no interface number 0 [ 549.934663][ T6020] usb 2-1: config 9 interface 142 altsetting 209 bulk endpoint 0xF has invalid maxpacket 32 [ 549.951386][ T6030] em28xx 3-1:0.0: Freeing device [ 549.956407][ T6020] usb 2-1: config 9 interface 142 altsetting 209 endpoint 0xD has an invalid bInterval 241, changing to 11 [ 549.990209][ T6020] usb 2-1: config 9 interface 142 has no altsetting 0 [ 550.008197][ T6020] usb 2-1: New USB device found, idVendor=06e0, idProduct=f110, bcdDevice=66.44 [ 550.033183][ T6020] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.067071][ T6020] usb 2-1: Product: syz [ 550.079633][ T6020] usb 2-1: Manufacturer: syz [ 550.092131][ T6020] usb 2-1: SerialNumber: syz [ 550.129072][T21517] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 550.146864][T21541] ip6tnl3: entered promiscuous mode [ 550.239918][T21545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7669'. [ 550.381261][ T6020] ti_usb_3410_5052 2-1:9.142: TI USB 3410 1 port adapter converter detected [ 550.432445][ T6020] ti_usb_3410_5052 2-1:9.142: missing endpoints [ 550.494280][ T6020] usb 2-1: USB disconnect, device number 15 [ 551.688015][ T6030] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 551.878456][ T6030] usb 1-1: Using ep0 maxpacket: 32 [ 551.903284][ T6030] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 551.944653][ T6030] usb 1-1: config 0 has no interface number 0 [ 551.972719][ T6030] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 552.036552][ T6030] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 552.084738][ T6030] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.140894][ T6030] usb 1-1: Product: syz [ 552.151509][ T6030] usb 1-1: Manufacturer: syz [ 552.166393][ T6030] usb 1-1: SerialNumber: syz [ 552.206175][ T6030] usb 1-1: config 0 descriptor?? [ 552.251833][ T6030] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 552.289820][ T6030] em28xx 1-1:0.132: Video interface 132 found: isoc [ 552.499621][ T6030] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 552.601554][ T6030] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 552.629010][ T6030] em28xx 1-1:0.132: board has no eeprom [ 552.698007][ T6030] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 552.726742][ T6030] em28xx 1-1:0.132: analog set to isoc mode. [ 552.742204][T21637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 552.746861][ T6020] em28xx 1-1:0.132: Registering V4L2 extension [ 552.785290][ T6030] usb 1-1: USB disconnect, device number 109 [ 552.817664][ T6030] em28xx 1-1:0.132: Disconnecting em28xx [ 553.131607][ T6020] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 553.159655][ T6020] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 553.191895][ T6020] em28xx 1-1:0.132: No AC97 audio processor [ 553.208583][T21654] binder: BC_ATTEMPT_ACQUIRE not supported [ 553.211776][T21657] ip6t_REJECT: ECHOREPLY is not supported [ 553.223459][ T6020] usb 1-1: Decoder not found [ 553.240962][ T6020] em28xx 1-1:0.132: failed to create media graph [ 553.245281][T21654] binder: 21653:21654 ioctl c0306201 200000000540 returned -22 [ 553.261234][ T6020] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 553.309775][ T6020] em28xx 1-1:0.132: Remote control support is not available for this card. [ 553.349048][ T6030] em28xx 1-1:0.132: Closing input extension [ 553.477269][ T6030] em28xx 1-1:0.132: Freeing device [ 553.891555][T21688] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7736'. [ 554.332784][T21706] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7745'. [ 554.808635][T21728] xt_TCPMSS: Only works on TCP SYN packets [ 554.952948][T21734] m>e5nè‹Ò: entered promiscuous mode [ 555.549629][T21767] tipc: Trying to set illegal importance in message [ 555.795608][T21779] netlink: 572 bytes leftover after parsing attributes in process `syz.1.7781'. [ 555.860893][T21779] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7781'. [ 556.018210][T21789] netlink: 'syz.3.7786': attribute type 2 has an invalid length. [ 556.081652][T21794] program syz.4.7788 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 556.699286][T21828] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7804'. [ 557.933743][T21888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 558.084399][T21896] netlink: 'syz.0.7839': attribute type 23 has an invalid length. [ 558.118252][T21897] netlink: 'syz.4.7840': attribute type 61 has an invalid length. [ 558.151706][T21897] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7840'. [ 558.801967][T21926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7853'. [ 559.332876][T21949] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7867'. [ 559.556517][T21962] netlink: 830 bytes leftover after parsing attributes in process `syz.2.7871'. [ 560.821209][T22018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7899'. [ 560.845706][T22018] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7899'. [ 560.867780][T22018] netlink: 168 bytes leftover after parsing attributes in process `syz.3.7899'. [ 562.013121][T22068] netlink: 'syz.2.7924': attribute type 5 has an invalid length. [ 562.205033][T22078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7927'. [ 562.214471][T22073] nvme_fabrics: missing parameter 'transport=%s' [ 562.238833][T22073] nvme_fabrics: missing parameter 'nqn=%s' [ 562.618114][T22097] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7936'. [ 562.801201][T22103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7941'. [ 563.050684][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.057708][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.088391][ T6078] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 563.267935][ T6078] usb 2-1: Using ep0 maxpacket: 16 [ 563.290621][ T6078] usb 2-1: config index 0 descriptor too short (expected 4495, got 71) [ 563.310330][ T6078] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 563.337901][ T6078] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.370245][ T6078] usb 2-1: config 0 has no interface number 0 [ 563.400582][ T6078] usb 2-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 563.403418][T22125] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 563.420922][ T6078] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.450319][ T6078] usb 2-1: Product: syz [ 563.467831][ T6078] usb 2-1: Manufacturer: syz [ 563.478100][ T6078] usb 2-1: SerialNumber: syz [ 563.503332][ T6078] usb 2-1: config 0 descriptor?? [ 563.546834][ T6078] uvcvideo 2-1:0.105: probe with driver uvcvideo failed with error -22 [ 563.762328][ T6038] usb 2-1: USB disconnect, device number 16 [ 563.820700][T22136] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7957'. [ 563.858079][T22136] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7957'. [ 565.056940][T22181] openvswitch: netlink: IPv4 tun info is not correct [ 565.946610][T22224] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 565.971089][T22224] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 566.067295][T22229] program syz.3.8003 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 566.103753][T22229] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 566.450302][T22246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8011'. [ 566.901688][T22272] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8023'. [ 567.243464][T22290] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8032'. [ 567.542752][T22301] xt_hashlimit: invalid interval [ 567.743404][T22310] netlink: 'syz.0.8041': attribute type 1 has an invalid length. [ 567.772915][ T30] audit: type=1326 audit(1777242102.695:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22311 comm="syz.1.8043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8aad9cdd9 code=0x7ffc0000 [ 567.846882][ T30] audit: type=1326 audit(1777242102.695:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22311 comm="syz.1.8043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8aad9cdd9 code=0x7ffc0000 [ 567.958236][ T30] audit: type=1326 audit(1777242102.735:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22311 comm="syz.1.8043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7ff8aad9cdd9 code=0x7ffc0000 [ 568.047872][ T30] audit: type=1326 audit(1777242102.735:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22311 comm="syz.1.8043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8aad9cdd9 code=0x7ffc0000 [ 568.147031][ T30] audit: type=1326 audit(1777242102.735:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22311 comm="syz.1.8043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8aad9cdd9 code=0x7ffc0000 [ 568.291124][T22332] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 568.309787][T22332] bond7 (unregistering): Released all slaves [ 569.003813][T22370] bridge2: entered allmulticast mode [ 569.111162][T22375] netlink: 'syz.0.8074': attribute type 1 has an invalid length. [ 570.069196][ T197] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 570.106082][ T197] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 570.154833][ T197] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 570.189781][ T197] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 570.867997][ T6020] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 571.038032][ T6020] usb 3-1: Using ep0 maxpacket: 8 [ 571.071262][ T6020] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 571.103273][ T6020] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 571.147397][ T6020] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 571.186548][ T6020] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 571.226983][ T6020] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 571.259693][ T6020] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 571.304276][ T6020] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.351312][ T6020] usb 3-1: config 0 descriptor?? [ 571.382196][T22450] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 571.423210][T22483] program syz.1.8127 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 571.708792][T22487] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 571.709352][ C0] Bluetooth: hci5: Unexpected continuation: 1 bytes [ 571.716769][T22487] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 571.732875][T22487] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 571.739798][T22487] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 571.745804][ T30] audit: type=1326 audit(1777242106.625:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22491 comm="syz.3.8132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbb59cdd9 code=0x7ffc0000 [ 571.746644][T22487] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 571.777769][T22487] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 571.785389][T22487] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 571.792918][T22487] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 571.799854][T22487] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 571.806683][T22487] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 571.813655][T22487] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 571.820543][T22487] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 571.827409][T22487] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 571.834308][T22487] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 571.841187][T22487] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 571.848092][T22487] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 571.854940][T22487] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 571.861840][T22487] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 571.868696][T22487] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 571.875524][T22487] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 571.882422][T22487] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 571.889278][T22487] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 571.896137][T22487] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 571.903155][T22487] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 571.910046][T22487] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 571.916903][T22487] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 571.922603][ T30] audit: type=1326 audit(1777242106.625:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22491 comm="syz.3.8132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbb59cdd9 code=0x7ffc0000 [ 571.924518][T22487] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 571.953495][T22487] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 571.961851][T22487] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 571.995485][T22497] ip6gre2: entered allmulticast mode [ 572.074094][ T30] audit: type=1326 audit(1777242106.705:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22491 comm="syz.3.8132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7fdfbb59cdd9 code=0x7ffc0000 [ 572.185028][ T6020] usb 3-1: USB disconnect, device number 10 [ 572.191234][ T5919] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 572.239824][ T30] audit: type=1326 audit(1777242106.705:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22491 comm="syz.3.8132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbb59cdd9 code=0x7ffc0000 [ 572.903317][T22530] netlink: 'syz.4.8151': attribute type 2 has an invalid length. [ 573.400193][ T2365] pvrusb2: request_firmware fatal error with code=-110 [ 573.452678][ T2365] pvrusb2: Failure uploading firmware1 [ 573.483608][ T2365] pvrusb2: Device initialization was not successful. [ 573.517782][ T2365] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 573.566593][ T2365] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 573.624633][ T5964] pvrusb2: Device being rendered inoperable [ 575.638694][T22646] xt_limit: Overflow, try lower: 0/0 [ 576.160773][T22672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8219'. [ 576.202830][T22672] netlink: 5 bytes leftover after parsing attributes in process `syz.0.8219'. [ 576.243780][T22672] tc_dump_action: action bad kind [ 576.702266][ T30] audit: type=1326 audit(1777242111.625:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22695 comm="syz.2.8231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c93f9cdd9 code=0x7ffc0000 [ 576.818742][ T30] audit: type=1326 audit(1777242111.625:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22695 comm="syz.2.8231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c93f9cdd9 code=0x7ffc0000 [ 576.917058][ T30] audit: type=1326 audit(1777242111.655:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22695 comm="syz.2.8231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f8c93f9cdd9 code=0x7ffc0000 [ 577.021681][ T30] audit: type=1326 audit(1777242111.835:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22695 comm="syz.2.8231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c93f9cdd9 code=0x7ffc0000 [ 577.125406][ T30] audit: type=1326 audit(1777242111.865:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22695 comm="syz.2.8231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c93f9cdd9 code=0x7ffc0000 [ 577.410422][ T30] audit: type=1326 audit(1777242112.335:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22721 comm="syz.0.8244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4719cdd9 code=0x7ffc0000 [ 577.512997][ T30] audit: type=1326 audit(1777242112.365:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22721 comm="syz.0.8244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4719cdd9 code=0x7ffc0000 [ 577.617256][ T30] audit: type=1326 audit(1777242112.365:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22721 comm="syz.0.8244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4719cdd9 code=0x7ffc0000 [ 577.711001][ T30] audit: type=1326 audit(1777242112.365:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22721 comm="syz.0.8244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7eff4719cdd9 code=0x7ffc0000 [ 577.815399][ T30] audit: type=1326 audit(1777242112.365:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22721 comm="syz.0.8244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4719cdd9 code=0x7ffc0000 [ 578.128298][T22753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8260'. [ 578.230426][T22756] geneve3: entered promiscuous mode [ 578.259512][ T1119] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.279729][T22758] netlink: 'syz.2.8262': attribute type 20 has an invalid length. [ 578.282946][ T1119] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.339944][ T1119] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.372654][ T1119] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.268556][T22794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8279'. [ 579.703694][T22817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8290'. [ 581.042183][ T6030] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 581.213570][ T6030] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 581.245479][ T6030] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.282553][ T6030] usb 3-1: Product: syz [ 581.309453][ T6030] usb 3-1: Manufacturer: syz [ 581.339486][ T6030] usb 3-1: SerialNumber: syz [ 581.365473][ T6030] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 581.414427][T13840] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 581.883859][ T5964] usb 3-1: USB disconnect, device number 11 [ 581.936512][T22913] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 581.968096][ T6030] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 582.157922][ T6030] usb 2-1: Using ep0 maxpacket: 16 [ 582.174842][ T6030] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 17408, setting to 1024 [ 582.202905][ T6030] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 582.235929][ T6030] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 582.271573][ T6030] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 582.289807][ T6030] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 582.308671][ T6030] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 582.328765][ T6030] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 582.360333][ T6030] usb 2-1: SerialNumber: syz [ 582.377110][T22907] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 582.407291][T22907] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 582.569269][T13840] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 582.613840][T13840] ath9k_htc: Failed to initialize the device [ 582.627289][T22937] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 582.646590][ T5964] usb 3-1: ath9k_htc: USB layer deinitialized [ 582.717575][ T6030] usb 2-1: USB disconnect, device number 17 [ 583.286803][T22967] kAFS: unable to lookup cell '(/' [ 583.490683][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 583.490699][ T30] audit: type=1326 audit(1777242118.415:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22974 comm="syz.4.8368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba5d9cdd9 code=0x7ffc0000 [ 583.595704][ T30] audit: type=1326 audit(1777242118.445:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22974 comm="syz.4.8368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba5d9cdd9 code=0x7ffc0000 [ 583.694902][ T30] audit: type=1326 audit(1777242118.475:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22974 comm="syz.4.8368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f3ba5d9cdd9 code=0x7ffc0000 [ 583.771732][ T30] audit: type=1326 audit(1777242118.475:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22974 comm="syz.4.8368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba5d9cdd9 code=0x7ffc0000 [ 583.875959][ T30] audit: type=1326 audit(1777242118.475:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22974 comm="syz.4.8368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba5d9cdd9 code=0x7ffc0000 [ 584.098164][ T5964] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 584.180106][ T6030] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 584.267759][ T5964] usb 1-1: Using ep0 maxpacket: 16 [ 584.282907][ T5964] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 584.307836][ T5964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.331929][ T5964] usb 1-1: Product: syz [ 584.343983][ T6030] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 584.347834][ T5964] usb 1-1: Manufacturer: syz [ 584.370395][ T6030] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 584.377868][ T5964] usb 1-1: SerialNumber: syz [ 584.409059][ T5964] r8152-cfgselector 1-1: Unknown version 0x0000 [ 584.412014][ T6030] usb 4-1: config 220 has no interface number 2 [ 584.438089][ T5964] r8152-cfgselector 1-1: config 0 descriptor?? [ 584.454810][ T6030] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 584.497971][ T6030] usb 4-1: config 220 interface 0 has no altsetting 0 [ 584.525327][ T6030] usb 4-1: config 220 interface 76 has no altsetting 0 [ 584.549445][ T6030] usb 4-1: config 220 interface 1 has no altsetting 0 [ 584.581864][ T6030] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 584.606184][ T6030] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.627110][ T6030] usb 4-1: Product: syz [ 584.642867][ T6030] usb 4-1: Manufacturer: syz [ 584.655500][ T6030] usb 4-1: SerialNumber: syz [ 584.857817][T13840] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 584.911086][ T6030] usb 4-1: selecting invalid altsetting 0 [ 584.938572][ T5964] r8152-cfgselector 1-1: USB disconnect, device number 110 [ 584.945395][ T6030] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 584.964944][ T6030] uvcvideo 4-1:220.0: No valid video chain found. [ 585.022513][ T6030] usb 4-1: selecting invalid altsetting 0 [ 585.048017][T13840] usb 2-1: Using ep0 maxpacket: 32 [ 585.054040][ T6030] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 585.083752][T13840] usb 2-1: unable to get BOS descriptor or descriptor too short [ 585.110436][ T6030] usb 4-1: USB disconnect, device number 12 [ 585.128593][T13840] usb 2-1: config 7 has an invalid interface number: 187 but max is 0 [ 585.160111][T13840] usb 2-1: config 7 has no interface number 0 [ 585.191455][T13840] usb 2-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 585.230744][T13840] usb 2-1: config 7 interface 187 has no altsetting 0 [ 585.253289][T13840] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 585.277423][T13840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.300094][T13840] usb 2-1: Product: syz [ 585.312697][T13840] usb 2-1: Manufacturer: syz [ 585.327526][T13840] usb 2-1: SerialNumber: syz [ 585.540221][T23039] block device autoloading is deprecated and will be removed. [ 585.612281][T13840] usb 2-1: Unknown endpoint type found, address 0x07 [ 585.640405][T13840] usb 2-1: Unknown endpoint type found, address 0x03 [ 585.666585][T13840] usb 2-1: Not enough endpoints found in device, aborting! [ 585.865679][T13840] usb 2-1: USB disconnect, device number 18 [ 585.868081][T23055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8407'. [ 586.008438][T23059] x_tables: duplicate entry at hook 2 [ 586.225290][T23069] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8414'. [ 586.264626][T23069] netlink: 336 bytes leftover after parsing attributes in process `syz.0.8414'. [ 587.096220][T23105] netlink: 3 bytes leftover after parsing attributes in process `syz.1.8432'. [ 587.153593][T23105] 0ªX¹¦À: renamed from batadv0 [ 587.185837][T23105] 0ªX¹¦À: entered allmulticast mode [ 587.206958][T23105] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 587.249787][T23105] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 587.643667][T23128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8443'. [ 588.288149][T13840] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 588.398019][T23160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8458'. [ 588.457926][T13840] usb 2-1: Using ep0 maxpacket: 8 [ 588.482809][T13840] usb 2-1: config 0 has an invalid interface number: 151 but max is 1 [ 588.510603][T13840] usb 2-1: config 0 has no interface number 1 [ 588.533486][T13840] usb 2-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 588.560304][T13840] usb 2-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 588.585327][T13840] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 588.618600][T13840] usb 2-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 588.629742][T13840] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 588.665302][T13840] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 588.718379][T13840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 588.755728][T13840] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 588.765585][T23172] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8464'. [ 588.786098][T13840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.807951][T13840] usb 2-1: Product: syz [ 588.818140][T13840] usb 2-1: Manufacturer: syz [ 588.833218][T13840] usb 2-1: SerialNumber: syz [ 588.861966][T13840] usb 2-1: config 0 descriptor?? [ 588.903528][T23146] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 588.933500][T13840] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 588.970908][T23178] program syz.3.8466 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 588.980528][T13840] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 589.216276][T13840] usb 2-1: USB disconnect, device number 19 [ 589.419610][ T6214] udevd[6214]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 589.813893][ T30] audit: type=1326 audit(1777242124.735:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23206 comm="syz.0.8481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4719cdd9 code=0x7ffc0000 [ 589.895194][ T30] audit: type=1326 audit(1777242124.765:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23206 comm="syz.0.8481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4719cdd9 code=0x7ffc0000 [ 589.993283][T23209] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 590.010582][ T30] audit: type=1326 audit(1777242124.765:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23206 comm="syz.0.8481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7eff4719cdd9 code=0x7ffc0000 [ 590.057357][ T30] audit: type=1326 audit(1777242124.765:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23206 comm="syz.0.8481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4719cdd9 code=0x7ffc0000 [ 590.092341][T23215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8483'. [ 590.913453][T23250] syz.3.8501 (23250) used obsolete PPPIOCDETACH ioctl [ 591.123251][T23265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8507'. [ 591.171993][T23267] netlink: 'syz.0.8507': attribute type 22 has an invalid length. [ 591.210724][T23267] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8507'. [ 591.487345][T23282] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8516'. [ 591.561552][T23278] team0: Port device gtp0 added [ 592.671875][T23327] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8537'. [ 593.161995][T23345] CUSE: unknown device info "€" [ 593.180847][T23345] CUSE: unknown device info "Ö" [ 593.199214][T23345] CUSE: unknown device info "" [ 593.210812][T23345] CUSE: unknown device info "€" [ 593.224044][T23345] CUSE: unknown device info "ðÿÿÿ" [ 593.244356][T23345] CUSE: unknown device info "" [ 593.267248][T23345] CUSE: unknown device info "" [ 593.289551][T23345] CUSE: unknown device info "" [ 593.312174][T23345] CUSE: zero length info key specified [ 594.036608][T23372] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 594.268181][ T6030] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 594.440640][ T6030] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 594.477909][ T6030] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 594.517787][ T6030] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 594.542278][ T6030] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 594.564773][ T6030] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 594.618862][ T6030] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 594.653035][ T6030] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.681730][ T6030] usb 3-1: Product: syz [ 594.716905][ T6030] usb 3-1: Manufacturer: syz [ 594.735176][ T6030] usb 3-1: SerialNumber: syz [ 594.740098][T13840] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 594.773215][ T6030] usb 3-1: config 0 descriptor?? [ 594.798603][T23373] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 594.870405][ T6030] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input50 [ 594.909532][T13840] usb 2-1: Using ep0 maxpacket: 16 [ 594.934483][T13840] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.949420][T23399] tipc: Started in network mode [ 594.968242][T23399] tipc: Node identity 080000000000000008, cluster identity 4711 [ 595.001399][T13840] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.038817][T13840] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 595.094026][T13840] usb 2-1: config 0 interface 0 has no altsetting 0 [ 595.114093][T13840] usb 2-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 595.143302][T13840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.199690][T13840] usb 2-1: config 0 descriptor?? [ 595.350199][ T6020] usb 3-1: USB disconnect, device number 12 [ 595.686444][T13840] hid_parser_main: 5 callbacks suppressed [ 595.686466][T13840] topre 0003:0853:0146.0002: unknown main item tag 0x0 [ 595.729387][T13840] topre 0003:0853:0146.0002: unknown main item tag 0x0 [ 595.736336][T13840] topre 0003:0853:0146.0002: unknown main item tag 0x0 [ 595.762278][T13840] topre 0003:0853:0146.0002: unknown main item tag 0x0 [ 595.781524][T13840] topre 0003:0853:0146.0002: unknown main item tag 0x0 [ 595.809475][T13840] topre 0003:0853:0146.0002: unknown main item tag 0x0 [ 595.836809][T13840] topre 0003:0853:0146.0002: unknown main item tag 0x0 [ 595.880923][T13840] topre 0003:0853:0146.0002: unknown main item tag 0x0 [ 595.903858][T13840] topre 0003:0853:0146.0002: unknown main item tag 0x0 [ 595.932681][T13840] topre 0003:0853:0146.0002: unknown main item tag 0x0 [ 596.122780][T13840] topre 0003:0853:0146.0002: hidraw0: USB HID v0.00 Device [HID 0853:0146] on usb-dummy_hcd.1-1/input0 [ 596.200489][T13840] usb 2-1: USB disconnect, device number 20 [ 596.313854][T23431] vlan2: entered promiscuous mode [ 596.338157][T23431] syz_tun: entered promiscuous mode [ 596.408759][T23435] tipc: Enabling of bearer rejected, failed to enable media [ 596.415508][T23427] fido_id[23427]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 596.657376][T23442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8591'. [ 597.044467][T23457] program syz.3.8599 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 598.085924][T23496] macsec1: entered promiscuous mode [ 598.103557][T23498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8618'. [ 598.114195][T23496] dummy0: entered promiscuous mode [ 598.131445][T23498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8618'. [ 598.144991][T23496] macsec1: entered allmulticast mode [ 598.170234][T23496] dummy0: entered allmulticast mode [ 598.195879][T23496] dummy0: left allmulticast mode [ 598.224293][T23496] dummy0: left promiscuous mode [ 598.708016][ T6078] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 598.878596][T23519] sg_write: data in/out 410588/66 bytes for SCSI command 0x0-- guessing data in; [ 598.878596][T23519] program syz.4.8629 not setting count and/or reply_len properly [ 598.887746][ T6078] usb 4-1: Using ep0 maxpacket: 32 [ 598.930932][ T6078] usb 4-1: config 123 interface 0 has no altsetting 0 [ 598.950269][ T6078] usb 4-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 598.972527][ T6078] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.998013][ T6078] usb 4-1: Product: syz [ 599.013103][ T6078] usb 4-1: Manufacturer: syz [ 599.027948][ T6078] usb 4-1: SerialNumber: syz [ 599.118016][ T5964] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 599.276330][ T6078] usb 4-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 599.305935][ T5964] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 599.329491][ T6078] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 599.348872][ T5964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.369340][ T6078] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 599.377553][ T5964] usb 3-1: config 0 descriptor?? [ 599.398137][ T6078] usb 4-1: media controller created [ 599.411966][ T5964] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 599.464222][ T6078] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 599.550642][ T6078] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 599.572962][ T6078] error writing reg: 0xff, val: 0x00 [ 599.703161][ T6078] dvb_usb_mxl111sf 4-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 599.768421][ T6078] usb 4-1: USB disconnect, device number 13 [ 600.012061][ T5964] gspca_sunplus: reg_w_riv err -71 [ 600.034537][ T5964] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 600.075883][ T5964] usb 3-1: USB disconnect, device number 13 [ 600.780514][T23562] program syz.1.8650 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 601.828262][ T6020] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 601.988000][ T6020] usb 2-1: Using ep0 maxpacket: 8 [ 602.014946][ T6020] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 602.038030][ T6020] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.055897][ T6020] usb 2-1: Product: syz [ 602.075045][ T6020] usb 2-1: Manufacturer: syz [ 602.101131][ T6020] usb 2-1: SerialNumber: syz [ 602.115821][ T6020] usb 2-1: config 0 descriptor?? [ 602.150764][ T6020] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 602.187342][ T6020] pctv452e: pctv452e_power_ctrl: 1 [ 602.187342][ T6020] [ 602.216047][ T6020] usb 2-1: selecting invalid altsetting 3 [ 602.229400][ T6020] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 602.229400][ T6020] [ 602.253585][ T6020] dvb-usb: bulk message failed: -22 (5/0) [ 602.288054][ T6020] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 602.310046][ T6020] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 602.334151][T23602] use of bytesused == 0 is deprecated and will be removed in the future, [ 602.338926][ T6020] usb 2-1: media controller created [ 602.364331][T23602] use the actual size instead. [ 602.407086][ T6020] dvb-usb: bulk message failed: -22 (8/0) [ 602.436199][ T6020] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 602.460527][ T6020] dvb-usb: MAC address reading failed. [ 602.482154][ T6020] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 602.642378][ T6020] DVB: Unable to find symbol stb0899_attach() [ 602.655579][ T6020] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 602.817951][ T6020] rc_core: IR keymap rc-tt-1500 not found [ 602.834121][ T6020] Registered IR keymap rc-empty [ 602.862265][ T6020] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 602.942032][ T6020] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input51 [ 602.994585][ T6020] dvb-usb: schedule remote query interval to 100 msecs. [ 603.016817][T13840] hid_parser_main: 28 callbacks suppressed [ 603.016838][T13840] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 603.037846][ T6020] pctv452e: pctv452e_power_ctrl: 0 [ 603.037846][ T6020] [ 603.055181][ T6020] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 603.091447][T13840] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 603.117604][ T6020] usb 2-1: USB disconnect, device number 21 [ 603.162605][ T54] dvb-usb: bulk message failed: -22 (4/0) [ 603.213516][ T54] dvb-usb: error -22 while querying for an remote control event. [ 603.314164][T23627] fido_id[23627]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 603.340998][T23630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8681'. [ 603.456590][ T6020] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 603.468189][ T6030] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 603.588146][T23637] xt_hashlimit: size too large, truncated to 1048576 [ 603.658048][ T6030] usb 4-1: Using ep0 maxpacket: 32 [ 603.672347][ T6030] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 603.696619][ T6030] usb 4-1: config 0 interface 0 has no altsetting 0 [ 603.714477][ T6030] usb 4-1: New USB device found, idVendor=320f, idProduct=5041, bcdDevice= 0.00 [ 603.758956][ T6030] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.791228][ T6030] usb 4-1: config 0 descriptor?? [ 603.818748][T23628] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 604.273029][ T6030] evision 0003:320F:5041.0004: unknown main item tag 0x0 [ 604.300303][ T6030] evision 0003:320F:5041.0004: unknown main item tag 0x0 [ 604.310428][T23654] program syz.4.8691 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 604.316547][ T6030] evision 0003:320F:5041.0004: unknown main item tag 0x0 [ 604.354150][ T6030] evision 0003:320F:5041.0004: unknown main item tag 0x0 [ 604.387237][ T6030] evision 0003:320F:5041.0004: unknown main item tag 0x0 [ 604.418070][ T6030] evision 0003:320F:5041.0004: unknown main item tag 0x0 [ 604.433397][ T6030] evision 0003:320F:5041.0004: unknown main item tag 0x0 [ 604.462078][ T6030] evision 0003:320F:5041.0004: unknown main item tag 0x0 [ 604.493935][ T6030] evision 0003:320F:5041.0004: unknown main item tag 0x0 [ 604.567604][ T6030] evision 0003:320F:5041.0004: hidraw0: USB HID v0.81 Device [HID 320f:5041] on usb-dummy_hcd.3-1/input0 [ 604.609690][ T6030] usb 4-1: USB disconnect, device number 14 [ 604.785188][T23662] fido_id[23662]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 605.478068][ T6030] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 605.654115][ T6030] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 605.682771][ T6030] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 605.716219][ T6030] usb 4-1: config 0 has no interface number 0 [ 605.736848][ T6030] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.781386][ T6030] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.798729][ T6030] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 605.836840][ T6030] usb 4-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 605.872446][ T6030] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.905214][ T6030] usb 4-1: config 0 descriptor?? [ 606.370269][ T6030] holtek_mouse 0003:04D9:A04A.0005: hidraw0: USB HID v7f.fd Device [HID 04d9:a04a] on usb-dummy_hcd.3-1/input1 [ 606.407980][ T6020] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 606.432410][T23716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8720'. [ 606.575886][ T5964] usb 4-1: USB disconnect, device number 15 [ 606.579919][ T6020] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.634805][ T6020] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.665801][ T6020] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 606.685592][ T6020] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.720391][ T6020] usb 1-1: config 0 descriptor?? [ 607.170616][ T6020] cp2112 0003:10C4:EA90.0006: item fetching failed at offset 5/7 [ 607.203630][ T6020] cp2112 0003:10C4:EA90.0006: parse failed [ 607.232029][ T6020] cp2112 0003:10C4:EA90.0006: probe with driver cp2112 failed with error -22 [ 607.362346][ T6020] usb 1-1: USB disconnect, device number 111 [ 607.470506][T23743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8732'. [ 607.499337][T23743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8732'. [ 607.727864][ T6030] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 607.888727][ T6030] usb 4-1: Using ep0 maxpacket: 8 [ 607.912080][ T6030] usb 4-1: unable to get BOS descriptor or descriptor too short [ 607.943198][ T6030] usb 4-1: config 7 has an invalid interface number: 115 but max is 0 [ 607.971072][ T6030] usb 4-1: config 7 has no interface number 0 [ 607.999196][ T6030] usb 4-1: config 7 interface 115 altsetting 7 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 608.039255][ T6030] usb 4-1: config 7 interface 115 has no altsetting 0 [ 608.056232][ T6030] usb 4-1: New USB device found, idVendor=0675, idProduct=0200, bcdDevice=e1.e3 [ 608.068363][ T6030] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.099472][ T6030] usb 4-1: Product: syz [ 608.111507][ T6030] usb 4-1: Manufacturer: syz [ 608.122759][ T6030] usb 4-1: SerialNumber: syz [ 608.377323][ T6030] cxacru 4-1:7.115: cxacru_bind: interface has incorrect endpoints [ 608.388401][ T6030] cxacru 4-1:7.115: usbatm_usb_probe: bind failed: -19! [ 608.401267][ T6030] usb 4-1: USB disconnect, device number 16 [ 608.860677][ T6030] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 609.029569][ T6030] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 609.058909][ T6030] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.103206][ T6030] usb 1-1: config 0 descriptor?? [ 609.170543][ T6030] cp210x 1-1:0.0: cp210x converter detected [ 609.518509][ T54] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 609.577625][ T6030] usb 1-1: cp210x converter now attached to ttyUSB0 [ 609.687826][ T54] usb 4-1: Using ep0 maxpacket: 8 [ 609.696987][ T54] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 609.716665][ T54] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 609.737544][ T54] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 255, changing to 11 [ 609.771162][ T6030] usb 1-1: USB disconnect, device number 112 [ 609.791870][ T54] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 41728, setting to 1024 [ 609.809028][ T6030] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 609.844952][ T54] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 609.861136][ T6030] cp210x 1-1:0.0: device disconnected [ 609.881470][ T54] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.904345][ T54] usb 4-1: Product: syz [ 609.912918][ T54] usb 4-1: Manufacturer: syz [ 609.920598][ T54] usb 4-1: SerialNumber: syz [ 609.936074][ T54] usb 4-1: config 0 descriptor?? [ 609.957227][ T54] powermate 4-1:0.0: probe with driver powermate failed with error -5 [ 610.462084][ T30] audit: type=1326 audit(1777242145.385:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23817 comm="syz.2.8765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c93f9cdd9 code=0x7ffc0000 [ 610.552592][ T30] audit: type=1326 audit(1777242145.385:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23817 comm="syz.2.8765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c93f9cdd9 code=0x7ffc0000 [ 610.631263][ T30] audit: type=1326 audit(1777242145.415:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23817 comm="syz.2.8765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8c93f9cdd9 code=0x7ffc0000 [ 610.732649][ T30] audit: type=1326 audit(1777242145.415:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23817 comm="syz.2.8765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c93f9cdd9 code=0x7ffc0000 [ 610.771996][ T54] usb 4-1: USB disconnect, device number 17 [ 610.773312][T23826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8769'. [ 610.817779][ T30] audit: type=1326 audit(1777242145.415:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23817 comm="syz.2.8765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c93f9cdd9 code=0x7ffc0000 [ 610.920378][ T30] audit: type=1326 audit(1777242145.415:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23817 comm="syz.2.8765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f8c93f9cdd9 code=0x7ffc0000 [ 611.001981][ T30] audit: type=1326 audit(1777242145.415:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23817 comm="syz.2.8765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c93f9cdd9 code=0x7ffc0000 [ 611.093280][ T30] audit: type=1326 audit(1777242145.415:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23817 comm="syz.2.8765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c93f9cdd9 code=0x7ffc0000 [ 611.620311][T23857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8784'. [ 611.654314][T23857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8784'. [ 613.351334][T23905] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8804'. [ 613.382687][T23905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8804'. [ 613.479629][ T54] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 613.653486][ T54] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 613.680364][ T54] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.704796][ T54] usb 3-1: Product: syz [ 613.724707][ T54] usb 3-1: Manufacturer: syz [ 613.739016][ T54] usb 3-1: SerialNumber: syz [ 613.769331][ T54] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 613.799581][T13840] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 613.948317][ T5964] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 614.138038][ T5964] usb 4-1: Using ep0 maxpacket: 16 [ 614.158349][ T5964] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 614.194215][ T5964] usb 4-1: config 0 interface 0 has no altsetting 0 [ 614.214603][ T5964] usb 4-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 614.244395][ T5964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.278277][ T5964] usb 4-1: config 0 descriptor?? [ 614.307921][ T54] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 614.458820][ T6030] usb 3-1: USB disconnect, device number 14 [ 614.491203][ T54] usb 2-1: Using ep0 maxpacket: 32 [ 614.514202][ T54] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 614.534793][ T54] usb 2-1: config 0 has no interface number 0 [ 614.553621][ T54] usb 2-1: config 0 interface 184 has no altsetting 0 [ 614.573573][ T54] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 614.600957][ T54] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.631108][ T54] usb 2-1: Product: syz [ 614.640232][ T54] usb 2-1: Manufacturer: syz [ 614.652110][ T54] usb 2-1: SerialNumber: syz [ 614.672396][ T54] usb 2-1: config 0 descriptor?? [ 614.714312][ T5964] hid_parser_main: 703 callbacks suppressed [ 614.714334][ T5964] asus 0003:0B05:1822.0007: unknown main item tag 0x0 [ 614.770332][ T5964] asus 0003:0B05:1822.0007: unknown main item tag 0x0 [ 614.793854][ T5964] asus 0003:0B05:1822.0007: unknown main item tag 0x0 [ 614.813202][ T5964] asus 0003:0B05:1822.0007: unknown main item tag 0x0 [ 614.837898][ T5964] asus 0003:0B05:1822.0007: unknown main item tag 0x0 [ 614.857348][ T5964] asus 0003:0B05:1822.0007: unknown main item tag 0x0 [ 614.877889][ T5964] asus 0003:0B05:1822.0007: unknown main item tag 0x0 [ 614.889386][T13840] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 614.897900][ T5964] asus 0003:0B05:1822.0007: unknown main item tag 0x0 [ 614.923664][ T5964] asus 0003:0B05:1822.0007: unknown main item tag 0x0 [ 614.926926][T13840] ath9k_htc: Failed to initialize the device [ 614.948073][ T5964] asus 0003:0B05:1822.0007: unknown main item tag 0x0 [ 614.960423][ T6030] usb 3-1: ath9k_htc: USB layer deinitialized [ 614.990950][ T5964] asus 0003:0B05:1822.0007: hidraw0: USB HID v0.08 Device [HID 0b05:1822] on usb-dummy_hcd.3-1/input0 [ 615.056205][ T5964] usb 4-1: USB disconnect, device number 18 [ 615.222933][T23933] fido_id[23933]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 615.332947][ T54] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 615.384223][ T54] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 615.424018][ T54] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 615.456972][ T54] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 615.491662][ T54] usb 2-1: USB disconnect, device number 22 [ 616.238124][ T54] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 616.284708][T23960] netlink: 822 bytes leftover after parsing attributes in process `syz.4.8829'. [ 616.427492][ T54] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 616.470191][ T54] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 616.513832][ T30] audit: type=1326 audit(1777242151.435:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23965 comm="syz.0.8832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4719cdd9 code=0x7ffc0000 [ 616.543567][ T54] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 616.575752][ T54] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.611080][T23952] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 616.621525][ T30] audit: type=1326 audit(1777242151.485:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23965 comm="syz.0.8832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7eff4719cdd9 code=0x7ffc0000 [ 616.680288][ T54] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 616.741340][ T30] audit: type=1326 audit(1777242151.495:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23965 comm="syz.0.8832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4719cdd9 code=0x7ffc0000 [ 616.865613][ T30] audit: type=1326 audit(1777242151.515:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23965 comm="syz.0.8832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4719cdd9 code=0x7ffc0000 [ 617.169582][ T54] usb 2-1: USB disconnect, device number 23 [ 617.359444][T23992] netlink: 'syz.2.8844': attribute type 8 has an invalid length. [ 617.558593][ T6030] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 617.727768][ T6030] usb 4-1: Using ep0 maxpacket: 16 [ 617.753410][ T6030] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.787806][ T6030] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.833330][ T6030] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 617.833403][ T6030] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 617.833428][ T6030] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.854619][ T6030] usb 4-1: config 0 descriptor?? [ 618.067764][ T29] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 618.219009][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 618.226356][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.257119][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 618.287740][ T29] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 618.320293][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.342977][ T6030] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0008/input/input52 [ 618.362347][ T29] usb 1-1: config 0 descriptor?? [ 618.572775][ T6030] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 618.663505][ T6030] usb 4-1: USB disconnect, device number 19 [ 618.795703][T24020] fido_id[24020]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 618.880514][ T29] zydacron 0003:13EC:0006.0009: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.0-1/input0 [ 619.081975][T13840] usb 1-1: USB disconnect, device number 113 [ 619.124481][T24031] fido_id[24031]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 619.523670][ T30] audit: type=1800 audit(1777242154.435:363): pid=24046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8867" name="bus" dev="tmpfs" ino=8565 res=0 errno=0 [ 620.017639][T24063] ipvlan0: entered promiscuous mode [ 620.039248][T24063] bridge0: port 1(ipvlan0) entered blocking state [ 620.066509][T24063] bridge0: port 1(ipvlan0) entered disabled state [ 620.098099][T24063] ipvlan0: entered allmulticast mode [ 620.123420][T24063] bridge0: entered allmulticast mode [ 620.153343][T24063] ipvlan0: left allmulticast mode [ 620.178144][T24063] bridge0: left allmulticast mode [ 620.649378][T13840] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 620.821098][T13840] usb 1-1: Using ep0 maxpacket: 32 [ 620.840253][T13840] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 620.875001][T13840] usb 1-1: config 0 has no interface number 0 [ 620.899903][T13840] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 620.921167][T24093] netlink: 'syz.1.8889': attribute type 2 has an invalid length. [ 620.931990][T13840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.954922][T13840] usb 1-1: Product: syz [ 620.965468][T13840] usb 1-1: Manufacturer: syz [ 620.971477][T13840] usb 1-1: SerialNumber: syz [ 620.987377][T13840] usb 1-1: config 0 descriptor?? [ 621.229436][T24105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 621.633292][T13840] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 621.700593][T13840] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 621.759107][T13840] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 621.841236][T13840] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 621.915866][T13840] usb 1-1: USB disconnect, device number 114 [ 622.702959][T24142] tipc: Started in network mode [ 622.709660][T24142] tipc: Node identity ac14140f, cluster identity 4711 [ 622.721263][T24142] tipc: Enabled bearer , priority 10 [ 622.800530][T13840] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 622.907886][ T6030] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 622.968859][T13840] usb 1-1: Using ep0 maxpacket: 8 [ 622.982720][T13840] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 623.003088][T13840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.029407][T13840] usb 1-1: Product: syz [ 623.042707][T13840] usb 1-1: Manufacturer: syz [ 623.058269][T13840] usb 1-1: SerialNumber: syz [ 623.068749][T13840] usb 1-1: config 0 descriptor?? [ 623.081037][ T6030] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 623.091915][ T6030] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 623.103785][T13840] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 623.113961][ T6030] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 623.125425][T13840] pctv452e: pctv452e_power_ctrl: 1 [ 623.125425][T13840] [ 623.133170][T13840] usb 1-1: selecting invalid altsetting 3 [ 623.143222][ T6030] usb 3-1: config 220 has no interface number 2 [ 623.153784][T13840] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 623.153784][T13840] [ 623.164437][ T6030] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 623.187136][T13840] dvb-usb: bulk message failed: -22 (5/0) [ 623.200692][ T6030] usb 3-1: config 220 interface 0 has no altsetting 0 [ 623.222467][T13840] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 623.240244][ T6030] usb 3-1: config 220 interface 76 has no altsetting 0 [ 623.268669][T13840] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 623.277118][ T6030] usb 3-1: config 220 interface 1 has no altsetting 0 [ 623.293293][ T6030] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 623.305457][T13840] usb 1-1: media controller created [ 623.311015][ T6030] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.329590][T13840] dvb-usb: bulk message failed: -22 (8/0) [ 623.344076][T13840] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 623.352433][ T6030] usb 3-1: Product: syz [ 623.362567][ T6030] usb 3-1: Manufacturer: syz [ 623.369959][T24136] dvb-usb: bulk message failed: -22 (7/0) [ 623.378029][T13840] dvb-usb: MAC address reading failed. [ 623.385728][ T6030] usb 3-1: SerialNumber: syz [ 623.397556][T24136] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 623.452888][T13840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 623.619666][T13840] DVB: Unable to find symbol stb0899_attach() [ 623.657361][ T6030] usb 3-1: selecting invalid altsetting 0 [ 623.665809][T13840] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 623.688588][ T6030] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 623.695935][ T6030] uvcvideo 3-1:220.0: No valid video chain found. [ 623.742492][ T6030] usb 3-1: selecting invalid altsetting 0 [ 623.760189][ T6030] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 623.791587][ T6030] usb 3-1: USB disconnect, device number 15 [ 623.836131][T13840] rc_core: IR keymap rc-tt-1500 not found [ 623.842895][T13840] Registered IR keymap rc-empty [ 623.850940][ T6020] tipc: Node number set to 2886997007 [ 623.869721][T13840] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 623.891979][T13840] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input53 [ 623.910143][T13840] dvb-usb: schedule remote query interval to 100 msecs. [ 623.927476][T13840] pctv452e: pctv452e_power_ctrl: 0 [ 623.927476][T13840] [ 623.927770][ T5964] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 623.935254][T13840] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 624.031232][ T6030] dvb-usb: bulk message failed: -22 (4/0) [ 624.040172][T13840] usb 1-1: USB disconnect, device number 115 [ 624.051853][ T6030] dvb-usb: error -22 while querying for an remote control event. [ 624.131677][ T5964] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 624.162942][ T5964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.190956][ T5964] usb 2-1: Product: syz [ 624.212457][ T5964] usb 2-1: Manufacturer: syz [ 624.218483][T13840] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 624.230648][ T5964] usb 2-1: SerialNumber: syz [ 624.277504][ T5964] usb 2-1: config 0 descriptor?? [ 624.305103][ T5964] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 624.363560][ T5964] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 624.419069][ T5964] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 624.458758][ T5964] usb 2-1: media controller created [ 624.490293][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.501857][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.524317][T24166] dvb-usb: bulk message failed: -22 (7/0) [ 624.559473][ T5964] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 624.778991][ T5964] DVB: Unable to find symbol mt352_attach() [ 624.868852][T13840] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 624.951852][ T5964] DVB: Unable to find symbol nxt6000_attach() [ 624.971172][ T5964] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 625.012187][ T5964] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input54 [ 625.061220][ T5964] dvb-usb: schedule remote query interval to 1000 msecs. [ 625.086130][T13840] usb 3-1: Using ep0 maxpacket: 32 [ 625.087999][ T5964] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 625.126734][T13840] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 625.144145][ T5964] dvb-usb: bulk message failed: -22 (7/0) [ 625.150213][T13840] usb 3-1: config 2 has no interface number 0 [ 625.170842][ T5964] dvb-usb: bulk message failed: -22 (7/0) [ 625.173612][T13840] usb 3-1: config 2 interface 88 has no altsetting 0 [ 625.213692][T13840] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 625.222666][ T5964] usb 2-1: USB disconnect, device number 24 [ 625.256645][T13840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.299022][T13840] usb 3-1: Product: syz [ 625.313115][T13840] usb 3-1: Manufacturer: syz [ 625.325989][T13840] usb 3-1: SerialNumber: syz [ 625.341789][T24205] sg_write: data in/out 422364/112 bytes for SCSI command 0x0-- guessing data in; [ 625.341789][T24205] program syz.4.8935 not setting count and/or reply_len properly [ 625.479888][ T5964] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 625.587874][T24187] netlink: 2 bytes leftover after parsing attributes in process `syz.2.8928'. [ 625.634695][T24187] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 625.678093][T13840] asix 3-1:2.88: probe with driver asix failed with error -71 [ 625.718724][T13840] usb 3-1: USB disconnect, device number 16 [ 626.239057][T13840] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 626.267870][ T5964] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 626.382895][T24240] ip6tnl0: Caught tx_queue_len zero misconfig [ 626.407976][T13840] usb 4-1: Using ep0 maxpacket: 16 [ 626.421488][T13840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.441489][ T5964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 626.458551][T13840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.467907][ T5964] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 626.478318][T13840] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 626.490148][T13840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.500233][ T5964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 626.521478][T13840] usb 4-1: config 0 descriptor?? [ 626.530471][ T5964] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 626.560770][ T5964] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 626.587898][ T5964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.620561][ T5964] usb 1-1: config 0 descriptor?? [ 626.687900][ T6030] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 626.847426][ T5964] hdpvr 1-1:0.0: firmware version 0x26 dated S¶zŸŒ‹“î‹ŽhHfÐï3;¨&X^„œ wÒΖŠ g/ƒ µn#»† [ 626.847841][ T6030] usb 2-1: Using ep0 maxpacket: 8 [ 626.873046][ T6030] usb 2-1: unable to get BOS descriptor or descriptor too short [ 626.882358][ T5964] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 626.885517][ T6030] usb 2-1: config 140 has an invalid interface number: 182 but max is 1 [ 626.916573][ T6030] usb 2-1: config 140 has no interface number 1 [ 626.934427][ T6030] usb 2-1: config 140 interface 182 has no altsetting 0 [ 626.953206][T13840] corsair 0003:1B1C:1B02.000A: unbalanced delimiter at end of report description [ 626.981261][ T6030] usb 2-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 626.999344][ T6030] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.010387][T13840] corsair 0003:1B1C:1B02.000A: parse failed [ 627.027934][T13840] corsair 0003:1B1C:1B02.000A: probe with driver corsair failed with error -22 [ 627.037137][ T6030] usb 2-1: Product: syz [ 627.042217][ T6030] usb 2-1: Manufacturer: syz [ 627.064408][ T6030] usb 2-1: SerialNumber: syz [ 627.156782][T13840] usb 4-1: USB disconnect, device number 20 [ 627.312438][ T6030] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 627.377950][ T5964] hdpvr 1-1:0.0: Could not setup controls [ 627.400795][ T5964] hdpvr 1-1:0.0: registering videodev failed [ 627.458182][ T5964] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -71 [ 627.494133][ T5964] usb 1-1: USB disconnect, device number 116 [ 627.815908][ T6030] usb 2-1: reset high-speed USB device number 25 using dummy_hcd [ 627.949140][T24276] fuseblk: Bad value for 'source' [ 628.053858][ T6030] usb 2-1: unable to get BOS descriptor or descriptor too short [ 628.112652][ T6030] usb 2-1: device firmware changed [ 628.142853][ T6030] usb 2-1: [ueagle-atm] pre-firmware device, uploading firmware [ 628.166989][ T6030] usb 2-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 628.175933][T13840] usb 2-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 628.206189][T13840] usb 2-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 628.229523][ T6030] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 628.261209][ T6030] usb 2-1: [ueagle-atm] pre-firmware device, uploading firmware [ 628.278182][ T6030] usb 2-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 628.309231][ T6030] usb 2-1: USB disconnect, device number 25 [ 628.345791][ T6030] usb 2-1: [ueagle-atm] ADSL device removed [ 628.468751][T24294] ALSA: mixer_oss: invalid OSS volume '' [ 629.398550][ T6009] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 629.582040][ T6009] usb 3-1: Using ep0 maxpacket: 8 [ 629.607139][ T6009] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.632874][ T6009] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.654647][ T6009] usb 3-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 629.684115][ T6009] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.708760][ T6009] usb 3-1: config 0 descriptor?? [ 629.887889][ T5964] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 630.069690][ T5964] usb 4-1: Using ep0 maxpacket: 8 [ 630.087360][ T5964] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 630.110786][ T5964] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 630.140571][ T6009] hid_parser_main: 38 callbacks suppressed [ 630.140593][ T6009] cherry 0003:046A:0027.000B: unknown main item tag 0x3 [ 630.147897][ T5964] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 630.191751][ T6009] cherry 0003:046A:0027.000B: unknown main item tag 0x1 [ 630.201856][ T5964] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 630.223130][ T6009] cherry 0003:046A:0027.000B: bogus close delimiter [ 630.237941][ T5964] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 630.242592][ T6009] cherry 0003:046A:0027.000B: item 0 0 2 10 parsing failed [ 630.270919][ T5964] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 630.281765][ T6009] cherry 0003:046A:0027.000B: probe with driver cherry failed with error -22 [ 630.287980][ T5964] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 630.330292][ T5964] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 630.367747][ T5964] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 630.403308][ T6009] usb 3-1: USB disconnect, device number 17 [ 630.407937][ T5964] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 630.439368][ T5964] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 630.468275][ T5964] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 630.507838][ T5964] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 630.547858][ T5964] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 630.579512][ T5964] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 630.621699][ T5964] usb 4-1: string descriptor 0 read error: -22 [ 630.637838][ T5964] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 630.667533][ T5964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.718980][ T5964] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 631.040102][ T5964] usb 4-1: USB disconnect, device number 21 [ 631.451531][ T6009] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 631.641971][ T6009] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 631.682184][ T6009] usb 2-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 631.715157][ T6009] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.751826][ T6009] usb 2-1: Product: syz [ 631.757578][ T6009] usb 2-1: Manufacturer: syz [ 631.763979][ T6009] usb 2-1: SerialNumber: syz [ 631.782385][ T6009] usb 2-1: config 0 descriptor?? [ 631.980215][ T6030] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 632.011774][ T6009] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 632.096486][ T6009] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 632.125902][ T6009] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 632.153924][ T6009] usb 2-1: media controller created [ 632.171153][ T6030] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 632.190745][ T6009] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 632.207052][ T6030] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 632.245305][ T6030] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 632.285847][ T6030] usb 4-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 632.323852][ T6030] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.372351][ T6030] usb 4-1: config 0 descriptor?? [ 632.395503][ T6009] DVB: Unable to find symbol dib7000p_attach() [ 632.410485][T24346] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 632.422271][ T6009] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 632.453338][ T6009] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 632.474112][ T6009] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 632.494901][ T6009] usb 2-1: media controller created [ 632.521840][ T6009] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 632.584386][ T6009] dib0700: the master dib7090 has to be initialized first [ 632.604161][ T6009] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 632.768504][ T6009] rc_core: IR keymap rc-dib0700-rc5 not found [ 632.776860][ T6009] Registered IR keymap rc-empty [ 632.783318][ T6009] dvb-usb: could not initialize remote control. [ 632.793038][ T6009] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 632.857282][ T6030] elecom 0003:056E:00FD.000C: ignoring exceeding usage max [ 632.889736][ T6030] elecom 0003:056E:00FD.000C: item fetching failed at offset 24/38 [ 632.901962][ T6030] elecom 0003:056E:00FD.000C: probe with driver elecom failed with error -22 [ 633.073496][T24377] netlink: 188 bytes leftover after parsing attributes in process `syz.0.9017'. [ 633.081747][ T5964] usb 2-1: USB disconnect, device number 26 [ 633.118148][ T6030] usb 4-1: USB disconnect, device number 22 [ 633.169350][ T5964] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 633.394329][T24385] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 633.414192][T24385] [U] J"—E:ÀÆ" [ 634.257850][ T6030] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 634.427898][ T6030] usb 2-1: Using ep0 maxpacket: 32 [ 634.443108][ T6030] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.458948][ T6030] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.469489][ T6030] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 634.478934][ T6030] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.492791][ T6030] usb 2-1: config 0 descriptor?? [ 634.956692][ T6030] nintendo 0003:057E:200E.000D: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.1-1/input0 [ 635.114004][ T6030] nintendo 0003:057E:200E.000D: Failed charging grip handshake [ 635.207206][ T6030] nintendo 0003:057E:200E.000D: Failed to initialize controller; ret=-110 [ 635.382924][ T6030] nintendo 0003:057E:200E.000D: probe - fail = -110 [ 635.411127][ T6030] nintendo 0003:057E:200E.000D: probe with driver nintendo failed with error -110 [ 635.457943][ T6030] usb 2-1: USB disconnect, device number 27 [ 636.171765][T24472] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 637.550815][ T54] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 637.727837][ T54] usb 1-1: Using ep0 maxpacket: 8 [ 637.750680][ T54] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 637.779334][ T54] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.806019][ T54] usb 1-1: Product: syz [ 637.824502][ T54] usb 1-1: Manufacturer: syz [ 637.843615][ T54] usb 1-1: SerialNumber: syz [ 637.870456][ T54] usb 1-1: config 0 descriptor?? [ 638.109603][ T54] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 638.268099][ T5964] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 638.439622][ T5964] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 638.467754][ T5964] usb 2-1: config 0 has no interface number 0 [ 638.488060][ T5964] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 638.520569][ T5964] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 638.540290][ T54] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 638.564760][ T5964] usb 2-1: config 0 interface 255 has no altsetting 0 [ 638.577101][ T54] usb 1-1: USB disconnect, device number 117 [ 638.595331][ T5964] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 638.625729][ T5964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.656617][ T5964] usb 2-1: config 0 descriptor?? [ 638.680407][ T5964] ums-realtek 2-1:0.255: USB Mass Storage device detected [ 638.916670][ T54] usb 2-1: USB disconnect, device number 28 [ 639.368281][ T54] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 639.544183][ T54] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 639.572633][ T54] usb 3-1: config 0 has no interface number 0 [ 639.593954][ T54] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.626652][ T54] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.664620][ T54] usb 3-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 639.689641][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.715555][ T54] usb 3-1: config 0 descriptor?? [ 640.157047][ T54] uclogic 0003:28BD:0905.000E: Interface probing failed: -22 [ 640.176771][ T54] uclogic 0003:28BD:0905.000E: interface is invalid, ignoring [ 640.274798][T24569] tipc: Enabling of bearer rejected, failed to enable media [ 640.393802][ T54] usb 3-1: USB disconnect, device number 18 [ 640.847855][ T5964] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 641.021434][ T5964] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.057731][ T5964] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.088842][ T5964] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 641.117734][ T5964] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 641.138820][ T5964] usb 2-1: Manufacturer: syz [ 641.165273][ T5964] usb 2-1: config 0 descriptor?? [ 641.618306][ T5964] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 641.637928][ T5964] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 641.660205][ T5964] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 641.687157][ T5964] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 641.707592][ T5964] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 641.730606][ T5964] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 641.757909][ T5964] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 641.782641][ T5964] pyra 0003:1E7D:2CF6.000F: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 641.821176][ T5964] pyra 0003:1E7D:2CF6.000F: couldn't init struct pyra_device [ 641.862563][ T5964] pyra 0003:1E7D:2CF6.000F: couldn't install mouse [ 641.898046][ T5964] pyra 0003:1E7D:2CF6.000F: probe with driver pyra failed with error -71 [ 641.945927][ T5964] usb 2-1: USB disconnect, device number 29 [ 642.191119][T24613] fido_id[24613]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 642.382639][T24620] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 642.645358][T24626] program syz.1.9131 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 642.689649][T24632] IPVS: stopping backup sync thread 24634 ... [ 642.690266][T24634] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 4, id = 0 [ 642.913184][T24642] tunl0: Caught tx_queue_len zero misconfig [ 643.094903][T24651] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 3, id = 0 [ 643.567649][T24669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9150'. [ 643.595193][T24671] vim2m vim2m.0: vidioc_s_fmt queue busy [ 644.852229][ T30] audit: type=1326 audit(1777242179.775:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24703 comm="syz.2.9164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c93f9cdd9 code=0x7ffc0000 [ 644.937152][ T30] audit: type=1326 audit(1777242179.775:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24703 comm="syz.2.9164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c93f9cdd9 code=0x7ffc0000 [ 644.971745][ T30] audit: type=1326 audit(1777242179.815:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24703 comm="syz.2.9164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8c93f9cdd9 code=0x7ffc0000 [ 645.004694][ T6009] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 645.080398][ T30] audit: type=1326 audit(1777242179.815:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24703 comm="syz.2.9164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c93f9cdd9 code=0x7ffc0000 [ 645.135448][ T30] audit: type=1326 audit(1777242179.815:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24703 comm="syz.2.9164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c93f9cdd9 code=0x7ffc0000 [ 645.176683][ T30] audit: type=1326 audit(1777242179.825:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24703 comm="syz.2.9164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f8c93f9cdd9 code=0x7ffc0000 [ 645.199628][ T6009] usb 4-1: Using ep0 maxpacket: 32 [ 645.228298][ T6009] usb 4-1: config index 0 descriptor too short (expected 164, got 36) [ 645.241420][ T6009] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.281744][ T6009] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 645.292115][ T30] audit: type=1326 audit(1777242179.825:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24703 comm="syz.2.9164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c93f9cdd9 code=0x7ffc0000 [ 645.327182][ T6009] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 645.346828][ T6009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.361699][ T30] audit: type=1326 audit(1777242179.825:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24703 comm="syz.2.9164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c93f9cdd9 code=0x7ffc0000 [ 645.406896][ T6009] usb 4-1: config 0 descriptor?? [ 645.846516][ T6009] logitech 0003:046D:C29C.0010: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0 [ 646.030795][ T6009] logitech 0003:046D:C29C.0010: no inputs found [ 646.067209][T24732] ================================================================== [ 646.075310][T24732] BUG: KASAN: slab-use-after-free in report_descriptor_read+0xb5/0x100 [ 646.083578][T24732] Read of size 5 at addr ffff888067e67480 by task fido_id/24732 [ 646.086331][ T6009] usb 4-1: USB disconnect, device number 23 [ 646.091210][T24732] [ 646.091229][T24732] CPU: 1 UID: 0 PID: 24732 Comm: fido_id Tainted: G L syzkaller #0 PREEMPT(full) [ 646.091251][T24732] Tainted: [L]=SOFTLOCKUP [ 646.091258][T24732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 646.091269][T24732] Call Trace: [ 646.091276][T24732] [ 646.091284][T24732] dump_stack_lvl+0xe8/0x150 [ 646.091307][T24732] print_address_description+0x55/0x1e0 [ 646.091326][T24732] ? report_descriptor_read+0xb5/0x100 [ 646.091354][T24732] print_report+0x58/0x70 [ 646.091368][T24732] kasan_report+0x117/0x150 [ 646.091394][T24732] ? report_descriptor_read+0xb5/0x100 [ 646.091421][T24732] kasan_check_range+0x264/0x2c0 [ 646.091445][T24732] ? report_descriptor_read+0xb5/0x100 [ 646.091469][T24732] __asan_memcpy+0x29/0x70 [ 646.091488][T24732] report_descriptor_read+0xb5/0x100 [ 646.091513][T24732] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 646.091532][T24732] kernfs_fop_read_iter+0x451/0x6b0 [ 646.091561][T24732] vfs_read+0x582/0xa70 [ 646.091586][T24732] ? __pfx_vfs_read+0x10/0x10 [ 646.091608][T24732] ? do_sys_openat2+0x14c/0x200 [ 646.091626][T24732] ? kmem_cache_free+0x182/0x650 [ 646.091648][T24732] ? fd_install+0x94/0x3d0 [ 646.091673][T24732] ksys_read+0x150/0x270 [ 646.091695][T24732] ? __pfx_ksys_read+0x10/0x10 [ 646.091720][T24732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.091738][T24732] do_syscall_64+0x15f/0xf80 [ 646.091756][T24732] ? trace_irq_disable+0x3b/0x140 [ 646.091781][T24732] ? clear_bhb_loop+0x40/0x90 [ 646.091799][T24732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.091816][T24732] RIP: 0033:0x7f03e4aa7407 [ 646.091833][T24732] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 646.091848][T24732] RSP: 002b:00007ffda90ca1f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 646.091868][T24732] RAX: ffffffffffffffda RBX: 00007f03e5257880 RCX: 00007f03e4aa7407 [ 646.091881][T24732] RDX: 0000000000001000 RSI: 00007ffda90ca240 RDI: 0000000000000004 [ 646.091893][T24732] RBP: 000055e70103f730 R08: 0000000000000000 R09: 0000000000000000 [ 646.091904][T24732] R10: 0000000000000000 R11: 0000000000000202 R12: 000055e70103e930 [ 646.091915][T24732] R13: 00007ffda90ca240 R14: 0000000000000004 R15: 000055e700aca4d8 [ 646.091934][T24732] [ 646.091941][T24732] [ 646.326463][T24732] Allocated by task 6009: [ 646.330778][T24732] kasan_save_track+0x3e/0x80 [ 646.335452][T24732] __kasan_kmalloc+0x93/0xb0 [ 646.340033][T24732] __kmalloc_node_track_caller_noprof+0x4db/0x7b0 [ 646.346441][T24732] kmemdup_noprof+0x2b/0x70 [ 646.350930][T24732] hid_open_report+0x1f7/0xf00 [ 646.355686][T24732] lg_probe+0x29c/0x8a0 [ 646.359836][T24732] hid_device_probe+0x416/0x7a0 [ 646.364674][T24732] really_probe+0x267/0xaf0 [ 646.369163][T24732] __driver_probe_device+0x1ef/0x380 [ 646.374432][T24732] driver_probe_device+0x4f/0x240 [ 646.379442][T24732] __device_attach_driver+0x279/0x430 [ 646.384800][T24732] bus_for_each_drv+0x258/0x2f0 [ 646.389641][T24732] __device_attach+0x2c5/0x450 [ 646.394391][T24732] device_initial_probe+0xa1/0xd0 [ 646.399399][T24732] bus_probe_device+0x12a/0x220 [ 646.404240][T24732] device_add+0x7e9/0xbb0 [ 646.408554][T24732] hid_add_device+0x272/0x3e0 [ 646.413223][T24732] usbhid_probe+0xbab/0x1080 [ 646.417800][T24732] usb_probe_interface+0x659/0xc70 [ 646.422898][T24732] really_probe+0x267/0xaf0 [ 646.427389][T24732] __driver_probe_device+0x1ef/0x380 [ 646.432663][T24732] driver_probe_device+0x4f/0x240 [ 646.437680][T24732] __device_attach_driver+0x279/0x430 [ 646.443044][T24732] bus_for_each_drv+0x258/0x2f0 [ 646.447887][T24732] __device_attach+0x2c5/0x450 [ 646.452643][T24732] device_initial_probe+0xa1/0xd0 [ 646.457654][T24732] bus_probe_device+0x12a/0x220 [ 646.462499][T24732] device_add+0x7e9/0xbb0 [ 646.466816][T24732] usb_set_configuration+0x1a87/0x2110 [ 646.472261][T24732] usb_generic_driver_probe+0x8d/0x150 [ 646.477717][T24732] usb_probe_device+0x1c4/0x3b0 [ 646.482558][T24732] really_probe+0x267/0xaf0 [ 646.487047][T24732] __driver_probe_device+0x1ef/0x380 [ 646.492319][T24732] driver_probe_device+0x4f/0x240 [ 646.497334][T24732] __device_attach_driver+0x279/0x430 [ 646.502690][T24732] bus_for_each_drv+0x258/0x2f0 [ 646.507533][T24732] __device_attach+0x2c5/0x450 [ 646.512287][T24732] device_initial_probe+0xa1/0xd0 [ 646.517315][T24732] bus_probe_device+0x12a/0x220 [ 646.522165][T24732] device_add+0x7e9/0xbb0 [ 646.526496][T24732] usb_new_device+0xa08/0x16f0 [ 646.531251][T24732] hub_event+0x2a1c/0x4f30 [ 646.535655][T24732] process_scheduled_works+0xb5d/0x1860 [ 646.541187][T24732] worker_thread+0xa53/0xfc0 [ 646.545767][T24732] kthread+0x388/0x470 [ 646.549821][T24732] ret_from_fork+0x514/0xb70 [ 646.554399][T24732] ret_from_fork_asm+0x1a/0x30 [ 646.559151][T24732] [ 646.561464][T24732] Freed by task 6009: [ 646.565424][T24732] kasan_save_track+0x3e/0x80 [ 646.570091][T24732] kasan_save_free_info+0x46/0x50 [ 646.575105][T24732] __kasan_slab_free+0x5c/0x80 [ 646.579864][T24732] kfree+0x1c5/0x640 [ 646.583749][T24732] hid_close_report+0x632/0x720 [ 646.588584][T24732] hid_device_probe+0x659/0x7a0 [ 646.593426][T24732] really_probe+0x267/0xaf0 [ 646.597917][T24732] __driver_probe_device+0x1ef/0x380 [ 646.603196][T24732] driver_probe_device+0x4f/0x240 [ 646.608208][T24732] __device_attach_driver+0x279/0x430 [ 646.613565][T24732] bus_for_each_drv+0x258/0x2f0 [ 646.618407][T24732] __device_attach+0x2c5/0x450 [ 646.623154][T24732] device_initial_probe+0xa1/0xd0 [ 646.628164][T24732] bus_probe_device+0x12a/0x220 [ 646.633005][T24732] device_add+0x7e9/0xbb0 [ 646.637321][T24732] hid_add_device+0x272/0x3e0 [ 646.641987][T24732] usbhid_probe+0xbab/0x1080 [ 646.646566][T24732] usb_probe_interface+0x659/0xc70 [ 646.651673][T24732] really_probe+0x267/0xaf0 [ 646.656183][T24732] __driver_probe_device+0x1ef/0x380 [ 646.661468][T24732] driver_probe_device+0x4f/0x240 [ 646.666484][T24732] __device_attach_driver+0x279/0x430 [ 646.671844][T24732] bus_for_each_drv+0x258/0x2f0 [ 646.676685][T24732] __device_attach+0x2c5/0x450 [ 646.681433][T24732] device_initial_probe+0xa1/0xd0 [ 646.686442][T24732] bus_probe_device+0x12a/0x220 [ 646.691282][T24732] device_add+0x7e9/0xbb0 [ 646.695598][T24732] usb_set_configuration+0x1a87/0x2110 [ 646.701045][T24732] usb_generic_driver_probe+0x8d/0x150 [ 646.706491][T24732] usb_probe_device+0x1c4/0x3b0 [ 646.711330][T24732] really_probe+0x267/0xaf0 [ 646.715822][T24732] __driver_probe_device+0x1ef/0x380 [ 646.721090][T24732] driver_probe_device+0x4f/0x240 [ 646.726101][T24732] __device_attach_driver+0x279/0x430 [ 646.731457][T24732] bus_for_each_drv+0x258/0x2f0 [ 646.736295][T24732] __device_attach+0x2c5/0x450 [ 646.741048][T24732] device_initial_probe+0xa1/0xd0 [ 646.746064][T24732] bus_probe_device+0x12a/0x220 [ 646.750925][T24732] device_add+0x7e9/0xbb0 [ 646.755244][T24732] usb_new_device+0xa08/0x16f0 [ 646.760002][T24732] hub_event+0x2a1c/0x4f30 [ 646.764404][T24732] process_scheduled_works+0xb5d/0x1860 [ 646.769939][T24732] worker_thread+0xa53/0xfc0 [ 646.774515][T24732] kthread+0x388/0x470 [ 646.778569][T24732] ret_from_fork+0x514/0xb70 [ 646.783144][T24732] ret_from_fork_asm+0x1a/0x30 [ 646.787895][T24732] [ 646.790202][T24732] The buggy address belongs to the object at ffff888067e67480 [ 646.790202][T24732] which belongs to the cache kmalloc-8 of size 8 [ 646.803889][T24732] The buggy address is located 0 bytes inside of [ 646.803889][T24732] freed 8-byte region [ffff888067e67480, ffff888067e67488) [ 646.817319][T24732] [ 646.819631][T24732] The buggy address belongs to the physical page: [ 646.826050][T24732] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x67e67 [ 646.834797][T24732] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 646.841893][T24732] page_type: f5(slab) [ 646.845862][T24732] raw: 00fff00000000000 ffff88813fe19500 dead000000000100 dead000000000122 [ 646.854430][T24732] raw: 0000000000000000 0000000800800080 00000000f5000000 0000000000000000 [ 646.863082][T24732] page dumped because: kasan: bad access detected [ 646.869486][T24732] page_owner tracks the page as allocated [ 646.875185][T24732] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5902, tgid 5902 (kworker/1:3), ts 157340124755, free_ts 157336862047 [ 646.895832][T24732] post_alloc_hook+0x231/0x280 [ 646.900676][T24732] get_page_from_freelist+0x24ba/0x2540 [ 646.906212][T24732] __alloc_frozen_pages_noprof+0x18d/0x380 [ 646.912010][T24732] allocate_slab+0x77/0x660 [ 646.916501][T24732] refill_objects+0x339/0x3d0 [ 646.921163][T24732] __pcs_replace_empty_main+0x321/0x720 [ 646.926792][T24732] __kmalloc_cache_noprof+0x392/0x660 [ 646.932174][T24732] usb_control_msg+0x73/0x3e0 [ 646.936854][T24732] usb_get_string+0xa1/0x3c0 [ 646.941436][T24732] usb_string_sub+0x76/0x420 [ 646.946019][T24732] usb_string+0x38f/0x7d0 [ 646.950337][T24732] usb_cache_string+0x7d/0xf0 [ 646.955002][T24732] usb_new_device+0x360/0x16f0 [ 646.959756][T24732] hub_event+0x2a1c/0x4f30 [ 646.964158][T24732] process_scheduled_works+0xb5d/0x1860 [ 646.969690][T24732] worker_thread+0xa53/0xfc0 [ 646.974269][T24732] page last free pid 1223 tgid 1223 stack trace: [ 646.980578][T24732] __free_frozen_pages+0xbc7/0xd30 [ 646.985681][T24732] vfree+0x1d1/0x2f0 [ 646.989566][T24732] delayed_vfree_work+0x55/0x80 [ 646.994403][T24732] process_scheduled_works+0xb5d/0x1860 [ 646.999933][T24732] worker_thread+0xa53/0xfc0 [ 647.004510][T24732] kthread+0x388/0x470 [ 647.008567][T24732] ret_from_fork+0x514/0xb70 [ 647.013148][T24732] ret_from_fork_asm+0x1a/0x30 [ 647.017901][T24732] [ 647.020218][T24732] Memory state around the buggy address: [ 647.025830][T24732] ffff888067e67380: 05 fc fc fc 06 fc fc fc 00 fc fc fc 00 fc fc fc [ 647.033876][T24732] ffff888067e67400: 07 fc fc fc 06 fc fc fc 00 fc fc fc 05 fc fc fc [ 647.041921][T24732] >ffff888067e67480: fa fc fc fc 06 fc fc fc fa fc fc fc 06 fc fc fc [ 647.049968][T24732] ^ [ 647.054020][T24732] ffff888067e67500: 05 fc fc fc 05 fc fc fc 06 fc fc fc 06 fc fc fc [ 647.062078][T24732] ffff888067e67580: 03 fc fc fc 05 fc fc fc 05 fc fc fc 06 fc fc fc [ 647.070130][T24732] ================================================================== [ 647.866820][T24732] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 647.874082][T24732] CPU: 0 UID: 0 PID: 24732 Comm: fido_id Tainted: G L syzkaller #0 PREEMPT(full) [ 647.884767][T24732] Tainted: [L]=SOFTLOCKUP [ 647.889097][T24732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 647.899161][T24732] Call Trace: [ 647.902447][T24732] [ 647.905377][T24732] vpanic+0x56c/0xa60 [ 647.909366][T24732] ? __pfx_vpanic+0x10/0x10 [ 647.913878][T24732] ? __pfx___schedule+0x10/0x10 [ 647.918733][T24732] panic+0xc5/0xd0 [ 647.922460][T24732] ? __pfx_panic+0x10/0x10 [ 647.926882][T24732] ? preempt_schedule_thunk+0x16/0x30 [ 647.932267][T24732] ? report_descriptor_read+0xb5/0x100 [ 647.937736][T24732] check_panic_on_warn+0x89/0xb0 [ 647.942679][T24732] ? report_descriptor_read+0xb5/0x100 [ 647.948143][T24732] end_report+0x73/0x170 [ 647.952397][T24732] ? report_descriptor_read+0xb5/0x100 [ 647.957862][T24732] kasan_report+0x128/0x150 [ 647.962374][T24732] ? report_descriptor_read+0xb5/0x100 [ 647.967845][T24732] kasan_check_range+0x264/0x2c0 [ 647.972796][T24732] ? report_descriptor_read+0xb5/0x100 [ 647.978264][T24732] __asan_memcpy+0x29/0x70 [ 647.982683][T24732] report_descriptor_read+0xb5/0x100 [ 647.987982][T24732] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 647.993443][T24732] kernfs_fop_read_iter+0x451/0x6b0 [ 647.998657][T24732] vfs_read+0x582/0xa70 [ 648.002824][T24732] ? __pfx_vfs_read+0x10/0x10 [ 648.007503][T24732] ? do_sys_openat2+0x14c/0x200 [ 648.012360][T24732] ? kmem_cache_free+0x182/0x650 [ 648.017305][T24732] ? fd_install+0x94/0x3d0 [ 648.021731][T24732] ksys_read+0x150/0x270 [ 648.025987][T24732] ? __pfx_ksys_read+0x10/0x10 [ 648.030760][T24732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.036831][T24732] do_syscall_64+0x15f/0xf80 [ 648.041423][T24732] ? trace_irq_disable+0x3b/0x140 [ 648.046458][T24732] ? clear_bhb_loop+0x40/0x90 [ 648.051140][T24732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.057038][T24732] RIP: 0033:0x7f03e4aa7407 [ 648.061459][T24732] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 648.081069][T24732] RSP: 002b:00007ffda90ca1f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 648.089497][T24732] RAX: ffffffffffffffda RBX: 00007f03e5257880 RCX: 00007f03e4aa7407 [ 648.097472][T24732] RDX: 0000000000001000 RSI: 00007ffda90ca240 RDI: 0000000000000004 [ 648.105444][T24732] RBP: 000055e70103f730 R08: 0000000000000000 R09: 0000000000000000 [ 648.113416][T24732] R10: 0000000000000000 R11: 0000000000000202 R12: 000055e70103e930 [ 648.121380][T24732] R13: 00007ffda90ca240 R14: 0000000000000004 R15: 000055e700aca4d8 [ 648.129353][T24732] [ 648.132999][T24732] Kernel Offset: disabled [ 648.137307][T24732] Rebooting in 86400 seconds..