last executing test programs: 8.848823675s ago: executing program 2 (id=469): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) close(r1) 8.499412597s ago: executing program 2 (id=470): socket$nl_netfilter(0x10, 0x3, 0xc) timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x18, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x145}]}, 0x18}}, 0xc000) 7.399350744s ago: executing program 2 (id=473): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r1, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 7.267557394s ago: executing program 1 (id=474): r0 = syz_open_procfs(0x0, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x0, 0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x2e) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000019080)=0x30) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, 0x0, 0x40) mmap(&(0x7f0000d61000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000d62000/0x3000)=nil, 0x3000, 0x0, 0x1, 0x10000) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000300)=ANY=[]) 5.958998325s ago: executing program 2 (id=475): syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x80000000}) socket$nl_generic(0x10, 0x3, 0x10) 5.691594193s ago: executing program 1 (id=476): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 4.59295833s ago: executing program 1 (id=482): r0 = syz_io_uring_setup(0x3192, &(0x7f00000006c0)={0x0, 0x1270, 0x4, 0x2, 0xa1}, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) geteuid() mount$9p_fd(0x0, 0x0, 0x0, 0x83000, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d56", 0x14) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.521405686s ago: executing program 2 (id=485): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x10b902, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002f80), 0x3, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, 0x0) r2 = socket(0x1e, 0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r5, 0x0, 0x102) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2b, &(0x7f0000000780)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108) recvmmsg(r2, 0x0, 0x0, 0x40002122, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0x12) open(&(0x7f0000000080)='./file1\x00', 0x400, 0x100) 3.481280179s ago: executing program 0 (id=486): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000007c0), 0x2002, 0x0) pwritev2(r0, &(0x7f0000000180)=[{&(0x7f0000000a00)='@', 0x1}], 0x1, 0x101, 0x9, 0x0) 3.480859528s ago: executing program 3 (id=487): unshare(0x26020480) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0x12) 3.34737079s ago: executing program 1 (id=488): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.292281899s ago: executing program 0 (id=489): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x24, 0x40, 0x1, 0x7fffc, 0x25dfdbfe, {0x1}, [@nested={0x4, 0x47}, @nested={0x4, 0x1}, @typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008084) 3.200604596s ago: executing program 3 (id=490): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0x80a0000, 0x8, 0xf, 0x5, 0x4, 0x42, 0x6, 0x0, 0x34, 0x9}, {0x100000, 0xb000, 0xc, 0x2, 0x1, 0x43, 0x7f, 0x6, 0x5, 0x6, 0x7f, 0x5}, {0xdddd0000, 0x80a0000, 0xb, 0x6, 0x80, 0x7, 0x0, 0x9, 0xff, 0xb, 0x8, 0x85}, {0x200000, 0x8080000, 0x10, 0x6, 0x7, 0xff, 0xfd, 0x1, 0xa, 0xa0, 0x9, 0xf1}, {0x1000, 0xb000, 0xd, 0x3, 0x5, 0x2, 0xab, 0x7f, 0xf, 0x83, 0xf7, 0x7}, {0x2000, 0xa000, 0xc, 0xa, 0xf7, 0x6, 0x1, 0x1, 0x80, 0x13, 0x5}, {0x6000, 0xba845000, 0xb, 0x5, 0x0, 0x4, 0x4, 0x3, 0x3, 0x7d, 0x2, 0x70}, {0xeeee0000, 0x9000, 0xc, 0x2, 0xf, 0x7, 0x6a, 0xe2, 0xff, 0x18, 0xee, 0x9}, {0xe000, 0x3}, {0x3000, 0x2}, 0x80000031, 0x0, 0x40000, 0x42064, 0x400000006, 0x9000, 0x25000, [0x400000000000a2, 0x800ffa, 0x400000000063, 0x7]}) 3.117529377s ago: executing program 0 (id=491): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x100, 0xf, 0xd0, 0x2, 0x1, 0x100, 0x3, 0x20000000, 0x8, 0xb, 0x0, 0x3, 0x1, 0x3fe, 0x10001, 0x4, 0x0, 0x8, 0x9, 0x401, 0x7, 0x5, 0x8001, 0x9, 0x48, 0x9, 0x7, 0x6a77, 0x1, 0x7, 0x8]}) 2.040162465s ago: executing program 3 (id=492): memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) 2.039096219s ago: executing program 0 (id=500): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000ac0)=@gcm_128={{0x304}, "629f2ad1e25e04f2", "bddff730a979d9b52e732fd6a9c1b085", "ace06e88", "747a2aaf941f2665"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000280)=@gcm_128={{0x304}, "41c000", "0cfcb67ecace717eb34a87013860510f", "15f4807f", "d4c27feb98ae71cc"}, 0x28) 1.879884912s ago: executing program 2 (id=493): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0x4) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000380)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 1.864014305s ago: executing program 0 (id=494): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000240)="e773", 0x2}], 0x1) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0xd21, 0x80c0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000040)={'netdevsim0\x00', {0x2, 0x4e23, @local}}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x6, 0x3}, 0x10) bind$tipc(r4, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x892) socket$inet6(0xa, 0x3, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.858995751s ago: executing program 3 (id=495): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x10010}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 509.984302ms ago: executing program 3 (id=496): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) 317.948408ms ago: executing program 3 (id=497): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000380)=0x0) r4 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvmmsg(r4, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/3, 0x3}], 0x1}, 0x200}], 0x1, 0x1, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f00000003c0)=ANY=[], 0x52) 236.203567ms ago: executing program 1 (id=498): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='nv', 0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 35.771041ms ago: executing program 1 (id=499): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, 0x0, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r2, &(0x7f0000000100)="f4188a9876a9431deeb98e3edfaafa03a11300e3aebb4102000000000034c5d2af03a5f261a35c07d07d371a4402394549d78c3f511bb4793daf4b4e28410e598769487fb27044ece0b4e738bcc7e1ce3aa7a3df2572a082809f406467bc0f0b47872a2ecc399861b90da1ffcfb35a8f5579b72e3cde817a2a78ff205c6fee57f9177bbeeb2f3d121b9c508660c2d90b0dc3f2412b62e7d99a7dfa6960b663bb8e14764efb33f9465c242b84b75a436ef9af2492b19a15bb9108656d828553e1719de91aa29cb5bf187a0162d50e234b6207725486c9e828d756ff9b6d4f5c4960469dd3a48b4e525f0cbf7158f95d603a37c272f874ee3b5c6e56", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) 0s ago: executing program 0 (id=501): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) kernel console output (not intermixed with test programs): 173594][ T10] usb 2-1: config 0 descriptor?? [ 103.760176][ T1013] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.073189][ T1013] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.073226][ T1013] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.073250][ T1013] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 104.073292][ T1013] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 104.073315][ T1013] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.174789][ T5772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.175411][ T5772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.234494][ T5772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.235219][ T5772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.282533][ T1013] usb 3-1: config 0 descriptor?? [ 104.466646][ T38] audit: type=1800 audit(1780143294.775:2): pid=5772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.2" name="/" dev="sockfs" ino=8380 res=0 errno=0 [ 104.766031][ T10] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 104.986344][ T5789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.009674][ T5789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.141445][ T10] usb 2-1: USB disconnect, device number 2 [ 105.273979][ T5808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.297179][ T5811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'. [ 105.330796][ T5808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.331449][ T1013] plantronics 0003:047F:FFFF.0002: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 105.398151][ T32] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 105.596936][ T32] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 105.596964][ T32] usb 4-1: config 0 has no interface number 0 [ 105.596995][ T32] usb 4-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 105.597032][ T32] usb 4-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 105.597058][ T32] usb 4-1: config 0 interface 48 has no altsetting 0 [ 105.643821][ T32] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 105.643850][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.643889][ T32] usb 4-1: Product: syz [ 105.643905][ T32] usb 4-1: Manufacturer: syz [ 105.643920][ T32] usb 4-1: SerialNumber: syz [ 105.789970][ T32] usb 4-1: config 0 descriptor?? [ 105.923256][ T38] audit: type=1800 audit(1780143296.265:3): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.13" name="/" dev="sockfs" ino=7716 res=0 errno=0 [ 106.041947][ T32] cx82310_eth 4-1:0.48: probe with driver cx82310_eth failed with error -22 [ 106.080738][ T32] cxacru 4-1:0.48: usbatm_usb_probe: bind failed: -19! [ 106.125870][ T32] usb 4-1: USB disconnect, device number 2 [ 106.646779][ T5827] binder: BINDER_SET_CONTEXT_MGR already set [ 106.646795][ T5827] binder: 5826:5827 ioctl 4018620d 200000000100 returned -16 [ 106.815957][ T5829] Zero length message leads to an empty skb [ 106.863389][ T5831] syz.3.24 uses obsolete (PF_INET,SOCK_PACKET) [ 106.994935][ T5834] netlink: 28 bytes leftover after parsing attributes in process `syz.1.25'. [ 107.149696][ T5836] netlink: 164 bytes leftover after parsing attributes in process `syz.0.26'. [ 107.425954][ T10] usb 3-1: USB disconnect, device number 2 [ 107.565051][ T32] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.747211][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.747243][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.747266][ T32] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.747320][ T32] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.747343][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.849923][ T5850] loop2: detected capacity change from 0 to 7 [ 107.850094][ T32] usb 4-1: config 0 descriptor?? [ 107.994499][ T5850] Dev loop2: unable to read RDB block 7 [ 107.994547][ T5850] loop2: unable to read partition table [ 107.994878][ T5850] loop2: partition table beyond EOD, truncated [ 107.994937][ T5850] loop_reread_partitions: partition scan of loop2 (被x U) failed (rc=-5) [ 108.058527][ T5706] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 108.208102][ T5706] usb 2-1: Using ep0 maxpacket: 8 [ 108.211502][ T5706] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 138, changing to 7 [ 108.214512][ T5706] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 108.214537][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.214558][ T5706] usb 2-1: Product: Я [ 108.214573][ T5706] usb 2-1: Manufacturer: ᢝ洊戴予䡆ㅩ㣸路Jﭣ摡ᏽຯ싕挏嗙徨㯳題썗쭴瓩ᴖ흜瑗붎곛뜹ꆕ㫣懒瓩Ж㤅寢 [ 108.214595][ T5706] usb 2-1: SerialNumber: 䰊 [ 108.339311][ T32] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 108.464943][ T5859] netlink: 'syz.2.35': attribute type 10 has an invalid length. [ 108.490149][ T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 108.553045][ T5841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.554139][ T5841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.610649][ T5706] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 108.660369][ T9] usb 1-1: config 2 has an invalid interface number: 162 but max is 0 [ 108.660397][ T9] usb 1-1: config 2 has no interface number 0 [ 108.660431][ T9] usb 1-1: config 2 interface 162 has no altsetting 0 [ 108.688506][ T9] usb 1-1: New USB device found, idVendor=2639, idProduct=0001, bcdDevice=8d.cb [ 108.688540][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.688563][ T9] usb 1-1: Product: syz [ 108.688578][ T9] usb 1-1: Manufacturer: syz [ 108.688594][ T9] usb 1-1: SerialNumber: syz [ 108.777276][ T5841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.780145][ T5841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.647548][ T5857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.665244][ C1] plantronics 0003:047F:FFFF.0003: usb_submit_urb(ctrl) failed: -1 [ 109.686477][ T38] audit: type=1800 audit(1780143300.025:4): pid=5865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.28" name="/" dev="sockfs" ino=7814 res=0 errno=0 [ 109.729391][ T5857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.933434][ T9] usb 1-1: USB disconnect, device number 3 [ 110.355595][ T5706] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 110.445390][ T5706] usb 2-1: USB disconnect, device number 3 [ 110.655575][ T5686] udevd[5686]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.759305][ T5790] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 110.790013][ T5003] usb 4-1: USB disconnect, device number 3 [ 110.889187][ T5706] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 110.978205][ T5790] usb 3-1: Using ep0 maxpacket: 8 [ 110.987510][ T5790] usb 3-1: unable to get BOS descriptor or descriptor too short [ 110.998194][ T5790] usb 3-1: config 5 has no interfaces? [ 111.007939][ T5790] usb 3-1: New USB device found, idVendor=16ab, idProduct=7811, bcdDevice=b9.87 [ 111.007970][ T5790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 111.007984][ T5790] usb 3-1: Product: syz [ 111.007993][ T5790] usb 3-1: Manufacturer: syz [ 111.009047][ T5790] usb 3-1: SerialNumber: syz [ 111.076774][ T5706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.076839][ T5706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.076861][ T5706] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 111.076922][ T5706] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.076946][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.177911][ T5893] loop5: detected capacity change from 0 to 127 [ 111.225955][ T5706] usb 2-1: config 0 descriptor?? [ 111.315392][ T5893] loop5: unable to read partition table [ 111.321238][ T5893] loop_reread_partitions: partition scan of loop5 (被x) failed (rc=-5) [ 111.479886][ T5790] usb 3-1: USB disconnect, device number 3 [ 111.826295][ T5706] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 111.920381][ T5879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.920992][ T5879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.925953][ T5906] loop8: detected capacity change from 0 to 7 [ 111.983829][ T5906] Dev loop8: unable to read RDB block 7 [ 111.983871][ T5906] loop8: unable to read partition table [ 111.984073][ T5906] loop8: partition table beyond EOD, truncated [ 111.984100][ T5906] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 112.042412][ T5879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.043028][ T5879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.398268][ T38] audit: type=1800 audit(2000000001.790:5): pid=5879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.40" name="/" dev="sockfs" ino=7871 res=0 errno=0 [ 112.715325][ T5706] usb 2-1: USB disconnect, device number 4 [ 112.865222][ T5922] syz.0.50 (5922) used greatest stack depth: 18904 bytes left [ 112.895770][ T5929] netlink: 324 bytes leftover after parsing attributes in process `syz.3.53'. [ 112.978186][ T5003] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 113.079608][ T5938] netlink: 128 bytes leftover after parsing attributes in process `syz.3.56'. [ 113.080271][ T5938] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.151876][ T5003] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.151912][ T5003] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.151936][ T5003] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 113.152197][ T5003] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 113.152223][ T5003] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.214710][ T5003] usb 3-1: config 0 descriptor?? [ 113.791718][ T5003] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 114.020279][ T5925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.020909][ T5925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.155041][ T5925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.213553][ T5925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.434774][ T38] audit: type=1800 audit(2000000003.830:6): pid=5925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.52" name="/" dev="sockfs" ino=7933 res=0 errno=0 [ 114.467542][ T5963] batadv_slave_1: entered promiscuous mode [ 114.499036][ T5963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.63'. [ 114.562136][ T5961] batadv_slave_1: left promiscuous mode [ 114.624299][ T5966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.64'. [ 115.179503][ C0] plantronics 0003:047F:FFFF.0005: usb_submit_urb(ctrl) failed: -1 [ 115.290545][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 115.489297][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 115.491275][ T10] usb 4-1: config index 0 descriptor too short (expected 1042, got 18) [ 115.491303][ T10] usb 4-1: config 2 has too many interfaces: 249, using maximum allowed: 32 [ 115.491325][ T10] usb 4-1: config 2 has 1 interface, different from the descriptor's value: 249 [ 115.491373][ T10] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 115.491401][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.565049][ T5790] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 115.597320][ T10] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 115.744270][ T5790] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.744304][ T5790] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.744368][ T5790] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 115.744399][ T5790] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 115.744415][ T5790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.819551][ T5790] usb 1-1: config 0 descriptor?? [ 116.150590][ T5994] netlink: 216 bytes leftover after parsing attributes in process `syz.2.70'. [ 116.155969][ T10] gspca_nw80x: reg_r err -71 [ 116.156377][ T10] nw80x 4-1:2.0: probe with driver nw80x failed with error -71 [ 116.214958][ T5706] usb 3-1: USB disconnect, device number 4 [ 116.300156][ T10] usb 4-1: USB disconnect, device number 4 [ 116.341275][ T5790] plantronics 0003:047F:FFFF.0006: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 116.451728][ T5974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.452309][ T5974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.671953][ T38] audit: type=1800 audit(2000000006.070:7): pid=5974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.68" name="/" dev="sockfs" ino=8686 res=0 errno=0 [ 116.732687][ T5990] nbd0: detected capacity change from 0 to 34634616274944 [ 116.789134][ T6003] netlink: 'syz.2.71': attribute type 83 has an invalid length. [ 116.883186][ T4924] block nbd0: Wrong magic (0x25609513) [ 116.951329][ T5611] block nbd0: Receive control failed (result -32) [ 116.954623][ T60] block nbd0: Receive control failed (result -32) [ 117.082799][ T6007] program syz.3.73 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.141576][ T6009] tipc: Started in network mode [ 117.141719][ T6009] tipc: Node identity ac1414aa, cluster identity 4711 [ 117.161454][ T6009] tipc: Enabled bearer , priority 10 [ 117.820400][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 117.970377][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.970413][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.970439][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.970471][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.970488][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.979455][ T10] usb 2-1: config 0 descriptor?? [ 118.374380][ T5003] usb 1-1: USB disconnect, device number 4 [ 118.475236][ T5746] tipc: Node number set to 2886997162 [ 118.608260][ T10] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 118.666538][ T6020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.680854][ T6020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.742852][ T6020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.754871][ T6020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.832187][ T6038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.85'. [ 118.848374][ T5746] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 118.978349][ T5746] usb 3-1: device descriptor read/64, error -71 [ 119.033155][ T38] audit: type=1800 audit(2000000008.430:8): pid=6020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.79" name="/" dev="sockfs" ino=8766 res=0 errno=0 [ 119.035224][ T5003] usb 2-1: USB disconnect, device number 5 [ 119.198491][ T32] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 119.238306][ T5746] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 119.348193][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 119.350302][ T32] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 119.350756][ T32] usb 1-1: config 0 has no interface number 0 [ 119.351404][ T32] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 119.351433][ T32] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 119.351456][ T32] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 119.351480][ T32] usb 1-1: config 0 interface 196 has no altsetting 0 [ 119.412755][ T5746] usb 3-1: device descriptor read/64, error -71 [ 119.415030][ T32] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 119.415057][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.415078][ T32] usb 1-1: Product: syz [ 119.415093][ T32] usb 1-1: Manufacturer: syz [ 119.415108][ T32] usb 1-1: SerialNumber: syz [ 119.458734][ T32] usb 1-1: config 0 descriptor?? [ 119.462745][ T6042] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 119.533009][ T5746] usb usb3-port1: attempt power cycle [ 119.649720][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 119.798204][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 119.800465][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.800517][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.800545][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 119.800567][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 119.800591][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.801949][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 119.801976][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 119.801996][ T10] usb 4-1: Manufacturer: syz [ 119.816851][ T10] usb 4-1: config 0 descriptor?? [ 119.978147][ T5746] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 120.015679][ T5746] usb 3-1: device descriptor read/8, error -71 [ 120.070747][ T32] ipheth 1-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 120.128427][ T5003] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 120.142968][ T10] rc_core: IR keymap rc-hauppauge not found [ 120.143025][ T10] Registered IR keymap rc-empty [ 120.158482][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 120.163366][ T32] ipheth 1-1:0.196: Apple iPhone USB Ethernet device attached [ 120.179376][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 120.202798][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 120.229812][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 120.258379][ T5746] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 120.281915][ T5003] usb 2-1: Using ep0 maxpacket: 16 [ 120.286495][ T5003] usb 2-1: config 247 has an invalid interface number: 88 but max is 0 [ 120.286519][ T5003] usb 2-1: config 247 has no interface number 0 [ 120.286549][ T5003] usb 2-1: config 247 interface 88 has no altsetting 0 [ 120.316922][ T5746] usb 3-1: device descriptor read/8, error -71 [ 120.327813][ T5003] usb 2-1: New USB device found, idVendor=1bc7, idProduct=0023, bcdDevice=e4.25 [ 120.327837][ T5003] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.327855][ T5003] usb 2-1: Product: syz [ 120.327867][ T5003] usb 2-1: Manufacturer: syz [ 120.327880][ T5003] usb 2-1: SerialNumber: syz [ 120.338960][ T5790] usb 1-1: USB disconnect, device number 5 [ 120.419190][ T5746] usb usb3-port1: unable to enumerate USB device [ 120.638961][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 120.660397][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 120.678215][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 120.700732][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 120.718268][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 120.741970][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 120.742496][ T5003] usb 2-1: USB disconnect, device number 6 [ 120.763613][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 120.779625][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 120.800272][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 120.818212][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 121.066505][ T10] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 121.066531][ T10] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 121.154836][ T10] usb 4-1: USB disconnect, device number 5 [ 121.581106][ T5790] ipheth 1-1:0.196: Apple iPhone USB Ethernet now disconnected [ 121.933056][ T32] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 121.948908][ T5003] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 122.000290][ T6086] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 122.110618][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 122.114750][ T32] usb 3-1: unable to get BOS descriptor or descriptor too short [ 122.116828][ T32] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.116850][ T32] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 122.116909][ T32] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 122.154963][ T5003] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.154999][ T5003] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.155023][ T5003] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 122.155067][ T5003] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 122.155091][ T5003] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.218032][ T32] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.218064][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.218086][ T32] usb 3-1: Product: syz [ 122.218101][ T32] usb 3-1: Manufacturer: syz [ 122.218116][ T32] usb 3-1: SerialNumber: syz [ 122.293950][ T5003] usb 2-1: config 0 descriptor?? [ 122.492760][ T6076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.493909][ T6076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.581865][ T6097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.599376][ T6097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.933943][ T5003] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 122.971542][ T6077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.972038][ T6077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.117473][ T32] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 123.117526][ T32] cdc_ncm 3-1:1.0: bind() failure [ 123.176386][ T32] usb 3-1: USB disconnect, device number 9 [ 123.544809][ T38] audit: type=1800 audit(2000000012.940:9): pid=6077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.93" name="/" dev="sockfs" ino=8891 res=0 errno=0 [ 123.647909][ T32] usb 2-1: USB disconnect, device number 7 [ 123.815361][ T6113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.97'. [ 124.388463][ T5003] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 124.538843][ T5003] usb 1-1: Using ep0 maxpacket: 8 [ 124.554126][ T5003] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.556846][ T5003] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 124.556872][ T5003] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.556892][ T5003] usb 1-1: Product: syz [ 124.556906][ T5003] usb 1-1: Manufacturer: syz [ 124.556920][ T5003] usb 1-1: SerialNumber: syz [ 124.655648][ T5003] usb 1-1: config 0 descriptor?? [ 124.687862][ T5003] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 124.687949][ T5003] usb 1-1: selecting invalid altsetting 1 [ 124.873238][ T5003] gspca_stk014: reg_r err -71 [ 124.873323][ T5003] stk014 1-1:0.0: probe with driver stk014 failed with error -71 [ 125.006300][ T5003] usb 1-1: USB disconnect, device number 6 [ 125.025312][ T6142] netlink: 'syz.2.108': attribute type 10 has an invalid length. [ 125.131480][ T6142] ipvlan0: entered allmulticast mode [ 125.131504][ T6142] veth0_vlan: entered allmulticast mode [ 125.178344][ T6142] team0: Device ipvlan0 failed to register rx_handler [ 125.500716][ T5706] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 125.527470][ T6156] netlink: 324 bytes leftover after parsing attributes in process `syz.3.113'. [ 125.646162][ T6160] netlink: 830 bytes leftover after parsing attributes in process `syz.3.115'. [ 125.659737][ T5706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.659768][ T5706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.659792][ T5706] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 125.659837][ T5706] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 125.659862][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.665971][ T5706] usb 2-1: config 0 descriptor?? [ 125.964995][ T6167] ======================================================= [ 125.964995][ T6167] WARNING: The mand mount option has been deprecated and [ 125.964995][ T6167] and is ignored by this kernel. Remove the mand [ 125.964995][ T6167] option from the mount to silence this warning. [ 125.964995][ T6167] ======================================================= [ 125.997463][ T6167] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 126.203039][ T5706] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 126.368297][ T6152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.369005][ T6152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.797949][ T38] audit: type=1800 audit(2000000016.190:10): pid=6152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.111" name="/" dev="sockfs" ino=9581 res=0 errno=0 [ 126.974781][ T32] usb 2-1: USB disconnect, device number 8 [ 127.127413][ T6194] binder: 6193:6194 ioctl c0306201 2000000001c0 returned -14 [ 127.300905][ T6202] netlink: 'syz.2.132': attribute type 10 has an invalid length. [ 127.838492][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 127.994179][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 127.994212][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 128.019412][ T10] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 128.019443][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.019465][ T10] usb 2-1: Product: syz [ 128.019480][ T10] usb 2-1: Manufacturer: syz [ 128.019495][ T10] usb 2-1: SerialNumber: syz [ 128.027865][ T10] usb 2-1: config 0 descriptor?? [ 128.066401][ T6213] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 128.066735][ T6213] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 128.144379][ T6230] netlink: 112 bytes leftover after parsing attributes in process `syz.0.140'. [ 128.269235][ T6213] syz.1.136 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 128.270719][ T6213] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 128.270866][ T6213] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 128.475473][ T10] Error reading MAC address [ 128.515543][ T10] usb 2-1: USB disconnect, device number 9 [ 128.740832][ T5003] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 128.783141][ T6245] tmpfs: Bad value for 'mpol' [ 128.888123][ T5003] usb 1-1: Using ep0 maxpacket: 8 [ 128.903002][ T5003] usb 1-1: unable to get BOS descriptor or descriptor too short [ 128.904176][ T5003] usb 1-1: config 5 has an invalid interface number: 244 but max is 0 [ 128.904199][ T5003] usb 1-1: config 5 has no interface number 0 [ 128.904254][ T5003] usb 1-1: config 5 interface 244 has no altsetting 0 [ 128.906508][ T5003] usb 1-1: New USB device found, idVendor=0c45, idProduct=600d, bcdDevice=91.4d [ 128.906536][ T5003] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.906557][ T5003] usb 1-1: Product: syz [ 128.906567][ T5003] usb 1-1: Manufacturer: syz [ 128.906578][ T5003] usb 1-1: SerialNumber: syz [ 128.988251][ T5746] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 129.160945][ T5746] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.160982][ T5746] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.161337][ T5746] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 129.161367][ T5746] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 129.161382][ T5746] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.295476][ T5746] usb 3-1: config 0 descriptor?? [ 129.388639][ T5003] gspca_main: sonixb-2.14.0 probing 0c45:600d [ 129.390461][ T5003] sonixb 1-1:5.244: Error reading register 00: -71 [ 129.457284][ T5003] usb 1-1: USB disconnect, device number 7 [ 129.725293][ T6262] netlink: 'syz.1.153': attribute type 4 has an invalid length. [ 129.725315][ T6262] netlink: 156 bytes leftover after parsing attributes in process `syz.1.153'. [ 129.749136][ T6262] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 129.799555][ T5746] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 129.921971][ T6243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.922586][ T6243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.958195][ T5816] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 130.101084][ T38] audit: type=1800 audit(2000000019.500:11): pid=6243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.145" name="/" dev="sockfs" ino=9813 res=0 errno=0 [ 130.108368][ T5816] usb 4-1: Using ep0 maxpacket: 8 [ 130.141764][ T5816] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 130.141790][ T5816] usb 4-1: config 0 has no interface number 0 [ 130.142043][ T5816] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 130.142069][ T5816] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 130.142095][ T5816] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 130.142121][ T5816] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 130.142217][ T5816] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 130.142241][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.252805][ T5816] usb 4-1: config 0 descriptor?? [ 130.280198][ T5003] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 130.286265][ T6276] netlink: 16 bytes leftover after parsing attributes in process `syz.1.157'. [ 130.345328][ T5816] ldusb 4-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 130.430925][ T5003] usb 1-1: config 0 interface 0 has no altsetting 0 [ 130.430963][ T5003] usb 1-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 130.430979][ T5003] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.437766][ T5003] usb 1-1: config 0 descriptor?? [ 130.506210][ T5706] usb 4-1: USB disconnect, device number 6 [ 130.519953][ T5746] usb 3-1: USB disconnect, device number 10 [ 130.666189][ T5706] ldusb 4-1:0.55: LD USB Device #1 now disconnected [ 130.893418][ T5003] apple 0003:05AC:027D.000B: unknown main item tag 0x0 [ 130.893458][ T5003] apple 0003:05AC:027D.000B: unknown main item tag 0x0 [ 130.893485][ T5003] apple 0003:05AC:027D.000B: unknown main item tag 0x0 [ 130.893511][ T5003] apple 0003:05AC:027D.000B: unknown main item tag 0x0 [ 130.893538][ T5003] apple 0003:05AC:027D.000B: unknown main item tag 0x0 [ 130.893564][ T5003] apple 0003:05AC:027D.000B: unknown main item tag 0x0 [ 130.893589][ T5003] apple 0003:05AC:027D.000B: unknown main item tag 0x0 [ 130.893616][ T5003] apple 0003:05AC:027D.000B: unknown main item tag 0x0 [ 130.964878][ T5003] apple 0003:05AC:027D.000B: hidraw0: USB HID v0.04 Device [HID 05ac:027d] on usb-dummy_hcd.0-1/input0 [ 131.157925][ T5003] usb 1-1: USB disconnect, device number 8 [ 131.616593][ T6296] loop8: detected capacity change from 0 to 7 [ 131.634986][ T6296] Dev loop8: unable to read RDB block 7 [ 131.635030][ T6296] loop8: unable to read partition table [ 131.635238][ T6296] loop8: partition table beyond EOD, truncated [ 131.642992][ T6296] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 131.798208][ T823] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 131.929093][ T823] usb 4-1: device descriptor read/64, error -71 [ 132.183359][ T823] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 132.329006][ T823] usb 4-1: device descriptor read/64, error -71 [ 132.438584][ T823] usb usb4-port1: attempt power cycle [ 132.601054][ T5746] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 132.678215][ T5003] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 132.760694][ T5746] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.760727][ T5746] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.760742][ T5746] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 132.760770][ T5746] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 132.760786][ T5746] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.764715][ T5746] usb 2-1: config 0 descriptor?? [ 132.828178][ T823] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 132.846640][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.847302][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.847641][ T823] usb 4-1: device descriptor read/8, error -71 [ 132.882310][ T5003] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 132.887665][ T5003] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.887687][ T5003] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.887704][ T5003] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 132.902230][ T5816] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 132.943675][ T5003] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 132.943703][ T5003] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 132.943739][ T5003] usb 1-1: Manufacturer: syz [ 132.982048][ T5003] usb 1-1: config 0 descriptor?? [ 133.058135][ T5816] usb 3-1: Using ep0 maxpacket: 32 [ 133.060807][ T5816] usb 3-1: config index 0 descriptor too short (expected 11556, got 36) [ 133.060836][ T5816] usb 3-1: config 0 has an invalid descriptor of length 169, skipping remainder of the config [ 133.060849][ T5816] usb 3-1: config 0 has no interfaces? [ 133.065313][ T5816] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 133.065339][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 133.065360][ T5816] usb 3-1: Product: syz [ 133.065375][ T5816] usb 3-1: Manufacturer: syz [ 133.065389][ T5816] usb 3-1: SerialNumber: syz [ 133.116523][ T5816] usb 3-1: config 0 descriptor?? [ 133.118270][ T5611] Bluetooth: hci0: command tx timeout [ 133.140816][ T823] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 133.169112][ T823] usb 4-1: device descriptor read/8, error -71 [ 133.235434][ T5746] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 133.281121][ T823] usb usb4-port1: unable to enumerate USB device [ 133.377382][ T5816] usb 3-1: USB disconnect, device number 11 [ 133.403649][ T5003] usbhid 1-1:0.0: can't add hid device: -32 [ 133.403757][ T5003] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 133.423374][ T6308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.454508][ T6308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.562047][ T38] audit: type=1800 audit(2000000022.960:12): pid=6308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.169" name="/" dev="sockfs" ino=10306 res=0 errno=0 [ 134.126339][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.176'. [ 134.386644][ T6346] netlink: 28 bytes leftover after parsing attributes in process `syz.2.180'. [ 134.790921][ T6358] loop2: detected capacity change from 0 to 7 [ 134.793841][ T6358] Dev loop2: unable to read RDB block 7 [ 134.793878][ T6358] loop2: unable to read partition table [ 134.794046][ T6358] loop2: partition table beyond EOD, truncated [ 134.795858][ T6358] loop_reread_partitions: partition scan of loop2 (被x V) failed (rc=-5) [ 134.948514][ T5816] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 135.100139][ T5816] usb 4-1: too many configurations: 217, using maximum allowed: 8 [ 135.121308][ T5816] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 135.121336][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.121355][ T5816] usb 4-1: Product: syz [ 135.121373][ T5816] usb 4-1: Manufacturer: syz [ 135.121383][ T5816] usb 4-1: SerialNumber: syz [ 135.162823][ T5816] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 135.258527][ T5706] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 135.286035][ T10] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 135.377448][ T5816] usb 2-1: USB disconnect, device number 10 [ 135.408194][ T5706] usb 3-1: Using ep0 maxpacket: 16 [ 135.410400][ T5706] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.410417][ T5706] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 135.461171][ T5706] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 135.461303][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=16 [ 135.461327][ T5706] usb 3-1: Product: syz [ 135.461343][ T5706] usb 3-1: Manufacturer: syz [ 135.461358][ T5706] usb 3-1: SerialNumber: syz [ 135.615005][ T9] usb 1-1: USB disconnect, device number 9 [ 135.727827][ T5706] usb 3-1: 0:2 : does not exist [ 135.784428][ T5746] usb 4-1: USB disconnect, device number 11 [ 135.851016][ T5706] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 136.146889][ T5706] usb 3-1: USB disconnect, device number 12 [ 136.337030][ T5686] udevd[5686]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.403518][ T10] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 136.479754][ T10] ath9k_htc: Failed to initialize the device [ 136.585180][ T5746] usb 4-1: ath9k_htc: USB layer deinitialized [ 136.633939][ T6380] trusted_key: encrypted_key: insufficient parameters specified [ 136.953214][ T6389] netlink: 20 bytes leftover after parsing attributes in process `syz.1.198'. [ 136.956885][ T6389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.198'. [ 136.956911][ T6389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.198'. [ 137.009431][ T5706] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 137.108179][ T5746] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 137.130320][ T5816] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 137.175308][ T5706] usb 3-1: config 2 has an invalid interface number: 162 but max is 0 [ 137.175338][ T5706] usb 3-1: config 2 has no interface number 0 [ 137.175380][ T5706] usb 3-1: config 2 interface 162 has no altsetting 0 [ 137.186802][ T5706] usb 3-1: New USB device found, idVendor=2639, idProduct=0001, bcdDevice=8d.cb [ 137.186915][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.186972][ T5706] usb 3-1: Product: syz [ 137.187010][ T5706] usb 3-1: Manufacturer: syz [ 137.187048][ T5706] usb 3-1: SerialNumber: syz [ 137.310654][ T5746] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 137.310688][ T5746] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.316281][ T5746] usb 4-1: config 0 descriptor?? [ 137.360954][ T5816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.361029][ T5816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.361059][ T5816] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 137.361109][ T5816] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 137.361131][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.476533][ T5816] usb 1-1: config 0 descriptor?? [ 138.002826][ T5816] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 138.028203][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 138.115477][ T6387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.116465][ T6387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.181514][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.181545][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.184078][ T9] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 138.184103][ T9] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 138.184121][ T9] usb 2-1: Manufacturer: syz [ 138.211754][ T5746] usb 4-1: Cannot set autoneg [ 138.212009][ T5746] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 138.263546][ T5746] usb 4-1: USB disconnect, device number 12 [ 138.313485][ T9] usb 2-1: config 0 descriptor?? [ 138.472853][ T38] audit: type=1800 audit(2000000027.870:13): pid=6387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.196" name="/" dev="sockfs" ino=10407 res=0 errno=0 [ 138.573784][ C0] raw-gadget.3 gadget.1: ignoring, device is not running [ 138.579522][ T9] uclogic 0003:256C:006D.000E: failed retrieving Huion firmware version: -71 [ 138.579955][ T9] uclogic 0003:256C:006D.000E: failed probing parameters: -71 [ 138.580604][ T9] uclogic 0003:256C:006D.000E: probe with driver uclogic failed with error -71 [ 138.672607][ T9] usb 2-1: USB disconnect, device number 11 [ 138.865013][ T6403] loop5: detected capacity change from 0 to 71 [ 138.898819][ T6403] loop5: unable to read partition table [ 138.899044][ T6403] loop_reread_partitions: partition scan of loop5 (被x) failed (rc=-5) [ 139.182772][ T6410] loop8: detected capacity change from 0 to 7 [ 139.186951][ T6410] Dev loop8: unable to read RDB block 7 [ 139.186991][ T6410] loop8: unable to read partition table [ 139.187296][ T6410] loop8: partition table beyond EOD, truncated [ 139.187881][ T6410] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 139.478723][ T6413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.202'. [ 139.707165][ T5706] usb 3-1: USB disconnect, device number 13 [ 139.928435][ T5706] usb 1-1: USB disconnect, device number 10 [ 140.115984][ T6430] netlink: 128 bytes leftover after parsing attributes in process `syz.1.209'. [ 140.116460][ T6430] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 140.158460][ T823] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 140.226758][ T5611] Bluetooth: hci2: connection err: -111 [ 140.361289][ T823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.361324][ T823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.361346][ T823] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 140.361388][ T823] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.361410][ T823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.398179][ T823] usb 4-1: config 0 descriptor?? [ 140.586661][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.208'. [ 140.805521][ T6448] FAULT_INJECTION: forcing a failure. [ 140.805521][ T6448] name failslab, interval 1, probability 0, space 0, times 1 [ 140.805564][ T6448] CPU: 0 UID: 0 PID: 6448 Comm: syz.1.216 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 140.805604][ T6448] Tainted: [L]=SOFTLOCKUP [ 140.805612][ T6448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 140.805633][ T6448] Call Trace: [ 140.805644][ T6448] [ 140.805652][ T6448] dump_stack_lvl+0xe8/0x150 [ 140.805678][ T6448] should_fail_ex+0x46b/0x600 [ 140.805714][ T6448] should_failslab+0xa8/0x100 [ 140.805736][ T6448] __kmalloc_cache_noprof+0x84/0x690 [ 140.805775][ T6448] ? nf_tables_newflowtable+0x938/0x2590 [ 140.805828][ T6448] nf_tables_newflowtable+0x938/0x2590 [ 140.805873][ T6448] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 140.805927][ T6448] ? nfnl_pernet+0x23/0x240 [ 140.805970][ T6448] ? __nla_parse+0x40/0x60 [ 140.805994][ T6448] nfnetlink_rcv+0x1247/0x27b0 [ 140.806053][ T6448] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 140.806084][ T6448] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 140.806121][ T6448] ? ref_tracker_free+0x673/0x820 [ 140.806179][ T6448] ? __netlink_deliver_tap+0x866/0x8b0 [ 140.806226][ T6448] ? netlink_deliver_tap+0x2e/0x1b0 [ 140.806248][ T6448] ? netlink_deliver_tap+0x2e/0x1b0 [ 140.806318][ T6448] netlink_unicast+0x780/0x920 [ 140.806361][ T6448] netlink_sendmsg+0x813/0xb40 [ 140.806389][ T6448] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.806415][ T6448] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 140.806438][ T6448] ? aa_sock_msg_perm+0x122/0x200 [ 140.806482][ T6448] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.806503][ T6448] sock_sendmsg_nosec+0x13a/0x180 [ 140.806534][ T6448] ____sys_sendmsg+0x55c/0x870 [ 140.806572][ T6448] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.806611][ T6448] ? import_iovec+0x73/0xa0 [ 140.806646][ T6448] ___sys_sendmsg+0x2a5/0x360 [ 140.806680][ T6448] ? __lock_acquire+0x6b5/0x2d10 [ 140.806711][ T6448] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.806779][ T6448] ? __fget_files+0x2a/0x420 [ 140.806797][ T6448] ? __fget_files+0x3a6/0x420 [ 140.806844][ T6448] __x64_sys_sendmsg+0x1c3/0x2a0 [ 140.806883][ T6448] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 140.806925][ T6448] ? __pfx_ksys_write+0x10/0x10 [ 140.806960][ T6448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.806978][ T6448] do_syscall_64+0x174/0x580 [ 140.807024][ T6448] ? trace_irq_disable+0x3b/0x140 [ 140.807049][ T6448] ? clear_bhb_loop+0x40/0x90 [ 140.807075][ T6448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.807096][ T6448] RIP: 0033:0x7f976778ce59 [ 140.807120][ T6448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.807132][ T6448] RSP: 002b:00007f97659e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.807148][ T6448] RAX: ffffffffffffffda RBX: 00007f9767a05fa0 RCX: 00007f976778ce59 [ 140.807176][ T6448] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 140.807196][ T6448] RBP: 00007f97659e6090 R08: 0000000000000000 R09: 0000000000000000 [ 140.807210][ T6448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 140.807223][ T6448] R13: 00007f9767a06038 R14: 00007f9767a05fa0 R15: 00007ffd5f411788 [ 140.807255][ T6448] [ 141.039111][ T6425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.039971][ T6425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.162502][ T823] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 141.295786][ T6425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.296388][ T6425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.445820][ T38] audit: type=1800 audit(2000000030.840:14): pid=6425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.207" name="/" dev="sockfs" ino=10177 res=0 errno=0 [ 141.877132][ T5746] usb 4-1: USB disconnect, device number 13 [ 142.018124][ T5706] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 142.172541][ T5706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.172582][ T5706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.172605][ T5706] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 142.172646][ T5706] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 142.172669][ T5706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.217800][ T5706] usb 1-1: config 0 descriptor?? [ 142.272694][ T6460] nbd1: detected capacity change from 0 to 39582418599936 [ 142.330215][ T4924] block nbd1: Wrong magic (0x25609513) [ 142.396772][ T60] block nbd1: Receive control failed (result -32) [ 142.397670][ T5611] block nbd1: Receive control failed (result -32) [ 142.830502][ T5706] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 142.929356][ T6485] tipc: Started in network mode [ 142.929386][ T6485] tipc: Node identity ac1414aa, cluster identity 4711 [ 142.947205][ T6485] tipc: Enabled bearer , priority 10 [ 142.962349][ T6480] process 'syz.2.224' launched './file0' with NULL argv: empty string added [ 142.981099][ T6462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.004966][ T6462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.048158][ T5746] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 143.212334][ T5746] usb 4-1: Using ep0 maxpacket: 32 [ 143.214515][ T5746] usb 4-1: config index 0 descriptor too short (expected 1042, got 18) [ 143.214540][ T5746] usb 4-1: config 2 has too many interfaces: 249, using maximum allowed: 32 [ 143.214561][ T5746] usb 4-1: config 2 has 1 interface, different from the descriptor's value: 249 [ 143.214610][ T5746] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 143.214632][ T5746] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.272782][ T38] audit: type=1800 audit(2000000032.670:15): pid=6462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.218" name="/" dev="sockfs" ino=11311 res=0 errno=0 [ 143.330270][ T5746] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 143.768366][ T823] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 143.937083][ T5746] gspca_nw80x: reg_w err -71 [ 143.937148][ T5746] nw80x 4-1:2.0: probe with driver nw80x failed with error -71 [ 143.952106][ T823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.952138][ T823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.952162][ T823] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 143.952205][ T823] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 143.952228][ T823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.957765][ T5746] usb 4-1: USB disconnect, device number 14 [ 144.044675][ T823] usb 2-1: config 0 descriptor?? [ 144.048164][ T5816] tipc: Node number set to 2886997162 [ 144.488740][ T823] plantronics 0003:047F:FFFF.0011: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 144.682372][ T6503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.683050][ T6503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.773962][ T5816] usb 1-1: USB disconnect, device number 11 [ 144.787635][ T6503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.811024][ T6503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.882936][ T6517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'. [ 144.994954][ T38] audit: type=1800 audit(2000000034.390:16): pid=6503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.231" name="/" dev="sockfs" ino=10755 res=0 errno=0 [ 145.569820][ T5816] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 145.593097][ T6542] capability: warning: `syz.2.243' uses 32-bit capabilities (legacy support in use) [ 145.718920][ T5816] usb 4-1: Using ep0 maxpacket: 16 [ 145.723763][ T5816] usb 4-1: config 247 has an invalid interface number: 88 but max is 0 [ 145.723790][ T5816] usb 4-1: config 247 has an invalid descriptor of length 194, skipping remainder of the config [ 145.723896][ T5816] usb 4-1: config 247 has no interface number 0 [ 145.723932][ T5816] usb 4-1: config 247 interface 88 has no altsetting 0 [ 145.726361][ T5816] usb 4-1: New USB device found, idVendor=1bc7, idProduct=0023, bcdDevice=e4.25 [ 145.726416][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.726430][ T5816] usb 4-1: Product: syz [ 145.726439][ T5816] usb 4-1: Manufacturer: syz [ 145.726449][ T5816] usb 4-1: SerialNumber: syz [ 145.858188][ T823] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 145.988177][ T823] usb 3-1: device descriptor read/64, error -71 [ 146.026250][ T5816] cdc_acm 4-1:247.88: Zero length descriptor references [ 146.026291][ T5816] cdc_acm 4-1:247.88: probe with driver cdc_acm failed with error -22 [ 146.053001][ T5816] usb 4-1: USB disconnect, device number 15 [ 146.258174][ T823] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 146.388145][ T823] usb 3-1: device descriptor read/64, error -71 [ 146.418102][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 146.498380][ T823] usb usb3-port1: attempt power cycle [ 146.550908][ T5746] usb 2-1: USB disconnect, device number 12 [ 146.577049][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.577081][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.577104][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 146.577153][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 146.577176][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.647642][ T6556] netlink: 356 bytes leftover after parsing attributes in process `syz.3.248'. [ 146.712764][ T9] usb 1-1: config 0 descriptor?? [ 146.878842][ T823] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 146.900978][ T823] usb 3-1: device descriptor read/8, error -71 [ 146.920259][ T5816] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 146.922715][ T72] block nbd0: Connection timed out, retrying (0/3 alive) [ 146.924214][ T72] block nbd0: Dead connection, failed to find a fallback [ 146.924244][ T72] block nbd0: shutting down sockets [ 146.930375][ T72] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.931196][ T72] Buffer I/O error on dev nbd0, logical block 0, async page read [ 146.954415][ T5887] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.954461][ T5887] Buffer I/O error on dev nbd0, logical block 0, async page read [ 146.955147][ T5887] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.955196][ T5887] Buffer I/O error on dev nbd0, logical block 0, async page read [ 146.955481][ T5887] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.955530][ T5887] Buffer I/O error on dev nbd0, logical block 0, async page read [ 146.963714][ T5887] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.963743][ T5887] Buffer I/O error on dev nbd0, logical block 0, async page read [ 146.964057][ T5887] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.964089][ T5887] Buffer I/O error on dev nbd0, logical block 0, async page read [ 146.964481][ T5887] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.964505][ T5887] Buffer I/O error on dev nbd0, logical block 0, async page read [ 146.964747][ T5887] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.964795][ T5887] Buffer I/O error on dev nbd0, logical block 0, async page read [ 146.964932][ T5887] ldm_validate_partition_table(): Disk read failed. [ 146.965033][ T5887] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 147.017831][ T5887] Buffer I/O error on dev nbd0, logical block 0, async page read [ 147.020300][ T5887] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 147.020367][ T5887] Buffer I/O error on dev nbd0, logical block 0, async page read [ 147.032201][ T5887] Dev nbd0: unable to read RDB block 0 [ 147.114599][ T5887] nbd0: unable to read partition table [ 147.171471][ T6562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.251'. [ 147.229627][ T823] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 147.232750][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.232777][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.232808][ T5816] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 147.232828][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.255287][ T823] usb 3-1: device descriptor read/8, error -71 [ 147.267825][ T5887] ldm_validate_partition_table(): Disk read failed. [ 147.303840][ T5887] Dev nbd0: unable to read RDB block 0 [ 147.305227][ T5887] nbd0: unable to read partition table [ 147.327688][ T5816] usb 4-1: config 0 descriptor?? [ 147.352425][ T9] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 147.392856][ T823] usb usb3-port1: unable to enumerate USB device [ 147.418946][ T6554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.419551][ T6554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.599596][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.252'. [ 147.750631][ T5816] hid-steam 0003:28DE:1142.0013: unknown main item tag 0x1 [ 147.750669][ T5816] hid-steam 0003:28DE:1142.0013: unknown main item tag 0x1 [ 147.750697][ T5816] hid-steam 0003:28DE:1142.0013: item fetching failed at offset 4/5 [ 147.751405][ T5816] hid-steam 0003:28DE:1142.0013: steam_probe:parse of hid interface failed [ 147.751570][ T5816] hid-steam 0003:28DE:1142.0013: probe with driver hid-steam failed with error -22 [ 147.806034][ T38] audit: type=1800 audit(2000000037.200:17): pid=6554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.247" name="/" dev="sockfs" ino=10857 res=0 errno=0 [ 148.014163][ T6579] netlink: 28 bytes leftover after parsing attributes in process `syz.1.255'. [ 148.050825][ T5816] usb 1-1: USB disconnect, device number 12 [ 148.074087][ T823] usb 4-1: USB disconnect, device number 16 [ 148.658170][ T5816] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 148.809487][ T5816] usb 2-1: Using ep0 maxpacket: 8 [ 148.817115][ T5816] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 148.817141][ T5816] usb 2-1: config 0 has no interface number 0 [ 148.817184][ T5816] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 148.817207][ T5816] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 148.817233][ T5816] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 148.817260][ T5816] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 148.817303][ T5816] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 148.817327][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.913742][ T5816] usb 2-1: config 0 descriptor?? [ 149.015144][ T5816] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 149.053848][ T823] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 149.159458][ T6607] netlink: 324 bytes leftover after parsing attributes in process `syz.0.264'. [ 149.968555][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 150.144740][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.144776][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.144801][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 150.144845][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.144881][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.222711][ T10] usb 4-1: config 0 descriptor?? [ 150.518245][ T5746] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 150.648552][ T5746] usb 3-1: device descriptor read/64, error -71 [ 150.671035][ T10] plantronics 0003:047F:FFFF.0014: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 150.838427][ T5003] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 150.857228][ T6616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.869439][ T6616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.897502][ T5746] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 151.020547][ T5003] usb 1-1: Using ep0 maxpacket: 8 [ 151.024244][ T5003] usb 1-1: unable to get BOS descriptor or descriptor too short [ 151.038395][ T5746] usb 3-1: device descriptor read/64, error -71 [ 151.063559][ T5003] usb 1-1: config 194 has an invalid interface number: 128 but max is 0 [ 151.063577][ T5003] usb 1-1: config 194 has no interface number 0 [ 151.063608][ T5003] usb 1-1: config 194 interface 128 altsetting 9 endpoint 0x9 has an invalid bInterval 129, changing to 7 [ 151.063626][ T5003] usb 1-1: config 194 interface 128 has no altsetting 0 [ 151.103367][ T38] audit: type=1800 audit(2000000040.500:18): pid=6637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.268" name="/" dev="sockfs" ino=11592 res=0 errno=0 [ 151.148097][ T5003] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=16.d1 [ 151.148259][ T5003] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.148275][ T5003] usb 1-1: Product: syz [ 151.148285][ T5003] usb 1-1: Manufacturer: syz [ 151.148295][ T5003] usb 1-1: SerialNumber: syz [ 151.181457][ T5746] usb usb3-port1: attempt power cycle [ 151.301174][ T9] usb 2-1: USB disconnect, device number 13 [ 151.333614][ T9] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 151.461708][ T5003] streamzap 1-1:194.128: streamzap_probe: endpoint doesn't match input device 0209 [ 151.486811][ T5003] usb 1-1: USB disconnect, device number 14 [ 151.591996][ T5746] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 151.610203][ T5746] usb 3-1: device descriptor read/8, error -71 [ 151.848103][ T5746] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 151.869439][ T5746] usb 3-1: device descriptor read/8, error -71 [ 151.988427][ T5746] usb usb3-port1: unable to enumerate USB device [ 152.213962][ T6645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.787732][ T5003] usb 4-1: USB disconnect, device number 17 [ 152.835948][ T6650] binder: 6649:6650 ioctl c0306201 2000000001c0 returned -14 [ 152.918373][ T6654] netlink: 'syz.3.282': attribute type 10 has an invalid length. [ 153.132752][ T6662] netlink: 112 bytes leftover after parsing attributes in process `syz.1.292'. [ 153.442212][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 153.588206][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 153.591018][ T9] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 153.591043][ T9] usb 3-1: config 0 has no interface number 0 [ 153.591088][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 153.591118][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 153.591136][ T9] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 153.591154][ T9] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 153.591184][ T9] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 153.591200][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.595074][ T9] usb 3-1: config 0 descriptor?? [ 153.638713][ T823] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 153.718832][ T5816] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 153.729085][ T9] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 153.828320][ T823] usb 2-1: device descriptor read/64, error -71 [ 153.870907][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.870940][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.870970][ T5816] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 153.871011][ T5816] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 153.871034][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.903231][ T5816] usb 4-1: config 0 descriptor?? [ 154.098323][ T823] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 154.281139][ T823] usb 2-1: device descriptor read/64, error -71 [ 154.389803][ T823] usb usb2-port1: attempt power cycle [ 154.410910][ T5816] plantronics 0003:047F:FFFF.0015: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 154.568208][ T6674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.570218][ T6674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.687196][ T38] audit: type=1800 audit(2000000044.080:19): pid=6674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.290" name="/" dev="sockfs" ino=11681 res=0 errno=0 [ 154.778296][ T5003] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 154.809023][ T823] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 154.838974][ T823] usb 2-1: device descriptor read/8, error -71 [ 154.938182][ T5003] usb 1-1: Using ep0 maxpacket: 8 [ 154.940387][ T5003] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 154.940423][ T5003] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.940442][ T5003] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 154.940540][ T5003] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 154.943060][ T5003] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 154.943080][ T5003] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.943105][ T5003] usb 1-1: Product: syz [ 154.943115][ T5003] usb 1-1: Manufacturer: syz [ 154.943199][ T5003] usb 1-1: SerialNumber: syz [ 155.042997][ T5003] usb 1-1: config 0 descriptor?? [ 155.168486][ T823] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 155.189751][ T823] usb 2-1: device descriptor read/8, error -71 [ 155.246762][ T5003] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 155.247332][ T5003] powermate 1-1:0.0: probe with driver powermate failed with error -5 [ 155.295996][ T5003] usb 1-1: USB disconnect, device number 15 [ 155.312323][ T823] usb usb2-port1: unable to enumerate USB device [ 155.862320][ T5746] usb 3-1: USB disconnect, device number 22 [ 155.886492][ T5746] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 155.985581][ C0] Unknown status report in ack skb [ 156.365083][ T6690] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 156.365112][ T6690] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 156.534837][ T5790] usb 4-1: USB disconnect, device number 18 [ 156.541873][ T6690] vhci_hcd vhci_hcd.0: Device attached [ 156.621898][ T6692] vhci_hcd: connection closed [ 156.637767][ T5975] vhci_hcd vhci_hcd.0: stop threads [ 156.638598][ T5975] vhci_hcd vhci_hcd.0: release socket [ 156.665429][ T5975] vhci_hcd vhci_hcd.0: disconnect device [ 156.680958][ T5816] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 156.825219][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.298'. [ 157.077779][ T6711] netlink: 'syz.1.302': attribute type 4 has an invalid length. [ 157.077801][ T6711] netlink: 156 bytes leftover after parsing attributes in process `syz.1.302'. [ 157.077834][ T6711] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 157.360268][ T6722] netlink: 16 bytes leftover after parsing attributes in process `syz.0.308'. [ 157.528205][ T5746] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 157.635123][ T6735] loop8: detected capacity change from 0 to 7 [ 157.636511][ T6735] Dev loop8: unable to read RDB block 7 [ 157.636538][ T6735] loop8: unable to read partition table [ 157.636665][ T6735] loop8: partition table beyond EOD, truncated [ 157.636706][ T6735] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 157.704404][ T5746] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.704437][ T5746] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.704460][ T5746] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 157.704501][ T5746] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 157.704524][ T5746] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.758727][ T5003] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 157.774429][ T5746] usb 3-1: config 0 descriptor?? [ 157.938613][ T5003] usb 2-1: Using ep0 maxpacket: 8 [ 157.941616][ T5003] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64 [ 157.941648][ T5003] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 157.941719][ T5003] usb 2-1: config 0 interface 0 has no altsetting 0 [ 157.945332][ T5003] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 157.945372][ T5003] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.945465][ T5003] usb 2-1: Product: syz [ 157.945481][ T5003] usb 2-1: Manufacturer: syz [ 157.945496][ T5003] usb 2-1: SerialNumber: syz [ 158.020293][ T5003] usb 2-1: config 0 descriptor?? [ 158.036082][ T5003] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 158.252843][ T5003] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 158.253451][ T5003] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 158.277908][ T5003] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 158.334027][ T6741] kexec: Could not allocate control_code_buffer [ 158.357644][ T5746] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 158.413890][ T5003] usb 2-1: USB disconnect, device number 18 [ 158.446094][ T6717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.462717][ T6717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.733418][ T38] audit: type=1800 audit(2000000048.130:20): pid=6717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.307" name="/" dev="sockfs" ino=11866 res=0 errno=0 [ 158.938177][ T5816] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 159.061256][ T5790] usb 3-1: USB disconnect, device number 23 [ 159.091078][ T5816] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.091130][ T5816] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 159.091157][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.104164][ T5816] usb 2-1: config 0 descriptor?? [ 159.149007][ T5816] pwc: Askey VC010 type 2 USB webcam detected. [ 159.149726][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 159.198198][ T5003] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 159.279566][ T9] usb 1-1: device descriptor read/64, error -71 [ 159.350066][ T5003] usb 4-1: Using ep0 maxpacket: 8 [ 159.367739][ T5003] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 159.367764][ T5003] usb 4-1: config 0 has no interface number 0 [ 159.367807][ T5003] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 159.367831][ T5003] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 159.367856][ T5003] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 159.367881][ T5003] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 159.367923][ T5003] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 159.367945][ T5003] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.456864][ T5003] usb 4-1: config 0 descriptor?? [ 159.470860][ T5003] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 159.579334][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 159.605583][ T5816] pwc: send_video_command error -71 [ 159.605599][ T5816] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 159.605712][ T5816] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 159.639712][ T5816] usb 2-1: USB disconnect, device number 19 [ 159.708205][ T9] usb 1-1: device descriptor read/64, error -71 [ 159.818558][ T9] usb usb1-port1: attempt power cycle [ 160.158211][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 160.179016][ T9] usb 1-1: device descriptor read/8, error -71 [ 160.418138][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 160.442099][ T9] usb 1-1: device descriptor read/8, error -71 [ 160.548757][ T9] usb usb1-port1: unable to enumerate USB device [ 161.307094][ T6789] sctp: [Deprecated]: syz.1.327 (pid 6789) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.307094][ T6789] Use struct sctp_sack_info instead [ 161.307432][ T6789] warning: `syz.1.327' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 161.428165][ T5790] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 161.548153][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 161.578123][ T5790] usb 3-1: Using ep0 maxpacket: 32 [ 161.580500][ T5790] usb 3-1: config index 0 descriptor too short (expected 11556, got 36) [ 161.580525][ T5790] usb 3-1: config 0 has an invalid descriptor of length 169, skipping remainder of the config [ 161.580544][ T5790] usb 3-1: config 0 has no interfaces? [ 161.583647][ T5790] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 161.583673][ T5790] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 161.583693][ T5790] usb 3-1: Product: syz [ 161.583708][ T5790] usb 3-1: Manufacturer: syz [ 161.583721][ T5790] usb 3-1: SerialNumber: syz [ 161.593688][ T5790] usb 3-1: config 0 descriptor?? [ 161.678260][ T9] usb 2-1: device descriptor read/64, error -71 [ 161.698316][ T5816] usb 4-1: USB disconnect, device number 19 [ 161.716060][ T5816] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 161.874359][ T5790] usb 3-1: USB disconnect, device number 24 [ 161.923033][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 162.058139][ T9] usb 2-1: device descriptor read/64, error -71 [ 162.168520][ T9] usb usb2-port1: attempt power cycle [ 162.303147][ T6801] netlink: 28 bytes leftover after parsing attributes in process `syz.0.333'. [ 162.502173][ T6812] loop2: detected capacity change from 0 to 7 [ 162.520597][ T6812] Dev loop2: unable to read RDB block 7 [ 162.520652][ T6812] loop2: unable to read partition table [ 162.520854][ T6812] loop2: partition table beyond EOD, truncated [ 162.520888][ T6812] loop_reread_partitions: partition scan of loop2 (被x ھ) failed (rc=-5) [ 162.528369][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 162.568908][ T9] usb 2-1: device descriptor read/8, error -71 [ 162.808181][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 162.841196][ T9] usb 2-1: device descriptor read/8, error -71 [ 162.948487][ T9] usb usb2-port1: unable to enumerate USB device [ 163.458173][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 163.628172][ T5003] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 163.647915][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.647951][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.647967][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 163.648724][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 163.648796][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.686543][ T9] usb 3-1: config 0 descriptor?? [ 163.798075][ T5003] usb 4-1: Using ep0 maxpacket: 16 [ 163.800631][ T5003] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 163.803877][ T5003] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 163.803906][ T5003] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.803928][ T5003] usb 4-1: Product: syz [ 163.803944][ T5003] usb 4-1: Manufacturer: syz [ 163.803958][ T5003] usb 4-1: SerialNumber: syz [ 163.860246][ T5003] r8152-cfgselector 4-1: Unknown version 0x0000 [ 163.860271][ T5003] r8152-cfgselector 4-1: config 0 descriptor?? [ 164.068959][ T5003] r8152-cfgselector 4-1: Unknown version 0x7000 [ 164.069702][ T5003] r8152-cfgselector 4-1: No union descriptors [ 164.145651][ T9] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 164.345985][ T6842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.348444][ T6842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.380982][ T6849] loop5: detected capacity change from 0 to 127 [ 164.395364][ T6849] loop5: unable to read partition table [ 164.395601][ T6849] loop_reread_partitions: partition scan of loop5 (被x) failed (rc=-5) [ 164.491999][ T6850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.492552][ T6850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.732360][ T38] audit: type=1800 audit(2000000054.130:21): pid=6850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.348" name="/" dev="sockfs" ino=13422 res=0 errno=0 [ 164.777907][ T6858] loop8: detected capacity change from 0 to 7 [ 164.782107][ T6858] Dev loop8: unable to read RDB block 7 [ 164.782142][ T6858] loop8: unable to read partition table [ 164.782301][ T6858] loop8: partition table beyond EOD, truncated [ 164.783828][ T6858] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 165.278840][ T9] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 165.398374][ C0] plantronics 0003:047F:FFFF.0017: usb_submit_urb(ctrl) failed: -1 [ 165.430663][ T9] usb 2-1: config 2 has an invalid interface number: 162 but max is 0 [ 165.430690][ T9] usb 2-1: config 2 has no interface number 0 [ 165.430722][ T9] usb 2-1: config 2 interface 162 has no altsetting 0 [ 165.433337][ T9] usb 2-1: New USB device found, idVendor=2639, idProduct=0001, bcdDevice=8d.cb [ 165.433365][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.433386][ T9] usb 2-1: Product: syz [ 165.433396][ T9] usb 2-1: Manufacturer: syz [ 165.433405][ T9] usb 2-1: SerialNumber: syz [ 165.715193][ T9] usb 2-1: USB disconnect, device number 24 [ 165.848145][ T5790] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 165.998267][ T5790] usb 1-1: Using ep0 maxpacket: 16 [ 166.000754][ T5790] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 166.000778][ T5790] usb 1-1: config 0 has no interface number 0 [ 166.003774][ T5790] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 166.003802][ T5790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.003823][ T5790] usb 1-1: Product: syz [ 166.003844][ T5790] usb 1-1: Manufacturer: syz [ 166.003855][ T5790] usb 1-1: SerialNumber: syz [ 166.070389][ T5790] usb 1-1: config 0 descriptor?? [ 166.087243][ T5790] hub 1-1:0.132: bad descriptor, ignoring hub [ 166.087280][ T5790] hub 1-1:0.132: probe with driver hub failed with error -5 [ 166.123939][ T5790] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input11 [ 166.399670][ T5003] usb 3-1: USB disconnect, device number 25 [ 166.512723][ T5790] r8152-cfgselector 4-1: USB disconnect, device number 20 [ 166.611187][ T32] usb 1-1: USB disconnect, device number 20 [ 166.878185][ T5003] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 166.948170][ T5790] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 166.999685][ T6879] FAULT_INJECTION: forcing a failure. [ 166.999685][ T6879] name failslab, interval 1, probability 0, space 0, times 0 [ 166.999724][ T6879] CPU: 1 UID: 0 PID: 6879 Comm: syz.1.363 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 166.999755][ T6879] Tainted: [L]=SOFTLOCKUP [ 166.999763][ T6879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 166.999776][ T6879] Call Trace: [ 166.999785][ T6879] [ 166.999795][ T6879] dump_stack_lvl+0xe8/0x150 [ 166.999825][ T6879] should_fail_ex+0x46b/0x600 [ 166.999864][ T6879] should_failslab+0xa8/0x100 [ 166.999895][ T6879] __kvmalloc_node_noprof+0x170/0x8e0 [ 166.999927][ T6879] ? __rhashtable_init_noprof+0x56d/0xae0 [ 166.999950][ T6879] ? __rhashtable_init_noprof+0x148/0xae0 [ 166.999978][ T6879] __rhashtable_init_noprof+0x56d/0xae0 [ 167.000008][ T6879] nf_flow_table_init+0x186/0x2a0 [ 167.000044][ T6879] nf_tables_newflowtable+0x15d3/0x2590 [ 167.000095][ T6879] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 167.000133][ T6879] ? nfnl_pernet+0x23/0x240 [ 167.000191][ T6879] ? __nla_parse+0x40/0x60 [ 167.000209][ T6879] nfnetlink_rcv+0x1247/0x27b0 [ 167.000252][ T6879] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 167.000282][ T6879] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 167.000298][ T6879] ? ref_tracker_free+0x673/0x820 [ 167.000344][ T6879] ? __netlink_deliver_tap+0x866/0x8b0 [ 167.000373][ T6879] ? netlink_deliver_tap+0x2e/0x1b0 [ 167.000395][ T6879] ? netlink_deliver_tap+0x2e/0x1b0 [ 167.000422][ T6879] netlink_unicast+0x780/0x920 [ 167.000449][ T6879] netlink_sendmsg+0x813/0xb40 [ 167.000469][ T6879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.000484][ T6879] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 167.000506][ T6879] ? aa_sock_msg_perm+0x122/0x200 [ 167.000522][ T6879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.000535][ T6879] sock_sendmsg_nosec+0x13a/0x180 [ 167.000554][ T6879] ____sys_sendmsg+0x55c/0x870 [ 167.000581][ T6879] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.000609][ T6879] ? import_iovec+0x73/0xa0 [ 167.000628][ T6879] ___sys_sendmsg+0x2a5/0x360 [ 167.000649][ T6879] ? __lock_acquire+0x6b5/0x2d10 [ 167.000670][ T6879] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.000715][ T6879] ? __fget_files+0x2a/0x420 [ 167.000732][ T6879] ? __fget_files+0x3a6/0x420 [ 167.000755][ T6879] __x64_sys_sendmsg+0x1c3/0x2a0 [ 167.000780][ T6879] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 167.000810][ T6879] ? __pfx_ksys_write+0x10/0x10 [ 167.000838][ T6879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.000853][ T6879] do_syscall_64+0x174/0x580 [ 167.000875][ T6879] ? trace_irq_disable+0x3b/0x140 [ 167.000891][ T6879] ? clear_bhb_loop+0x40/0x90 [ 167.000909][ T6879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.000923][ T6879] RIP: 0033:0x7f976778ce59 [ 167.000937][ T6879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.000948][ T6879] RSP: 002b:00007f97659e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.000963][ T6879] RAX: ffffffffffffffda RBX: 00007f9767a05fa0 RCX: 00007f976778ce59 [ 167.000974][ T6879] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 167.000983][ T6879] RBP: 00007f97659e6090 R08: 0000000000000000 R09: 0000000000000000 [ 167.000991][ T6879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 167.000999][ T6879] R13: 00007f9767a06038 R14: 00007f9767a05fa0 R15: 00007ffd5f411788 [ 167.001021][ T6879] [ 167.001410][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'. [ 167.172178][ T5003] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.172264][ T5003] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.172330][ T5003] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 167.172436][ T5003] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 167.172493][ T5003] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.208137][ T5790] usb 4-1: not running at top speed; connect to a high speed hub [ 167.231903][ T5790] usb 4-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 167.231937][ T5790] usb 4-1: config 1 interface 0 has no altsetting 0 [ 167.240147][ T5003] usb 3-1: config 0 descriptor?? [ 167.309067][ T5790] usb 4-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice= 0.40 [ 167.309097][ T5790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.309135][ T5790] usb 4-1: Product: syz [ 167.309151][ T5790] usb 4-1: Manufacturer: syz [ 167.309166][ T5790] usb 4-1: SerialNumber: syz [ 167.484797][ T6875] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 167.801487][ T5003] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 167.924253][ T6869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.926432][ T6869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.071202][ T32] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 168.222372][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.222403][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.222478][ T32] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 168.222520][ T32] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 168.222543][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.295180][ T5790] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input12 [ 168.324623][ T38] audit: type=1800 audit(2000000057.720:22): pid=6869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.359" name="/" dev="sockfs" ino=13553 res=0 errno=0 [ 168.384698][ T32] usb 1-1: config 0 descriptor?? [ 168.442637][ T5790] usb 4-1: USB disconnect, device number 21 [ 168.462754][ T4960] bcm5974 4-1:1.0: could not read from device [ 168.593942][ T5003] usb 3-1: USB disconnect, device number 26 [ 168.680760][ T5809] udevd[5809]: Error opening device "/dev/input/event4": No such file or directory [ 168.680910][ T5809] udevd[5809]: Unable to EVIOCGABS device "/dev/input/event4" [ 168.681235][ T5809] udevd[5809]: Unable to EVIOCGABS device "/dev/input/event4" [ 168.681364][ T5809] udevd[5809]: Unable to EVIOCGABS device "/dev/input/event4" [ 168.681430][ T5809] udevd[5809]: Unable to EVIOCGABS device "/dev/input/event4" [ 168.850897][ T32] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 169.041399][ T6886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.041961][ T6886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.107049][ T6886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.107652][ T6886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.177318][ T6897] netlink: 20 bytes leftover after parsing attributes in process `syz.3.368'. [ 169.396782][ T38] audit: type=1800 audit(2000000058.790:23): pid=6886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.366" name="/" dev="sockfs" ino=12476 res=0 errno=0 [ 169.858106][ T6903] nbd2: detected capacity change from 0 to 422212465065984 [ 169.903369][ T5611] block nbd2: Wrong magic (0x25609513) [ 169.970547][ T4924] block nbd2: Receive control failed (result -32) [ 169.984069][ T60] block nbd2: Receive control failed (result -32) [ 170.138614][ C1] plantronics 0003:047F:FFFF.0019: usb_submit_urb(ctrl) failed: -1 [ 170.648265][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 170.801274][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.801311][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.801326][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 170.801354][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 170.801369][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.805474][ T10] usb 2-1: config 0 descriptor?? [ 170.885726][ T823] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 170.942248][ T9] usb 1-1: USB disconnect, device number 21 [ 171.049619][ T823] usb 4-1: Using ep0 maxpacket: 32 [ 171.051988][ T823] usb 4-1: config 4 has an invalid interface number: 139 but max is 0 [ 171.052013][ T823] usb 4-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 171.052033][ T823] usb 4-1: config 4 has no interface number 0 [ 171.052078][ T823] usb 4-1: config 4 interface 139 altsetting 7 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 171.052105][ T823] usb 4-1: config 4 interface 139 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 171.052138][ T823] usb 4-1: config 4 interface 139 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 171.052170][ T823] usb 4-1: config 4 interface 139 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 171.052192][ T823] usb 4-1: config 4 interface 139 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 171.052219][ T823] usb 4-1: config 4 interface 139 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 171.052240][ T823] usb 4-1: config 4 interface 139 has no altsetting 0 [ 171.054857][ T823] usb 4-1: Dual-Role OTG device on HNP port [ 171.055169][ T823] usb 4-1: New USB device found, idVendor=110a, idProduct=1151, bcdDevice=3e.5c [ 171.055191][ T823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.055208][ T823] usb 4-1: Product: syz [ 171.055224][ T823] usb 4-1: Manufacturer: ј [ 171.055233][ T823] usb 4-1: SerialNumber: syz [ 171.328549][ T10] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 171.371101][ T6936] mmap: syz.3.382 (6936) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 171.394750][ T6936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.397084][ T6936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.515451][ T823] ti_usb_3410_5052 4-1:4.139: required endpoints missing [ 171.594894][ T823] usb 4-1: USB disconnect, device number 22 [ 171.727390][ T38] audit: type=1800 audit(2000000061.120:24): pid=6926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.378" name="/" dev="sockfs" ino=13771 res=0 errno=0 [ 171.839258][ T32] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 172.017922][ T32] usb 1-1: unable to get BOS descriptor or descriptor too short [ 172.020311][ T32] usb 1-1: not running at top speed; connect to a high speed hub [ 172.050341][ T32] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 172.050368][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.050390][ T32] usb 1-1: Product: syz [ 172.050405][ T32] usb 1-1: Manufacturer: syz [ 172.050419][ T32] usb 1-1: SerialNumber: syz [ 172.095361][ T10] usb 2-1: USB disconnect, device number 25 [ 172.113782][ T6954] netlink: 'syz.3.388': attribute type 2 has an invalid length. [ 172.362719][ T32] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 172.430407][ T32] usb 1-1: USB disconnect, device number 22 [ 172.508478][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 172.518981][ T58] block nbd1: Connection timed out, retrying (0/3 alive) [ 172.519079][ T58] block nbd1: Dead connection, failed to find a fallback [ 172.519120][ T58] block nbd1: shutting down sockets [ 172.519134][ T58] blk_print_req_error: 24 callbacks suppressed [ 172.519147][ T58] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 172.519173][ T58] buffer_io_error: 23 callbacks suppressed [ 172.519185][ T58] Buffer I/O error on dev nbd1, logical block 0, async page read [ 172.527012][ T5686] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 172.527037][ T5686] Buffer I/O error on dev nbd1, logical block 0, async page read [ 172.527186][ T5686] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 172.527209][ T5686] Buffer I/O error on dev nbd1, logical block 0, async page read [ 172.527358][ T5686] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 172.527379][ T5686] Buffer I/O error on dev nbd1, logical block 0, async page read [ 172.527508][ T5686] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 172.527528][ T5686] Buffer I/O error on dev nbd1, logical block 0, async page read [ 172.527658][ T5686] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 172.527679][ T5686] Buffer I/O error on dev nbd1, logical block 0, async page read [ 172.527815][ T5686] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 172.527836][ T5686] Buffer I/O error on dev nbd1, logical block 0, async page read [ 172.527975][ T5686] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 172.606691][ T5686] Buffer I/O error on dev nbd1, logical block 0, async page read [ 172.606794][ T5686] ldm_validate_partition_table(): Disk read failed. [ 172.606885][ T5686] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 172.606907][ T5686] Buffer I/O error on dev nbd1, logical block 0, async page read [ 172.732663][ T9] usb 3-1: device descriptor read/64, error -71 [ 172.732921][ T5686] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 172.732949][ T5686] Buffer I/O error on dev nbd1, logical block 0, async page read [ 172.733592][ T5686] Dev nbd1: unable to read RDB block 0 [ 172.735261][ T5686] nbd1: unable to read partition table [ 172.776586][ T5686] ldm_validate_partition_table(): Disk read failed. [ 172.777111][ T5686] Dev nbd1: unable to read RDB block 0 [ 172.777754][ T5686] nbd1: unable to read partition table [ 172.895860][ T6963] netlink: 'syz.1.390': attribute type 41 has an invalid length. [ 172.978170][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 173.011298][ T6969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.390'. [ 173.134186][ T6966] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.390'. [ 173.158127][ T9] usb 3-1: device descriptor read/64, error -71 [ 173.259738][ T32] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 173.269543][ T9] usb usb3-port1: attempt power cycle [ 173.344203][ T6976] netlink: 28 bytes leftover after parsing attributes in process `syz.1.394'. [ 173.422478][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.422514][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.422538][ T32] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 173.422581][ T32] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 173.422606][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.495968][ T32] usb 1-1: config 0 descriptor?? [ 173.608146][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 173.629596][ T9] usb 3-1: device descriptor read/8, error -71 [ 173.638204][ T1013] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 173.778149][ T1013] usb 4-1: device descriptor read/64, error -71 [ 173.868159][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 173.898863][ T9] usb 3-1: device descriptor read/8, error -71 [ 173.928408][ T32] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 174.009473][ T9] usb usb3-port1: unable to enumerate USB device [ 174.019726][ T5790] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 174.020770][ T1013] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 174.107745][ T6968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.111486][ T6968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.148578][ T1013] usb 4-1: device descriptor read/64, error -71 [ 174.174486][ T5790] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 174.174525][ T5790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.174543][ T5790] usb 2-1: Product: syz [ 174.174555][ T5790] usb 2-1: Manufacturer: syz [ 174.174566][ T5790] usb 2-1: SerialNumber: syz [ 174.213720][ T6968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.221194][ T6968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.224175][ T5790] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 174.261634][ T1013] usb usb4-port1: attempt power cycle [ 174.329078][ T9] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 174.530798][ C0] usb 2-1: ath: unknown panic pattern! [ 174.628127][ T1013] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 174.648790][ T1013] usb 4-1: device descriptor read/8, error -71 [ 174.734966][ T32] usb 2-1: USB disconnect, device number 26 [ 174.888367][ T1013] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 174.908884][ T1013] usb 4-1: device descriptor read/8, error -71 [ 175.021053][ T1013] usb usb4-port1: unable to enumerate USB device [ 175.221617][ C0] plantronics 0003:047F:FFFF.001B: usb_submit_urb(ctrl) failed: -1 [ 175.358934][ T9] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 175.428246][ T9] ath9k_htc: Failed to initialize the device [ 175.428791][ T32] usb 2-1: ath9k_htc: USB layer deinitialized [ 175.628209][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 175.728150][ T32] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 175.779992][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.780028][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.780052][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 175.780097][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 175.780120][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.848170][ T10] usb 3-1: config 0 descriptor?? [ 175.881281][ T32] usb 2-1: unable to get BOS descriptor or descriptor too short [ 175.882560][ T32] usb 2-1: not running at top speed; connect to a high speed hub [ 175.884038][ T32] usb 2-1: config 9 has an invalid interface number: 65 but max is 0 [ 175.884061][ T32] usb 2-1: config 9 has no interface number 0 [ 175.884093][ T32] usb 2-1: config 9 interface 65 has no altsetting 0 [ 175.887770][ T32] usb 2-1: New USB device found, idVendor=12d1, idProduct=ccef, bcdDevice=e5.56 [ 175.887796][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.887817][ T32] usb 2-1: Product: syz [ 175.887832][ T32] usb 2-1: Manufacturer: syz [ 175.887847][ T32] usb 2-1: SerialNumber: syz [ 176.019393][ T6992] netlink: 324 bytes leftover after parsing attributes in process `syz.0.401'. [ 176.066543][ T1013] usb 1-1: USB disconnect, device number 23 [ 176.216058][ T6985] binder: 6984:6985 ioctl c0306201 200000000640 returned -22 [ 176.296484][ T10] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 176.885836][ T32] cdc_mbim 2-1:9.65: More than one union descriptor, skipping ... [ 176.885877][ T32] cdc_mbim 2-1:9.65: CDC Union missing and no IAD found [ 176.885921][ T32] cdc_mbim 2-1:9.65: bind() failure [ 176.925579][ T7010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.405'. [ 176.963696][ T32] usb 2-1: USB disconnect, device number 27 [ 177.032531][ T7012] fuse: Bad value for 'fd' [ 177.104002][ T38] audit: type=1800 audit(2000000066.490:25): pid=6988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.399" name="/" dev="sockfs" ino=13847 res=0 errno=0 [ 177.242459][ T1013] usb 3-1: USB disconnect, device number 31 [ 177.700134][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 177.740612][ T7036] binder: 7035:7036 ioctl c0306201 2000000001c0 returned -14 [ 177.822428][ T7039] netlink: 'syz.3.415': attribute type 10 has an invalid length. [ 177.870035][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.870138][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.870164][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 177.870211][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 177.870244][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.928997][ T9] usb 1-1: config 0 descriptor?? [ 178.007402][ T7039] macvlan1: entered promiscuous mode [ 178.007423][ T7039] macvlan1: entered allmulticast mode [ 178.181472][ T7039] veth1_vlan: entered allmulticast mode [ 178.261925][ T7039] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 178.381888][ T9] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 178.532377][ T7054] netlink: 112 bytes leftover after parsing attributes in process `syz.1.418'. [ 178.561032][ T7024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.569981][ T7024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.665585][ T7024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.670178][ T7024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.258419][ T32] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 179.322551][ C1] Unknown status report in ack skb [ 179.399437][ T823] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 179.420472][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.420514][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.420538][ T32] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 179.420577][ T32] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 179.420599][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.426742][ T32] usb 2-1: config 0 descriptor?? [ 179.491903][ T38] audit: type=1326 audit(2000000068.890:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7078 comm="syz.2.428" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf48cace59 code=0x0 [ 179.582478][ T823] usb 4-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 179.582510][ T823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.653709][ T823] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 179.703044][ C0] plantronics 0003:047F:FFFF.001D: usb_submit_urb(ctrl) failed: -1 [ 179.898960][ T7072] sg_write: data in/out 373125/136 bytes for SCSI command 0x0-- guessing data in; [ 179.898960][ T7072] program syz.3.425 not setting count and/or reply_len properly [ 179.906635][ T32] plantronics 0003:047F:FFFF.001E: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 180.068173][ T1013] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 180.111690][ T823] gspca_sn9c20x: Write register 1001 failed -71 [ 180.111725][ T823] gspca_sn9c20x: Device initialization failed [ 180.111805][ T823] gspca_sn9c20x 4-1:252.0: probe with driver gspca_sn9c20x failed with error -71 [ 180.139202][ T823] usb 4-1: USB disconnect, device number 27 [ 180.198224][ T1013] usb 3-1: device descriptor read/64, error -71 [ 180.228990][ T38] audit: type=1800 audit(2000000069.620:27): pid=7069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.423" name="/" dev="sockfs" ino=12955 res=0 errno=0 [ 180.345832][ T7092] netlink: 'syz.0.432': attribute type 4 has an invalid length. [ 180.345849][ T7092] netlink: 156 bytes leftover after parsing attributes in process `syz.0.432'. [ 180.347279][ T7092] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 180.439962][ T1013] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 180.469535][ T37] usb 1-1: USB disconnect, device number 24 [ 180.578142][ T1013] usb 3-1: device descriptor read/64, error -71 [ 180.688638][ T1013] usb usb3-port1: attempt power cycle [ 180.917849][ T7109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.439'. [ 181.028099][ T1013] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 181.052605][ T1013] usb 3-1: device descriptor read/8, error -71 [ 181.073904][ T38] audit: type=1326 audit(2000000070.470:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz.3.441" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a60b6ce59 code=0x50000 [ 181.074062][ T38] audit: type=1326 audit(2000000070.470:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz.3.441" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a60b6ce59 code=0x50000 [ 181.074203][ T38] audit: type=1326 audit(2000000070.470:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz.3.441" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a60b6ce59 code=0x50000 [ 181.074361][ T38] audit: type=1326 audit(2000000070.470:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz.3.441" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a60b6ce59 code=0x50000 [ 181.074550][ T38] audit: type=1326 audit(2000000070.470:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz.3.441" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a60b6ce59 code=0x50000 [ 181.074694][ T38] audit: type=1326 audit(2000000070.470:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz.3.441" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a60b6ce59 code=0x50000 [ 181.074843][ T38] audit: type=1326 audit(2000000070.470:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz.3.441" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a60b6ce59 code=0x50000 [ 181.318104][ T37] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 181.378453][ T1013] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 181.401019][ T1013] usb 3-1: device descriptor read/8, error -71 [ 181.483909][ T37] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.483952][ T37] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.483975][ T37] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 181.484020][ T37] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 181.484045][ T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.511848][ T1013] usb usb3-port1: unable to enumerate USB device [ 181.548362][ T37] usb 1-1: config 0 descriptor?? [ 181.995118][ T37] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 182.051873][ T9] usb 2-1: USB disconnect, device number 28 [ 182.110530][ T38] kauditd_printk_skb: 2864 callbacks suppressed [ 182.110554][ T38] audit: type=1326 audit(2000000071.510:2899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz.3.441" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3a60b6caeb code=0x50000 [ 182.110608][ T38] audit: type=1326 audit(2000000071.510:2900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz.3.441" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3a60b6caeb code=0x50000 [ 182.110649][ T38] audit: type=1326 audit(2000000071.510:2901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz.3.441" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3a60b6caeb code=0x50000 [ 182.110690][ T38] audit: type=1326 audit(2000000071.510:2902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz.3.441" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3a60b6caeb code=0x50000 [ 182.110732][ T38] audit: type=1326 audit(2000000071.510:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz.3.441" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3a60b6caeb code=0x50000 [ 182.111901][ T38] audit: type=1326 audit(2000000071.510:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz.3.441" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3a60b6caeb code=0x50000 [ 182.114780][ T38] audit: type=1326 audit(2000000071.510:2905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz.3.441" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3a60b6caeb code=0x50000 [ 182.114828][ T38] audit: type=1326 audit(2000000071.510:2906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz.3.441" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3a60b6caeb code=0x50000 [ 182.114870][ T38] audit: type=1326 audit(2000000071.510:2907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz.3.441" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3a60b6caeb code=0x50000 [ 182.114930][ T38] audit: type=1326 audit(2000000071.510:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz.3.441" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3a60b6caeb code=0x50000 [ 182.333472][ T7111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.384364][ T7111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.484576][ T7111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.485162][ T7111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.572782][ T7118] loop8: detected capacity change from 0 to 7 [ 182.578975][ T7118] Dev loop8: unable to read RDB block 7 [ 182.579040][ T7118] loop8: unable to read partition table [ 182.579386][ T7118] loop8: partition table beyond EOD, truncated [ 182.579461][ T7118] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 183.508454][ C1] plantronics 0003:047F:FFFF.001F: usb_submit_urb(ctrl) failed: -1 [ 183.928319][ T5003] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 184.120844][ T5003] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.120886][ T5003] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.120910][ T5003] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 184.120952][ T5003] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 184.120974][ T5003] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.191112][ T5003] usb 3-1: config 0 descriptor?? [ 184.281170][ T1013] usb 1-1: USB disconnect, device number 25 [ 184.598153][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 184.637141][ T5003] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 184.642696][ T5611] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 184.642875][ T5611] Bluetooth: hci0: Injecting HCI hardware error event [ 184.644968][ T4924] Bluetooth: hci0: hardware error 0x00 [ 184.749693][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 184.756681][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 184.757908][ T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 184.809198][ T10] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 184.809229][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.809250][ T10] usb 4-1: Product: syz [ 184.809266][ T10] usb 4-1: Manufacturer: syz [ 184.809281][ T10] usb 4-1: SerialNumber: syz [ 184.898388][ T5816] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 185.051271][ T5816] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 185.051370][ T5816] usb 1-1: New USB device found, idVendor=17ef, idProduct=61ae, bcdDevice= 0.00 [ 185.051388][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.127279][ T5816] usb 1-1: config 0 descriptor?? [ 185.198794][ T10] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 185.240486][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 185.395096][ T5816] usbhid 1-1:0.0: can't add hid device: -71 [ 185.395273][ T5816] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 185.425681][ T5816] usb 1-1: USB disconnect, device number 26 [ 185.454865][ T5790] usb 3-1: USB disconnect, device number 36 [ 185.548177][ T5003] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 185.720669][ T5003] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 185.720699][ T5003] usb 2-1: config 0 has no interface number 0 [ 185.720743][ T5003] usb 2-1: config 0 interface 41 has no altsetting 0 [ 185.727720][ T5003] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 185.727750][ T5003] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.727771][ T5003] usb 2-1: Product: syz [ 185.727786][ T5003] usb 2-1: Manufacturer: syz [ 185.727801][ T5003] usb 2-1: SerialNumber: syz [ 185.785927][ T5003] usb 2-1: config 0 descriptor?? [ 186.025671][ T10] usb 4-1: 2:1 : can't get Cluster Descriptor [ 186.281395][ T10] usb 4-1: USB disconnect, device number 28 [ 186.402712][ T5003] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -22 [ 186.436669][ T5809] udevd[5809]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 186.959816][ T4924] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 187.546173][ T37] usb 2-1: USB disconnect, device number 29 [ 187.718690][ T5816] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 187.875421][ T5816] usb 4-1: Using ep0 maxpacket: 8 [ 187.877074][ T5816] usb 4-1: config 0 has an invalid interface number: 101 but max is 0 [ 187.877091][ T5816] usb 4-1: config 0 has no interface number 0 [ 187.877112][ T5816] usb 4-1: config 0 interface 101 has no altsetting 0 [ 187.890505][ T5816] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 187.890600][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.890621][ T5816] usb 4-1: Product: syz [ 187.890663][ T5816] usb 4-1: Manufacturer: syz [ 187.890700][ T5816] usb 4-1: SerialNumber: syz [ 187.971986][ T5816] usb 4-1: config 0 descriptor?? [ 187.989082][ T5816] gspca_main: se401-2.14.0 probing 047d:5003 [ 189.082951][ T5816] usb 4-1: reset high-speed USB device number 29 using dummy_hcd [ 190.700713][ T5816] gspca_se401: read req failed req 0x06 error -71 [ 190.700815][ T5816] se401 4-1:0.101: probe with driver se401 failed with error -71 [ 190.730354][ T5816] usb 4-1: USB disconnect, device number 29 [ 191.078572][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 191.231539][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 191.245492][ T9] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 191.245521][ T9] usb 3-1: config 0 has no interface number 0 [ 191.245579][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 191.245603][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 191.245629][ T9] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 191.245656][ T9] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 191.245698][ T9] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 191.245721][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.315277][ T9] usb 3-1: config 0 descriptor?? [ 191.416204][ T7224] netlink: 272 bytes leftover after parsing attributes in process `syz.0.478'. [ 191.596191][ T7227] qnx6: unable to read the first superblock [ 191.615612][ T7227] qnx6: unable to read the first superblock [ 191.615624][ T7227] qnx6: unable to read the first superblock [ 191.655292][ T9] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 191.706552][ T9] usb 3-1: USB disconnect, device number 37 [ 191.737644][ T9] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 192.090074][ T7234] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 193.325660][ T7246] random: crng reseeded on system resumption [ 193.415494][ T7251] netlink: 'syz.0.489': attribute type 1 has an invalid length. [ 193.678802][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 193.836370][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 193.836402][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.836423][ T10] usb 2-1: Product: syz [ 193.836438][ T10] usb 2-1: Manufacturer: syz [ 193.836452][ T10] usb 2-1: SerialNumber: syz [ 193.883799][ T10] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 193.932431][ T5816] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 194.248422][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.263741][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.039834][ T5816] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 195.998963][ T5816] ath9k_htc: Failed to initialize the device [ 196.279444][ T5816] usb 2-1: ath9k_htc: USB layer deinitialized [ 196.591745][ T32] usb 2-1: USB disconnect, device number 30 [ 196.724844][ T7276] ================================================================== [ 196.724861][ T7276] BUG: KASAN: slab-use-after-free in clear_tfile_check_list+0x114/0x380 [ 196.724861][ T7276] BUG: KASAN: slab-use-after-free in clear_tfile_check_list+0x114/0x380 [ 196.724902][ T7276] Read of size 8 at addr ffff888035565f88 by task syz.2.493/7276 [ 196.724920][ T7276] [ 196.724935][ T7276] CPU: 0 UID: 0 PID: 7276 Comm: syz.2.493 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 196.724964][ T7276] Tainted: [L]=SOFTLOCKUP [ 196.724972][ T7276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 196.724986][ T7276] Call Trace: [ 196.724995][ T7276] [ 196.725010][ T7276] dump_stack_lvl+0xe8/0x150 [ 196.725036][ T7276] print_address_description+0x55/0x1e0 [ 196.725065][ T7276] ? clear_tfile_check_list+0x114/0x380 [ 196.725098][ T7276] print_report+0x58/0x70 [ 196.725124][ T7276] kasan_report+0x117/0x150 [ 196.725151][ T7276] ? clear_tfile_check_list+0x114/0x380 [ 196.725198][ T7276] clear_tfile_check_list+0x114/0x380 [ 196.725227][ T7276] ? clear_tfile_check_list+0x22/0x380 [ 196.725257][ T7276] do_epoll_ctl_file+0x8fd/0xed0 [ 196.725285][ T7276] ? do_epoll_ctl_file+0xac3/0xed0 [ 196.725314][ T7276] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 196.725342][ T7276] ? __fget_files+0x3a6/0x420 [ 196.725365][ T7276] ? __fget_files+0x2a/0x420 [ 196.725392][ T7276] __se_sys_epoll_ctl+0x14e/0x210 [ 196.725421][ T7276] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 196.725452][ T7276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.725473][ T7276] do_syscall_64+0x174/0x580 [ 196.725503][ T7276] ? trace_irq_disable+0x3b/0x140 [ 196.725525][ T7276] ? clear_bhb_loop+0x40/0x90 [ 196.725548][ T7276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.725568][ T7276] RIP: 0033:0x7faf48cace59 [ 196.725586][ T7276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.725604][ T7276] RSP: 002b:00007faf46aa1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 196.725626][ T7276] RAX: ffffffffffffffda RBX: 00007faf48f26270 RCX: 00007faf48cace59 [ 196.725642][ T7276] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 196.725655][ T7276] RBP: 00007faf48d42d6f R08: 0000000000000000 R09: 0000000000000000 [ 196.725668][ T7276] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000000 [ 196.725682][ T7276] R13: 00007faf48f26308 R14: 00007faf48f26270 R15: 00007ffce347b2e8 [ 196.725706][ T7276] [ 196.725713][ T7276] [ 196.725717][ T7276] Allocated by task 7272: [ 196.725727][ T7276] kasan_save_track+0x3e/0x80 [ 196.725747][ T7276] __kasan_slab_alloc+0x6c/0x80 [ 196.725768][ T7276] kmem_cache_alloc_noprof+0x33b/0x680 [ 196.725790][ T7276] ep_insert+0x512/0x1820 [ 196.725813][ T7276] do_epoll_ctl_file+0x8bb/0xed0 [ 196.725837][ T7276] __se_sys_epoll_ctl+0x14e/0x210 [ 196.725861][ T7276] do_syscall_64+0x174/0x580 [ 196.725888][ T7276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.725906][ T7276] [ 196.725910][ T7276] Freed by task 7266: [ 196.725919][ T7276] kasan_save_track+0x3e/0x80 [ 196.725938][ T7276] kasan_save_free_info+0x46/0x50 [ 196.725965][ T7276] __kasan_slab_free+0x5c/0x80 [ 196.725985][ T7276] kmem_cache_free+0x187/0x6c0 [ 196.726013][ T7276] eventpoll_release_file+0xc2/0x240 [ 196.726036][ T7276] __fput+0x83c/0xa70 [ 196.726055][ T7276] task_work_run+0x1d9/0x270 [ 196.726077][ T7276] exit_to_user_mode_loop+0x193/0x680 [ 196.726098][ T7276] do_syscall_64+0x353/0x580 [ 196.726125][ T7276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.726143][ T7276] [ 196.726147][ T7276] The buggy address belongs to the object at ffff888035565f80 [ 196.726147][ T7276] which belongs to the cache ep_head of size 16 [ 196.726164][ T7276] The buggy address is located 8 bytes inside of [ 196.726164][ T7276] freed 16-byte region [ffff888035565f80, ffff888035565f90) [ 196.726184][ T7276] [ 196.726189][ T7276] The buggy address belongs to the physical page: [ 196.726209][ T7276] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888035565fc0 pfn:0x35565 [ 196.726230][ T7276] memcg:ffff8880426e5801 [ 196.726239][ T7276] flags: 0x80000000000200(workingset|node=0|zone=1) [ 196.726261][ T7276] page_type: f5(slab) [ 196.726279][ T7276] raw: 0080000000000200 ffff88814041cdc0 ffff88801b321088 ffffea0000e6dad0 [ 196.726316][ T7276] raw: ffff888035565fc0 000000080080002b 00000000f5000000 ffff8880426e5801 [ 196.726328][ T7276] page dumped because: kasan: bad access detected [ 196.726343][ T7276] page_owner tracks the page as allocated [ 196.726351][ T7276] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4980, tgid 4980 (udevd), ts 38461600028, free_ts 38459106688 [ 196.726389][ T7276] post_alloc_hook+0x1f9/0x250 [ 196.726413][ T7276] get_page_from_freelist+0x265c/0x26e0 [ 196.726441][ T7276] __alloc_frozen_pages_noprof+0x18d/0x380 [ 196.726468][ T7276] allocate_slab+0x74/0x5e0 [ 196.726496][ T7276] refill_objects+0x33c/0x3d0 [ 196.726524][ T7276] __pcs_replace_empty_main+0x373/0x720 [ 196.726555][ T7276] kmem_cache_alloc_noprof+0x433/0x680 [ 196.726578][ T7276] ep_insert+0x512/0x1820 [ 196.726603][ T7276] do_epoll_ctl_file+0x8bb/0xed0 [ 196.726629][ T7276] __se_sys_epoll_ctl+0x14e/0x210 [ 196.726655][ T7276] do_syscall_64+0x174/0x580 [ 196.726686][ T7276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.726705][ T7276] page last free pid 29 tgid 29 stack trace: [ 196.726717][ T7276] __free_frozen_pages+0x10af/0x1190 [ 196.726740][ T7276] tlb_remove_table_rcu+0x85/0x100 [ 196.726768][ T7276] rcu_cpu_kthread+0x99e/0x1470 [ 196.726793][ T7276] smpboot_thread_fn+0x541/0xa50 [ 196.726811][ T7276] kthread+0x388/0x470 [ 196.726832][ T7276] ret_from_fork+0x514/0xb70 [ 196.726854][ T7276] ret_from_fork_asm+0x1a/0x30 [ 196.726880][ T7276] [ 196.726885][ T7276] Memory state around the buggy address: [ 196.726896][ T7276] ffff888035565e80: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 196.726912][ T7276] ffff888035565f00: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 196.726926][ T7276] >ffff888035565f80: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 196.726938][ T7276] ^ [ 196.726948][ T7276] ffff888035566000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 196.726962][ T7276] ffff888035566080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 196.726973][ T7276] ================================================================== [ 196.742005][ T7276] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 196.742064][ T7276] CPU: 0 UID: 0 PID: 7276 Comm: syz.2.493 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 196.742137][ T7276] Tainted: [L]=SOFTLOCKUP [ 196.742155][ T7276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 196.742191][ T7276] Call Trace: [ 196.742209][ T7276] [ 196.742227][ T7276] vpanic+0x56c/0xa60 [ 196.742315][ T7276] ? __pfx_vpanic+0x10/0x10 [ 196.742387][ T7276] ? __pfx___schedule+0x10/0x10 [ 196.742460][ T7276] panic+0xc5/0xd0 [ 196.742528][ T7276] ? __pfx_panic+0x10/0x10 [ 196.742599][ T7276] ? preempt_schedule_thunk+0x16/0x40 [ 196.742693][ T7276] ? clear_tfile_check_list+0x114/0x380 [ 196.742773][ T7276] check_panic_on_warn+0x89/0xb0 [ 196.742835][ T7276] ? clear_tfile_check_list+0x114/0x380 [ 196.742913][ T7276] end_report+0x73/0x170 [ 196.742975][ T7276] ? clear_tfile_check_list+0x114/0x380 [ 196.743048][ T7276] kasan_report+0x128/0x150 [ 196.743110][ T7276] ? clear_tfile_check_list+0x114/0x380 [ 196.743192][ T7276] clear_tfile_check_list+0x114/0x380 [ 196.743287][ T7276] ? clear_tfile_check_list+0x22/0x380 [ 196.743379][ T7276] do_epoll_ctl_file+0x8fd/0xed0 [ 196.743449][ T7276] ? do_epoll_ctl_file+0xac3/0xed0 [ 196.743503][ T7276] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 196.743569][ T7276] ? __fget_files+0x3a6/0x420 [ 196.743618][ T7276] ? __fget_files+0x2a/0x420 [ 196.743682][ T7276] __se_sys_epoll_ctl+0x14e/0x210 [ 196.743754][ T7276] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 196.743832][ T7276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.743885][ T7276] do_syscall_64+0x174/0x580 [ 196.743961][ T7276] ? trace_irq_disable+0x3b/0x140 [ 196.744090][ T7276] ? clear_bhb_loop+0x40/0x90 [ 196.744155][ T7276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.744205][ T7276] RIP: 0033:0x7faf48cace59 [ 196.744252][ T7276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.744301][ T7276] RSP: 002b:00007faf46aa1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 196.744360][ T7276] RAX: ffffffffffffffda RBX: 00007faf48f26270 RCX: 00007faf48cace59 [ 196.744405][ T7276] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 196.744436][ T7276] RBP: 00007faf48d42d6f R08: 0000000000000000 R09: 0000000000000000 [ 196.744472][ T7276] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000000 [ 196.744512][ T7276] R13: 00007faf48f26308 R14: 00007faf48f26270 R15: 00007ffce347b2e8 [ 196.744552][ T7276] [ 196.745143][ T7276] Kernel Offset: disabled