last executing test programs: 4.205008051s ago: executing program 2 (id=2725): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000000c0)={r2, 0xa}, 0x8) 4.027102324s ago: executing program 2 (id=2728): r0 = fsopen(&(0x7f0000000940)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143042, 0xf2) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="ff", 0x1}], 0x1, 0xfffffffe, 0xffffffff, 0x0) 3.950397666s ago: executing program 2 (id=2730): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) preadv2(r0, 0x0, 0x0, 0x5, 0x81, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000000)="d6", 0x1}], 0x1) r1 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r1, 0xa) 3.828413606s ago: executing program 0 (id=2732): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) exit(0x2) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000940)=""/131, 0x83}], 0x1) 2.917313389s ago: executing program 0 (id=2741): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001740)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="c5819a27274164ec0f9eeb3cfd0fbd2a5370f008307113fe", 0x18}], 0x1, &(0x7f0000000700)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18, 0xfece5538a3894cc4}], 0x1, 0x20000040) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}, 0xb}], 0x2, 0x10, 0x0) 2.788812784s ago: executing program 0 (id=2743): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x24000804}, 0x4000080) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f00000000c0)=0x8253, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000080)=0x13) 2.758627246s ago: executing program 3 (id=2745): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x143000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0xb, 0x0, 0x34a30b42, 0x1, 0x20001000, 0x4008000, 0x1002, 0xfffffffffffffffb, 0x8000a, 0xa, 0x6, 0x2372, 0x8bda, 0xfffffffffffffefe, 0x401, 0x20], 0x25000, 0x216157}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.675500743s ago: executing program 0 (id=2746): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x24000040) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@newtfilter={0x30, 0x2c, 0x1, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}}, 0x2) 2.539166863s ago: executing program 2 (id=2749): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x200000, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lstat(&(0x7f0000005440)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x2) syz_fuse_handle_req(r0, &(0x7f0000002dc0)="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", 0x2000, &(0x7f0000004dc0)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x3, {0x7, 0x2d, 0xfffffffd, 0x6438207, 0x0, 0xffff, 0xfffffffe, 0xf84}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.458628449s ago: executing program 0 (id=2750): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x58, 0x3, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x40, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_DATA={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x4, @local, 0x6}}, [0x2, 0x2, 0x5, 0x4, 0x3, 0xe4e4, 0xc9a, 0x7, 0x7, 0x3, 0x7, 0x6, 0x8, 0xff, 0xc]}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000c80)="1876d433b8c266f9be2253e7c12fc9ea10343a19c358547a9357a174911e926c57b51eab3d0a4a2297653ac0c62201010000881a8789adddd1ca89ebd8632972a4f65ad1505ed06b6785508eb1dee994d18b084ef189ce72b079ed03ef849c46e3dedf604c01fae7c32f782dd9a45993a0798444d6ba181f2546b88893bf12575b27c1af55a55c55ca8855d5dc89db3e110430d10f429cc423ff64acc9fdb59a76caf809ce3c954f8a9618ebe5c3253e888feae6cc381ecb4a64085e24c48cf5ae", 0xc1}], 0x1) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f0000000140)=ANY=[]) 2.354079264s ago: executing program 1 (id=2752): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f0000000200)=0x1, 0x6, 0x0, &(0x7f0000000240)={0x77359400}, 0x0, 0x1) 2.278279464s ago: executing program 2 (id=2754): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000840)={0x34, &(0x7f0000000440)={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000180)={0x40, 0x7}, 0x0, 0x0}) 2.277197456s ago: executing program 3 (id=2755): r0 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@getqdisc={0x24, 0x26, 0x2, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xb, 0x6}, {0xfff3, 0x1}, {0xb, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c88b}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = dup(r0) write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c4606"], 0x78) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.106940876s ago: executing program 3 (id=2757): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x17) 2.005429262s ago: executing program 3 (id=2758): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000001c0)={0x1, 0x7e, 0x22, 0x0, 0x407}) read$midi(r0, 0x0, 0x3b) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) 1.663229754s ago: executing program 3 (id=2761): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x2016}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.597104069s ago: executing program 4 (id=2762): writev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000200)=0x8000000) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0) syz_open_dev$video(0x0, 0x8, 0x0) unshare(0x20060400) 1.434373434s ago: executing program 3 (id=2763): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="0d01"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 1.176558013s ago: executing program 1 (id=2764): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x48010}}], 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x40) 1.141970925s ago: executing program 1 (id=2765): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file1/../file0', [{0x20, '\xe2\x00\x00\x00\x00\x98\xfc~\xef\x00\x00\x00\xdb\xae~X\xb1\xb2\x89(\x1f\xd7\x06n\xad\xfa\xa2\xd1@R\x97\xa4\x00mp\xd9r\x85;pzx\xd7\xa8\xe7\xef:\x8c,\xd6\"c\x1c$\x85\xf0\x89\xfb\x9b\x8e\x15Kd\xe4\xcc`\xa3.b\x17\x04Y\xeaYk\xd7\xe3cf\x1fnU\x11\x91v\xde3H\xed[\x89\xb6\xbfc'}, {0x20, '\x00'}], 0xa, "000278414808f90249a8974898280f3c430a34b2de9a57967d49c269449fc906eef97ae17618a3eb9a5df5a02a484a4fff00000000000000000000baca280647784b0d09cc77e6000000441a69f2c53e292fe01d5e4ac62ebda3c67fa384c66b1e4df6c98b7bb988d6c4eeb229e8dbc772a8d19f87373ef179fce7eb6c1f6184a61789180d45f40c1372f09b84427b367b50c6"}, 0x108) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000300)="aefdf79d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76632cb010852f426072a", 0x2a}, {&(0x7f00000003c0)="4673c875ca4d9cb6f1d39f1148c805c9a48b6bfad79db2f8ffac454102a0b64722d3f9bc6cd3f362387a706fcab2b62c9cf701191e6f1843142a512f5fb5e28c4537c755c5390b2c44b36ea9500acf4f2a535f1f9372e797", 0x58}], 0x2) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) 1.097269179s ago: executing program 4 (id=2766): bind$tipc(0xffffffffffffffff, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x10) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe800000000000000000000000000042fe8000000000000000000000000000aa4e200e22"], 0x0) 957.379808ms ago: executing program 4 (id=2767): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[@cpuid={0x64, 0x18, {0xfffffffc, 0x8000}}], 0x18}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000100)={0x2, 0x0, [{0xc0000000, 0x1, 0x2, 0xff, 0x0, 0x4, 0x4}, {0x0, 0x7, 0x0, 0x40000001, 0x8, 0x2, 0x2}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 927.261619ms ago: executing program 1 (id=2768): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x0, 0x350, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e1d, 0x3, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e1d, 0xffffffff, @mcast1}, 0x1c) 752.443877ms ago: executing program 1 (id=2769): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xe, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x4) 643.555296ms ago: executing program 1 (id=2770): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/193, 0xc1}], 0x1}, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="1a", 0x1}], 0x1) 591.850231ms ago: executing program 4 (id=2771): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb3}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xf8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 390.894411ms ago: executing program 0 (id=2772): ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="200c02"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001040)={0x34, &(0x7f0000001380)=ANY=[@ANYBLOB="200304"], 0x0, 0x0, 0x0, 0x0, 0x0}) 346.147429ms ago: executing program 4 (id=2773): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f6}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 150.460665ms ago: executing program 4 (id=2774): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x40}}, 0x20}}, 0x8000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x4, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xeeee0002, 0xc, 0x1, 0x81, 0x0, 0x0, 0x24, 0x0, 0x0, 0xe, 0xff}, {0x10000, 0x5000, 0x3, 0xfc, 0x8, 0x0, 0x0, 0x64, 0xe, 0x0, 0x5, 0xfc}, {0x3000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x4, 0x2}, {0x2, 0xffff1000, 0x9, 0x0, 0x0, 0x8, 0x3, 0x7}, {0x6000, 0xffff1000, 0xf, 0x2, 0xfe, 0x0, 0x3, 0xc, 0x9, 0x8, 0xf3, 0xfd}, {0x4000, 0x1000, 0x0, 0x3, 0x9b, 0xfd, 0x0, 0x4, 0x64, 0x5, 0xc0, 0x10}, {0x3000, 0x100000, 0x10, 0x0, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x2}, {0x0, 0x3000, 0x3, 0x2, 0x2, 0x6b, 0x1, 0xfd, 0x0, 0xd, 0x3, 0x5}, {0x2000, 0xb}, {}, 0x9df9ffdf, 0x0, 0x2, 0x20, 0x3, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) 0s ago: executing program 2 (id=2775): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0) fchown(r1, 0x0, 0xee01) kernel console output (not intermixed with test programs): ble to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.305761][ T5721] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 263.347450][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 263.355190][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 263.364920][ T7779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.373346][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.377070][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 263.390689][T10130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.494681][T10130] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.512574][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.527033][ T5705] rc_core: IR keymap rc-imon-pad not found [ 263.563386][ T9987] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.568910][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 263.570864][ T9987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.586542][ T5705] Registered IR keymap rc-empty [ 263.600512][ T5705] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 263.622594][ T5705] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 263.626401][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.669986][ T5633] Bluetooth: hci1: command tx timeout [ 263.693543][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.701094][ T9980] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.710629][ T9980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.716130][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 263.732117][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 263.748595][ T5705] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 263.757084][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.814181][ T9] usb 3-1: config 0 descriptor?? [ 263.833603][ T5705] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input31 [ 263.939842][ T5705] imon 5-1:0.0: iMON device (15c2:0041, intf0) on usb<5:26> initialized [ 263.981270][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 263.988889][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.008667][ T5705] usb 5-1: USB disconnect, device number 26 [ 264.096608][T10130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.126931][ T5721] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 264.263045][ T9] hid_parser_main: 4008 callbacks suppressed [ 264.264256][ T9] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 264.281305][T10130] veth0_vlan: entered promiscuous mode [ 264.298186][ T9] microsoft 0003:045E:07DA.0024: ignoring exceeding usage max [ 264.307140][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.334756][ T5721] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 264.353952][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.364242][T10130] veth1_vlan: entered promiscuous mode [ 264.375254][ T5721] usb 1-1: Product: syz [ 264.384422][ T5721] usb 1-1: Manufacturer: syz [ 264.396918][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 264.397737][ T5721] usb 1-1: SerialNumber: syz [ 264.412366][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0024/input/input32 [ 264.520502][T10130] veth0_macvtap: entered promiscuous mode [ 264.543806][T10130] veth1_macvtap: entered promiscuous mode [ 264.564917][ T9] microsoft 0003:045E:07DA.0024: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 264.621475][ T9] usb 3-1: USB disconnect, device number 25 [ 264.632984][T10130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.742167][T10130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.814613][ T7779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.841866][ T7779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.855015][T10318] fido_id[10318]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 264.870230][ T7779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.881869][ T5721] usblp 1-1:1.0: usblp1: USB Unidirectional printer dev 32 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 264.887427][ T7779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.193700][ T9990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.231125][ T9990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.322013][ T5637] usb 4-1: USB disconnect, device number 32 [ 265.357397][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.436987][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 265.473591][ T9981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.511370][ T9981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.549783][ T809] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 266.730340][ T809] usb 4-1: Using ep0 maxpacket: 32 [ 266.751136][ T809] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 266.766547][ T809] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 266.785890][ T809] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 266.803492][ T809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 266.825808][ T809] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 266.857761][ T809] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 266.900032][ T809] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 266.931991][ T809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.952598][ T5685] usb 1-1: USB disconnect, device number 32 [ 266.996324][ T809] usb 4-1: config 0 descriptor?? [ 267.003749][ T5685] usblp1: removed [ 267.214514][T10381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1740'. [ 267.257005][ T809] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 33 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 267.549942][ T5698] usb 4-1: USB disconnect, device number 33 [ 267.595796][ T5698] usblp0: removed [ 267.798067][ T9] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 267.968786][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 267.988040][ T9] usb 5-1: config 0 has no interface number 0 [ 267.990331][T10406] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 267.998413][ T9] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 268.034095][ T9] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.077377][ T9] usb 5-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 268.117411][ T9] usb 5-1: config 0 interface 1 has no altsetting 0 [ 268.133491][ T9] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 268.153033][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.196642][ T9] usb 5-1: config 0 descriptor?? [ 268.306995][T10412] net_ratelimit: 12 callbacks suppressed [ 268.307016][T10412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.321455][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.340055][T10418] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1750'. [ 268.371333][T10416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.391840][T10416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.472423][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.485265][ T9981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.493802][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.546827][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 268.646910][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.842431][ T9] uclogic 0003:145F:0212.0025: pen parameters not found [ 268.860910][ T9] uclogic 0003:145F:0212.0025: interface is invalid, ignoring [ 269.039310][T10412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.129261][ T5637] usb 5-1: USB disconnect, device number 27 [ 269.552979][T10456] syzkaller1: entered promiscuous mode [ 269.560437][T10456] syzkaller1: entered allmulticast mode [ 270.385238][ T5631] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 270.587258][ T5631] usb 5-1: Using ep0 maxpacket: 8 [ 270.610359][ T5631] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 270.646255][ T5631] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 270.694602][ T5631] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 270.723375][ T5631] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.751864][ T5631] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 270.787641][ T5631] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.084893][ T5631] usb 5-1: usb_control_msg returned -32 [ 271.111965][ T5631] usbtmc 5-1:16.0: can't read capabilities [ 271.769040][ T9] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 271.962328][ T9] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 271.990624][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.020015][ T9] usb 1-1: Product: syz [ 272.070566][ T9] usb 1-1: Manufacturer: syz [ 272.086908][ T9] usb 1-1: SerialNumber: syz [ 272.096490][ T9] usb 1-1: config 0 descriptor?? [ 272.155067][ T5637] usb 5-1: USB disconnect, device number 28 [ 272.164100][ T9] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 273.349315][ T5685] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 273.359820][ T9] gspca_stk1135: reg_w 0xd err -71 [ 273.366128][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 273.379519][ T9] gspca_stk1135: Sensor write failed [ 273.382891][ T5698] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 273.388141][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 273.411382][ T9] gspca_stk1135: Sensor write failed [ 273.422568][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 273.439174][ T9] gspca_stk1135: Sensor read failed [ 273.447030][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 273.464870][ T9] gspca_stk1135: Sensor read failed [ 273.471851][ T9] gspca_stk1135: Detected sensor type unknown (0x0) [ 273.486907][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 273.499796][ T9] gspca_stk1135: Sensor read failed [ 273.511351][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 273.526013][ T9] gspca_stk1135: Sensor read failed [ 273.533801][ T5685] usb 2-1: Using ep0 maxpacket: 16 [ 273.539261][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 273.539279][ T9] gspca_stk1135: Sensor write failed [ 273.539316][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 273.539328][ T9] gspca_stk1135: Sensor write failed [ 273.539410][ T9] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 273.579586][ T9] usb 1-1: USB disconnect, device number 33 [ 273.590958][ T5685] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.602407][ T5698] usb 5-1: Using ep0 maxpacket: 8 [ 273.623517][ T5720] net_ratelimit: 13 callbacks suppressed [ 273.623535][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.625692][ T5698] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 273.649289][ T5685] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 273.667184][ T7779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.669287][ T5685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.688221][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.699639][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.707813][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.724193][ T5698] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 273.746878][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 273.757071][ T5698] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 273.778506][ T5698] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 273.790732][ T5685] usb 2-1: config 0 descriptor?? [ 273.822674][ T5698] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 273.836194][ T5698] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 273.856833][ T5698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.140587][ T5698] usb 5-1: usb_control_msg returned -32 [ 274.150382][ T5698] usbtmc 5-1:16.0: can't read capabilities [ 274.218242][ T5685] hid-multitouch 0003:1FD2:6007.0026: unknown main item tag 0x0 [ 274.225992][ T5685] hid-multitouch 0003:1FD2:6007.0026: unknown main item tag 0x0 [ 274.235225][ T9980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.243730][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.245460][ T5685] hid-multitouch 0003:1FD2:6007.0026: unknown main item tag 0x0 [ 274.313640][ T5685] hid-multitouch 0003:1FD2:6007.0026: unknown main item tag 0x0 [ 274.331036][ T5685] hid-multitouch 0003:1FD2:6007.0026: unknown main item tag 0x0 [ 274.351161][T10520] loop3: detected capacity change from 0 to 7 [ 274.370772][T10520] Dev loop3: unable to read RDB block 7 [ 274.376582][T10520] loop3: unable to read partition table [ 274.382795][T10520] loop3: partition table beyond EOD, truncated [ 274.413095][T10520] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 274.438152][ T5685] hid-multitouch 0003:1FD2:6007.0026: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 274.533300][ T5685] usb 2-1: USB disconnect, device number 24 [ 274.623235][T10523] fido_id[10523]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 274.707061][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.720954][T10525] usbtmc 5-1:16.0: usbtmc_ioctl_request failed -71 [ 274.729625][ T24] usb 5-1: USB disconnect, device number 29 [ 274.814933][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 275.875574][T10543] loop4: detected capacity change from 0 to 2640 [ 275.901947][T10543] Buffer I/O error on dev loop4, logical block 0, async page read [ 275.947453][T10543] Buffer I/O error on dev loop4, logical block 0, async page read [ 275.984507][T10543] Buffer I/O error on dev loop4, logical block 0, async page read [ 276.018399][T10548] Buffer I/O error on dev loop4, logical block 73, async page read [ 276.027392][T10543] Buffer I/O error on dev loop4, logical block 0, async page read [ 276.037810][T10548] Buffer I/O error on dev loop4, logical block 73, async page read [ 276.056914][T10543] Buffer I/O error on dev loop4, logical block 0, async page read [ 276.066506][T10543] Buffer I/O error on dev loop4, logical block 0, async page read [ 276.093348][T10543] Buffer I/O error on dev loop4, logical block 0, async page read [ 276.115907][T10543] Buffer I/O error on dev loop4, logical block 0, async page read [ 276.136213][T10543] ldm_validate_partition_table(): Disk read failed. [ 276.161239][T10543] Dev loop4: unable to read RDB block 0 [ 276.181603][T10543] loop4: unable to read partition table [ 276.196665][T10543] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 277.927589][T10624] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1821'. [ 278.257029][ T5720] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 278.329394][T10637] loop5: detected capacity change from 0 to 7 [ 278.345899][T10637] Dev loop5: unable to read RDB block 7 [ 278.362487][T10637] loop5: AHDI p1 p2 p3 [ 278.377175][T10637] loop5: partition table partially beyond EOD, truncated [ 278.403206][T10637] loop5: p1 start 926365495 is beyond EOD, truncated [ 278.421873][T10637] loop5: p2 start 1702059890 is beyond EOD, truncated [ 278.449705][ T5720] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 278.476966][ T5720] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 278.496860][ T5720] usb 2-1: Product: syz [ 278.511379][ T5720] usb 2-1: Manufacturer: syz [ 278.527803][ T5720] usb 2-1: SerialNumber: syz [ 278.541114][ T5720] usb 2-1: config 0 descriptor?? [ 278.635830][ T5720] ch341 2-1:0.0: ch341-uart converter detected [ 278.711876][ T9] net_ratelimit: 8 callbacks suppressed [ 278.711895][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.868086][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.946943][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 279.318899][ T24] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 279.349878][ T9979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.357228][ T5631] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 279.377637][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.387787][ T5637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.502026][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 279.523566][ T24] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 279.546952][ T5631] usb 1-1: Using ep0 maxpacket: 32 [ 279.548166][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 279.565825][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 279.575342][ T5631] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.577270][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 279.601623][ T5720] ch341-uart ttyUSB0: failed to read break control: -71 [ 279.617000][ T5631] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.629650][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 279.633497][ T5720] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 279.655505][ T5631] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 279.662544][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 279.685338][ T5631] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.706430][ T5720] usb 2-1: USB disconnect, device number 25 [ 279.714056][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 279.725624][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.744181][ T5631] usb 1-1: config 0 descriptor?? [ 279.779456][ T5720] ch341 2-1:0.0: device disconnected [ 279.907956][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.978499][ T24] usb 5-1: usb_control_msg returned -32 [ 279.985856][ T24] usbtmc 5-1:16.0: can't read capabilities [ 279.992571][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 279.995502][ T9988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.010267][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.094367][T10683] binder: 10682:10683 ioctl c0306201 200000000080 returned -14 [ 280.103862][T10683] binder: 10682:10683 ioctl c0306201 2000000003c0 returned -14 [ 280.210714][ T5631] savu 0003:1E7D:2D5A.0027: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 280.319608][ T5637] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 280.343290][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 280.354118][T10689] usbtmc 5-1:16.0: Unable to send data, error -71 [ 280.378262][T10689] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 280.398082][ T5631] usb 5-1: USB disconnect, device number 30 [ 280.478768][ T5698] usb 1-1: USB disconnect, device number 34 [ 280.487670][ T5637] usb 3-1: Using ep0 maxpacket: 16 [ 280.511352][ T5637] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.528740][ T5637] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 280.553568][ T5637] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 280.563881][ T5637] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.614478][ T5637] usb 3-1: config 0 descriptor?? [ 280.762853][T10699] syz.3.1853(10699): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 281.068248][ T5637] HID 045e:07da: Invalid code 65791 type 1 [ 281.131644][ T5637] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0028/input/input33 [ 281.183360][ T5637] microsoft 0003:045E:07DA.0028: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 281.886849][ T5631] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 281.900653][ T24] usb 3-1: USB disconnect, device number 26 [ 282.046893][ T5631] usb 4-1: Using ep0 maxpacket: 8 [ 282.186124][ T5631] usb 4-1: unable to get BOS descriptor or descriptor too short [ 282.228347][ T5631] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 282.258314][ T5631] usb 4-1: can't read configurations, error -71 [ 282.756995][ T24] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 282.928567][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 282.961003][ T24] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 282.993705][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.027530][ T24] usb 2-1: config 0 has no interface number 0 [ 283.037895][ T24] usb 2-1: config 0 interface 196 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 283.073945][ T24] usb 2-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 283.118350][ T24] usb 2-1: config 0 interface 196 has no altsetting 0 [ 283.164644][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 283.203849][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.223925][ T24] usb 2-1: Product: syz [ 283.241876][ T24] usb 2-1: Manufacturer: syz [ 283.252381][ T24] usb 2-1: SerialNumber: syz [ 283.262206][ T24] usb 2-1: config 0 descriptor?? [ 283.479994][ T24] ipheth 2-1:0.196: Unable to find endpoints [ 283.534800][ T24] usb 2-1: USB disconnect, device number 26 [ 283.991780][T10796] netlink: 'syz.2.1890': attribute type 18 has an invalid length. [ 284.007858][T10796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1890'. [ 284.051324][T10796] netlink: 'syz.2.1890': attribute type 18 has an invalid length. [ 284.059382][ T9979] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.068615][T10796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1890'. [ 284.079195][ T9979] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.084468][ T5698] net_ratelimit: 7 callbacks suppressed [ 284.084518][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.102497][ T9979] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.138702][ T9979] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.156830][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 284.788347][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.144471][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.186890][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 285.571208][T10846] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1911'. [ 285.749990][ T9981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.758526][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.163072][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.226815][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 287.189503][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.365482][T10884] dummy0: entered allmulticast mode [ 287.394668][T10883] dummy0: left allmulticast mode [ 287.716857][ T5698] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 287.878009][ T5698] usb 3-1: Using ep0 maxpacket: 32 [ 287.896967][ T5698] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 287.912464][ T5698] usb 3-1: config 0 has no interface number 0 [ 287.926387][ T5698] usb 3-1: config 0 interface 184 has no altsetting 0 [ 287.946048][ T5698] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 287.958210][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.976928][ T5698] usb 3-1: Product: syz [ 287.982781][ T5698] usb 3-1: Manufacturer: syz [ 287.991386][ T5698] usb 3-1: SerialNumber: syz [ 288.006691][ T5698] usb 3-1: config 0 descriptor?? [ 288.578840][ T5637] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 288.740172][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 288.740192][ T30] audit: type=1326 audit(1779592454.761:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10922 comm="syz.1.1939" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208139ce59 code=0x7ffc0000 [ 288.753550][ T5637] usb 1-1: config 150 has an invalid interface number: 204 but max is 2 [ 288.779589][ T5637] usb 1-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 288.789103][ T5637] usb 1-1: config 150 has no interface number 0 [ 288.795689][ T5637] usb 1-1: config 150 interface 204 has no altsetting 0 [ 288.805065][ T5637] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 288.814431][ T5637] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.822621][ T5637] usb 1-1: Product: syz [ 288.826857][ T5637] usb 1-1: Manufacturer: syz [ 288.831485][ T5637] usb 1-1: SerialNumber: syz [ 288.857064][ T30] audit: type=1326 audit(1779592454.791:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10922 comm="syz.1.1939" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208139ce59 code=0x7ffc0000 [ 288.892646][ T30] audit: type=1326 audit(1779592454.791:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10922 comm="syz.1.1939" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f208139ce59 code=0x7ffc0000 [ 288.921648][ T30] audit: type=1326 audit(1779592454.791:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10922 comm="syz.1.1939" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208139ce59 code=0x7ffc0000 [ 288.986988][ T30] audit: type=1326 audit(1779592454.801:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10922 comm="syz.1.1939" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208139ce59 code=0x7ffc0000 [ 289.013821][ T30] audit: type=1326 audit(1779592454.861:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10922 comm="syz.1.1939" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f208135d68e code=0x7ffc0000 [ 289.112891][ T30] audit: type=1326 audit(1779592454.861:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10922 comm="syz.1.1939" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f208135d68e code=0x7ffc0000 [ 289.147721][ T5637] xr_serial 1-1:150.204: skipping garbage [ 289.169298][ T30] audit: type=1326 audit(1779592454.871:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10922 comm="syz.1.1939" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f208135d68e code=0x7ffc0000 [ 289.177409][ T5637] xr_serial 1-1:150.204: xr_serial converter detected [ 289.206947][ T30] audit: type=1326 audit(1779592454.871:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10922 comm="syz.1.1939" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f208135d68e code=0x7ffc0000 [ 289.253479][ T5698] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 289.270812][ T809] net_ratelimit: 5 callbacks suppressed [ 289.270831][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.288521][ T5698] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 289.316694][ T5698] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 289.347556][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 289.362745][ T5698] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 289.382489][ T30] audit: type=1326 audit(1779592454.881:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10922 comm="syz.1.1939" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f208135d68e code=0x7ffc0000 [ 289.453305][T10931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1942'. [ 289.466954][ T5698] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 289.495790][T10931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1942'. [ 289.497021][ T5698] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 289.516222][ T5698] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 289.542826][ T5698] usb 3-1: USB disconnect, device number 27 [ 289.625403][T10931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1942'. [ 289.625987][ T9988] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.640869][T10931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1942'. [ 289.719838][ T9988] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.752491][ T9988] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.942871][ T5637] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 289.964177][ T5637] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 290.025593][ T5637] usb 1-1: USB disconnect, device number 35 [ 290.057768][ T5637] xr_serial 1-1:150.204: device disconnected [ 290.307176][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.387084][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 290.464372][T10960] bridge1: entered promiscuous mode [ 290.470032][T10960] bridge1: entered allmulticast mode [ 290.720342][T10973] Context (ID=0x0) not attached to queue pair (handle=0x1:0x1ff) [ 290.869444][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.006591][T10987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1962'. [ 291.065672][T10987] xfrm1: entered promiscuous mode [ 291.078705][T10987] xfrm1: entered allmulticast mode [ 291.092917][T10987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1962'. [ 291.357203][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.427008][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 291.448594][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 291.520898][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.529589][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.636884][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 291.651288][ T9] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 291.676687][ T9] usb 5-1: config 0 has no interface number 0 [ 291.711510][ T9] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 291.744017][ T9] usb 5-1: config 0 interface 89 has no altsetting 0 [ 291.760295][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 291.770417][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.781242][ T9] usb 5-1: Product: syz [ 291.785907][ T9] usb 5-1: Manufacturer: syz [ 291.793402][ T9] usb 5-1: SerialNumber: syz [ 291.812702][ T9] usb 5-1: config 0 descriptor?? [ 291.821551][T11006] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1969'. [ 291.840453][ T9] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 291.860662][ T9] em28xx 5-1:0.89: Video interface 89 found: [ 292.147831][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.230975][ T5637] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 292.325318][ T9] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 292.404601][ T9] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 292.423349][ T5637] usb 3-1: Using ep0 maxpacket: 8 [ 292.433535][ T9] em28xx 5-1:0.89: board has no eeprom [ 292.516928][ T9] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 292.526471][ T9] em28xx 5-1:0.89: analog set to bulk mode. [ 292.543970][ T5631] em28xx 5-1:0.89: Registering V4L2 extension [ 292.579226][ T9] usb 5-1: USB disconnect, device number 31 [ 292.618887][ T9] em28xx 5-1:0.89: Disconnecting em28xx [ 292.653773][ T5637] usb 3-1: unable to get BOS descriptor or descriptor too short [ 292.674424][ T5637] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 292.698074][ T5637] usb 3-1: can't read configurations, error -71 [ 292.736833][ T5719] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 292.762663][ T5631] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 292.772593][ T5631] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 292.790530][ T5631] em28xx 5-1:0.89: No AC97 audio processor [ 292.845219][ T5631] usb 5-1: Decoder not found [ 292.855372][ T5631] em28xx 5-1:0.89: failed to create media graph [ 292.868797][ T5631] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 292.913900][ T5631] em28xx 5-1:0.89: Registering snapshot button... [ 292.922932][ T5719] usb 1-1: Using ep0 maxpacket: 32 [ 292.935454][ T5719] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 292.947646][ T5719] usb 1-1: config 0 has no interface number 0 [ 292.953825][ T5719] usb 1-1: config 0 interface 12 has no altsetting 0 [ 292.964006][ T5719] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 292.988417][ T5631] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input34 [ 293.009106][ T5719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.031460][ T5719] usb 1-1: Product: syz [ 293.052172][ T5719] usb 1-1: Manufacturer: syz [ 293.072416][ T5719] usb 1-1: SerialNumber: syz [ 293.093430][ T5631] em28xx 5-1:0.89: Remote control support is not available for this card. [ 293.109683][ T5719] usb 1-1: config 0 descriptor?? [ 293.125323][ T9] em28xx 5-1:0.89: Closing input extension [ 293.142084][ T9] em28xx 5-1:0.89: Deregistering snapshot button [ 293.436063][ T9] em28xx 5-1:0.89: Freeing device [ 294.377571][ T5719] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 294.394465][ T5719] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 294.402933][ T5719] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 294.410740][ T5719] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 294.425044][ T5719] usb 1-1: USB disconnect, device number 36 [ 294.467638][ T809] net_ratelimit: 5 callbacks suppressed [ 294.467659][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.516853][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 294.546942][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 294.677005][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 294.691030][ T9] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 294.706398][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.719188][ T9] usb 5-1: Product: syz [ 294.723523][ T9] usb 5-1: Manufacturer: syz [ 294.751359][ T9] usb 5-1: SerialNumber: syz [ 294.774425][ T9] usb 5-1: config 0 descriptor?? [ 295.223783][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 295.252150][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 295.298322][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 295.320550][ T9] usb 5-1: media controller created [ 295.404764][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 295.508104][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.521921][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 295.540171][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 295.586918][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 295.779857][ T5698] usb 5-1: USB disconnect, device number 32 [ 295.889940][ T5698] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 296.019131][T11100] loop3: detected capacity change from 0 to 7 [ 296.051223][T11100] Dev loop3: unable to read RDB block 7 [ 296.071714][T11100] loop3: unable to read partition table [ 296.094100][T11100] loop3: partition table beyond EOD, truncated [ 296.107049][T11100] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 296.526331][T11118] syzkaller1: entered promiscuous mode [ 296.541768][T11117] kvm: kvm [11115]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076) [ 296.552429][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.639827][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 296.949107][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.277341][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.285771][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.587088][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.247164][T11177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2037'. [ 298.270535][T11177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2037'. [ 298.315678][T11181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2039'. [ 298.547314][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 299.136936][ T5698] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 299.298537][ T5698] usb 5-1: Using ep0 maxpacket: 32 [ 299.299697][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 299.316445][ T5698] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 299.334289][ T809] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 299.342368][ T5698] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 299.357501][ T5698] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 299.366984][ T5698] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 299.377150][ T5698] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 299.388549][ T5698] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 299.406978][ T5698] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 299.416354][ T5698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.433716][ T5698] usb 5-1: config 0 descriptor?? [ 299.520332][ T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.524845][ T9] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 299.541966][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.549930][ T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.549999][ T809] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 299.550077][ T809] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 299.550102][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.579291][ T809] usb 3-1: config 0 descriptor?? [ 299.598942][ T9] usb 2-1: Product: syz [ 299.603248][ T9] usb 2-1: Manufacturer: syz [ 299.609123][ T9] usb 2-1: SerialNumber: syz [ 299.673674][ T5698] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 33 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 299.687285][ T5685] net_ratelimit: 4 callbacks suppressed [ 299.687311][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.746817][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 299.887265][ T9] rtl8150 2-1:1.0: couldn't reset the device [ 299.895352][ T9] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 299.912269][ T9] usb 2-1: USB disconnect, device number 27 [ 299.935067][ T5685] usb 5-1: USB disconnect, device number 33 [ 299.968331][ T5685] usblp0: removed [ 299.987141][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.075094][ T5719] IPVS: starting estimator thread 0... [ 300.075492][ T809] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 300.167333][T11225] IPVS: using max 29 ests per chain, 69600 per kthread [ 300.707004][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.786852][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 301.030724][T11247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2066'. [ 301.138654][T11247] 8021q: adding VLAN 0 to HW filter on device bond2 [ 301.231868][T11249] bond2: (slave batadv1): Opening slave failed [ 301.337497][ C0] plantronics 0003:047F:FFFF.0029: usb_submit_urb(ctrl) failed: -1 [ 301.360284][ T5719] usb 3-1: USB disconnect, device number 30 [ 301.511781][T11254] netlink: 2068 bytes leftover after parsing attributes in process `syz.4.2068'. [ 301.747977][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.826899][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 301.862073][T11264] input: syz1 as /devices/virtual/input/input35 [ 301.906118][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 301.906137][ T30] audit: type=1326 audit(1779592467.921:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11259 comm="syz.0.2071" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77b719ce59 code=0x7fc00000 [ 301.950357][ T30] audit: type=1326 audit(1779592467.931:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11259 comm="syz.0.2071" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f77b719ce59 code=0x7fc00000 [ 302.011231][ T30] audit: type=1326 audit(1779592467.931:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11259 comm="syz.0.2071" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77b719ce59 code=0x7fc00000 [ 302.787478][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.876812][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 302.985060][T11305] input: syz0 as /devices/virtual/input/input36 [ 303.027013][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.428225][ T5685] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 303.574691][ T30] audit: type=1326 audit(1779592469.591:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11327 comm="syz.3.2099" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f73cdf9ce59 code=0x0 [ 303.631744][ T5685] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.661898][ T5685] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.684487][ T5685] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 303.707280][ T5685] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 303.754703][ T5685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.795286][ T5685] usb 1-1: config 0 descriptor?? [ 304.234418][ T5685] usbhid 1-1:0.0: can't add hid device: -71 [ 304.256972][ T5685] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 304.286608][ T5685] usb 1-1: USB disconnect, device number 37 [ 304.314814][T11347] netlink: 'syz.4.2106': attribute type 22 has an invalid length. [ 304.323465][T11347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2106'. [ 304.401676][T11347] netlink: 'syz.4.2106': attribute type 22 has an invalid length. [ 304.409878][T11347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2106'. [ 304.767208][ T5719] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 304.796865][ T5685] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 304.868460][ T809] net_ratelimit: 4 callbacks suppressed [ 304.868480][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.925152][T11357] tls_set_device_offload: netdev not found [ 304.948431][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 304.956982][ T5719] usb 5-1: Using ep0 maxpacket: 16 [ 304.963983][ T5719] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.978136][ T5685] usb 4-1: Using ep0 maxpacket: 16 [ 304.985467][ T5719] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.995801][ T5685] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 304.995834][ T5685] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.995855][ T5685] usb 4-1: Product: syz [ 304.995871][ T5685] usb 4-1: Manufacturer: syz [ 305.042795][ T5719] usb 5-1: config 0 interface 0 has no altsetting 0 [ 305.066806][ T5685] usb 4-1: SerialNumber: syz [ 305.072030][ T5719] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 305.087627][ T5685] usb 4-1: config 0 descriptor?? [ 305.102724][ T5719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.120317][ T5719] usb 5-1: config 0 descriptor?? [ 305.296653][T11349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.309494][T11349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.326189][ T5685] speedtch 4-1:0.0: speedtch_bind: data interface not found! [ 305.339691][ T5685] speedtch 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 305.365891][ T5685] usb 4-1: USB disconnect, device number 36 [ 305.386259][T11372] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.2117'. [ 305.556082][ T5719] mcp2221 0003:04D8:00DD.002A: unknown main item tag 0x0 [ 305.563442][ T5719] mcp2221 0003:04D8:00DD.002A: unknown main item tag 0x0 [ 305.571760][ T5719] mcp2221 0003:04D8:00DD.002A: item fetching failed at offset 2/5 [ 305.581387][ T5719] mcp2221 0003:04D8:00DD.002A: can't parse reports [ 305.589897][ T5719] mcp2221 0003:04D8:00DD.002A: probe with driver mcp2221 failed with error -22 [ 305.696991][ T5637] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 305.756684][ T5685] usb 5-1: USB disconnect, device number 34 [ 305.846852][ T5637] usb 1-1: Using ep0 maxpacket: 8 [ 305.854289][ T5637] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 305.863326][ T5637] usb 1-1: config 0 has no interface number 0 [ 305.872248][ T5637] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 305.891357][ T5637] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 305.909402][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.917663][ T5637] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 305.931595][ T5637] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 305.969830][ T5637] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 305.979617][ T5637] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.988227][ T5637] usb 1-1: Product: syz [ 305.992635][ T5637] usb 1-1: Manufacturer: syz [ 305.997009][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 306.002054][ T5637] usb 1-1: SerialNumber: syz [ 306.016689][ T5637] usb 1-1: config 0 descriptor?? [ 306.067245][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.245149][ T5637] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 306.427464][T11388] Invalid argument reading file caps for ./file0 [ 306.464595][ T5685] usb 1-1: USB disconnect, device number 38 [ 306.616820][ T5637] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 306.776841][ T5637] usb 4-1: Using ep0 maxpacket: 32 [ 306.804507][ T5637] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.842952][ T5637] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.880028][ T5637] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 306.902652][ T5637] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.924443][ T809] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 306.944029][ T5637] usb 4-1: config 0 descriptor?? [ 306.958889][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.021507][ T809] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 307.031278][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 307.225422][T11402] input: syz0 as /devices/virtual/input/input37 [ 307.423999][ T5637] savu 0003:1E7D:2D5A.002C: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 307.648635][ T5719] usb 4-1: USB disconnect, device number 37 [ 307.988816][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.067034][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 308.130554][T11418] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2136'. [ 308.148258][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.027261][ T5685] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 309.206798][ T5685] usb 2-1: Using ep0 maxpacket: 8 [ 309.222467][ T5685] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 309.248179][ T5685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.274472][ T5685] usb 2-1: Product: syz [ 309.288507][ T5685] usb 2-1: Manufacturer: syz [ 309.305786][ T5685] usb 2-1: SerialNumber: syz [ 309.329099][ T5685] usb 2-1: config 0 descriptor?? [ 309.354146][ T5685] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 309.516951][ T5698] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 309.686838][ T5698] usb 5-1: Using ep0 maxpacket: 32 [ 309.704988][ T5698] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 309.728202][ T5698] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 309.754006][ T5698] usb 5-1: config 0 interface 0 has no altsetting 0 [ 309.775926][ T5698] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 309.785571][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.794206][ T5698] usb 5-1: Product: syz [ 309.804268][ T5698] usb 5-1: Manufacturer: syz [ 309.810563][ T5698] usb 5-1: SerialNumber: syz [ 309.833743][ T5698] usb 5-1: config 0 descriptor?? [ 310.067114][ T5705] net_ratelimit: 5 callbacks suppressed [ 310.067135][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.146834][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 310.264620][ T5698] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 310.574982][ T5685] gspca_sonixj: reg_w1 err -71 [ 310.616979][ T5685] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 310.642394][ T5685] usb 2-1: USB disconnect, device number 28 [ 310.889833][ T5698] usb 5-1: USB disconnect, device number 35 [ 311.117478][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.186879][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 311.609131][T11472] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 311.631064][T11472] tipc: Started in network mode [ 311.636206][T11472] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 311.652791][T11472] tipc: Enabled bearer , priority 16 [ 311.661660][ T5637] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 311.749727][T11476] netlink: 'syz.0.2158': attribute type 9 has an invalid length. [ 311.767866][T11476] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.2158'. [ 311.847388][ T5637] usb 4-1: Using ep0 maxpacket: 32 [ 311.873654][ T5637] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 311.889770][ T5637] usb 4-1: config 0 has no interface number 0 [ 311.910782][ T5637] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 311.924271][ T5637] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.947892][ T5637] usb 4-1: Product: syz [ 311.952202][ T5637] usb 4-1: Manufacturer: syz [ 311.957475][ T5637] usb 4-1: SerialNumber: syz [ 311.993452][ T5637] usb 4-1: config 0 descriptor?? [ 312.018007][ T5637] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 312.150463][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.158710][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.214048][T11486] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2162'. [ 312.226952][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 312.252397][ T5637] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 312.292182][ T5637] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 312.463248][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 6 [ 312.665965][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 312.678818][ T5637] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 312.692888][ T5719] usb 4-1: USB disconnect, device number 38 [ 312.718486][ T5719] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 312.742120][ T5719] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 312.763837][ T5719] quatech2 4-1:0.51: device disconnected [ 312.770110][ T9] tipc: Node number set to 10005162 [ 312.859039][ T5637] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 312.868535][ T5637] usb 1-1: config 0 has no interface number 0 [ 312.874781][ T5637] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.886640][ T5637] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.911754][ T5637] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 312.924570][ T5637] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.944993][ T5637] usb 1-1: config 0 descriptor?? [ 313.187041][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.266923][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 313.421109][ T5637] input: HID 04d9:a055 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:04D9:A055.002D/input/input38 [ 313.721927][ T5637] holtek_kbd 0003:04D9:A055.002D: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.0-1/input1 [ 313.791817][ T5637] usb 1-1: USB disconnect, device number 39 [ 313.947234][T11517] fido_id[11517]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 314.237056][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.916966][ T5637] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 315.088953][ T5637] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 315.105366][T11559] netlink: 'syz.4.2192': attribute type 20 has an invalid length. [ 315.121229][ T5637] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 315.148548][T11559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2192'. [ 315.158174][ T5637] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 315.170582][ T5637] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 315.195171][ T5719] net_ratelimit: 3 callbacks suppressed [ 315.195192][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.217959][ T5637] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 315.231651][ T5637] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 315.247569][ T5637] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 315.261772][ T5637] usb 2-1: Product: syz [ 315.266079][ T5637] usb 2-1: Manufacturer: syz [ 315.286932][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.294498][ T5637] cdc_wdm 2-1:1.0: skipping garbage [ 315.308920][T11559] netlink: 'syz.4.2192': attribute type 20 has an invalid length. [ 315.312751][ T5637] cdc_wdm 2-1:1.0: skipping garbage [ 315.332989][ T5637] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 315.339250][ T9] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 315.352739][ T5637] cdc_wdm 2-1:1.0: Unknown control protocol [ 315.358845][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 315.376818][T11559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2192'. [ 315.519650][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.536004][ T9] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 315.560001][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 315.591441][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 315.602687][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 315.611527][ T9] usb 4-1: SerialNumber: syz [ 315.625871][ T9] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 315.640159][ T9] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 315.647613][ T9] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 316.041375][ T5698] usb 4-1: USB disconnect, device number 39 [ 316.069863][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -EPIPE [ 316.310010][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.386934][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 316.780591][ T5698] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 316.950516][ T5698] usb 5-1: unable to get BOS descriptor or descriptor too short [ 316.976263][ T5698] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 317.023794][ T5698] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 317.044909][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.064903][ T5698] usb 5-1: Product: syz [ 317.076140][ T5698] usb 5-1: Manufacturer: syz [ 317.094802][ T5698] usb 5-1: SerialNumber: syz [ 317.110906][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.117570][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.137481][ T24] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 317.319977][ T24] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 317.339215][ T24] usb 1-1: config 0 has no interface number 0 [ 317.354356][ T24] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 317.371838][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.387157][ T24] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 317.419533][ T5698] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 317.426556][ T24] usb 1-1: config 0 interface 255 has no altsetting 0 [ 317.433509][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 317.452515][ T24] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 317.473867][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.498904][ T24] usb 1-1: config 0 descriptor?? [ 317.514363][ T24] cp210x 1-1:0.255: cp210x converter detected [ 317.747566][ T5637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.780974][ T5705] usb 2-1: USB disconnect, device number 29 [ 317.815388][T11614] netlink: 384 bytes leftover after parsing attributes in process `syz.2.2214'. [ 317.845912][T11614] netlink: 384 bytes leftover after parsing attributes in process `syz.2.2214'. [ 317.930447][ T24] cp210x 1-1:0.255: failed to get vendor val 0x000e size 3: -32 [ 318.164880][ T24] cp210x 1-1:0.255: GPIO initialisation failed: -19 [ 318.193473][ T24] usb 1-1: cp210x converter now attached to ttyUSB0 [ 318.228063][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.260236][ T5698] usb 5-1: failed to enable PITCH for EP 0x82 [ 318.275915][ T5698] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 318.304716][ T5698] usb 5-1: clock source 0 is not valid, cannot use [ 318.332289][ T5698] usb 5-1: 2:1: cannot get freq (v2/v3): err -71 [ 318.353820][ T5698] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 318.357286][ T30] audit: type=1326 audit(1779592484.371:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11626 comm="syz.1.2220" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208139ce59 code=0x7ffc0000 [ 318.393704][ T30] audit: type=1326 audit(1779592484.371:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11626 comm="syz.1.2220" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208139ce59 code=0x7ffc0000 [ 318.398819][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.421889][ T30] audit: type=1326 audit(1779592484.411:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11626 comm="syz.1.2220" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208139ce59 code=0x7ffc0000 [ 318.477640][ T30] audit: type=1326 audit(1779592484.411:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11626 comm="syz.1.2220" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208139ce59 code=0x7ffc0000 [ 318.506094][ T30] audit: type=1326 audit(1779592484.411:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11626 comm="syz.1.2220" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f208139ce59 code=0x7ffc0000 [ 318.534140][ T30] audit: type=1326 audit(1779592484.411:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11626 comm="syz.1.2220" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208139ce59 code=0x7ffc0000 [ 318.558246][ T5637] usb 1-1: USB disconnect, device number 40 [ 318.565267][ T30] audit: type=1326 audit(1779592484.411:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11626 comm="syz.1.2220" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208139ce59 code=0x7ffc0000 [ 318.611172][ T5637] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 318.626979][ T30] audit: type=1326 audit(1779592484.411:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11626 comm="syz.1.2220" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208139ce59 code=0x7ffc0000 [ 318.653701][ T30] audit: type=1326 audit(1779592484.411:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11626 comm="syz.1.2220" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f208139ce59 code=0x7ffc0000 [ 318.678695][ T30] audit: type=1326 audit(1779592484.411:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11626 comm="syz.1.2220" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208139ce59 code=0x7ffc0000 [ 318.682114][ T5637] cp210x 1-1:0.255: device disconnected [ 318.791840][ T5698] usb 5-1: USB disconnect, device number 36 [ 318.936315][ T5747] udevd[5747]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 319.592263][T11653] netlink: 'syz.1.2232': attribute type 14 has an invalid length. [ 319.612304][T11653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2232'. [ 319.638279][ T9985] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.647685][T11653] netlink: 'syz.1.2232': attribute type 14 has an invalid length. [ 319.655741][ T9985] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.665581][T11653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2232'. [ 319.678920][ T9988] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.696852][ T9988] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.797821][T11660] netlink: 'syz.1.2235': attribute type 39 has an invalid length. [ 320.029086][T11664] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2237'. [ 320.053708][T11666] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 320.308288][ T7782] net_ratelimit: 3 callbacks suppressed [ 320.308308][ T7782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.322465][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.416889][ T5698] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 320.468215][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.546828][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 320.570090][ T5685] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 320.602290][ T5698] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 320.620676][ T5698] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 320.636913][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.654274][ T5698] usb 2-1: Product: syz [ 320.666866][ T5698] usb 2-1: Manufacturer: syz [ 320.671716][ T5698] usb 2-1: SerialNumber: syz [ 320.701740][ T5698] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 320.736826][ T5685] usb 3-1: Using ep0 maxpacket: 8 [ 320.750459][ T5685] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.772453][ T5685] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.787280][T11690] input: syz1 as /devices/virtual/input/input39 [ 320.805127][ T5685] usb 3-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 320.844814][ T5685] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.891240][ T5685] usb 3-1: config 0 descriptor?? [ 321.052400][T11695] netlink: 'syz.0.2251': attribute type 2 has an invalid length. [ 321.060815][T11695] netlink: 'syz.0.2251': attribute type 4 has an invalid length. [ 321.068693][T11695] netlink: 'syz.0.2251': attribute type 8 has an invalid length. [ 321.077346][T11695] netlink: 'syz.0.2251': attribute type 9 has an invalid length. [ 321.085185][T11695] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2251'. [ 321.094812][T11697] netlink: 'syz.3.2250': attribute type 1 has an invalid length. [ 321.094835][T11697] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2250'. [ 321.138847][ T5698] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 321.166835][ T5698] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 321.186535][ T5698] usb 2-1: media controller created [ 321.251541][ T5698] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 321.267187][ T5637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.358635][ T5685] cherry 0003:046A:0027.002E: fixing up Cherry Cymotion report descriptor [ 321.395931][ T5685] cherry 0003:046A:0027.002E: unknown main item tag 0x2 [ 321.422599][ T5685] cherry 0003:046A:0027.002E: unknown main item tag 0x0 [ 321.446960][ T5685] cherry 0003:046A:0027.002E: unknown main item tag 0x0 [ 321.456183][ T5685] cherry 0003:046A:0027.002E: unknown main item tag 0x0 [ 321.489086][ T5685] cherry 0003:046A:0027.002E: unknown main item tag 0x0 [ 321.508151][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.528720][ T5685] cherry 0003:046A:0027.002E: unknown main item tag 0x0 [ 321.542034][ T5685] cherry 0003:046A:0027.002E: unknown main item tag 0x0 [ 321.549963][ T5637] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 321.570587][ T5685] cherry 0003:046A:0027.002E: unknown main item tag 0x0 [ 321.587044][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 321.605560][ T5685] cherry 0003:046A:0027.002E: unknown main item tag 0x0 [ 321.614091][ T5685] cherry 0003:046A:0027.002E: unknown main item tag 0x0 [ 321.628640][ T5685] cherry 0003:046A:0027.002E: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.2-1/input0 [ 321.714038][ T5637] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.747985][ T5637] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 321.782174][ T5637] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 321.802721][ T9] usb 2-1: USB disconnect, device number 30 [ 321.821165][T11676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.831874][ T5637] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.841601][T11676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.853975][ T5637] usb 4-1: Product: syz [ 321.879897][ T5637] usb 4-1: Manufacturer: syz [ 321.892317][ T5719] usb 3-1: USB disconnect, device number 31 [ 321.901128][ T5637] usb 4-1: SerialNumber: syz [ 321.928798][ T5637] usb 4-1: 0:2 : does not exist [ 322.549098][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.627032][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 323.279653][ T5637] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 323.447047][ T5637] usb 1-1: Using ep0 maxpacket: 8 [ 323.463587][ T5637] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 323.483198][ T5637] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.499909][ T5637] usb 1-1: Product: syz [ 323.517050][ T5637] usb 1-1: Manufacturer: syz [ 323.527966][ T5637] usb 1-1: SerialNumber: syz [ 323.541800][ T5637] usb 1-1: config 0 descriptor?? [ 323.587979][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.801576][ T5637] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 324.274882][ T5698] usb 4-1: USB disconnect, device number 40 [ 324.414639][ T5637] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 324.448941][ T5637] usb 1-1: USB disconnect, device number 41 [ 324.665225][T11772] netlink: 'syz.3.2279': attribute type 1 has an invalid length. [ 324.682591][T11772] netlink: 'syz.3.2279': attribute type 2 has an invalid length. [ 324.692427][T11772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2279'. [ 324.758341][T11778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2281'. [ 324.778635][T11778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2281'. [ 325.668604][ T5685] net_ratelimit: 4 callbacks suppressed [ 325.668627][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.746794][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 325.838969][T11820] netlink: 203340 bytes leftover after parsing attributes in process `syz.4.2299'. [ 325.996964][ T808] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 326.081451][ T9981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.090039][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.197244][ T808] usb 1-1: Using ep0 maxpacket: 16 [ 326.212296][ T808] usb 1-1: unable to get BOS descriptor or descriptor too short [ 326.236267][ T808] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 326.279764][ T808] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 326.304234][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.330416][ T808] usb 1-1: Product: syz [ 326.334940][ T808] usb 1-1: Manufacturer: syz [ 326.350123][ T808] usb 1-1: SerialNumber: syz [ 326.446822][ T5685] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 326.616048][ T808] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 326.642308][ T808] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 326.648116][ T5685] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 326.687015][ T5685] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 326.706186][ T5685] usb 5-1: Product: syz [ 326.712591][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.733140][ T5685] usb 5-1: Manufacturer: syz [ 326.744932][ T5685] usb 5-1: SerialNumber: syz [ 326.762771][ T5685] usb 5-1: config 0 descriptor?? [ 326.778351][ T5685] ch341 5-1:0.0: ch341-uart converter detected [ 326.796844][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 326.919330][ T5698] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 327.006796][ T808] usb 1-1: 2:1 : bogus bTerminalLink 6 [ 327.086820][ T5698] usb 4-1: Using ep0 maxpacket: 32 [ 327.095803][ T5698] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 327.104179][ T5698] usb 4-1: config 0 has no interface number 0 [ 327.111340][ T5698] usb 4-1: config 0 interface 12 has no altsetting 0 [ 327.121636][ T5698] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 327.131549][ T5698] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.141839][ T5698] usb 4-1: Product: syz [ 327.146223][ T5698] usb 4-1: Manufacturer: syz [ 327.151040][ T5698] usb 4-1: SerialNumber: syz [ 327.165273][ T5698] usb 4-1: config 0 descriptor?? [ 327.171143][ T5705] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 327.280857][ T808] usb 1-1: USB disconnect, device number 42 [ 327.353421][ T5705] usb 2-1: Using ep0 maxpacket: 32 [ 327.360128][ T5637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.368538][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.404497][ T5644] udevd[5644]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 327.420806][ T5705] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 327.429540][ T5705] usb 2-1: config 0 has no interface number 0 [ 327.441403][ T5705] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 327.461778][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.473797][ T5705] usb 2-1: Product: syz [ 327.497163][ T5705] usb 2-1: Manufacturer: syz [ 327.510710][ T5705] usb 2-1: SerialNumber: syz [ 327.529503][ T5705] usb 2-1: config 0 descriptor?? [ 327.540918][ T5705] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 327.749277][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.766002][ T5705] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 327.791598][ T5705] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 327.797082][ T5685] ch341-uart ttyUSB0: break control not supported, using simulated break [ 327.801435][ T5685] usb 5-1: ch341-uart converter now attached to ttyUSB0 [ 327.810831][ T5685] usb 5-1: USB disconnect, device number 37 [ 327.824175][ T5685] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 327.825889][ T5685] ch341 5-1:0.0: device disconnected [ 327.836810][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 328.189505][T11860] sctp: [Deprecated]: syz.2.2315 (pid 11860) Use of struct sctp_assoc_value in delayed_ack socket option. [ 328.189505][T11860] Use struct sctp_sack_info instead [ 328.367899][ T5719] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 328.419870][ T5698] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: 98 failed: -71 [ 328.431472][ T5698] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 328.441583][ T5698] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 328.449738][ T5698] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 328.478568][ T5698] usb 4-1: USB disconnect, device number 41 [ 328.545529][ T5719] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 328.587172][ T5719] usb 1-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 328.603854][ T5719] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.629567][ T5719] usb 1-1: config 0 descriptor?? [ 328.638777][T11858] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 328.792699][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 328.794544][ T5637] usb 2-1: USB disconnect, device number 31 [ 328.840595][ T5637] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 328.880742][ T5637] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 328.895516][ T5637] quatech2 2-1:0.51: device disconnected [ 329.009216][ T5698] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 329.106413][ T5719] hid_parser_main: 40 callbacks suppressed [ 329.106438][ T5719] wacom 0003:056A:5000.002F: unknown main item tag 0x0 [ 329.135988][ T5719] wacom 0003:056A:5000.002F: unknown main item tag 0x0 [ 329.150229][ T5719] wacom 0003:056A:5000.002F: unknown main item tag 0x0 [ 329.164090][ T5719] wacom 0003:056A:5000.002F: unknown main item tag 0x0 [ 329.178689][ T5698] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 329.185362][ T5719] wacom 0003:056A:5000.002F: unknown main item tag 0x0 [ 329.198296][ T5698] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 329.219506][ T5719] wacom 0003:056A:5000.002F: unknown main item tag 0x0 [ 329.220385][ T5698] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 329.235708][ T5698] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 329.246834][ T5698] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 329.259256][ T5719] wacom 0003:056A:5000.002F: unknown main item tag 0x0 [ 329.261325][ T5698] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 329.283607][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 329.298372][ T5698] usb 5-1: Product: syz [ 329.304725][ T5719] wacom 0003:056A:5000.002F: unknown main item tag 0x0 [ 329.306101][ T5698] usb 5-1: Manufacturer: syz [ 329.330537][ T5719] wacom 0003:056A:5000.002F: unknown main item tag 0x0 [ 329.350612][ T5698] cdc_wdm 5-1:1.0: skipping garbage [ 329.361707][ T5719] wacom 0003:056A:5000.002F: unknown main item tag 0x0 [ 329.367798][ T5698] cdc_wdm 5-1:1.0: skipping garbage [ 329.383323][ T5698] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 329.401414][ T5719] wacom 0003:056A:5000.002F: reserved main item tag 0xd [ 329.403843][ T5698] cdc_wdm 5-1:1.0: Unknown control protocol [ 329.503728][ T5719] wacom 0003:056A:5000.002F: hidraw0: USB HID v7f.fd Device [HID 056a:5000] on usb-dummy_hcd.0-1/input0 [ 329.543591][ T5719] usb 1-1: USB disconnect, device number 43 [ 329.617406][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 329.624084][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 329.630480][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 329.637130][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 329.643550][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 329.650205][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 329.658044][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 329.664709][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 329.671510][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 329.678162][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 329.684582][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 329.691222][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 329.698760][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 329.705416][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 329.713141][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 329.719788][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 329.726402][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 329.733049][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 329.739630][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 329.746274][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 329.753154][ T5698] usb 5-1: USB disconnect, device number 38 [ 329.759181][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 329.863994][T11888] fido_id[11888]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 330.106843][ T5698] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 330.299531][ T5698] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 330.321299][ T5698] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 330.339946][ T5698] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 330.360159][ T5698] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 330.388233][ T5698] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 330.403758][ T5698] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 330.415982][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 330.424454][ T5698] usb 5-1: Product: syz [ 330.428984][ T5698] usb 5-1: Manufacturer: syz [ 330.441761][ T5698] cdc_wdm 5-1:1.0: skipping garbage [ 330.448277][ T5637] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 330.460390][ T5698] cdc_wdm 5-1:1.0: skipping garbage [ 330.468547][ T5698] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 330.474570][ T5698] cdc_wdm 5-1:1.0: Unknown control protocol [ 330.601114][ T5637] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.616319][ T5637] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.626930][ T5705] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 330.628663][ T5637] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 330.648814][ T5637] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 330.657973][ T5637] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.672516][ T5637] usb 1-1: config 0 descriptor?? [ 330.708014][ T5698] usb 5-1: USB disconnect, device number 39 [ 330.799063][ T5705] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 330.807885][ T5705] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.821014][ T5705] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.831344][ T5705] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 330.844928][ T5705] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 330.854379][ T5705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.867035][ T24] net_ratelimit: 5 callbacks suppressed [ 330.867055][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.890744][ T5705] usb 3-1: config 0 descriptor?? [ 330.946909][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 331.113602][ T5637] plantronics 0003:047F:FFFF.0030: reserved main item tag 0xd [ 331.138292][ T5637] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 331.187927][ T9987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.196480][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.371205][ T5705] plantronics 0003:047F:FFFF.0031: reserved main item tag 0xd [ 331.407685][ T9] usb 1-1: USB disconnect, device number 44 [ 331.440130][ T5705] plantronics 0003:047F:FFFF.0031: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 331.621867][ T5705] usb 3-1: USB disconnect, device number 32 [ 331.716598][T11925] netlink: 'syz.4.2341': attribute type 19 has an invalid length. [ 331.732432][T11925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2341'. [ 331.796166][T11925] netlink: 'syz.4.2341': attribute type 19 has an invalid length. [ 331.806145][T11925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2341'. [ 331.924052][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.986885][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 332.721216][T11958] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2357'. [ 332.757386][T11961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2358'. [ 332.795201][T11961] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2358'. [ 332.835315][T11961] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2358'. [ 332.967287][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.026827][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 333.427054][ T5637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.722258][T11991] bond3: entered promiscuous mode [ 333.728230][T11991] 8021q: adding VLAN 0 to HW filter on device bond3 [ 333.988679][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.247593][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 334.412740][ T9] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 334.448228][ T9] usb 2-1: config 0 has no interface number 0 [ 334.473327][ T9] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 334.493640][ T9] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 334.526604][ T9] usb 2-1: config 0 interface 255 has no altsetting 0 [ 334.546324][ T9] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 334.576046][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.596034][ T9] usb 2-1: config 0 descriptor?? [ 334.610387][ T9] ums-realtek 2-1:0.255: USB Mass Storage device detected [ 334.757157][ T5705] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 334.833676][ T9] usb 2-1: USB disconnect, device number 32 [ 334.926926][ T5705] usb 4-1: Using ep0 maxpacket: 32 [ 334.951375][ T5705] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 334.965472][ T5705] usb 4-1: config 2 has no interface number 0 [ 334.976460][ T5705] usb 4-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 335.004258][ T5705] usb 4-1: config 2 interface 88 has no altsetting 0 [ 335.044003][ T5705] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 335.054460][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.076832][ T5705] usb 4-1: Product: syz [ 335.081099][ T5705] usb 4-1: Manufacturer: syz [ 335.085766][ T5705] usb 4-1: SerialNumber: syz [ 335.111927][T12014] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 335.358119][T12014] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 335.501637][T12040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2391'. [ 335.577094][ T5685] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 335.751976][ T5685] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 335.775612][ T5685] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 335.806902][ T5685] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 335.816963][ T5685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.847503][T12036] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 335.857144][ T5637] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 335.925676][ T5685] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 336.018548][ T5637] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.061515][ T5637] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.077064][ T24] net_ratelimit: 3 callbacks suppressed [ 336.077097][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.094870][ T5637] usb 3-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 336.105106][ T5637] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.150020][ T5637] usb 3-1: config 0 descriptor?? [ 336.156949][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 336.241542][ T5685] usb 1-1: USB disconnect, device number 45 [ 336.401739][ T5705] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 336.443917][ T5705] asix 4-1:2.88: probe with driver asix failed with error -71 [ 336.467769][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.486066][ T5705] usb 4-1: USB disconnect, device number 42 [ 336.651145][ T5637] stadia 0003:18D1:9400.0032: unbalanced delimiter at end of report description [ 336.688920][ T5637] stadia 0003:18D1:9400.0032: parse failed [ 336.707146][ T5637] stadia 0003:18D1:9400.0032: probe with driver stadia failed with error -22 [ 336.853350][ T5705] usb 3-1: USB disconnect, device number 33 [ 336.948309][ T5637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.949743][ T9985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.966908][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.107005][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.186901][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 337.590321][ T5637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.684571][ T30] kauditd_printk_skb: 293 callbacks suppressed [ 337.684592][ T30] audit: type=1804 audit(1779592503.701:559): pid=12080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2408" name="file1" dev="ramfs" ino=43694 res=1 errno=0 [ 337.829543][T12087] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 338.156585][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.514091][T12110] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2422'. [ 338.864600][T12120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2427'. [ 338.902929][T12123] netlink: 'syz.2.2428': attribute type 7 has an invalid length. [ 338.942219][T12123] netlink: 'syz.2.2428': attribute type 7 has an invalid length. [ 338.988290][T12123] netlink: 'syz.2.2428': attribute type 7 has an invalid length. [ 339.667515][ T4943] Bluetooth: hci0: command 0x0406 tx timeout [ 339.834457][ T30] audit: type=1326 audit(1779592505.851:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12142 comm="syz.0.2438" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f77b719ce59 code=0x0 [ 340.084621][T12153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2440'. [ 340.527737][ T30] audit: type=1326 audit(1779592506.551:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12159 comm="syz.2.2443" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e5939ce59 code=0x0 [ 340.636901][ T808] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 340.806877][ T808] usb 5-1: Using ep0 maxpacket: 16 [ 340.821989][ T808] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 340.834012][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.848584][ T808] usb 5-1: Product: syz [ 340.859652][ T808] usb 5-1: Manufacturer: syz [ 340.871205][ T808] usb 5-1: SerialNumber: syz [ 340.890565][ T808] usb 5-1: config 0 descriptor?? [ 340.910875][ T808] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 341.277800][ T5698] net_ratelimit: 6 callbacks suppressed [ 341.277830][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.346860][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 341.391819][T12183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2452'. [ 341.403592][T12183] netlink: 75 bytes leftover after parsing attributes in process `syz.2.2452'. [ 341.540224][ T808] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 341.579418][ T808] usb 5-1: USB disconnect, device number 40 [ 342.308550][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.382763][T12211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.393380][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 342.401169][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.466843][ T5698] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 342.551374][ T5637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.629493][ T5698] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.641033][ T5698] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 342.651274][ T5698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.667405][ T5698] usb 2-1: config 0 descriptor?? [ 342.895078][ T5698] usbhid 2-1:0.0: can't add hid device: -71 [ 342.914039][ T5698] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 342.929782][ T5698] usb 2-1: USB disconnect, device number 33 [ 342.970820][T12230] fuse: root generation should be zero [ 343.349258][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.367246][ T5637] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 343.426790][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 343.476877][ T5698] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 343.536832][ T5637] usb 2-1: Using ep0 maxpacket: 32 [ 343.560529][ T5637] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.591655][ T5637] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 343.620736][ T5637] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.652417][ T5637] usb 2-1: config 0 descriptor?? [ 343.663861][ T5637] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 343.698478][ T5637] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 343.933589][ C0] ldusb 2-1:0.0: Ring buffer overflow, 8 bytes dropped [ 344.013756][ T5698] usb 1-1: unable to get BOS descriptor or descriptor too short [ 344.033627][ T5698] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 344.050268][ T5698] usb 1-1: can't read configurations, error -71 [ 344.177516][T12248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.272314][ C0] ldusb 2-1:0.0: Ring buffer overflow, 8 bytes dropped [ 344.794375][ T5633] Bluetooth: hci4: command 0x0406 tx timeout [ 345.352298][ T5637] usb 2-1: USB disconnect, device number 34 [ 345.375583][ T5637] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 346.009929][T12287] netlink: 'syz.0.2492': attribute type 11 has an invalid length. [ 346.043993][T12287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2492'. [ 346.067905][T12287] netlink: 'syz.0.2492': attribute type 11 has an invalid length. [ 346.086853][T12287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2492'. [ 346.347073][T12299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2497'. [ 346.469959][ T5698] net_ratelimit: 15 callbacks suppressed [ 346.469980][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.546961][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 346.562010][ T9985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.570576][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.693455][ T30] audit: type=1326 audit(1779592512.711:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12310 comm="syz.3.2503" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f73cdf9ce59 code=0x0 [ 347.187412][ T5637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.509162][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.596787][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 347.785817][ T30] audit: type=1326 audit(1779592513.801:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12342 comm="syz.0.2515" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f77b719ce59 code=0x0 [ 347.847692][ T5637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.557926][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.626961][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 348.776906][ T809] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 348.927194][ T809] usb 3-1: Using ep0 maxpacket: 32 [ 348.958184][ T809] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 348.981015][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.009046][ T809] usb 3-1: config 0 descriptor?? [ 349.156607][T12382] input: syz1 as /devices/virtual/input/input45 [ 349.260545][ T809] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 349.284581][ T809] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 349.288608][ T809] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 349.341361][ T809] usb 3-1: media controller created [ 349.414351][ T809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 350.116863][ T5637] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 350.124569][ T808] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 350.292226][ T5637] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 350.307199][ T808] usb 4-1: unable to get BOS descriptor or descriptor too short [ 350.316829][ T809] stb0899_attach: Driver disabled by Kconfig [ 350.327613][ T808] usb 4-1: config 1 has an invalid descriptor of length 155, skipping remainder of the config [ 350.340178][ T5637] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 350.340926][ T809] az6027: no front-end attached [ 350.340926][ T809] [ 350.351170][ T808] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 350.351217][ T808] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 247, changing to 7 [ 350.351255][ T808] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 9065, setting to 1024 [ 350.369195][ T808] usb 4-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 350.418753][ T809] az6027: usb out operation failed. (-71) [ 350.428028][ T5637] usb 5-1: New USB device found, idVendor=1b3d, idProduct=01bb, bcdDevice= 0.11 [ 350.433115][ T809] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 350.444514][ T5637] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 350.453001][ T5637] usb 5-1: Product: syz [ 350.458049][ T5637] usb 5-1: SerialNumber: syz [ 350.462741][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.472865][ T808] usb 4-1: Manufacturer: á°Œ [ 350.480982][ T808] usb 4-1: SerialNumber: syz [ 350.486303][T12401] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 350.499287][ T809] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input46 [ 350.523296][T12401] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 350.543948][ T809] dvb-usb: schedule remote query interval to 400 msecs. [ 350.561803][ T809] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 350.572677][ T5637] ftdi_sio 5-1:1.0: FTDI USB Serial Device converter detected [ 350.594269][ T5637] usb 5-1: Detected SIO [ 350.599586][ T809] usb 3-1: USB disconnect, device number 34 [ 350.612695][ T5637] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 350.770654][ T809] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 350.875981][ T5637] usb 5-1: USB disconnect, device number 41 [ 350.921092][ T5637] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 350.951051][ T5637] ftdi_sio 5-1:1.0: device disconnected [ 351.142581][ T808] usb 4-1: USB disconnect, device number 43 [ 351.426362][ T30] audit: type=1326 audit(1779592517.441:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12434 comm="syz.0.2554" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f77b719ce59 code=0x0 [ 351.545340][T12438] syzkaller1: entered promiscuous mode [ 351.560539][T12438] syzkaller1: entered allmulticast mode [ 351.668610][ T809] net_ratelimit: 6 callbacks suppressed [ 351.668699][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.670346][ T9985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.690923][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.756868][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 352.707034][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.717496][ T809] usb 1-1: new low-speed USB device number 48 using dummy_hcd [ 352.786974][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 352.896548][ T809] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.921555][ T809] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 352.943912][ T809] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 352.957811][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.003482][ T809] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 353.018973][ T809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.040405][T12459] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 353.058126][ T809] hub 1-1:1.0: bad descriptor, ignoring hub [ 353.066311][ T809] hub 1-1:1.0: probe with driver hub failed with error -5 [ 353.091939][ T809] cdc_wdm 1-1:1.0: skipping garbage [ 353.098959][ T809] cdc_wdm 1-1:1.0: skipping garbage [ 353.113746][ T809] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 353.122312][ T809] cdc_wdm 1-1:1.0: Unknown control protocol [ 353.370683][ C1] wdm_int_callback: 4 callbacks suppressed [ 353.370795][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 353.383312][ C1] wdm_int_callback: 4 callbacks suppressed [ 353.383333][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 353.395375][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 353.752167][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.765432][ T809] usb 1-1: USB disconnect, device number 48 [ 353.826958][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 353.917159][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.006605][T12499] ======================================================= [ 354.006605][T12499] WARNING: The mand mount option has been deprecated and [ 354.006605][T12499] and is ignored by this kernel. Remove the mand [ 354.006605][T12499] option from the mount to silence this warning. [ 354.006605][T12499] ======================================================= [ 354.250438][T12504] kvm: user requested TSC rate below hardware speed [ 354.693309][ T30] audit: type=1326 audit(1779592520.711:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12523 comm="syz.2.2579" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e5939ce59 code=0x0 [ 355.718217][T12556] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 356.246435][T12568] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2598'. [ 356.271994][T12568] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2598'. [ 356.352810][T12571] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 356.446009][T12574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2600'. [ 356.718976][T12574] 8021q: adding VLAN 0 to HW filter on device bond2 [ 356.754242][T12582] vivid-000: disconnect [ 356.788274][ T808] net_ratelimit: 4 callbacks suppressed [ 356.788292][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.823213][T12577] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 356.875143][T12577] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 356.890238][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.946899][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 356.971714][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.353098][T12596] pim6reg1: entered promiscuous mode [ 357.372612][T12596] pim6reg1: entered allmulticast mode [ 357.427444][T12580] vivid-000: reconnect [ 357.429664][ T1159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.440865][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.910284][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.948133][T12612] ªªªªªª: renamed from wg2 [ 357.986908][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 358.050862][T12618] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 358.075915][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.086166][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.861071][T12638] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.293910][T12707] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2653'. [ 361.676906][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 361.771126][T12723] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2659'. [ 361.849146][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806b230800: rx timeout, send abort [ 361.860809][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806b230800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 361.883038][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.915292][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.934614][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 361.965138][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.018812][ T9] usb 3-1: config 0 descriptor?? [ 362.068628][ T5685] net_ratelimit: 7 callbacks suppressed [ 362.068645][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.146789][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 362.288153][ T5631] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 362.376893][ T808] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 362.450752][ T5631] usb 5-1: Using ep0 maxpacket: 32 [ 362.466624][ T9] keytouch 0003:0926:3333.0033: fixing up Keytouch IEC report descriptor [ 362.477037][ T5631] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.492722][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0033/input/input47 [ 362.505066][ T5631] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.516040][ T5631] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 362.526027][ T5631] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.540418][ T5631] usb 5-1: config 0 descriptor?? [ 362.569784][ T808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.585158][ T5631] hub 5-1:0.0: USB hub found [ 362.606116][ T808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.629900][ T808] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 362.646395][ T808] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 362.657294][ T9] keytouch 0003:0926:3333.0033: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 362.674725][ T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.699838][ T808] usb 2-1: config 0 descriptor?? [ 362.786270][ T5631] hub 5-1:0.0: 1 port detected [ 362.877473][ T5685] usb 3-1: USB disconnect, device number 35 [ 363.107720][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.149676][ T808] plantronics 0003:047F:FFFF.0034: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 363.190636][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 363.198083][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.208645][ T1159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.217170][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.430875][ T9] hub 5-1:0.0: activate --> -90 [ 363.548136][T12751] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2671'. [ 363.839725][ T5631] usb 5-1: USB disconnect, device number 42 [ 364.147010][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.155327][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.226787][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 364.369371][ T24] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 364.448669][ C1] plantronics 0003:047F:FFFF.0034: usb_submit_urb(ctrl) failed: -1 [ 364.538870][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 364.562540][ T24] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 364.582382][ T24] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 364.610201][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.647170][ T24] usb 3-1: Product: syz [ 364.669365][ T24] usb 3-1: Manufacturer: syz [ 364.680446][ T24] usb 3-1: SerialNumber: syz [ 364.699736][ T24] usb 3-1: config 0 descriptor?? [ 364.722740][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 364.744699][ T24] usb 3-1: setting power ON [ 364.771625][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 364.802985][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 364.822507][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 364.832659][ T24] usb 3-1: media controller created [ 364.854340][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 364.885176][ T24] usb 3-1: selecting invalid altsetting 6 [ 364.894484][ T24] usb 3-1: digital interface selection failed (-22) [ 364.901547][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 364.913987][ T24] usb 3-1: setting power OFF [ 364.929815][T12776] dvb-usb: bulk message failed: -22 (3/0) [ 364.950633][T12776] cxusb: i2c rd: len=147 is too big! [ 364.950633][T12776] [ 364.959769][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 364.969199][T12776] cxusb: i2c wr: len=79 is too big! [ 364.969199][T12776] [ 364.981869][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 365.018364][ T24] (NULL device *): no alternate interface [ 365.113361][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 365.162109][ T24] usb 3-1: USB disconnect, device number 36 [ 365.222772][T12796] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 365.232439][ T5685] usb 2-1: USB disconnect, device number 35 [ 366.877037][ T5685] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 366.959219][T12842] netlink: 'syz.2.2708': attribute type 10 has an invalid length. [ 367.010696][T12842] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 367.020002][T12843] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2708'. [ 367.064421][T12843] bridge_slave_1: left allmulticast mode [ 367.075714][ T5685] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 119, changing to 4 [ 367.091470][ T5685] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 40960, setting to 1023 [ 367.103699][T12843] bridge_slave_1: left promiscuous mode [ 367.109996][T12843] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.118394][ T5685] usb 4-1: config 0 interface 0 has no altsetting 0 [ 367.128679][ T5685] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 367.139644][ T5685] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 367.149777][T12843] bridge_slave_0: left allmulticast mode [ 367.155642][ T5685] usb 4-1: Product: syz [ 367.160272][ T5685] usb 4-1: Manufacturer: syz [ 367.165045][T12843] bridge_slave_0: left promiscuous mode [ 367.172901][ T5685] usb 4-1: SerialNumber: syz [ 367.179121][T12843] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.188375][ T808] net_ratelimit: 4 callbacks suppressed [ 367.188394][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.206265][ T5685] usb 4-1: config 0 descriptor?? [ 367.231181][ T5685] usb 4-1: selecting invalid altsetting 0 [ 367.243679][T12843] bond0: (slave bridge0): Releasing backup interface [ 367.268894][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.347009][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 367.570151][ T808] usb 4-1: USB disconnect, device number 44 [ 367.580980][T12831] usb 4-1: cannot submit urb 0, error -19: no device [ 367.598869][T12851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2711'. [ 367.667987][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.258084][ T808] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 368.309911][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.318128][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.386859][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 368.416857][ T808] usb 5-1: Using ep0 maxpacket: 16 [ 368.424113][ T808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.435816][ T808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.451300][ T808] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 368.460891][ T808] usb 5-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 368.479569][ T808] usb 5-1: Manufacturer: syz [ 368.509137][ T808] usb 5-1: config 0 descriptor?? [ 368.957830][ T816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.966290][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.990221][ T808] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:041E:3100.0035/input/input48 [ 369.082775][ T808] creative-sb0540 0003:041E:3100.0035: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 369.179606][ T808] usb 5-1: USB disconnect, device number 43 [ 369.225719][T12901] fido_id[12901]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 369.241673][ T24] usb 3-1: new low-speed USB device number 37 using dummy_hcd [ 369.347139][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.418956][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 369.429870][ T24] usb 3-1: config 0 has no interface number 0 [ 369.436045][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 369.449917][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 369.461164][ T24] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 369.471436][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.485388][ T24] usb 3-1: config 0 descriptor?? [ 369.493115][T12895] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 369.522065][ T24] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 369.742600][ T24] usb 3-1: USB disconnect, device number 37 [ 369.865243][T12918] loop9: detected capacity change from 0 to 1 [ 369.875063][T12918] Dev loop9: unable to read RDB block 1 [ 369.881514][T12918] loop9: unable to read partition table [ 369.887900][T12918] loop9: partition table beyond EOD, truncated [ 369.894274][T12918] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 370.717594][ T24] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 370.887096][ T9] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 370.897061][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 370.926410][ T24] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 370.950628][ T24] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 370.981157][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 370.992963][ T24] usb 1-1: config 1 has no interface number 0 [ 371.005502][ T24] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 371.020117][ T24] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 371.072659][ T24] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 371.079210][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 371.101996][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 371.107633][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.130398][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.156874][ T9] usb 3-1: Product: syz [ 371.169437][ T9] usb 3-1: Manufacturer: syz [ 371.171965][ T24] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 371.184533][ T9] usb 3-1: SerialNumber: syz [ 371.209405][ T9] usb 3-1: config 0 descriptor?? [ 371.389274][ T24] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 371.457462][ T9] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 371.754996][T12976] loop8: detected capacity change from 0 to 8 [ 371.768934][T12976] Dev loop8: unable to read RDB block 8 [ 371.786852][ T809] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 371.794598][T12976] loop8: unable to read partition table [ 371.802879][T12976] loop8: partition table beyond EOD, truncated [ 371.813254][T12976] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 371.834360][ T24] usb 1-1: USB disconnect, device number 49 [ 371.862667][ T24] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 371.946781][ T809] usb 4-1: Using ep0 maxpacket: 8 [ 371.965585][ T809] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 371.981506][ T809] usb 4-1: config 179 has no interface number 0 [ 371.998764][ T809] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 372.010308][ T809] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 372.023186][ T809] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 372.035949][ T809] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 372.070180][ T809] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 372.103990][ T809] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 372.124269][ T809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.151558][T12972] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 372.301510][ T9] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 372.334541][ T9] usb 3-1: USB disconnect, device number 38 [ 372.416609][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input49 [ 372.468992][ T809] net_ratelimit: 13 callbacks suppressed [ 372.469013][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.546837][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 372.601714][T12972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.636267][T12972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.796842][ T9] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 372.862605][ T5631] usb 4-1: USB disconnect, device number 45 [ 372.862654][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 372.876932][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 372.886461][ C1] ================================================================== [ 372.894638][ C1] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x28b/0x2f0 [ 372.902680][ C1] Read of size 4 at addr ffff888060b3205c by task udevd/4993 [ 372.910146][ C1] [ 372.912576][ C1] CPU: 1 UID: 0 PID: 4993 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 372.912649][ C1] Tainted: [L]=SOFTLOCKUP [ 372.912655][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 372.912675][ C1] Call Trace: [ 372.912692][ C1] [ 372.912730][ C1] dump_stack_lvl+0xe8/0x150 [ 372.912823][ C1] print_address_description+0x55/0x1e0 [ 372.912850][ C1] ? do_raw_spin_lock+0x28b/0x2f0 [ 372.912901][ C1] print_report+0x58/0x70 [ 372.912918][ C1] kasan_report+0x117/0x150 [ 372.912970][ C1] ? do_raw_spin_lock+0x28b/0x2f0 [ 372.913000][ C1] do_raw_spin_lock+0x28b/0x2f0 [ 372.913025][ C1] ? __wake_up_common_lock+0x2f/0x1f0 [ 372.913052][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 372.913080][ C1] _raw_spin_lock_irqsave+0x4c/0x60 [ 372.913209][ C1] __wake_up_common_lock+0x2f/0x1f0 [ 372.913243][ C1] __usb_hcd_giveback_urb+0x3b0/0x540 [ 372.913371][ C1] dummy_timer+0xbc0/0x4650 [ 372.913477][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 372.913501][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 372.913534][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 372.913571][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 372.913605][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 372.913640][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 372.913671][ C1] __hrtimer_run_queues+0x3c0/0xa20 [ 372.913716][ C1] hrtimer_run_softirq+0x17a/0x240 [ 372.913749][ C1] handle_softirqs+0x22a/0x840 [ 372.913788][ C1] ? __irq_exit_rcu+0xca/0x220 [ 372.913815][ C1] __irq_exit_rcu+0xca/0x220 [ 372.913837][ C1] irq_exit_rcu+0x9/0x30 [ 372.913870][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 372.913925][ C1] [ 372.913959][ C1] [ 372.913990][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 372.914031][ C1] RIP: 0010:fixup_red_left+0x4/0x30 [ 372.914069][ C1] Code: 5e 41 5f e9 fe 2c 87 09 cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 <48> 89 f0 66 90 e9 d2 2c 87 09 cc f6 47 08 02 74 f4 8b 4f 50 48 01 [ 372.914111][ C1] RSP: 0018:ffffc90002f97510 EFLAGS: 00000246 [ 372.914136][ C1] RAX: ffff88807777e000 RBX: ffffffff8467b308 RCX: 0000000000006000 [ 372.914153][ C1] RDX: 0000000000000000 RSI: ffff88807777e000 RDI: ffff88813fe1b140 [ 372.914169][ C1] RBP: 0000000000a12008 R08: 0000000000002000 R09: 1ffffffff2061b5e [ 372.914184][ C1] R10: dffffc0000000000 R11: fffffbfff2061b5f R12: ffffea0000000000 [ 372.914201][ C1] R13: 0000000000000000 R14: ffff88807777e000 R15: ffff88813fe1b140 [ 372.914219][ C1] ? tomoyo_realpath_from_path+0x598/0x5d0 [ 372.914313][ C1] __kasan_slab_pre_free+0xda/0x120 [ 372.914345][ C1] kfree+0x173/0x640 [ 372.914368][ C1] ? tomoyo_encode+0x511/0x550 [ 372.914397][ C1] ? tomoyo_realpath_from_path+0x598/0x5d0 [ 372.914437][ C1] tomoyo_realpath_from_path+0x598/0x5d0 [ 372.914475][ C1] tomoyo_check_open_permission+0x229/0x470 [ 372.914502][ C1] ? tomoyo_check_open_permission+0x1d3/0x470 [ 372.914528][ C1] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 372.914555][ C1] ? __asan_memset+0x22/0x50 [ 372.914582][ C1] ? __up_read+0x291/0x6b0 [ 372.914624][ C1] security_file_open+0xa9/0x240 [ 372.914710][ C1] do_dentry_open+0x384/0x14e0 [ 372.914747][ C1] ? vfs_open+0x31/0x340 [ 372.914784][ C1] vfs_open+0x3b/0x340 [ 372.914806][ C1] ? path_openat+0x2df0/0x3860 [ 372.914838][ C1] path_openat+0x2e08/0x3860 [ 372.914877][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 372.914912][ C1] ? stack_depot_save_flags+0x33/0x810 [ 372.914998][ C1] ? __pfx_path_openat+0x10/0x10 [ 372.915028][ C1] ? __x64_sys_openat+0x138/0x170 [ 372.915056][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 372.915083][ C1] do_file_open+0x23e/0x4a0 [ 372.915116][ C1] ? __pfx_do_file_open+0x10/0x10 [ 372.915158][ C1] ? _raw_spin_unlock+0x28/0x50 [ 372.915188][ C1] ? alloc_fd+0x64b/0x6c0 [ 372.915226][ C1] do_sys_openat2+0x113/0x200 [ 372.915253][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 372.915286][ C1] __x64_sys_openat+0x138/0x170 [ 372.915314][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.915337][ C1] do_syscall_64+0x15f/0xf80 [ 372.915358][ C1] ? clear_bhb_loop+0x40/0x90 [ 372.915383][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.915406][ C1] RIP: 0033:0x7fe0e1315c3a [ 372.915450][ C1] Code: 41 89 f2 48 89 54 24 e0 41 83 e2 40 75 2a 89 f0 f7 d0 a9 00 00 41 00 74 1f 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 2e c3 0f 1f 44 00 00 48 8d 44 24 08 c7 44 24 [ 372.915470][ C1] RSP: 002b:00007ffd65ee1b08 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 372.915494][ C1] RAX: ffffffffffffffda RBX: 0000564975d6a050 RCX: 00007fe0e1315c3a [ 372.915512][ C1] RDX: 0000000000090800 RSI: 0000564975d43b50 RDI: 00000000ffffff9c [ 372.915527][ C1] RBP: 0000564975d43b50 R08: 0000000000000000 R09: 0000000000000000 [ 372.915541][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000564975d407b0 [ 372.915555][ C1] R13: 00000000000000ff R14: 00005649452b6be0 R15: 00007ffd65ee1d90 [ 372.915581][ C1] [ 372.915589][ C1] [ 373.403517][ C1] Allocated by task 809: [ 373.407860][ C1] kasan_save_track+0x3e/0x80 [ 373.412594][ C1] __kasan_kmalloc+0x93/0xb0 [ 373.417215][ C1] __kmalloc_cache_noprof+0x31c/0x660 [ 373.422626][ C1] xpad_probe+0x428/0x1fc0 [ 373.427172][ C1] usb_probe_interface+0x659/0xc70 [ 373.432349][ C1] really_probe+0x267/0xaf0 [ 373.437012][ C1] __driver_probe_device+0x1ef/0x380 [ 373.442337][ C1] driver_probe_device+0x4f/0x240 [ 373.447400][ C1] __device_attach_driver+0x279/0x430 [ 373.452809][ C1] bus_for_each_drv+0x258/0x2f0 [ 373.457678][ C1] __device_attach+0x2c5/0x450 [ 373.462465][ C1] device_initial_probe+0xa1/0xd0 [ 373.467514][ C1] bus_probe_device+0x12a/0x220 [ 373.472383][ C1] device_add+0x7e9/0xbb0 [ 373.476797][ C1] usb_set_configuration+0x1a87/0x2110 [ 373.482282][ C1] usb_generic_driver_probe+0x8d/0x150 [ 373.487839][ C1] usb_probe_device+0x1c4/0x3b0 [ 373.492716][ C1] really_probe+0x267/0xaf0 [ 373.497241][ C1] __driver_probe_device+0x1ef/0x380 [ 373.502549][ C1] driver_probe_device+0x4f/0x240 [ 373.507598][ C1] __device_attach_driver+0x279/0x430 [ 373.512991][ C1] bus_for_each_drv+0x258/0x2f0 [ 373.517859][ C1] __device_attach+0x2c5/0x450 [ 373.522649][ C1] device_initial_probe+0xa1/0xd0 [ 373.527700][ C1] bus_probe_device+0x12a/0x220 [ 373.532568][ C1] device_add+0x7e9/0xbb0 [ 373.536915][ C1] usb_new_device+0xa08/0x16f0 [ 373.541699][ C1] hub_event+0x2a1c/0x4f30 [ 373.546137][ C1] process_scheduled_works+0xb5d/0x1860 [ 373.551698][ C1] worker_thread+0xa53/0xfc0 [ 373.556314][ C1] kthread+0x389/0x470 [ 373.560411][ C1] ret_from_fork+0x514/0xb70 [ 373.565051][ C1] ret_from_fork_asm+0x1a/0x30 [ 373.569841][ C1] [ 373.572182][ C1] Freed by task 5631: [ 373.576172][ C1] kasan_save_track+0x3e/0x80 [ 373.580871][ C1] kasan_save_free_info+0x46/0x50 [ 373.585920][ C1] __kasan_slab_free+0x5c/0x80 [ 373.590705][ C1] kfree+0x1c5/0x640 [ 373.594624][ C1] xpad_disconnect+0x350/0x480 [ 373.599416][ C1] usb_unbind_interface+0x26e/0x910 [ 373.604664][ C1] device_release_driver_internal+0x4d9/0x870 [ 373.610759][ C1] bus_remove_device+0x455/0x570 [ 373.615716][ C1] device_del+0x527/0x8f0 [ 373.620066][ C1] usb_disable_device+0x3d4/0x8d0 [ 373.625113][ C1] usb_disconnect+0x32f/0x990 [ 373.629816][ C1] hub_event+0x1cc9/0x4f30 [ 373.634255][ C1] process_scheduled_works+0xb5d/0x1860 [ 373.639824][ C1] worker_thread+0xa53/0xfc0 [ 373.644437][ C1] kthread+0x389/0x470 [ 373.648531][ C1] ret_from_fork+0x514/0xb70 [ 373.653137][ C1] ret_from_fork_asm+0x1a/0x30 [ 373.657919][ C1] [ 373.660259][ C1] Last potentially related work creation: [ 373.665988][ C1] kasan_save_stack+0x3e/0x60 [ 373.670685][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 373.675910][ C1] insert_work+0x3d/0x330 [ 373.680261][ C1] __queue_work+0xcef/0x1040 [ 373.684873][ C1] queue_work_on+0x106/0x1d0 [ 373.689478][ C1] xpad_irq_in+0xb4c/0x25c0 [ 373.694003][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 373.699399][ C1] dummy_timer+0xbc0/0x4650 [ 373.703927][ C1] __hrtimer_run_queues+0x3c0/0xa20 [ 373.709149][ C1] hrtimer_run_softirq+0x17a/0x240 [ 373.714288][ C1] handle_softirqs+0x22a/0x840 [ 373.719067][ C1] __irq_exit_rcu+0xca/0x220 [ 373.723667][ C1] irq_exit_rcu+0x9/0x30 [ 373.727929][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 373.733601][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 373.739612][ C1] [ 373.741948][ C1] Second to last potentially related work creation: [ 373.748545][ C1] kasan_save_stack+0x3e/0x60 [ 373.753250][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 373.758467][ C1] insert_work+0x3d/0x330 [ 373.762813][ C1] __queue_work+0xcef/0x1040 [ 373.767509][ C1] queue_work_on+0x106/0x1d0 [ 373.772116][ C1] xpad_irq_in+0xb4c/0x25c0 [ 373.776644][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 373.782043][ C1] dummy_timer+0xbc0/0x4650 [ 373.786568][ C1] __hrtimer_run_queues+0x3c0/0xa20 [ 373.791787][ C1] hrtimer_run_softirq+0x17a/0x240 [ 373.796931][ C1] handle_softirqs+0x22a/0x840 [ 373.801717][ C1] __irq_exit_rcu+0xca/0x220 [ 373.806326][ C1] irq_exit_rcu+0x9/0x30 [ 373.810674][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 373.816338][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 373.822339][ C1] [ 373.824693][ C1] The buggy address belongs to the object at ffff888060b32000 [ 373.824693][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 373.838862][ C1] The buggy address is located 92 bytes inside of [ 373.838862][ C1] freed 1024-byte region [ffff888060b32000, ffff888060b32400) [ 373.852700][ C1] [ 373.855050][ C1] The buggy address belongs to the physical page: [ 373.861498][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888060b35000 pfn:0x60b30 [ 373.871587][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 373.880104][ C1] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 373.888633][ C1] page_type: f5(slab) [ 373.892629][ C1] raw: 00fff00000000240 ffff88813fe1adc0 ffffea0000a6c410 ffffea000187dc10 [ 373.901228][ C1] raw: ffff888060b35000 000000080010000f 00000000f5000000 0000000000000000 [ 373.909866][ C1] head: 00fff00000000240 ffff88813fe1adc0 ffffea0000a6c410 ffffea000187dc10 [ 373.918559][ C1] head: ffff888060b35000 000000080010000f 00000000f5000000 0000000000000000 [ 373.927247][ C1] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 373.935933][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 373.944623][ C1] page dumped because: kasan: bad access detected [ 373.951186][ C1] page_owner tracks the page as allocated [ 373.956910][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9690, tgid 9689 (syz.2.1525), ts 238624161703, free_ts 220388785982 [ 373.978287][ C1] post_alloc_hook+0x22d/0x280 [ 373.983086][ C1] get_page_from_freelist+0x24ba/0x2540 [ 373.988656][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 373.994495][ C1] allocate_slab+0x77/0x660 [ 373.999017][ C1] refill_objects+0x339/0x3d0 [ 374.003714][ C1] __pcs_replace_empty_main+0x321/0x720 [ 374.009281][ C1] __kmalloc_cache_noprof+0x392/0x660 [ 374.014676][ C1] snd_pcm_oss_change_params_locked+0x8eb/0x3e00 [ 374.021155][ C1] snd_pcm_oss_sync+0x43a/0xfc0 [ 374.026036][ C1] snd_pcm_oss_release+0xff/0x250 [ 374.031083][ C1] __fput+0x44f/0xa60 [ 374.035090][ C1] task_work_run+0x1d9/0x270 [ 374.039714][ C1] do_exit+0x70f/0x22c0 [ 374.043912][ C1] __secure_computing+0x20c/0x2a0 [ 374.048990][ C1] do_syscall_64+0xf9/0xf80 [ 374.053518][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.059440][ C1] page last free pid 5721 tgid 5721 stack trace: [ 374.065781][ C1] __free_frozen_pages+0xbc7/0xd30 [ 374.070927][ C1] kasan_depopulate_vmalloc_pte+0x6d/0x90 [ 374.077029][ C1] __apply_to_page_range+0xbdc/0x1420 [ 374.082447][ C1] __kasan_release_vmalloc+0xa2/0xd0 [ 374.087769][ C1] purge_vmap_node+0x220/0x960 [ 374.092569][ C1] __purge_vmap_area_lazy+0x779/0xb40 [ 374.097970][ C1] drain_vmap_area_work+0x27/0x40 [ 374.103105][ C1] process_scheduled_works+0xb5d/0x1860 [ 374.108667][ C1] worker_thread+0xa53/0xfc0 [ 374.113278][ C1] kthread+0x389/0x470 [ 374.117369][ C1] ret_from_fork+0x514/0xb70 [ 374.122156][ C1] ret_from_fork_asm+0x1a/0x30 [ 374.126943][ C1] [ 374.129282][ C1] Memory state around the buggy address: [ 374.135005][ C1] ffff888060b31f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 374.143118][ C1] ffff888060b31f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 374.151380][ C1] >ffff888060b32000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 374.159456][ C1] ^ [ 374.166403][ C1] ffff888060b32080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 374.174482][ C1] ffff888060b32100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 374.182571][ C1] ================================================================== [ 374.190665][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 374.197888][ C1] CPU: 1 UID: 0 PID: 4993 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 374.208319][ C1] Tainted: [L]=SOFTLOCKUP [ 374.212658][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 374.222729][ C1] Call Trace: [ 374.226035][ C1] [ 374.228908][ C1] vpanic+0x56c/0xa60 [ 374.232927][ C1] ? __pfx_vpanic+0x10/0x10 [ 374.237461][ C1] panic+0xc5/0xd0 [ 374.241230][ C1] ? __pfx_panic+0x10/0x10 [ 374.245680][ C1] ? do_raw_spin_lock+0x28b/0x2f0 [ 374.250744][ C1] ? do_raw_spin_lock+0x28b/0x2f0 [ 374.255812][ C1] ? do_raw_spin_lock+0x28b/0x2f0 [ 374.260862][ C1] check_panic_on_warn+0x89/0xb0 [ 374.265832][ C1] ? do_raw_spin_lock+0x28b/0x2f0 [ 374.270889][ C1] end_report+0x73/0x170 [ 374.275159][ C1] ? do_raw_spin_lock+0x28b/0x2f0 [ 374.280206][ C1] kasan_report+0x128/0x150 [ 374.284741][ C1] ? do_raw_spin_lock+0x28b/0x2f0 [ 374.289800][ C1] do_raw_spin_lock+0x28b/0x2f0 [ 374.294688][ C1] ? __wake_up_common_lock+0x2f/0x1f0 [ 374.300087][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 374.305492][ C1] _raw_spin_lock_irqsave+0x4c/0x60 [ 374.310722][ C1] __wake_up_common_lock+0x2f/0x1f0 [ 374.315962][ C1] __usb_hcd_giveback_urb+0x3b0/0x540 [ 374.321366][ C1] dummy_timer+0xbc0/0x4650 [ 374.325906][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 374.330872][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 374.335836][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 374.341242][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 374.346300][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 374.352140][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 374.357112][ C1] __hrtimer_run_queues+0x3c0/0xa20 [ 374.362361][ C1] hrtimer_run_softirq+0x17a/0x240 [ 374.367507][ C1] handle_softirqs+0x22a/0x840 [ 374.372303][ C1] ? __irq_exit_rcu+0xca/0x220 [ 374.377098][ C1] __irq_exit_rcu+0xca/0x220 [ 374.381721][ C1] irq_exit_rcu+0x9/0x30 [ 374.385984][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 374.391690][ C1] [ 374.394646][ C1] [ 374.397601][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 374.403600][ C1] RIP: 0010:fixup_red_left+0x4/0x30 [ 374.408836][ C1] Code: 5e 41 5f e9 fe 2c 87 09 cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 <48> 89 f0 66 90 e9 d2 2c 87 09 cc f6 47 08 02 74 f4 8b 4f 50 48 01 [ 374.428463][ C1] RSP: 0018:ffffc90002f97510 EFLAGS: 00000246 [ 374.434553][ C1] RAX: ffff88807777e000 RBX: ffffffff8467b308 RCX: 0000000000006000 [ 374.442585][ C1] RDX: 0000000000000000 RSI: ffff88807777e000 RDI: ffff88813fe1b140 [ 374.450578][ C1] RBP: 0000000000a12008 R08: 0000000000002000 R09: 1ffffffff2061b5e [ 374.458570][ C1] R10: dffffc0000000000 R11: fffffbfff2061b5f R12: ffffea0000000000 [ 374.466565][ C1] R13: 0000000000000000 R14: ffff88807777e000 R15: ffff88813fe1b140 [ 374.474554][ C1] ? tomoyo_realpath_from_path+0x598/0x5d0 [ 374.480398][ C1] __kasan_slab_pre_free+0xda/0x120 [ 374.485622][ C1] kfree+0x173/0x640 [ 374.489538][ C1] ? tomoyo_encode+0x511/0x550 [ 374.494322][ C1] ? tomoyo_realpath_from_path+0x598/0x5d0 [ 374.500161][ C1] tomoyo_realpath_from_path+0x598/0x5d0 [ 374.505829][ C1] tomoyo_check_open_permission+0x229/0x470 [ 374.511746][ C1] ? tomoyo_check_open_permission+0x1d3/0x470 [ 374.517848][ C1] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 374.524286][ C1] ? __asan_memset+0x22/0x50 [ 374.528898][ C1] ? __up_read+0x291/0x6b0 [ 374.533352][ C1] security_file_open+0xa9/0x240 [ 374.538317][ C1] do_dentry_open+0x384/0x14e0 [ 374.543111][ C1] ? vfs_open+0x31/0x340 [ 374.547429][ C1] vfs_open+0x3b/0x340 [ 374.551542][ C1] ? path_openat+0x2df0/0x3860 [ 374.556332][ C1] path_openat+0x2e08/0x3860 [ 374.560954][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 374.566373][ C1] ? stack_depot_save_flags+0x33/0x810 [ 374.571867][ C1] ? __pfx_path_openat+0x10/0x10 [ 374.576832][ C1] ? __x64_sys_openat+0x138/0x170 [ 374.581883][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 374.586850][ C1] do_file_open+0x23e/0x4a0 [ 374.591387][ C1] ? __pfx_do_file_open+0x10/0x10 [ 374.596446][ C1] ? _raw_spin_unlock+0x28/0x50 [ 374.601325][ C1] ? alloc_fd+0x64b/0x6c0 [ 374.605678][ C1] do_sys_openat2+0x113/0x200 [ 374.610384][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 374.615798][ C1] __x64_sys_openat+0x138/0x170 [ 374.620708][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.626806][ C1] do_syscall_64+0x15f/0xf80 [ 374.631436][ C1] ? clear_bhb_loop+0x40/0x90 [ 374.636145][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.642058][ C1] RIP: 0033:0x7fe0e1315c3a [ 374.646513][ C1] Code: 41 89 f2 48 89 54 24 e0 41 83 e2 40 75 2a 89 f0 f7 d0 a9 00 00 41 00 74 1f 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 2e c3 0f 1f 44 00 00 48 8d 44 24 08 c7 44 24 [ 374.666143][ C1] RSP: 002b:00007ffd65ee1b08 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 374.674586][ C1] RAX: ffffffffffffffda RBX: 0000564975d6a050 RCX: 00007fe0e1315c3a [ 374.682576][ C1] RDX: 0000000000090800 RSI: 0000564975d43b50 RDI: 00000000ffffff9c [ 374.690564][ C1] RBP: 0000564975d43b50 R08: 0000000000000000 R09: 0000000000000000 [ 374.698555][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000564975d407b0 [ 374.706549][ C1] R13: 00000000000000ff R14: 00005649452b6be0 R15: 00007ffd65ee1d90 [ 374.714548][ C1] [ 374.718546][ C1] Kernel Offset: disabled [ 374.722888][ C1] Rebooting in 86400 seconds..