last executing test programs: 3.694412733s ago: executing program 2 (id=1417): r0 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.543922716s ago: executing program 2 (id=1418): pipe2$9p(&(0x7f0000000040), 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = memfd_create(&(0x7f0000000380)='D\xa3\xd5Wj\x00\x00x0\xc1\xac*\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9\xd0\xc0\xa9\b\x98\xfc:\x1b\xc4\x80!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x00\x02\xdf\b~\xd5)\xa4\x80\xad\x97\'\x1b\xfd}\x96&\xd2\x0eGp\x8e\x1a\x19o\xf1\x14\xe2]J\xf2\xb5h\x9bt*\xd2\xfbT\x01ci\x87\x18\xc9\x13=\x1b\xadl;}\x9d\xbe\x9a\xee\x1a\xfc\x96 \x93\x12@\x19|f\x98\xdc,\x82SlA\x19\xcb\xfe\xccSKO}\xb2U\xd6\xc5\xa7=\xf8s\x1dp\xe0\x14\xe5\x92\xfd)\bB\xcd\xc2\xb6\x85$%nV\xd3*\x00`OE\x8e\xf0\xf9\xd2!KZ%\xad\xa1\x92b\x1e%\x9f!\xd8mV$\x1d?\xc2\f\xcc\xc5x\x9fJ#\xce\x90\xc5\x82\xfb\x97\xd2\xb7\xb5\xed\xb5\'J\xfc\xf4Z.\rS\x88\f\xd0zK\xc7\x81\xbe\xd5\xc2\xce\x89\xbc\x1e\xb78\xf6Z\xd5\x1b\xf1\x9bMD\f\xf6\xc5V\xe1\x12j\xdfW\x87\xf09\n\x1e\x1b\f\xe5p\xab\x9e\xe5}\x96\x9b\xea\x86\x0f\xca\xcf\x16\x96\x0e6\x8d\x11\xd2&\"eKKV\x8b?]<\xa7]\x93\xad\x1d\xfe\x13\xee\xca\xdc\x97\xa9\a\b\xac\xdd\xa0\xfe\x97\xa1?\xa2F\xae\xb7f\x85\xda', 0x0) write(r1, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54", 0x3f) close(0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x41, 0x0) 3.468685128s ago: executing program 2 (id=1419): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000440), &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc1}, &(0x7f00000007c0)={0x0, "019af2614ba26291c38206ed71472d664f913df34e60a3f34636d6ee89c849cabd912b106409cfa2bdcb914279bc39e5bf797c6c8e61ec8cfce597ddec4540e5", 0x1a}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x32, 0x30, 0x30, 0x37, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x66, 0x30, 0x35, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(0x0, &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000940), &(0x7f0000000ac0)={'syz', 0x1}, &(0x7f0000000c40)="c5", 0x1, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f0000000880)={'fscrypt:', @desc3}, &(0x7f00000008c0)={0x0, "18817cd3951197ee3b9d8783bb6f4fcbf211ff4699390ed1e9af20be014fddfc4777e8781b728c03db5f43332641914dea56c4e77e8a513068b4a5f87fa5d809", 0x21}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x30, 0x33, 0x30, 0x30, 0x66, 0x36, 0x30, 0x30, 0x30, 0x75a52dfb969e39f, 0x30, 0x30, 0x61]}, &(0x7f00000009c0)={0x0, "0011223344556677000001000000000000112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x440}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r1) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000780)={r2, 0x1f}, &(0x7f00000007c0)={'enc=', 'pkcs1', ' hash=', {'sha224\x00'}}, 0x0, 0x0) 3.37275059s ago: executing program 2 (id=1420): socket(0xa, 0x5, 0x0) r0 = syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa0904000002ff00000007058302000200070504020002"], 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_write(r0, 0x83, 0x0, 0x0) 3.076340787s ago: executing program 1 (id=1421): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) io_uring_enter(r1, 0x7e12, 0x2, 0x4, &(0x7f0000000140)={[0x1000]}, 0x8) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 2.996378389s ago: executing program 1 (id=1422): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIV', 0x4, 0xc00) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000100)='12345678-12344567', 0x11, 0xc30) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) pwrite64(r0, 0x0, 0x0, 0x1e8000) pwrite64(r0, &(0x7f0000000140)="9e6f6e66696794cc33fa6921a02f32aea4dec397d9a8947b7fd088586bbe39d4bfff67a7d15c3ecd84bb0d17fab1b9b33127612ff1263956a156bd35d98d0fd5a76894822452853dd51383751db92afd7ab928009d321582dd248245214d91e5feefaeb8dbd7e434", 0x68, 0x100224) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) syz_usb_connect$uac1(0x3, 0xa2, 0x0, 0x0) 2.708629336s ago: executing program 3 (id=1423): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000000a40)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.637753067s ago: executing program 3 (id=1424): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a4000000010201040000000000000000020000030800044000000001080004400000ffff8000018014000180080001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001100050000000001feffffff07000000", @ANYRES32=r1, @ANYBLOB="402000000000000014001a80100005800c"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.5160134s ago: executing program 3 (id=1425): r0 = socket$inet_tcp(0x2, 0x1, 0x0) dup3(r0, r0, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x14c, 0x2002) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x3}]}}}]}, 0x40}}, 0x0) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x458, 0x501a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0xb, "", [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xc, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0xb0, 0x81, 0xfe}}}}}]}}]}}, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0xc0b45545, &(0x7f00000000c0)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x80, 0xfe, 0x7fff0006}]}) keyctl$invalidate(0x15, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect(0x5, 0x2d, &(0x7f0000000a80)={{0x12, 0x1, 0x310, 0xc4, 0xb, 0x62, 0x20, 0x5f9, 0xffff, 0x645b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xfe, 0x81, 0x30, 0x32, "", [{{0x9, 0x4, 0x67, 0x2, 0x1, 0x91, 0x2c, 0x65, 0x9, [], [{{0x9, 0x5, 0xa, 0x2, 0x3ff, 0xd9, 0x2, 0x3}}]}}]}}]}}, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x400) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x4b640, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r8, 0xc004ae02, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x5, 0x4) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x20004, r5, 0x2}) ioctl$DMA_BUF_IOCTL_SYNC(r10, 0x40086200, &(0x7f00000002c0)=0x6) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000b00)={0x2c, &(0x7f0000000980)={0x40, 0x24, 0x3f, {0x3f, 0x23, "1ba57fb04d4f1e07d695f268e872852798b2974b1fc634f26cda14d95e6688adb139e26a477975a81c7f29ce7c2ca48762ec4e1bd8919a607e2779bc94"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) 2.335174495s ago: executing program 0 (id=1426): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002d00)=[{{&(0x7f0000001080)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) ioctl$NILFS_IOCTL_GET_SUINFO(0xffffffffffffffff, 0x80186e84, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0x2, 0x2}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000100)={0x2, 0x1, 0x0, 0x0, 0xfffffff7}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) 2.318119735s ago: executing program 1 (id=1427): pipe2$9p(&(0x7f0000000040), 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = memfd_create(&(0x7f0000000380)='D\xa3\xd5Wj\x00\x00x0\xc1\xac*\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9\xd0\xc0\xa9\b\x98\xfc:\x1b\xc4\x80!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x00\x02\xdf\b~\xd5)\xa4\x80\xad\x97\'\x1b\xfd}\x96&\xd2\x0eGp\x8e\x1a\x19o\xf1\x14\xe2]J\xf2\xb5h\x9bt*\xd2\xfbT\x01ci\x87\x18\xc9\x13=\x1b\xadl;}\x9d\xbe\x9a\xee\x1a\xfc\x96 \x93\x12@\x19|f\x98\xdc,\x82SlA\x19\xcb\xfe\xccSKO}\xb2U\xd6\xc5\xa7=\xf8s\x1dp\xe0\x14\xe5\x92\xfd)\bB\xcd\xc2\xb6\x85$%nV\xd3*\x00`OE\x8e\xf0\xf9\xd2!KZ%\xad\xa1\x92b\x1e%\x9f!\xd8mV$\x1d?\xc2\f\xcc\xc5x\x9fJ#\xce\x90\xc5\x82\xfb\x97\xd2\xb7\xb5\xed\xb5\'J\xfc\xf4Z.\rS\x88\f\xd0zK\xc7\x81\xbe\xd5\xc2\xce\x89\xbc\x1e\xb78\xf6Z\xd5\x1b\xf1\x9bMD\f\xf6\xc5V\xe1\x12j\xdfW\x87\xf09\n\x1e\x1b\f\xe5p\xab\x9e\xe5}\x96\x9b\xea\x86\x0f\xca\xcf\x16\x96\x0e6\x8d\x11\xd2&\"eKKV\x8b?]<\xa7]\x93\xad\x1d\xfe\x13\xee\xca\xdc\x97\xa9\a\b\xac\xdd\xa0\xfe\x97\xa1?\xa2F\xae\xb7f\x85\xda', 0x0) write(r1, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54", 0x3f) close(0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x41, 0x0) 2.178811709s ago: executing program 1 (id=1428): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000440), &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc1}, &(0x7f00000007c0)={0x0, "019af2614ba26291c38206ed71472d664f913df34e60a3f34636d6ee89c849cabd912b106409cfa2bdcb914279bc39e5bf797c6c8e61ec8cfce597ddec4540e5", 0x1a}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x32, 0x30, 0x30, 0x37, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x66, 0x30, 0x35, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(0x0, &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000940), &(0x7f0000000ac0)={'syz', 0x1}, &(0x7f0000000c40)="c5", 0x1, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f0000000880)={'fscrypt:', @desc3}, &(0x7f00000008c0)={0x0, "18817cd3951197ee3b9d8783bb6f4fcbf211ff4699390ed1e9af20be014fddfc4777e8781b728c03db5f43332641914dea56c4e77e8a513068b4a5f87fa5d809", 0x21}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x30, 0x33, 0x30, 0x30, 0x66, 0x36, 0x30, 0x30, 0x30, 0x75a52dfb969e39f, 0x30, 0x30, 0x61]}, &(0x7f00000009c0)={0x0, "0011223344556677000001000000000000112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x440}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r1) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000780)={r2, 0x1f}, &(0x7f00000007c0)={'enc=', 'pkcs1', ' hash=', {'sha224\x00'}}, 0x0, 0x0) 2.12399352s ago: executing program 0 (id=1429): symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x2000, 0x0, 0xb}, 0x18) 2.11273135s ago: executing program 0 (id=1430): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x458, 0x501a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0xb, "", [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xc, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0xb0, 0x81, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.056508901s ago: executing program 1 (id=1431): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x189802, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.724791909s ago: executing program 2 (id=1432): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000240)={0x0, 0x5}, &(0x7f0000000280)=0x8) 1.615861182s ago: executing program 1 (id=1433): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f0000000300)=[{&(0x7f00000005c0)='n', 0x1}], 0x1) 1.546329253s ago: executing program 2 (id=1434): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x40) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40040) ioctl$HIDIOCGUSAGE(r2, 0x501c4814, 0x0) ioctl$HIDIOCGNAME(r2, 0x80404806, &(0x7f0000000100)) 592.634966ms ago: executing program 3 (id=1435): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x10002, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 495.908938ms ago: executing program 3 (id=1436): pipe2$9p(&(0x7f0000000040), 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = memfd_create(&(0x7f0000000380)='D\xa3\xd5Wj\x00\x00x0\xc1\xac*\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9\xd0\xc0\xa9\b\x98\xfc:\x1b\xc4\x80!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x00\x02\xdf\b~\xd5)\xa4\x80\xad\x97\'\x1b\xfd}\x96&\xd2\x0eGp\x8e\x1a\x19o\xf1\x14\xe2]J\xf2\xb5h\x9bt*\xd2\xfbT\x01ci\x87\x18\xc9\x13=\x1b\xadl;}\x9d\xbe\x9a\xee\x1a\xfc\x96 \x93\x12@\x19|f\x98\xdc,\x82SlA\x19\xcb\xfe\xccSKO}\xb2U\xd6\xc5\xa7=\xf8s\x1dp\xe0\x14\xe5\x92\xfd)\bB\xcd\xc2\xb6\x85$%nV\xd3*\x00`OE\x8e\xf0\xf9\xd2!KZ%\xad\xa1\x92b\x1e%\x9f!\xd8mV$\x1d?\xc2\f\xcc\xc5x\x9fJ#\xce\x90\xc5\x82\xfb\x97\xd2\xb7\xb5\xed\xb5\'J\xfc\xf4Z.\rS\x88\f\xd0zK\xc7\x81\xbe\xd5\xc2\xce\x89\xbc\x1e\xb78\xf6Z\xd5\x1b\xf1\x9bMD\f\xf6\xc5V\xe1\x12j\xdfW\x87\xf09\n\x1e\x1b\f\xe5p\xab\x9e\xe5}\x96\x9b\xea\x86\x0f\xca\xcf\x16\x96\x0e6\x8d\x11\xd2&\"eKKV\x8b?]<\xa7]\x93\xad\x1d\xfe\x13\xee\xca\xdc\x97\xa9\a\b\xac\xdd\xa0\xfe\x97\xa1?\xa2F\xae\xb7f\x85\xda', 0x0) write(r1, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54", 0x3f) close(0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x41, 0x0) 476.778389ms ago: executing program 3 (id=1437): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) listen(0xffffffffffffffff, 0xda8d) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @loopback}], 0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x8000, 0x6}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x40001}, 0x881) r1 = dup(r0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17", 0x2b}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 456.528359ms ago: executing program 0 (id=1438): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x2000, 0x0, 0xb}, 0x18) 155.654377ms ago: executing program 0 (id=1439): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x1, 0x0, 0x2000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) 0s ago: executing program 0 (id=1440): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) shutdown(r0, 0x1) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r1, &(0x7f0000000480), 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): " sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77079e0d9 code=0x7ffc0000 [ 249.097175][ T27] audit: type=1326 audit(1787191456.480:3062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8651 comm="syz.2.1005" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fe77079e0d9 code=0x7ffc0000 [ 249.125771][ T8653] netlink: 'syz.2.1005': attribute type 4 has an invalid length. [ 249.135625][ T27] audit: type=1326 audit(1787191456.480:3063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8651 comm="syz.2.1005" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77079e0d9 code=0x7ffc0000 [ 249.162180][ T27] audit: type=1326 audit(1787191456.480:3064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8651 comm="syz.2.1005" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77079e0d9 code=0x7ffc0000 [ 249.186880][ T27] audit: type=1326 audit(1787191456.480:3065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8651 comm="syz.2.1005" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77079e0d9 code=0x7ffc0000 [ 249.213870][ T27] audit: type=1326 audit(1787191456.480:3066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8651 comm="syz.2.1005" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77079e0d9 code=0x7ffc0000 [ 249.245217][ T27] audit: type=1326 audit(1787191456.480:3067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8651 comm="syz.2.1005" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe77079e0d9 code=0x7ffc0000 [ 249.258621][ T1210] usb 2-1: Using ep0 maxpacket: 16 [ 249.290386][ T1210] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 249.310375][ T1210] usb 2-1: config 0 has no interface number 0 [ 249.332434][ T1210] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 249.347812][ T1210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.363404][ T1210] usb 2-1: Product: syz [ 249.377256][ T1210] usb 2-1: Manufacturer: syz [ 249.382148][ T1210] usb 2-1: SerialNumber: syz [ 249.400282][ T1210] usb 2-1: config 0 descriptor?? [ 249.415816][ T1210] hub 2-1:0.132: bad descriptor, ignoring hub [ 249.424960][ T1210] hub: probe of 2-1:0.132 failed with error -5 [ 249.446228][ T1210] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input19 [ 249.627102][ T8650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.649711][ T8650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.020279][ T1210] usb 2-1: USB disconnect, device number 27 [ 250.184977][ T8668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1009'. [ 250.190460][ T5843] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 250.388353][ T5843] usb 1-1: Using ep0 maxpacket: 16 [ 250.395431][ T5843] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.406197][ T5843] usb 1-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 250.420741][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.431650][ T5843] usb 1-1: config 0 descriptor?? [ 250.684333][ T8678] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1012'. [ 250.818573][ T5843] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 251.001250][ T5843] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 251.009537][ T5843] usb 3-1: config 0 has no interface number 0 [ 251.016234][ T5843] usb 3-1: config 0 interface 1 has no altsetting 0 [ 251.028096][ T5843] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 251.037528][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.052092][ T5843] usb 3-1: Product: syz [ 251.056341][ T5843] usb 3-1: Manufacturer: syz [ 251.074668][ T5843] usb 3-1: SerialNumber: syz [ 251.097552][ T5843] usb 3-1: config 0 descriptor?? [ 251.129980][ T5843] usb 3-1: selecting invalid altsetting 1 [ 251.135917][ T5843] dvb_ttusb_budget: ttusb_init_controller: error [ 251.153081][ T5843] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 251.288099][ T5843] DVB: Unable to find symbol stv0299_attach() [ 251.309772][ T23] usb 4-1: USB disconnect, device number 36 [ 251.331753][ T8692] netlink: 'syz.1.1015': attribute type 4 has an invalid length. [ 251.406236][ T5843] DVB: Unable to find symbol tda8083_attach() [ 251.413577][ T5843] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 252.540885][ T8711] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1022'. [ 252.658411][ T1210] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 252.804577][ T5843] usb 1-1: USB disconnect, device number 29 [ 252.849220][ T1210] usb 2-1: Using ep0 maxpacket: 16 [ 252.872154][ T1210] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 252.897505][ T1210] usb 2-1: config 0 has no interface number 0 [ 252.923917][ T1210] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 252.950035][ T1210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.965635][ T1210] usb 2-1: Product: syz [ 252.973048][ T1210] usb 2-1: Manufacturer: syz [ 252.983181][ T1210] usb 2-1: SerialNumber: syz [ 253.001389][ T1210] usb 2-1: config 0 descriptor?? [ 253.021693][ T1210] hub 2-1:0.132: bad descriptor, ignoring hub [ 253.045550][ T1210] hub: probe of 2-1:0.132 failed with error -5 [ 253.066136][ T1210] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input20 [ 253.156703][ T8722] netlink: 'syz.0.1026': attribute type 4 has an invalid length. [ 253.258943][ T8700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.267786][ T8700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.280312][ T1210] usb 2-1: USB disconnect, device number 28 [ 253.557170][ T5843] usb 3-1: USB disconnect, device number 34 [ 253.787793][ T8736] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1031'. [ 254.261790][ T5884] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 254.462725][ T27] kauditd_printk_skb: 808 callbacks suppressed [ 254.462743][ T27] audit: type=1326 audit(1787191461.990:3876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8744 comm="syz.0.1035" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48519e0d9 code=0x7ffc0000 [ 254.497861][ T5884] usb 3-1: Using ep0 maxpacket: 16 [ 254.508011][ T27] audit: type=1326 audit(1787191461.990:3877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8744 comm="syz.0.1035" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48519e0d9 code=0x7ffc0000 [ 254.534387][ T5884] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.545186][ T5884] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 254.554619][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.564763][ T27] audit: type=1326 audit(1787191462.020:3878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8744 comm="syz.0.1035" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48519e0d9 code=0x7ffc0000 [ 254.590779][ T8745] netlink: 'syz.0.1035': attribute type 4 has an invalid length. [ 254.604283][ T5884] usb 3-1: config 0 descriptor?? [ 254.625693][ T27] audit: type=1326 audit(1787191462.020:3879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8744 comm="syz.0.1035" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48519e0d9 code=0x7ffc0000 [ 254.664134][ T27] audit: type=1326 audit(1787191462.030:3880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8744 comm="syz.0.1035" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fe48519e0d9 code=0x7ffc0000 [ 254.716991][ T27] audit: type=1326 audit(1787191462.030:3881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8744 comm="syz.0.1035" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48519e0d9 code=0x7ffc0000 [ 254.742107][ T27] audit: type=1326 audit(1787191462.030:3882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8744 comm="syz.0.1035" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48519e0d9 code=0x7ffc0000 [ 254.766751][ T27] audit: type=1326 audit(1787191462.030:3883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8744 comm="syz.0.1035" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48519e0d9 code=0x7ffc0000 [ 254.792414][ T27] audit: type=1326 audit(1787191462.050:3884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8744 comm="syz.0.1035" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe48519e0d9 code=0x7ffc0000 [ 254.816901][ T27] audit: type=1326 audit(1787191462.050:3885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8744 comm="syz.0.1035" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48519e0d9 code=0x7ffc0000 [ 254.860574][ T5884] usb 3-1: USB disconnect, device number 35 [ 255.159674][ T8761] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1040'. [ 255.329185][ T5765] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 255.478545][ T23] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 255.488496][ T1210] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 255.520193][ T5765] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 255.538702][ T5765] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.555191][ T5765] usb 1-1: config 0 interface 0 has no altsetting 0 [ 255.563084][ T5765] usb 1-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 255.573959][ T5765] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.587875][ T5765] usb 1-1: config 0 descriptor?? [ 255.594506][ T8758] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 255.678474][ T1210] usb 2-1: Using ep0 maxpacket: 16 [ 255.686500][ T1210] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 255.694990][ T1210] usb 2-1: config 0 has no interface number 0 [ 255.707800][ T23] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 255.708784][ T1210] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 255.726474][ T1210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.734666][ T1210] usb 2-1: Product: syz [ 255.735951][ T23] usb 4-1: config 0 has no interface number 0 [ 255.740433][ T1210] usb 2-1: Manufacturer: syz [ 255.750005][ T1210] usb 2-1: SerialNumber: syz [ 255.755682][ T23] usb 4-1: config 0 interface 1 has no altsetting 0 [ 255.763169][ T1210] usb 2-1: config 0 descriptor?? [ 255.774060][ T23] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 255.786223][ T1210] hub 2-1:0.132: bad descriptor, ignoring hub [ 255.798035][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.802458][ T1210] hub: probe of 2-1:0.132 failed with error -5 [ 255.818167][ T23] usb 4-1: Product: syz [ 255.824817][ T1210] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input21 [ 255.833281][ T23] usb 4-1: Manufacturer: syz [ 255.839526][ T8758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.848589][ T23] usb 4-1: SerialNumber: syz [ 255.856703][ T23] usb 4-1: config 0 descriptor?? [ 255.862893][ T8758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.877437][ T23] usb 4-1: selecting invalid altsetting 1 [ 255.893785][ T23] dvb_ttusb_budget: ttusb_init_controller: error [ 255.902384][ T23] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 255.953248][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.969498][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.028124][ T8763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.047764][ T8763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.073188][ T23] DVB: Unable to find symbol stv0299_attach() [ 256.104665][ T5765] kye 0003:0458:501A.0019: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 256.132658][ T5765] kye 0003:0458:501A.0019: unknown main item tag 0x7 [ 256.151993][ T5765] kye 0003:0458:501A.0019: hidraw0: USB HID v0.0c Device [HID 0458:501a] on usb-dummy_hcd.0-1/input0 [ 256.169673][ T5765] kye 0003:0458:501A.0019: tablet-enabling feature report not found [ 256.177861][ T23] DVB: Unable to find symbol tda8083_attach() [ 256.189888][ T5765] kye 0003:0458:501A.0019: tablet enabling failed [ 256.198923][ T23] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 256.307941][ T28] usb 1-1: USB disconnect, device number 30 [ 257.135733][ T8779] netlink: 'syz.1.1045': attribute type 4 has an invalid length. [ 257.686762][ T8788] kvm: pic: non byte write [ 257.988746][ T28] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 258.099153][ T5843] usb 4-1: USB disconnect, device number 37 [ 258.196516][ T8798] syzkaller0: entered promiscuous mode [ 258.203841][ T28] usb 3-1: Using ep0 maxpacket: 16 [ 258.220785][ T8798] syzkaller0: entered allmulticast mode [ 258.228731][ T28] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.253698][ T28] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 258.265607][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.279582][ T28] usb 3-1: config 0 descriptor?? [ 258.609127][ T5843] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 258.688578][ T28] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 258.798509][ T5843] usb 4-1: Using ep0 maxpacket: 16 [ 258.806343][ T5843] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 258.814970][ T5843] usb 4-1: config 0 has no interface number 0 [ 258.823749][ T5843] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 258.833098][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.841654][ T5843] usb 4-1: Product: syz [ 258.846056][ T5843] usb 4-1: Manufacturer: syz [ 258.850841][ T5843] usb 4-1: SerialNumber: syz [ 258.857934][ T5843] usb 4-1: config 0 descriptor?? [ 258.865603][ T5843] hub 4-1:0.132: bad descriptor, ignoring hub [ 258.872147][ T5843] hub: probe of 4-1:0.132 failed with error -5 [ 258.882968][ T5843] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input22 [ 258.898627][ T28] usb 1-1: Using ep0 maxpacket: 16 [ 258.912233][ T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.938293][ T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.952712][ T28] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 258.965982][ T28] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 258.989297][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.003587][ T28] usb 1-1: config 0 descriptor?? [ 259.086560][ T8801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.097054][ T8801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.434408][ T28] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.001A/input/input23 [ 259.527507][ T28] microsoft 0003:045E:07DA.001A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 259.635305][ T28] usb 1-1: USB disconnect, device number 31 [ 259.654153][ T8815] fido_id[8815]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 259.856705][ T8820] capability: warning: `syz.1.1060' uses deprecated v2 capabilities in a way that may be insecure [ 260.602613][ T5765] usb 3-1: USB disconnect, device number 36 [ 260.618341][ T5843] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 260.793322][ T5884] usb 2-1: USB disconnect, device number 30 [ 260.823233][ T5843] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 260.846914][ T5843] usb 1-1: config 0 has no interface number 0 [ 260.860883][ T5843] usb 1-1: config 0 interface 1 has no altsetting 0 [ 260.875700][ T5843] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 260.887835][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.901823][ T5843] usb 1-1: Product: syz [ 260.907052][ T5843] usb 1-1: Manufacturer: syz [ 260.914567][ T5843] usb 1-1: SerialNumber: syz [ 260.920098][ T8831] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1064'. [ 260.935526][ T5843] usb 1-1: config 0 descriptor?? [ 260.967713][ T5843] usb 1-1: selecting invalid altsetting 1 [ 260.989880][ T5843] dvb_ttusb_budget: ttusb_init_controller: error [ 261.003424][ T5843] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 261.123660][ T5843] DVB: Unable to find symbol stv0299_attach() [ 261.213476][ T5843] DVB: Unable to find symbol tda8083_attach() [ 261.243261][ T5843] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 261.442111][ T8840] fuse: Bad value for 'fd' [ 261.751824][ T5127] usb 4-1: reset high-speed USB device number 38 using dummy_hcd [ 261.828600][ T28] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 261.960552][ T5127] usb 4-1: device firmware changed [ 261.987444][ T9] usb 4-1: USB disconnect, device number 38 [ 262.028367][ T28] usb 3-1: Using ep0 maxpacket: 16 [ 262.049291][ T28] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 262.068097][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.089890][ T28] usb 3-1: Product: syz [ 262.100580][ T28] usb 3-1: Manufacturer: syz [ 262.110049][ T28] usb 3-1: SerialNumber: syz [ 262.127260][ T28] usb 3-1: config 0 descriptor?? [ 262.188568][ T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 262.379607][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 262.391743][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.403339][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.420338][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 262.438054][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 262.440455][ T5765] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 262.460305][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.477173][ T9] usb 4-1: config 0 descriptor?? [ 262.555616][ T28] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 262.574230][ T28] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 262.584792][ T28] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 262.593236][ T28] usb 3-1: media controller created [ 262.620990][ T28] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 262.648452][ T5765] usb 2-1: Using ep0 maxpacket: 16 [ 262.656086][ T5765] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.670405][ T5765] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 262.685178][ T5765] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.703035][ T5765] usb 2-1: config 0 descriptor?? [ 262.756239][ T28] zl10353_read_register: readreg error (reg=127, ret==0) [ 262.764591][ T28] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 262.781150][ T28] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 262.797834][ T28] usb 3-1: USB disconnect, device number 37 [ 262.835387][ T28] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 262.927635][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.001B/input/input24 [ 262.966418][ T5765] usb 2-1: USB disconnect, device number 31 [ 263.015474][ T9] microsoft 0003:045E:07DA.001B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 263.126726][ T9] usb 4-1: USB disconnect, device number 39 [ 263.266312][ T5884] usb 1-1: USB disconnect, device number 32 [ 263.968328][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 264.158453][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 264.173192][ T9] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 264.190813][ T9] usb 1-1: config 0 has no interface number 0 [ 264.207540][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 264.225086][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.239524][ T9] usb 1-1: Product: syz [ 264.247259][ T9] usb 1-1: Manufacturer: syz [ 264.258186][ T9] usb 1-1: SerialNumber: syz [ 264.283869][ T9] usb 1-1: config 0 descriptor?? [ 264.297657][ T9] hub 1-1:0.132: bad descriptor, ignoring hub [ 264.306356][ T9] hub: probe of 1-1:0.132 failed with error -5 [ 264.329654][ T9] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input25 [ 264.516859][ T8870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.532085][ T8870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.768390][ T5884] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 264.878849][ T173] usb 1-1: USB disconnect, device number 33 [ 264.948530][ T5884] usb 3-1: Using ep0 maxpacket: 16 [ 264.965306][ T5884] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 264.975237][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.988453][ T5884] usb 3-1: Product: syz [ 264.992796][ T5884] usb 3-1: Manufacturer: syz [ 264.997835][ T5884] usb 3-1: SerialNumber: syz [ 265.006390][ T5884] usb 3-1: config 0 descriptor?? [ 265.259014][ T5765] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 265.422552][ T5884] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 265.439200][ T5884] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 265.452371][ T5884] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 265.460991][ T5765] usb 2-1: Using ep0 maxpacket: 16 [ 265.466542][ T5884] usb 3-1: media controller created [ 265.482180][ T5765] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.502107][ T5765] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 265.520477][ T5884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 265.529532][ T5765] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.549960][ T5765] usb 2-1: config 0 descriptor?? [ 265.622963][ T5884] zl10353_read_register: readreg error (reg=127, ret==0) [ 265.645546][ T5884] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 265.668977][ T5884] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 265.692860][ T5884] usb 3-1: USB disconnect, device number 38 [ 265.785576][ T5884] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 265.842963][ T8888] syz.1.1084 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 265.869718][ T8888] CPU: 1 PID: 8888 Comm: syz.1.1084 Not tainted syzkaller #0 [ 265.877191][ T8888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 265.887424][ T8888] Call Trace: [ 265.890778][ T8888] [ 265.893754][ T8888] dump_stack_lvl+0x18c/0x250 [ 265.898497][ T8888] ? show_regs_print_info+0x20/0x20 [ 265.903839][ T8888] ? load_image+0x420/0x420 [ 265.908398][ T8888] ? ___ratelimit+0x478/0x610 [ 265.913163][ T8888] ? radix_tree_cpu_dead+0x160/0x160 [ 265.918635][ T8888] dump_header+0xd8/0x820 [ 265.923029][ T8888] oom_kill_process+0x390/0x580 [ 265.927973][ T8888] out_of_memory+0xe0e/0x1200 [ 265.932731][ T8888] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 265.938436][ T8888] ? mutex_lock_nested+0x20/0x20 [ 265.943451][ T8888] ? unregister_oom_notifier+0x20/0x20 [ 265.948999][ T8888] mem_cgroup_out_of_memory+0x2c2/0x390 [ 265.954611][ T8888] ? try_charge_memcg+0xc91/0x17c0 [ 265.959785][ T8888] ? drain_local_stock+0x630/0x630 [ 265.964965][ T8888] ? do_raw_spin_unlock+0x121/0x230 [ 265.970226][ T8888] try_charge_memcg+0xca1/0x17c0 [ 265.975249][ T8888] ? folio_flags+0x120/0x120 [ 265.979911][ T8888] ? percpu_ref_tryget+0x15/0x180 [ 265.984977][ T8888] ? get_mem_cgroup_from_mm+0x38/0x290 [ 265.990475][ T8888] charge_memcg+0x11b/0x3b0 [ 265.995024][ T8888] ? __mem_cgroup_charge+0x80/0x80 [ 266.000171][ T8888] ? get_mem_cgroup_from_mm+0x38/0x290 [ 266.005659][ T8888] ? get_mem_cgroup_from_mm+0x38/0x290 [ 266.011150][ T8888] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 266.016736][ T8888] __mem_cgroup_charge+0x25/0x80 [ 266.021709][ T8888] do_wp_page+0x1378/0x34d0 [ 266.026256][ T8888] ? folio_put+0xd0/0xd0 [ 266.030575][ T8888] ? do_raw_spin_lock+0x11f/0x2b0 [ 266.035660][ T8888] ? __rwlock_init+0x150/0x150 [ 266.040480][ T8888] handle_mm_fault+0x1306/0x4a50 [ 266.045452][ T8888] ? handle_mm_fault+0xe6/0x4a50 [ 266.050433][ T8888] ? lock_vma_under_rcu+0x52c/0x660 [ 266.055664][ T8888] ? numa_migrate_prep+0x350/0x350 [ 266.060806][ T8888] ? lock_vma_under_rcu+0xe5/0x660 [ 266.065964][ T8888] ? do_user_addr_fault+0x1cb/0x12d0 [ 266.071287][ T8888] do_user_addr_fault+0xad2/0x12d0 [ 266.076437][ T8888] ? rcu_is_watching+0x15/0xb0 [ 266.081244][ T8888] exc_page_fault+0x64/0x100 [ 266.085879][ T8888] asm_exc_page_fault+0x26/0x30 [ 266.090767][ T8888] RIP: 0033:0x7f661836d207 [ 266.095234][ T8888] Code: 2e a3 de 00 01 74 9d 83 f9 c0 0f 87 8f fe ff ff c5 fe 6f 4e 20 48 29 fe 48 83 c7 3f 49 8d 0c 10 48 83 e7 c0 48 01 fe 48 29 f9 a4 c4 c1 7e 7f 00 c4 c1 7e 7f 48 20 e9 0e fd ff ff 0f 1f 80 00 [ 266.114890][ T8888] RSP: 002b:00007f661928df58 EFLAGS: 00010206 [ 266.120997][ T8888] RAX: 0000200000600000 RBX: 0000000000000009 RCX: 00000000000025f5 [ 266.129090][ T8888] RDX: 00000000000025f5 RSI: 00007f6618404c00 RDI: 0000200000600000 [ 266.137117][ T8888] RBP: 00007f66184546f0 R08: 0000200000600000 R09: ffffffffffffffff [ 266.145130][ T8888] R10: 0000000000000000 R11: 0000000000000008 R12: 000020000059e000 [ 266.153225][ T8888] R13: 0000000000000008 R14: 0000000000000002 R15: 000000000039a000 [ 266.161438][ T8888] [ 266.201210][ T8888] memory: usage 4kB, limit 4kB, failcnt 37 [ 266.218456][ T8888] memory+swap: usage 12kB, limit 9007199254740988kB, failcnt 0 [ 266.229201][ T8888] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 266.246559][ T8888] Memory cgroup stats for /syz1/syz2: [ 266.246947][ T8888] cache 0 [ 266.258438][ T8888] rss 0 [ 266.265898][ T8888] rss_huge 0 [ 266.271805][ T8888] shmem 0 [ 266.278721][ T8888] mapped_file 0 [ 266.288389][ T8888] dirty 0 [ 266.298479][ T8888] writeback 0 [ 266.301929][ T8888] workingset_refault_anon 3 [ 266.318666][ T8888] workingset_refault_file 0 [ 266.323778][ T8888] swap 8192 [ 266.327018][ T8888] pgpgin 5 [ 266.337184][ T8888] pgpgout 5 [ 266.358419][ T8888] pgfault 4 [ 266.368494][ T8888] pgmajfault 1 [ 266.372024][ T8888] inactive_anon 0 [ 266.375790][ T8888] active_anon 0 [ 266.388703][ T8888] inactive_file 0 [ 266.392547][ T8888] active_file 0 [ 266.396179][ T8888] unevictable 0 [ 266.402704][ T8888] hierarchical_memory_limit 4096 [ 266.412830][ T8888] hierarchical_memsw_limit 9223372036854771712 [ 266.419336][ T8888] total_cache 0 [ 266.433148][ T8888] total_rss 0 [ 266.438418][ T8888] total_rss_huge 0 [ 266.448367][ T8888] total_shmem 0 [ 266.457706][ T8888] total_mapped_file 0 [ 266.463706][ T8888] total_dirty 0 [ 266.467310][ T8888] total_writeback 0 [ 266.478415][ T8888] total_workingset_refault_anon 3 [ 266.493796][ T8888] total_workingset_refault_file 0 [ 266.504350][ T8888] total_swap 8192 [ 266.514026][ T8888] total_pgpgin 5 [ 266.530658][ T8888] total_pgpgout 5 [ 266.534540][ T8888] total_pgfault 4 [ 266.538888][ T8888] total_pgmajfault 1 [ 266.542960][ T8888] total_inactive_anon 0 [ 266.547239][ T8888] total_active_anon 0 [ 266.551792][ T8888] total_inactive_file 0 [ 266.556179][ T8888] total_active_file 0 [ 266.561292][ T8888] total_unevictable 0 [ 266.565505][ T8888] anon_cost 0 [ 266.569234][ T8888] file_cost 0 [ 266.572637][ T8888] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz1/syz2,task_memcg=/syz1/syz2,task=syz.1.1084,pid=8886,uid=0 [ 266.592867][ T8888] Memory cgroup out of memory: Killed process 8886 (syz.1.1084) total-vm:102508kB, anon-rss:1372kB, file-rss:23424kB, shmem-rss:1920kB, UID:0 pgtables:168kB oom_score_adj:1000 [ 266.667076][ T9] usb 2-1: USB disconnect, device number 32 [ 267.174409][ T8914] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1094'. [ 267.516054][ T8925] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1098'. [ 267.818817][ T8936] Cannot find set identified by id 0 to match [ 267.958527][ T8938] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1103'. [ 268.129460][ T173] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 268.319467][ T173] usb 1-1: Using ep0 maxpacket: 16 [ 268.346693][ T173] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.368950][ T173] usb 1-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 268.383169][ T173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.399070][ T173] usb 1-1: config 0 descriptor?? [ 268.739409][ T8928] syz.0.1099 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 268.789539][ T8928] CPU: 1 PID: 8928 Comm: syz.0.1099 Not tainted syzkaller #0 [ 268.797010][ T8928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 268.807116][ T8928] Call Trace: [ 268.810426][ T8928] [ 268.813384][ T8928] dump_stack_lvl+0x18c/0x250 [ 268.818106][ T8928] ? show_regs_print_info+0x20/0x20 [ 268.823861][ T8928] ? load_image+0x420/0x420 [ 268.828517][ T8928] ? ___ratelimit+0x478/0x610 [ 268.833259][ T8928] ? radix_tree_cpu_dead+0x160/0x160 [ 268.838601][ T8928] dump_header+0xd8/0x820 [ 268.842971][ T8928] oom_kill_process+0x390/0x580 [ 268.847869][ T8928] out_of_memory+0xe0e/0x1200 [ 268.852602][ T8928] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 268.858284][ T8928] ? print_unlock_imbalance_bug+0x160/0x160 [ 268.864218][ T8928] ? mutex_lock_nested+0x20/0x20 [ 268.869194][ T8928] ? unregister_oom_notifier+0x20/0x20 [ 268.874696][ T8928] mem_cgroup_out_of_memory+0x2c2/0x390 [ 268.880277][ T8928] ? try_charge_memcg+0xc91/0x17c0 [ 268.885428][ T8928] ? drain_local_stock+0x630/0x630 [ 268.890600][ T8928] ? do_raw_spin_unlock+0x121/0x230 [ 268.895845][ T8928] try_charge_memcg+0xca1/0x17c0 [ 268.900869][ T8928] ? verify_lock_unused+0x140/0x140 [ 268.906106][ T8928] ? folio_flags+0x120/0x120 [ 268.910734][ T8928] ? __next_zones_zonelist+0x9d/0x130 [ 268.916184][ T8928] charge_memcg+0x11b/0x3b0 [ 268.920732][ T8928] ? __mem_cgroup_charge+0x80/0x80 [ 268.925887][ T8928] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 268.932078][ T8928] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 268.938278][ T8928] __read_swap_cache_async+0x3f4/0x9c0 [ 268.943804][ T8928] swap_cluster_readahead+0x385/0x670 [ 268.949234][ T8928] ? read_swap_cache_async+0x90/0x90 [ 268.954653][ T8928] ? xas_load+0x12b/0x140 [ 268.959029][ T8928] ? filemap_get_entry+0xce/0x3f0 [ 268.964091][ T8928] ? filemap_get_entry+0xce/0x3f0 [ 268.969156][ T8928] ? filemap_get_entry+0x375/0x3f0 [ 268.974326][ T8928] swapin_readahead+0x108/0xa60 [ 268.979317][ T8928] ? get_swap_device+0x96/0x3f0 [ 268.984218][ T8928] ? exit_swap_address_space+0x290/0x290 [ 268.989899][ T8928] ? __filemap_get_folio+0x939/0xbe0 [ 268.995233][ T8928] ? swap_cache_get_folio+0xad/0x590 [ 269.000582][ T8928] ? get_swap_device+0x26e/0x3f0 [ 269.005584][ T8928] do_swap_page+0x435/0x3f50 [ 269.010316][ T8928] ? print_unlock_imbalance_bug+0x160/0x160 [ 269.016260][ T8928] ? do_swap_page+0xcf/0x3f50 [ 269.020967][ T8928] ? pte_offset_map_nolock+0xb9/0x130 [ 269.026374][ T8928] ? handle_mm_fault+0xe6/0x4a50 [ 269.031350][ T8928] handle_mm_fault+0x10a6/0x4a50 [ 269.036341][ T8928] ? handle_mm_fault+0xe6/0x4a50 [ 269.041331][ T8928] ? lock_vma_under_rcu+0x52c/0x660 [ 269.046570][ T8928] ? numa_migrate_prep+0x350/0x350 [ 269.051720][ T8928] ? lock_vma_under_rcu+0xe5/0x660 [ 269.056886][ T8928] ? do_user_addr_fault+0x1cb/0x12d0 [ 269.062211][ T8928] do_user_addr_fault+0xad2/0x12d0 [ 269.067367][ T8928] ? rcu_is_watching+0x15/0xb0 [ 269.072178][ T8928] exc_page_fault+0x64/0x100 [ 269.076882][ T8928] ? clear_bhb_loop+0x40/0x90 [ 269.081598][ T8928] asm_exc_page_fault+0x26/0x30 [ 269.086489][ T8928] RIP: 0033:0x7fe485057280 [ 269.090939][ T8928] Code: 66 01 00 00 49 89 4c 24 30 83 e0 08 45 85 d2 0f 84 ed 00 00 00 4c 8b 44 24 38 4d 85 c0 0f 84 df 00 00 00 49 89 db 49 c1 e3 04 <43> 89 7c 18 10 85 c0 0f 84 23 02 00 00 48 8b 44 24 40 48 39 c2 0f [ 269.110587][ T8928] RSP: 002b:00007fe48601df60 EFLAGS: 00010202 [ 269.116710][ T8928] RAX: 0000000000000000 RBX: 000000000000000e RCX: 0000200000707000 [ 269.124805][ T8928] RDX: 0000000000297000 RSI: 0000000001000000 RDI: 0000000000000297 [ 269.132807][ T8928] RBP: 00007fe485254740 R08: 00002000005ae000 R09: ffffffffffffffff [ 269.140843][ T8928] R10: 0000000000000080 R11: 00000000000000e0 R12: 000020000059e000 [ 269.148865][ T8928] R13: 000000000000000d R14: 0000000000000000 R15: 0000000000000000 [ 269.156933][ T8928] [ 269.183335][ T8928] memory: usage 4kB, limit 4kB, failcnt 103 [ 269.204001][ T8928] memory+swap: usage 24kB, limit 9007199254740988kB, failcnt 0 [ 269.234385][ T8928] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 269.241558][ T8928] Memory cgroup stats for /syz0/syz2: [ 269.241840][ T8928] cache 0 [ 269.250864][ T8928] rss 0 [ 269.253765][ T8928] rss_huge 0 [ 269.257099][ T8928] shmem 0 [ 269.260425][ T8928] mapped_file 0 [ 269.267380][ T8928] dirty 0 [ 269.281749][ T8928] writeback 0 [ 269.286794][ T8928] workingset_refault_anon 6 [ 269.295665][ T8928] workingset_refault_file 0 [ 269.304302][ T8928] swap 20480 [ 269.307612][ T8928] pgpgin 16 [ 269.316913][ T8928] pgpgout 16 [ 269.320569][ T8928] pgfault 15 [ 269.323918][ T8928] pgmajfault 3 [ 269.327462][ T8928] inactive_anon 0 [ 269.332208][ T8928] active_anon 0 [ 269.335819][ T8928] inactive_file 0 [ 269.340250][ T8928] active_file 0 [ 269.343764][ T8928] unevictable 0 [ 269.347339][ T8928] hierarchical_memory_limit 4096 [ 269.353238][ T8928] hierarchical_memsw_limit 9223372036854771712 [ 269.361785][ T8928] total_cache 0 [ 269.365457][ T8928] total_rss 0 [ 269.373383][ T8928] total_rss_huge 0 [ 269.377390][ T8928] total_shmem 0 [ 269.384759][ T8928] total_mapped_file 0 [ 269.399100][ T8928] total_dirty 0 [ 269.402862][ T8928] total_writeback 0 [ 269.406914][ T8928] total_workingset_refault_anon 6 [ 269.417373][ T8928] total_workingset_refault_file 0 [ 269.423064][ T8928] total_swap 20480 [ 269.427733][ T8928] total_pgpgin 16 [ 269.436575][ T8928] total_pgpgout 16 [ 269.440948][ T8928] total_pgfault 15 [ 269.444904][ T8928] total_pgmajfault 3 [ 269.454111][ T8928] total_inactive_anon 0 [ 269.458818][ T8928] total_active_anon 0 [ 269.463012][ T8928] total_inactive_file 0 [ 269.467324][ T8928] total_active_file 0 [ 269.479825][ T8928] total_unevictable 0 [ 269.483899][ T8928] anon_cost 0 [ 269.487237][ T8928] file_cost 0 [ 269.497478][ T8928] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz0/syz2,task_memcg=/syz0/syz2,task=syz.0.1099,pid=8926,uid=0 [ 269.530898][ T8928] Memory cgroup out of memory: Killed process 8926 (syz.0.1099) total-vm:102508kB, anon-rss:1216kB, file-rss:23424kB, shmem-rss:2048kB, UID:0 pgtables:164kB oom_score_adj:1000 [ 269.548800][ T28] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 269.636908][ T8964] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1114'. [ 269.686400][ T173] usb 1-1: USB disconnect, device number 34 [ 269.749501][ T28] usb 3-1: Using ep0 maxpacket: 16 [ 269.757030][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.779473][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.800443][ T28] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 269.830479][ T28] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 269.840946][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.862475][ T28] usb 3-1: config 0 descriptor?? [ 269.918426][ T8] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 270.088911][ T8976] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1119'. [ 270.115253][ T8] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 270.142275][ T8] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 270.157948][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 270.172095][ T8] usb 2-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 270.185472][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.216533][ T8] usb 2-1: config 0 descriptor?? [ 270.224713][ T8966] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 270.315262][ T28] usbhid 3-1:0.0: can't add hid device: -71 [ 270.321618][ T28] usbhid: probe of 3-1:0.0 failed with error -71 [ 270.346844][ T28] usb 3-1: USB disconnect, device number 39 [ 270.657592][ T8] kye 0003:0458:501A.001C: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 270.681375][ T8] kye 0003:0458:501A.001C: unknown main item tag 0x7 [ 270.711621][ T8] kye 0003:0458:501A.001C: hidraw0: USB HID v0.0c Device [HID 0458:501a] on usb-dummy_hcd.1-1/input0 [ 270.756916][ T8] kye 0003:0458:501A.001C: tablet-enabling feature report not found [ 270.775544][ T8] kye 0003:0458:501A.001C: tablet enabling failed [ 270.860014][ T5843] usb 2-1: USB disconnect, device number 33 [ 270.900011][ T8994] fido_id[8994]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 271.102302][ T9002] loop0: detected capacity change from 0 to 2049 [ 271.163715][ T9002] loop0: [ 271.299576][ T9008] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1130'. [ 272.175300][ T9027] syzkaller0: entered promiscuous mode [ 272.207160][ T9027] syzkaller0: entered allmulticast mode [ 273.195484][ T9049] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1143'. [ 273.312229][ T9051] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1144'. [ 273.820816][ T28] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 274.036140][ T28] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.053736][ T28] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 274.096888][ T28] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 274.107432][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.119868][ T28] usb 3-1: Product: syz [ 274.124102][ T28] usb 3-1: Manufacturer: syz [ 274.130234][ T28] usb 3-1: SerialNumber: syz [ 274.147781][ T28] sisusb 3-1:1.0: Invalid USB2VGA device [ 274.154550][ T28] sisusb: probe of 3-1:1.0 failed with error -22 [ 274.519775][ T9047] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1142'. [ 274.979091][ T28] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 275.008556][ T5843] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 275.170786][ T28] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.183181][ T28] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 275.193741][ T28] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 275.199136][ T5843] usb 2-1: Using ep0 maxpacket: 16 [ 275.205459][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.220025][ T5843] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.226183][ T28] usb 1-1: config 0 descriptor?? [ 275.239637][ T9075] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1155'. [ 275.245878][ T5843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 275.260351][ T5843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 275.270806][ T5843] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 275.281984][ T5843] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 275.296854][ T5843] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 275.306460][ T5843] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 275.317389][ T5843] usb 2-1: Manufacturer: syz [ 275.327874][ T5843] usb 2-1: config 0 descriptor?? [ 275.628348][ T5843] rc_core: IR keymap rc-hauppauge not found [ 275.634426][ T5843] Registered IR keymap rc-empty [ 275.640080][ T5843] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 275.668425][ T5843] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 275.699478][ T5843] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 275.733635][ T5843] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input26 [ 275.761003][ T5843] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 275.819542][ T5843] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 275.858477][ T5843] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 275.888803][ T5843] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 275.918467][ T5843] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 275.956439][ T5843] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 275.988523][ T5843] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 276.028815][ T5843] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 276.060422][ T5843] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 276.098427][ T5843] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 276.130447][ T5843] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 276.151865][ T5843] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 276.168558][ T5843] usb 2-1: USB disconnect, device number 34 [ 276.571097][ T28] usb 3-1: USB disconnect, device number 40 [ 277.023040][ T9112] kvm: pic: single mode not supported [ 277.023245][ T9112] kvm: pic: level sensitive irq not supported [ 277.038513][ T9112] kvm: pic: single mode not supported [ 277.044753][ T9112] kvm: pic: level sensitive irq not supported [ 277.069135][ T9112] kvm: pic: level sensitive irq not supported [ 277.075415][ T9112] kvm: pic: level sensitive irq not supported [ 277.089635][ T9112] kvm: pic: level sensitive irq not supported [ 277.096421][ T9112] kvm: pic: level sensitive irq not supported [ 277.131414][ T9112] kvm: pic: level sensitive irq not supported [ 277.158707][ T9112] kvm: pic: single mode not supported [ 277.164899][ T9112] kvm: pic: level sensitive irq not supported [ 277.189540][ T9112] kvm: pic: level sensitive irq not supported [ 277.199096][ T9112] kvm: pic: single mode not supported [ 277.205279][ T9112] kvm: pic: level sensitive irq not supported [ 277.219039][ T9112] kvm: pic: single mode not supported [ 277.225483][ T9112] kvm: pic: single mode not supported [ 277.239899][ T9112] kvm: pic: single mode not supported [ 277.250309][ T9112] kvm: pic: single mode not supported [ 277.257489][ T9112] kvm: pic: single mode not supported [ 277.264923][ T9112] kvm: pic: single mode not supported [ 277.740342][ T9125] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1174'. [ 277.796277][ T5765] usb 1-1: USB disconnect, device number 36 [ 278.260194][ T9136] syz.0.1179 uses obsolete (PF_INET,SOCK_PACKET) [ 278.749567][ T9156] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1185'. [ 278.788851][ T5843] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 278.888405][ T173] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 278.982181][ T5843] usb 2-1: Using ep0 maxpacket: 16 [ 278.991568][ T5843] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.002161][ T5843] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 279.011691][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.023017][ T5843] usb 2-1: config 0 descriptor?? [ 279.070927][ T173] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.081616][ T173] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 279.091273][ T173] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 279.100872][ T173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.121665][ T173] usb 1-1: config 0 descriptor?? [ 279.708715][ T5765] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 279.908555][ T5765] usb 3-1: Using ep0 maxpacket: 16 [ 279.918747][ T5765] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.931142][ T5765] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.941760][ T5765] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 279.954800][ T5765] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 279.964369][ T5765] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.975520][ T5765] usb 3-1: config 0 descriptor?? [ 280.418126][ T5765] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.001D/input/input27 [ 280.530832][ T5765] microsoft 0003:045E:07DA.001D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 280.628763][ T5765] usb 3-1: USB disconnect, device number 41 [ 281.381057][ T173] usb 2-1: USB disconnect, device number 35 [ 281.397707][ T27] kauditd_printk_skb: 124 callbacks suppressed [ 281.397723][ T27] audit: type=1326 audit(1787191488.920:4010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9178 comm="syz.2.1193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77079e0d9 code=0x7ffc0000 [ 281.449098][ T27] audit: type=1326 audit(1787191488.960:4011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9178 comm="syz.2.1193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77079e0d9 code=0x7ffc0000 [ 281.475135][ T27] audit: type=1326 audit(1787191488.980:4012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9178 comm="syz.2.1193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fe77079e0d9 code=0x7ffc0000 [ 281.518423][ T27] audit: type=1326 audit(1787191488.980:4013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9178 comm="syz.2.1193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77079e0d9 code=0x7ffc0000 [ 281.554653][ T27] audit: type=1326 audit(1787191488.980:4014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9178 comm="syz.2.1193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77079e0d9 code=0x7ffc0000 [ 281.676379][ T5843] usb 1-1: USB disconnect, device number 37 [ 282.238403][ T5843] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 282.278521][ T8] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 282.422618][ T5843] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 282.433971][ T5843] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 282.447090][ T5843] usb 1-1: config 0 interface 0 has no altsetting 0 [ 282.454148][ T5843] usb 1-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 282.464463][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.488448][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 282.496777][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.516090][ T5843] usb 1-1: config 0 descriptor?? [ 282.528575][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 282.548816][ T9188] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 282.568394][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 282.578188][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 282.579397][ T173] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 282.602653][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 282.618732][ T8] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 282.627928][ T8] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 282.636554][ T8] usb 2-1: Manufacturer: syz [ 282.645008][ T8] usb 2-1: config 0 descriptor?? [ 282.788573][ T173] usb 3-1: Using ep0 maxpacket: 16 [ 282.796343][ T173] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.806861][ T173] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 282.816190][ T173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.827901][ T173] usb 3-1: config 0 descriptor?? [ 282.938418][ T8] rc_core: IR keymap rc-hauppauge not found [ 282.944501][ T8] Registered IR keymap rc-empty [ 282.949757][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 282.976591][ T5843] kye 0003:0458:501A.001E: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 282.988701][ T5843] kye 0003:0458:501A.001E: unknown main item tag 0x7 [ 283.001491][ T5842] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 283.009386][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 283.017775][ T5843] kye 0003:0458:501A.001E: hidraw0: USB HID v0.0c Device [HID 0458:501a] on usb-dummy_hcd.0-1/input0 [ 283.029260][ T5843] kye 0003:0458:501A.001E: tablet-enabling feature report not found [ 283.037297][ T5843] kye 0003:0458:501A.001E: tablet enabling failed [ 283.068624][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 283.091936][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input28 [ 283.116853][ T9202] syz.2.1204 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 283.125233][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 283.138560][ T9202] CPU: 1 PID: 9202 Comm: syz.2.1204 Not tainted syzkaller #0 [ 283.146017][ T9202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 283.156124][ T9202] Call Trace: [ 283.159470][ T9202] [ 283.162287][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 283.169670][ T9202] dump_stack_lvl+0x18c/0x250 [ 283.169787][ T9202] ? show_regs_print_info+0x20/0x20 [ 283.169818][ T9202] ? load_image+0x420/0x420 [ 283.169837][ T9202] ? ___ratelimit+0x478/0x610 [ 283.189035][ T9202] ? radix_tree_cpu_dead+0x160/0x160 [ 283.194386][ T9202] dump_header+0xd8/0x820 [ 283.198761][ T9202] oom_kill_process+0x390/0x580 [ 283.203750][ T9202] out_of_memory+0xe0e/0x1200 [ 283.208479][ T9202] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 283.214163][ T9202] ? print_unlock_imbalance_bug+0x160/0x160 [ 283.220213][ T9202] ? mutex_lock_nested+0x20/0x20 [ 283.225201][ T9202] ? unregister_oom_notifier+0x20/0x20 [ 283.230714][ T9202] mem_cgroup_out_of_memory+0x2c2/0x390 [ 283.236307][ T9202] ? try_charge_memcg+0xc91/0x17c0 [ 283.241455][ T9202] ? drain_local_stock+0x630/0x630 [ 283.246611][ T9202] ? do_raw_spin_unlock+0x121/0x230 [ 283.251848][ T9202] try_charge_memcg+0xca1/0x17c0 [ 283.256852][ T9202] ? folio_flags+0x120/0x120 [ 283.261494][ T9202] ? percpu_ref_tryget+0x15/0x180 [ 283.266648][ T9202] ? get_mem_cgroup_from_mm+0x38/0x290 [ 283.272143][ T9202] charge_memcg+0x11b/0x3b0 [ 283.276698][ T9202] ? __mem_cgroup_charge+0x80/0x80 [ 283.281843][ T9202] ? get_mem_cgroup_from_mm+0x38/0x290 [ 283.287332][ T9202] ? get_mem_cgroup_from_mm+0x38/0x290 [ 283.292830][ T9202] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 283.298408][ T9202] __mem_cgroup_charge+0x25/0x80 [ 283.303381][ T9202] do_wp_page+0x1378/0x34d0 [ 283.307922][ T9202] ? folio_put+0xd0/0xd0 [ 283.312191][ T9202] ? do_raw_spin_lock+0x11f/0x2b0 [ 283.317265][ T9202] ? __rwlock_init+0x150/0x150 [ 283.322089][ T9202] handle_mm_fault+0x1306/0x4a50 [ 283.327069][ T9202] ? handle_mm_fault+0xe6/0x4a50 [ 283.332132][ T9202] ? lock_vma_under_rcu+0x52c/0x660 [ 283.337395][ T9202] ? numa_migrate_prep+0x350/0x350 [ 283.342562][ T9202] ? lock_vma_under_rcu+0xe5/0x660 [ 283.347741][ T9202] ? do_user_addr_fault+0x1cb/0x12d0 [ 283.353070][ T9202] do_user_addr_fault+0xad2/0x12d0 [ 283.358234][ T9202] ? rcu_is_watching+0x15/0xb0 [ 283.363056][ T9202] exc_page_fault+0x64/0x100 [ 283.367720][ T9202] ? clear_bhb_loop+0x40/0x90 [ 283.372538][ T9202] asm_exc_page_fault+0x26/0x30 [ 283.377427][ T9202] RIP: 0033:0x7fe7706571b6 [ 283.381878][ T9202] Code: 24 50 4c 8b 4c 24 58 4c 8b 6c 24 50 48 89 4c 24 30 48 8d 0d 5c da 1a 00 48 29 ca 44 89 4c 24 24 49 8d bd 00 10 00 00 4c 89 e9 <49> c7 45 10 ff 03 00 00 49 89 7d 08 45 89 fd 4d 89 e7 49 89 cc 48 [ 283.401611][ T9202] RSP: 002b:00007fe771653f60 EFLAGS: 00010206 [ 283.407715][ T9202] RAX: 0000000000000020 RBX: 0000000000000000 RCX: 000020000059e000 [ 283.415746][ T9202] RDX: 00000000000025f5 RSI: 000020000059e000 RDI: 000020000059f000 [ 283.423755][ T9202] RBP: 00007fe770854660 R08: 0000000000000000 R09: ffffffffffffffff [ 283.431845][ T9202] R10: ffffffffffffffff R11: 0000000000000000 R12: 00000000003ff000 [ 283.439854][ T9202] R13: 000020000059e000 R14: 00007fe770a26090 R15: 0000000000000000 [ 283.447881][ T9202] [ 283.487730][ T5842] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.498151][ T5842] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 283.498430][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 283.514898][ T5842] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 283.531531][ T5765] usb 1-1: USB disconnect, device number 38 [ 283.538551][ T9202] memory: usage 4kB, limit 4kB, failcnt 19 [ 283.544499][ T9202] memory+swap: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 283.552266][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.577667][ T5842] usb 4-1: config 0 descriptor?? [ 283.588510][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 283.606745][ T9202] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 283.620521][ T9202] Memory cgroup stats for /syz2/syz2: [ 283.620760][ T9202] cache 0 [ 283.631749][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 283.645868][ T9202] rss 0 [ 283.650034][ T9202] rss_huge 0 [ 283.653320][ T9202] shmem 0 [ 283.656331][ T9202] mapped_file 0 [ 283.660860][ T9202] dirty 0 [ 283.663896][ T9202] writeback 0 [ 283.667275][ T9202] workingset_refault_anon 0 [ 283.672245][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 283.679527][ T9202] workingset_refault_file 0 [ 283.684108][ T9202] swap 0 [ 283.687025][ T9202] pgpgin 0 [ 283.693125][ T9202] pgpgout 0 [ 283.697964][ T9202] pgfault 0 [ 283.704228][ T9202] pgmajfault 0 [ 283.707649][ T9202] inactive_anon 0 [ 283.711590][ T9202] active_anon 0 [ 283.715087][ T9202] inactive_file 0 [ 283.718994][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 283.726254][ T9202] active_file 0 [ 283.729976][ T9202] unevictable 0 [ 283.733579][ T9202] hierarchical_memory_limit 4096 [ 283.738988][ T9202] hierarchical_memsw_limit 9223372036854771712 [ 283.745176][ T9202] total_cache 0 [ 283.748936][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 283.756212][ T9202] total_rss 0 [ 283.759640][ T9202] total_rss_huge 0 [ 283.763605][ T9202] total_shmem 0 [ 283.767105][ T9202] total_mapped_file 0 [ 283.771321][ T9202] total_dirty 0 [ 283.774835][ T9202] total_writeback 0 [ 283.779081][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 283.781556][ T9202] total_workingset_refault_anon 0 [ 283.794499][ T9202] total_workingset_refault_file 0 [ 283.800637][ T9202] total_swap 0 [ 283.804144][ T9202] total_pgpgin 0 [ 283.807908][ T9202] total_pgpgout 0 [ 283.812085][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 283.819415][ T9202] total_pgfault 0 [ 283.823090][ T9202] total_pgmajfault 0 [ 283.827020][ T9202] total_inactive_anon 0 [ 283.835802][ T9202] total_active_anon 0 [ 283.842871][ T9202] total_inactive_file 0 [ 283.847098][ T9202] total_active_file 0 [ 283.851178][ T9202] total_unevictable 0 [ 283.855194][ T9202] anon_cost 0 [ 283.858846][ T9202] file_cost 0 [ 283.862173][ T9202] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2/syz2,task_memcg=/syz2/syz2,task=syz.2.1204,pid=9200,uid=0 [ 283.865427][ T8] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 283.887693][ T9202] Memory cgroup out of memory: Killed process 9200 (syz.2.1204) total-vm:106612kB, anon-rss:1244kB, file-rss:23296kB, shmem-rss:1920kB, UID:0 pgtables:164kB oom_score_adj:1000 [ 283.908492][ T8] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 283.933131][ T8] usb 2-1: USB disconnect, device number 36 [ 283.986010][ T28] usb 3-1: USB disconnect, device number 42 [ 285.498596][ T5765] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 285.702690][ T27] audit: type=1326 audit(1787191493.230:4015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9243 comm="syz.1.1218" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661839e0d9 code=0x7ffc0000 [ 285.727332][ T5765] usb 3-1: Using ep0 maxpacket: 16 [ 285.733221][ T27] audit: type=1326 audit(1787191493.230:4016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9243 comm="syz.1.1218" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661839e0d9 code=0x7ffc0000 [ 285.760438][ T5765] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.772383][ T5765] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 285.781875][ T9244] netlink: 'syz.1.1218': attribute type 4 has an invalid length. [ 285.783102][ T27] audit: type=1326 audit(1787191493.260:4017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9243 comm="syz.1.1218" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661839e0d9 code=0x7ffc0000 [ 285.814410][ T5765] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.829255][ T5765] usb 3-1: config 0 descriptor?? [ 285.834867][ T27] audit: type=1326 audit(1787191493.270:4018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9243 comm="syz.1.1218" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f661839e0d9 code=0x7ffc0000 [ 285.865786][ T27] audit: type=1326 audit(1787191493.270:4019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9243 comm="syz.1.1218" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661839e0d9 code=0x7ffc0000 [ 285.966891][ T5765] usb 4-1: USB disconnect, device number 40 [ 286.082043][ T9237] syz.2.1215 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 286.092128][ T9237] CPU: 0 PID: 9237 Comm: syz.2.1215 Not tainted syzkaller #0 [ 286.099547][ T9237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 286.109732][ T9237] Call Trace: [ 286.113031][ T9237] [ 286.116044][ T9237] dump_stack_lvl+0x18c/0x250 [ 286.120785][ T9237] ? show_regs_print_info+0x20/0x20 [ 286.126029][ T9237] ? load_image+0x420/0x420 [ 286.130616][ T9237] ? ___ratelimit+0x478/0x610 [ 286.135362][ T9237] ? radix_tree_cpu_dead+0x160/0x160 [ 286.140766][ T9237] dump_header+0xd8/0x820 [ 286.145161][ T9237] oom_kill_process+0x390/0x580 [ 286.150097][ T9237] out_of_memory+0xe0e/0x1200 [ 286.154838][ T9237] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 286.160520][ T9237] ? print_unlock_imbalance_bug+0x160/0x160 [ 286.166504][ T9237] ? mutex_lock_nested+0x20/0x20 [ 286.171513][ T9237] ? unregister_oom_notifier+0x20/0x20 [ 286.177064][ T9237] mem_cgroup_out_of_memory+0x2c2/0x390 [ 286.182687][ T9237] ? try_charge_memcg+0xc91/0x17c0 [ 286.187863][ T9237] ? drain_local_stock+0x630/0x630 [ 286.193047][ T9237] ? do_raw_spin_unlock+0x121/0x230 [ 286.198320][ T9237] try_charge_memcg+0xca1/0x17c0 [ 286.203340][ T9237] ? folio_flags+0x120/0x120 [ 286.208051][ T9237] ? percpu_ref_tryget+0x15/0x180 [ 286.213178][ T9237] ? get_mem_cgroup_from_mm+0x38/0x290 [ 286.218734][ T9237] charge_memcg+0x11b/0x3b0 [ 286.223306][ T9237] ? __mem_cgroup_charge+0x80/0x80 [ 286.228482][ T9237] ? get_mem_cgroup_from_mm+0x38/0x290 [ 286.234023][ T9237] ? get_mem_cgroup_from_mm+0x38/0x290 [ 286.239530][ T9237] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 286.245140][ T9237] __mem_cgroup_charge+0x25/0x80 [ 286.250153][ T9237] do_wp_page+0x1378/0x34d0 [ 286.254731][ T9237] ? folio_put+0xd0/0xd0 [ 286.259019][ T9237] ? do_raw_spin_lock+0x11f/0x2b0 [ 286.264110][ T9237] ? __rwlock_init+0x150/0x150 [ 286.268933][ T9237] handle_mm_fault+0x1306/0x4a50 [ 286.273928][ T9237] ? handle_mm_fault+0xe6/0x4a50 [ 286.278951][ T9237] ? lock_vma_under_rcu+0x52c/0x660 [ 286.284229][ T9237] ? numa_migrate_prep+0x350/0x350 [ 286.289366][ T9237] ? lock_vma_under_rcu+0xe5/0x660 [ 286.294512][ T9237] ? do_user_addr_fault+0x1cb/0x12d0 [ 286.299869][ T9237] do_user_addr_fault+0xad2/0x12d0 [ 286.305057][ T9237] ? rcu_is_watching+0x15/0xb0 [ 286.309884][ T9237] exc_page_fault+0x64/0x100 [ 286.314532][ T9237] ? clear_bhb_loop+0x40/0x90 [ 286.319249][ T9237] asm_exc_page_fault+0x26/0x30 [ 286.324143][ T9237] RIP: 0033:0x7fe7706571b6 [ 286.328576][ T9237] Code: 24 50 4c 8b 4c 24 58 4c 8b 6c 24 50 48 89 4c 24 30 48 8d 0d 5c da 1a 00 48 29 ca 44 89 4c 24 24 49 8d bd 00 10 00 00 4c 89 e9 <49> c7 45 10 ff 03 00 00 49 89 7d 08 45 89 fd 4d 89 e7 49 89 cc 48 [ 286.348313][ T9237] RSP: 002b:00007fe771674f60 EFLAGS: 00010206 [ 286.354443][ T9237] RAX: 0000000000000020 RBX: 0000000000000000 RCX: 000020000059e000 [ 286.362567][ T9237] RDX: 00000000000025f5 RSI: 000020000059e000 RDI: 000020000059f000 [ 286.370596][ T9237] RBP: 00007fe770854660 R08: 0000000000000000 R09: ffffffffffffffff [ 286.378619][ T9237] R10: ffffffffffffffff R11: 0000000000000000 R12: 00000000003ff000 [ 286.386631][ T9237] R13: 000020000059e000 R14: 00007fe770a25fa0 R15: 0000000000000000 [ 286.394660][ T9237] [ 286.405961][ T9237] memory: usage 4kB, limit 4kB, failcnt 165 [ 286.412098][ T9237] memory+swap: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 286.422411][ T9237] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 286.429951][ T9237] Memory cgroup stats for /syz2/syz2: [ 286.430116][ T9237] cache 0 [ 286.438889][ T9237] rss 0 [ 286.441700][ T9237] rss_huge 0 [ 286.444933][ T9237] shmem 0 [ 286.447912][ T9237] mapped_file 0 [ 286.451466][ T9237] dirty 0 [ 286.454609][ T9237] writeback 0 [ 286.457906][ T9237] workingset_refault_anon 0 [ 286.465579][ T9237] workingset_refault_file 0 [ 286.468831][ T5843] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 286.470370][ T9237] swap 0 [ 286.480912][ T9237] pgpgin 0 [ 286.483995][ T9237] pgpgout 0 [ 286.487142][ T9237] pgfault 1 [ 286.490537][ T9237] pgmajfault 0 [ 286.493993][ T9237] inactive_anon 0 [ 286.497656][ T9237] active_anon 0 [ 286.501476][ T9237] inactive_file 0 [ 286.505293][ T9237] active_file 0 [ 286.509128][ T9237] unevictable 0 [ 286.513189][ T9237] hierarchical_memory_limit 4096 [ 286.518181][ T9237] hierarchical_memsw_limit 9223372036854771712 [ 286.526779][ T9237] total_cache 0 [ 286.530816][ T9237] total_rss 0 [ 286.534146][ T9237] total_rss_huge 0 [ 286.538013][ T9237] total_shmem 0 [ 286.542234][ T9237] total_mapped_file 0 [ 286.546382][ T9237] total_dirty 0 [ 286.550353][ T9237] total_writeback 0 [ 286.554298][ T9237] total_workingset_refault_anon 0 [ 286.559548][ T9237] total_workingset_refault_file 0 [ 286.564994][ T9237] total_swap 0 [ 286.568563][ T9237] total_pgpgin 0 [ 286.572330][ T9237] total_pgpgout 0 [ 286.576447][ T9237] total_pgfault 1 [ 286.580333][ T9237] total_pgmajfault 0 [ 286.584481][ T9237] total_inactive_anon 0 [ 286.589207][ T9237] total_active_anon 0 [ 286.593379][ T9237] total_inactive_file 0 [ 286.597612][ T9237] total_active_file 0 [ 286.602064][ T9237] total_unevictable 0 [ 286.606108][ T9237] anon_cost 0 [ 286.609707][ T9237] file_cost 0 [ 286.613129][ T9237] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2/syz2,task_memcg=/syz2/syz2,task=syz.2.1215,pid=9236,uid=0 [ 286.629562][ T9237] Memory cgroup out of memory: Killed process 9236 (syz.2.1215) total-vm:102508kB, anon-rss:1244kB, file-rss:23296kB, shmem-rss:1920kB, UID:0 pgtables:164kB oom_score_adj:1000 [ 286.660277][ T5843] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 286.688461][ T5843] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 286.708303][ T5843] usb 2-1: config 0 interface 0 has no altsetting 0 [ 286.715018][ T5843] usb 2-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 286.735749][ T8] usb 3-1: USB disconnect, device number 43 [ 286.744018][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.760098][ T5843] usb 2-1: config 0 descriptor?? [ 286.765916][ T9246] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 287.190929][ T5843] kye 0003:0458:501A.001F: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 287.203114][ T5843] kye 0003:0458:501A.001F: unknown main item tag 0x7 [ 287.213029][ T5843] kye 0003:0458:501A.001F: hidraw0: USB HID v0.0c Device [HID 0458:501a] on usb-dummy_hcd.1-1/input0 [ 287.224503][ T5843] kye 0003:0458:501A.001F: tablet-enabling feature report not found [ 287.232991][ T5843] kye 0003:0458:501A.001F: tablet enabling failed [ 287.390550][ T5765] usb 2-1: USB disconnect, device number 37 [ 287.448441][ T28] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 287.638340][ T28] usb 4-1: Using ep0 maxpacket: 16 [ 287.645968][ T28] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.657950][ T28] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.668437][ T28] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 287.681510][ T28] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 287.690847][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.702322][ T28] usb 4-1: config 0 descriptor?? [ 287.851778][ T27] kauditd_printk_skb: 58 callbacks suppressed [ 287.851796][ T27] audit: type=1326 audit(1787191495.380:4078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9264 comm="syz.0.1227" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48519e0d9 code=0x7ffc0000 [ 287.883865][ T27] audit: type=1326 audit(1787191495.380:4079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9264 comm="syz.0.1227" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48519e0d9 code=0x7ffc0000 [ 287.910674][ T27] audit: type=1326 audit(1787191495.390:4080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9264 comm="syz.0.1227" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48519e0d9 code=0x7ffc0000 [ 287.953744][ T9265] netlink: 'syz.0.1227': attribute type 4 has an invalid length. [ 287.976404][ T27] audit: type=1326 audit(1787191495.390:4081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9264 comm="syz.0.1227" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48519e0d9 code=0x7ffc0000 [ 288.098485][ T27] audit: type=1326 audit(1787191495.390:4082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9264 comm="syz.0.1227" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fe48519e0d9 code=0x7ffc0000 [ 288.129246][ T27] audit: type=1326 audit(1787191495.390:4083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9264 comm="syz.0.1227" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48519e0d9 code=0x7ffc0000 [ 288.160085][ T27] audit: type=1326 audit(1787191495.390:4084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9264 comm="syz.0.1227" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48519e0d9 code=0x7ffc0000 [ 288.211195][ T28] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0020/input/input29 [ 288.223406][ T27] audit: type=1326 audit(1787191495.410:4086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9264 comm="syz.0.1227" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe48519e0d9 code=0x7ffc0000 [ 288.284685][ T27] audit: type=1326 audit(1787191495.410:4087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9264 comm="syz.0.1227" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48519e0d9 code=0x7ffc0000 [ 288.310970][ T27] audit: type=1326 audit(1787191495.400:4085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9264 comm="syz.0.1227" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48519e0d9 code=0x7ffc0000 [ 288.342852][ T28] microsoft 0003:045E:07DA.0020: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 288.407057][ T28] usb 4-1: USB disconnect, device number 41 [ 288.413200][ T5765] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 288.504829][ T9273] fido_id[9273]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 288.598560][ T5843] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 288.640568][ T5765] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.651761][ T5765] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 288.665674][ T5765] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 288.675975][ T5765] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.687094][ T5765] usb 3-1: config 0 descriptor?? [ 288.702296][ T5765] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 288.778376][ T5843] usb 2-1: Using ep0 maxpacket: 16 [ 288.785760][ T5843] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.796245][ T5843] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 288.805531][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.815974][ T5843] usb 2-1: config 0 descriptor?? [ 289.086316][ T5843] usb 2-1: USB disconnect, device number 38 [ 289.778576][ T5765] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 289.982412][ T5765] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 289.992994][ T5765] usb 4-1: config 0 has no interface number 0 [ 289.999630][ T5765] usb 4-1: config 0 interface 1 has no altsetting 0 [ 290.009298][ T5765] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 290.019056][ T5765] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.027505][ T5765] usb 4-1: Product: syz [ 290.032094][ T5765] usb 4-1: Manufacturer: syz [ 290.036867][ T5765] usb 4-1: SerialNumber: syz [ 290.047065][ T5765] usb 4-1: config 0 descriptor?? [ 290.059807][ T5765] usb 4-1: selecting invalid altsetting 1 [ 290.066023][ T5765] dvb_ttusb_budget: ttusb_init_controller: error [ 290.073053][ T5765] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 290.131780][ T5765] DVB: Unable to find symbol stv0299_attach() [ 290.180730][ T5765] DVB: Unable to find symbol tda8083_attach() [ 290.186939][ T5765] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 290.279927][ T5765] usb 4-1: USB disconnect, device number 42 [ 290.737350][ T9309] process 'syz.1.1242' launched '/dev/fd/6' with NULL argv: empty string added [ 291.124779][ T8] usb 3-1: USB disconnect, device number 44 [ 291.323525][ T9319] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1246'. [ 292.253407][ T9336] loop0: detected capacity change from 0 to 2049 [ 292.418519][ T5765] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 292.621907][ T5765] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 292.643138][ T5765] usb 4-1: config 0 has no interface number 0 [ 292.654189][ T5765] usb 4-1: config 0 interface 1 has no altsetting 0 [ 292.667284][ T5765] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 292.687284][ T5765] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.725078][ T5765] usb 4-1: Product: syz [ 292.738444][ T5765] usb 4-1: Manufacturer: syz [ 292.747565][ T5765] usb 4-1: SerialNumber: syz [ 292.770731][ T5765] usb 4-1: config 0 descriptor?? [ 292.810476][ T5765] usb 4-1: selecting invalid altsetting 1 [ 292.829172][ T5765] dvb_ttusb_budget: ttusb_init_controller: error [ 292.835669][ T5765] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 293.017319][ T5765] DVB: Unable to find symbol stv0299_attach() [ 293.095100][ T27] kauditd_printk_skb: 1005 callbacks suppressed [ 293.095117][ T27] audit: type=1326 audit(1787191500.620:5093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9351 comm="syz.1.1260" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f661839e0d9 code=0x0 [ 293.173174][ T5765] DVB: Unable to find symbol tda8083_attach() [ 293.198303][ T5765] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 293.221424][ T5765] usb 4-1: USB disconnect, device number 43 [ 293.377007][ T9362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1260'. [ 294.228603][ T27] audit: type=1326 audit(1787191501.730:5094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9410 comm="syz.2.1266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77079e0d9 code=0x7ffc0000 [ 294.326243][ T27] audit: type=1326 audit(1787191501.760:5095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9410 comm="syz.2.1266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77079e0d9 code=0x7ffc0000 [ 294.387839][ T27] audit: type=1326 audit(1787191501.830:5096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9410 comm="syz.2.1266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77079e0d9 code=0x7ffc0000 [ 294.412999][ T27] audit: type=1326 audit(1787191501.830:5097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9410 comm="syz.2.1266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77079e0d9 code=0x7ffc0000 [ 294.462528][ T27] audit: type=1326 audit(1787191501.830:5098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9410 comm="syz.2.1266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fe77079e0d9 code=0x7ffc0000 [ 294.488754][ T27] audit: type=1326 audit(1787191501.830:5099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9410 comm="syz.2.1266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77079e0d9 code=0x7ffc0000 [ 294.513726][ T27] audit: type=1326 audit(1787191501.830:5100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9410 comm="syz.2.1266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77079e0d9 code=0x7ffc0000 [ 294.547078][ T27] audit: type=1326 audit(1787191501.830:5101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9410 comm="syz.2.1266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77079e0d9 code=0x7ffc0000 [ 294.574751][ T27] audit: type=1326 audit(1787191501.840:5103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9410 comm="syz.2.1266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe77079e0d9 code=0x7ffc0000 [ 294.818468][ T5765] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 294.978381][ T5765] usb 4-1: device descriptor read/64, error -71 [ 295.028421][ T28] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 295.248513][ T28] usb 1-1: Using ep0 maxpacket: 16 [ 295.256341][ T28] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.266812][ T5765] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 295.274579][ T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 295.292078][ T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 295.302088][ T28] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 295.312011][ T28] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 295.326352][ T28] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 295.335773][ T28] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 295.344019][ T28] usb 1-1: Manufacturer: syz [ 295.351533][ T28] usb 1-1: config 0 descriptor?? [ 295.448415][ T8] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 295.448676][ T5765] usb 4-1: device descriptor read/64, error -71 [ 295.578816][ T5765] usb usb4-port1: attempt power cycle [ 295.640728][ T8] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 295.649030][ T8] usb 3-1: config 0 has no interface number 0 [ 295.655210][ T8] usb 3-1: config 0 interface 1 has no altsetting 0 [ 295.656257][ T28] rc_core: IR keymap rc-hauppauge not found [ 295.668419][ T28] Registered IR keymap rc-empty [ 295.673884][ T8] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 295.673924][ T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 295.691370][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.699846][ T8] usb 3-1: Product: syz [ 295.704070][ T8] usb 3-1: Manufacturer: syz [ 295.708838][ T8] usb 3-1: SerialNumber: syz [ 295.716017][ T8] usb 3-1: config 0 descriptor?? [ 295.728560][ T8] usb 3-1: selecting invalid altsetting 1 [ 295.730343][ T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 295.734929][ T8] dvb_ttusb_budget: ttusb_init_controller: error [ 295.749451][ T8] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 295.781095][ T28] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 295.801996][ T28] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input30 [ 295.819453][ T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 295.836237][ T8] DVB: Unable to find symbol stv0299_attach() [ 295.848772][ T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 295.888452][ T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 295.907596][ T8] DVB: Unable to find symbol tda8083_attach() [ 295.915476][ T8] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 295.934552][ T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 295.951858][ T8] usb 3-1: USB disconnect, device number 45 [ 295.978790][ T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 295.998488][ T5765] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 296.018786][ T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 296.046950][ T5765] usb 4-1: device descriptor read/8, error -71 [ 296.068960][ T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 296.107571][ T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 296.149257][ T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 296.189577][ T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 296.221898][ T28] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 296.231120][ T28] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 296.250446][ T28] usb 1-1: USB disconnect, device number 39 [ 296.338516][ T5765] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 296.382105][ T5765] usb 4-1: device descriptor read/8, error -71 [ 296.525321][ T5765] usb usb4-port1: unable to enumerate USB device [ 298.097465][ T9456] pic_ioport_write: 179 callbacks suppressed [ 298.097503][ T9456] kvm: pic: level sensitive irq not supported [ 298.107051][ T27] kauditd_printk_skb: 463 callbacks suppressed [ 298.107063][ T27] audit: type=1326 audit(1787191505.630:5566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9450 comm="syz.3.1279" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3ee1f5e90e code=0x7ffc0000 [ 298.192907][ T27] audit: type=1326 audit(1787191505.670:5567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9450 comm="syz.3.1279" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3ee1f5e90e code=0x7ffc0000 [ 298.226495][ T27] audit: type=1326 audit(1787191505.670:5568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9450 comm="syz.3.1279" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3ee1f5e90e code=0x7ffc0000 [ 298.255270][ T27] audit: type=1326 audit(1787191505.670:5569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9450 comm="syz.3.1279" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3ee1f5e90e code=0x7ffc0000 [ 298.281913][ T27] audit: type=1326 audit(1787191505.680:5570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9450 comm="syz.3.1279" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3ee1f5e90e code=0x7ffc0000 [ 298.306841][ T27] audit: type=1326 audit(1787191505.680:5571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9450 comm="syz.3.1279" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3ee1f5e90e code=0x7ffc0000 [ 298.348377][ T8] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 298.368456][ T27] audit: type=1326 audit(1787191505.680:5572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9450 comm="syz.3.1279" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3ee1f5e90e code=0x7ffc0000 [ 298.393703][ T27] audit: type=1326 audit(1787191505.680:5573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9450 comm="syz.3.1279" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3ee1f5e90e code=0x7ffc0000 [ 298.457805][ T27] audit: type=1326 audit(1787191505.690:5574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9450 comm="syz.3.1279" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3ee1f5e90e code=0x7ffc0000 [ 298.483172][ T27] audit: type=1326 audit(1787191505.690:5575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9450 comm="syz.3.1279" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3ee1f5e90e code=0x7ffc0000 [ 298.563133][ T8] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 298.571586][ T8] usb 2-1: config 0 has no interface number 0 [ 298.577941][ T8] usb 2-1: config 0 interface 1 has no altsetting 0 [ 298.593440][ T8] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 298.603533][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.615662][ T8] usb 2-1: Product: syz [ 298.628446][ T8] usb 2-1: Manufacturer: syz [ 298.633118][ T8] usb 2-1: SerialNumber: syz [ 298.665746][ T8] usb 2-1: config 0 descriptor?? [ 298.682947][ T8] usb 2-1: selecting invalid altsetting 1 [ 298.708976][ T8] dvb_ttusb_budget: ttusb_init_controller: error [ 298.719307][ T8] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 298.814983][ T8] DVB: Unable to find symbol stv0299_attach() [ 298.857709][ T8] DVB: Unable to find symbol tda8083_attach() [ 298.866848][ T8] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 298.894640][ T8] usb 2-1: USB disconnect, device number 39 [ 298.920689][ T9474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1286'. [ 298.930713][ T9474] bridge_slave_1: left allmulticast mode [ 298.940753][ T9474] bridge_slave_1: left promiscuous mode [ 298.946659][ T9474] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.958504][ T5765] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 299.009282][ T9474] bridge_slave_0: left allmulticast mode [ 299.028621][ T9474] bridge_slave_0: left promiscuous mode [ 299.035119][ T9474] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.138763][ T5765] usb 1-1: device descriptor read/64, error -71 [ 299.429696][ T5765] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 299.598441][ T5765] usb 1-1: device descriptor read/64, error -71 [ 299.749616][ T5765] usb usb1-port1: attempt power cycle [ 300.161859][ T9487] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 300.179075][ T5765] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 300.198167][ T9487] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 300.258695][ T5765] usb 1-1: device descriptor read/8, error -71 [ 300.518527][ T5884] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 300.538408][ T5765] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 300.580800][ T5765] usb 1-1: device descriptor read/8, error -71 [ 300.661632][ T9507] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1300'. [ 300.698767][ T5765] usb usb1-port1: unable to enumerate USB device [ 300.729453][ T5884] usb 3-1: Using ep0 maxpacket: 16 [ 300.743180][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.758547][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.769383][ T5884] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 300.782963][ T5884] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 300.792524][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.812430][ T5884] usb 3-1: config 0 descriptor?? [ 300.855568][ T9512] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 300.863469][ T9512] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 301.235801][ T5884] usbhid 3-1:0.0: can't add hid device: -71 [ 301.243002][ T5884] usbhid: probe of 3-1:0.0 failed with error -71 [ 301.252789][ T5884] usb 3-1: USB disconnect, device number 46 [ 301.598510][ T8] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 301.678454][ T5765] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 301.782420][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.818310][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 301.839036][ T8] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 301.858812][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 301.866982][ T8] usb 4-1: SerialNumber: syz [ 301.881131][ T5765] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.914350][ T5765] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 301.937803][ T5765] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 301.949310][ T5765] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.959974][ T9532] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 301.967486][ T9532] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 301.971947][ T5765] usb 2-1: config 0 descriptor?? [ 301.994454][ T5765] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 302.114736][ T8] usb 4-1: 0:2 : does not exist [ 302.137185][ T8] usb 4-1: unit 1 not found! [ 302.173296][ T8] usb 4-1: USB disconnect, device number 48 [ 302.242437][ T5854] udevd[5854]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 302.371615][ T9542] fuse: Unknown parameter 'group_i00000000000000000000' [ 302.458960][ T5843] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 302.650688][ T5843] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 302.663771][ T5843] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 302.682167][ T5843] usb 1-1: config 0 interface 0 has no altsetting 0 [ 302.689263][ T5843] usb 1-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 302.699987][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.719712][ T5843] usb 1-1: config 0 descriptor?? [ 302.729172][ T9538] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 302.788442][ T8] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 302.872774][ T9550] binder_alloc: 9548: binder_alloc_buf, no vma [ 302.978559][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 302.986664][ T8] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 302.994971][ T8] usb 3-1: can't read configurations, error -61 [ 303.149168][ T8] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 303.169594][ T5843] kye 0003:0458:501A.0021: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 303.184138][ T5843] kye 0003:0458:501A.0021: unknown main item tag 0x7 [ 303.193261][ T5843] kye 0003:0458:501A.0021: hidraw0: USB HID v0.0c Device [HID 0458:501a] on usb-dummy_hcd.0-1/input0 [ 303.209324][ T5843] kye 0003:0458:501A.0021: tablet-enabling feature report not found [ 303.217400][ T5843] kye 0003:0458:501A.0021: tablet enabling failed [ 303.348623][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 303.361103][ T8] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 303.372342][ T8] usb 3-1: can't read configurations, error -61 [ 303.380506][ T8] usb usb3-port1: attempt power cycle [ 303.385222][ T5765] usb 1-1: USB disconnect, device number 44 [ 303.785126][ T9567] fuse: Unknown parameter '0x0000000000000003' [ 303.788906][ T8] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 303.829274][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 303.837938][ T8] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 303.845953][ T8] usb 3-1: can't read configurations, error -61 [ 303.998064][ T9574] fuse: Bad value for 'fd' [ 304.003147][ T8] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 304.039072][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 304.051518][ T8] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 304.068527][ T8] usb 3-1: can't read configurations, error -61 [ 304.078700][ T8] usb usb3-port1: unable to enumerate USB device [ 304.446117][ T5843] usb 2-1: USB disconnect, device number 40 [ 304.728751][ T9587] fuse: Unknown parameter '0x0000000000000003' [ 304.918633][ T5843] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 305.128409][ T5843] usb 2-1: Using ep0 maxpacket: 16 [ 305.140678][ T5843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.172649][ T5843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.193014][ T5843] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 305.226417][ T5843] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 305.238307][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.250029][ T5843] usb 2-1: config 0 descriptor?? [ 305.665591][ T5843] usbhid 2-1:0.0: can't add hid device: -71 [ 305.684758][ T5843] usbhid: probe of 2-1:0.0 failed with error -71 [ 305.712572][ T5843] usb 2-1: USB disconnect, device number 41 [ 305.897993][ T27] kauditd_printk_skb: 95 callbacks suppressed [ 305.898011][ T27] audit: type=1326 audit(1787191513.420:5671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9604 comm="syz.2.1342" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe77079e0d9 code=0x0 [ 306.018653][ T5884] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 306.095160][ T9609] fuse: Unknown parameter '0x0000000000000003' [ 306.224692][ T5884] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.246527][ T5884] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 306.276015][ T5884] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 306.313797][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.334823][ T5884] usb 4-1: config 0 descriptor?? [ 306.355835][ T5884] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 306.795647][ T9623] fuse: Bad value for 'fd' [ 307.008667][ T5884] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 307.208335][ T5884] usb 1-1: Using ep0 maxpacket: 16 [ 307.229318][ T5884] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 307.244756][ T5884] usb 1-1: can't read configurations, error -61 [ 307.398852][ T5884] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 307.608675][ T5884] usb 1-1: Using ep0 maxpacket: 16 [ 307.618719][ T5884] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 307.626537][ T5884] usb 1-1: can't read configurations, error -61 [ 307.638734][ T5884] usb usb1-port1: attempt power cycle [ 307.848573][ T5765] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 308.061337][ T5765] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 308.073079][ T5884] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 308.080991][ T5765] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 308.095519][ T5765] usb 3-1: config 0 interface 0 has no altsetting 0 [ 308.103489][ T5765] usb 3-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 308.113910][ T5765] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.124356][ T5884] usb 1-1: Using ep0 maxpacket: 16 [ 308.134873][ T5884] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 308.145046][ T5765] usb 3-1: config 0 descriptor?? [ 308.158459][ T5884] usb 1-1: can't read configurations, error -61 [ 308.165760][ T9645] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 308.318477][ T5884] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 308.353378][ T5884] usb 1-1: Using ep0 maxpacket: 16 [ 308.363196][ T5884] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 308.376052][ T5884] usb 1-1: can't read configurations, error -61 [ 308.383339][ T5884] usb usb1-port1: unable to enumerate USB device [ 308.400248][ T9645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.410301][ T9645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.637318][ T5765] kye 0003:0458:501A.0022: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 308.653048][ T5765] kye 0003:0458:501A.0022: unknown main item tag 0x7 [ 308.677119][ T5765] kye 0003:0458:501A.0022: hidraw0: USB HID v0.0c Device [HID 0458:501a] on usb-dummy_hcd.2-1/input0 [ 308.691420][ T5765] kye 0003:0458:501A.0022: tablet-enabling feature report not found [ 308.706117][ T5765] kye 0003:0458:501A.0022: tablet enabling failed [ 308.790158][ T5765] usb 4-1: USB disconnect, device number 49 [ 308.847489][ T28] usb 3-1: USB disconnect, device number 51 [ 309.561353][ T9675] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1371'. [ 309.808565][ T5884] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 309.854831][ T9683] fuse: Bad value for 'user_id' [ 310.010682][ T5884] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.029696][ T5884] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 310.043337][ T5884] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 310.052912][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.065993][ T5884] usb 2-1: config 0 descriptor?? [ 310.082887][ T5884] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 310.198496][ T9693] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1380'. [ 310.258483][ T5765] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 310.418482][ T5884] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 310.460273][ T5765] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 310.471376][ T5765] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 310.484469][ T5765] usb 1-1: config 0 interface 0 has no altsetting 0 [ 310.491459][ T5765] usb 1-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 310.501114][ T5765] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.511941][ T5765] usb 1-1: config 0 descriptor?? [ 310.517955][ T9687] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 310.622523][ T5884] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 310.633734][ T5884] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 310.646811][ T5884] usb 3-1: config 0 interface 0 has no altsetting 0 [ 310.654174][ T5884] usb 3-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 310.663433][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.682226][ T5884] usb 3-1: config 0 descriptor?? [ 310.688375][ T9691] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 310.718448][ T28] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 310.734183][ T9687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.745060][ T9687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.918443][ T28] usb 4-1: Using ep0 maxpacket: 16 [ 310.929813][ T28] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 310.937508][ T28] usb 4-1: can't read configurations, error -61 [ 310.965344][ T5765] kye 0003:0458:501A.0023: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 310.977380][ T5765] kye 0003:0458:501A.0023: unknown main item tag 0x7 [ 310.989395][ T5765] kye 0003:0458:501A.0023: hidraw0: USB HID v0.0c Device [HID 0458:501a] on usb-dummy_hcd.0-1/input0 [ 311.002036][ T5765] kye 0003:0458:501A.0023: tablet-enabling feature report not found [ 311.010446][ T5765] kye 0003:0458:501A.0023: tablet enabling failed [ 311.106179][ T5884] kye 0003:0458:501A.0024: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 311.117121][ T28] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 311.125810][ T5884] kye 0003:0458:501A.0024: unknown main item tag 0x7 [ 311.136913][ T5884] kye 0003:0458:501A.0024: hidraw0: USB HID v0.0c Device [HID 0458:501a] on usb-dummy_hcd.2-1/input0 [ 311.149233][ T5884] kye 0003:0458:501A.0024: tablet-enabling feature report not found [ 311.157289][ T5884] kye 0003:0458:501A.0024: tablet enabling failed [ 311.178873][ T8] usb 1-1: USB disconnect, device number 49 [ 311.310783][ T5884] usb 3-1: USB disconnect, device number 52 [ 311.321386][ T28] usb 4-1: Using ep0 maxpacket: 16 [ 311.338098][ T28] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 311.346318][ T28] usb 4-1: can't read configurations, error -61 [ 311.355669][ T28] usb usb4-port1: attempt power cycle [ 311.778600][ T28] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 311.815874][ T9709] fuse: Bad value for 'user_id' [ 311.831717][ T28] usb 4-1: Using ep0 maxpacket: 16 [ 311.842803][ T28] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 311.854515][ T28] usb 4-1: can't read configurations, error -61 [ 312.008517][ T28] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 312.049292][ T28] usb 4-1: Using ep0 maxpacket: 16 [ 312.071880][ T28] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 312.079947][ T28] usb 4-1: can't read configurations, error -61 [ 312.094732][ T28] usb usb4-port1: unable to enumerate USB device [ 312.110629][ T9717] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1389'. [ 312.458646][ T28] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 312.541540][ T5843] usb 2-1: USB disconnect, device number 42 [ 312.651278][ T28] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.673325][ T28] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 312.689649][ T28] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 312.699279][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 312.707421][ T28] usb 1-1: SerialNumber: syz [ 312.935888][ T28] usb 1-1: 0:2 : does not exist [ 312.945358][ T28] usb 1-1: unit 5 not found! [ 312.977741][ T28] usb 1-1: USB disconnect, device number 50 [ 313.034070][ T5854] udevd[5854]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 313.108526][ T5843] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 313.301604][ T5843] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 313.312867][ T5843] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 313.326306][ T5843] usb 2-1: config 0 interface 0 has no altsetting 0 [ 313.333295][ T5843] usb 2-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 313.342607][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.353348][ T5843] usb 2-1: config 0 descriptor?? [ 313.359615][ T9725] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 313.398481][ T8] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 313.580989][ T8] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 313.600336][ T8] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 313.610833][ T9725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.625623][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 313.636347][ T8] usb 3-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 313.648835][ T9725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.656650][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.698982][ T9737] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1398'. [ 313.709705][ T8] usb 3-1: config 0 descriptor?? [ 313.715914][ T9731] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 313.892009][ T5843] kye 0003:0458:501A.0025: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 313.910006][ T5843] kye 0003:0458:501A.0025: unknown main item tag 0x7 [ 313.925842][ T5843] kye 0003:0458:501A.0025: hidraw0: USB HID v0.0c Device [HID 0458:501a] on usb-dummy_hcd.1-1/input0 [ 313.962457][ T5843] kye 0003:0458:501A.0025: tablet-enabling feature report not found [ 313.981078][ T5843] kye 0003:0458:501A.0025: tablet enabling failed [ 314.048514][ T5842] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 314.097601][ T28] usb 2-1: USB disconnect, device number 43 [ 314.166515][ T8] kye 0003:0458:501A.0026: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 314.178510][ T5884] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 314.179995][ T8] kye 0003:0458:501A.0026: unknown main item tag 0x7 [ 314.198979][ T8] kye 0003:0458:501A.0026: hidraw0: USB HID v0.0c Device [HID 0458:501a] on usb-dummy_hcd.2-1/input0 [ 314.210396][ T8] kye 0003:0458:501A.0026: tablet-enabling feature report not found [ 314.219960][ T8] kye 0003:0458:501A.0026: tablet enabling failed [ 314.230649][ T5842] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 314.249401][ T5842] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 314.259237][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.271732][ T5842] usb 1-1: config 0 descriptor?? [ 314.287886][ T5842] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 314.371829][ T5765] usb 3-1: USB disconnect, device number 53 [ 314.415497][ T5884] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 314.431413][ T5884] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 314.440608][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.452419][ T5884] usb 4-1: config 0 descriptor?? [ 314.467240][ T5884] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 315.268573][ T5884] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 315.468604][ T5884] usb 3-1: Using ep0 maxpacket: 16 [ 315.477024][ T5884] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.487549][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 315.498731][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 315.508999][ T5884] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 315.538390][ T5884] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 315.572541][ T5884] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 315.586377][ T5884] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 315.604457][ T5884] usb 3-1: Manufacturer: syz [ 315.614693][ T5884] usb 3-1: config 0 descriptor?? [ 315.868377][ T5842] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 315.908376][ T5884] rc_core: IR keymap rc-hauppauge not found [ 315.914492][ T5884] Registered IR keymap rc-empty [ 315.919860][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 315.948636][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 315.982031][ T5884] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 315.997729][ T5884] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input31 [ 316.014321][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 316.048338][ T5842] usb 2-1: Using ep0 maxpacket: 16 [ 316.051154][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 316.061558][ T5842] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.076526][ T5842] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 316.095444][ T5842] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 316.099468][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 316.112053][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.128445][ T5842] usb 2-1: Product: syz [ 316.133293][ T5842] usb 2-1: Manufacturer: syz [ 316.137935][ T5842] usb 2-1: SerialNumber: syz [ 316.148588][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 316.156870][ T5842] usb 2-1: config 0 descriptor?? [ 316.188615][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 316.218564][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 316.248559][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 316.288675][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 316.318726][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 316.358826][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 316.383783][ T9759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.392663][ T9759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.403799][ T5884] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 316.414086][ T5884] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 316.425032][ T5842] usb 2-1: USB disconnect, device number 44 [ 316.439768][ T5884] usb 3-1: USB disconnect, device number 54 [ 316.809958][ T8] usb 1-1: USB disconnect, device number 51 [ 316.934610][ T5765] usb 4-1: USB disconnect, device number 54 [ 317.063294][ T9770] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1408'. [ 317.213804][ T9776] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 317.222286][ T9776] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 317.393491][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.408446][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.468598][ T8] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 317.588342][ T28] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 317.672417][ T8] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 317.688388][ T8] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 317.719226][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 317.738546][ T8] usb 3-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 317.758647][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.779921][ T8] usb 3-1: config 0 descriptor?? [ 317.785771][ T9772] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 317.807954][ T28] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 317.852476][ T28] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 317.877920][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.883306][ T9783] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1414'. [ 317.906786][ T9783] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 317.929797][ T28] usb 1-1: config 0 descriptor?? [ 317.974409][ T28] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 318.006981][ T9772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.035130][ T9772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.257174][ T8] kye 0003:0458:501A.0027: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 318.269351][ T8] kye 0003:0458:501A.0027: unknown main item tag 0x7 [ 318.282801][ T8] kye 0003:0458:501A.0027: hidraw0: USB HID v0.0c Device [HID 0458:501a] on usb-dummy_hcd.2-1/input0 [ 318.294162][ T8] kye 0003:0458:501A.0027: tablet-enabling feature report not found [ 318.302406][ T8] kye 0003:0458:501A.0027: tablet enabling failed [ 318.399409][ T28] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 318.460685][ T8] usb 3-1: USB disconnect, device number 55 [ 318.478486][ T5765] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 318.608408][ T28] usb 4-1: Using ep0 maxpacket: 16 [ 318.616326][ T28] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.626968][ T28] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 318.638260][ T28] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 318.647946][ T28] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 318.658143][ T28] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 318.673435][ T28] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 318.682704][ T28] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 318.690885][ T28] usb 4-1: Manufacturer: syz [ 318.697856][ T28] usb 4-1: config 0 descriptor?? [ 318.703026][ T5765] usb 2-1: Using ep0 maxpacket: 16 [ 318.710938][ T5765] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.726162][ T5765] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 318.737963][ T5765] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 318.747218][ T5765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.755442][ T5765] usb 2-1: Product: syz [ 318.759899][ T5765] usb 2-1: Manufacturer: syz [ 318.764573][ T5765] usb 2-1: SerialNumber: syz [ 318.772380][ T5765] usb 2-1: config 0 descriptor?? [ 318.992980][ T9787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.019835][ T28] rc_core: IR keymap rc-hauppauge not found [ 319.025821][ T28] Registered IR keymap rc-empty [ 319.032682][ T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 319.040507][ T9787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.075762][ T5842] usb 2-1: USB disconnect, device number 45 [ 319.088995][ T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 319.134165][ T28] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 319.173203][ T28] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input32 [ 319.193069][ T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 319.228730][ T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 319.276730][ T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 319.318917][ T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 319.348748][ T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 319.378474][ T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 319.418582][ T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 319.458540][ T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 319.498520][ T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 319.528558][ T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 319.573157][ T28] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 319.582482][ T28] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 319.596064][ T28] usb 4-1: USB disconnect, device number 55 [ 319.668358][ T5842] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 319.742386][ T9805] loop0: detected capacity change from 0 to 2049 [ 319.793871][ T9805] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 319.804288][ T9805] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 319.815339][ T9805] loop0: [ 319.860370][ T5842] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 319.875265][ T5842] usb 3-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 319.885572][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.893913][ T5842] usb 3-1: Product: syz [ 319.898619][ T5842] usb 3-1: Manufacturer: syz [ 319.903278][ T5842] usb 3-1: SerialNumber: syz [ 319.917445][ T5842] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 320.337313][ T5842] gspca_mr97310a: reg write [19] error -71 [ 320.352642][ T5884] usb 1-1: USB disconnect, device number 52 [ 320.363203][ T5842] mr97310a: probe of 3-1:1.0 failed with error -71 [ 320.401406][ T5842] usb 3-1: USB disconnect, device number 56 [ 320.463580][ T28] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 320.704505][ T28] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 320.723172][ T28] usb 4-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 320.740432][ T28] usb 4-1: config 0 interface 0 has no altsetting 0 [ 320.751826][ T28] usb 4-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 320.772519][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.810052][ T28] usb 4-1: config 0 descriptor?? [ 320.831668][ T9812] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 320.938760][ T5884] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 321.090408][ T9812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.126531][ T9812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.159910][ T5884] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 321.188649][ T5884] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 321.213087][ T5884] usb 1-1: config 0 interface 0 has no altsetting 0 [ 321.221193][ T5884] usb 1-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 321.231672][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.250746][ T5884] usb 1-1: config 0 descriptor?? [ 321.262158][ T9822] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 321.347225][ T28] kye 0003:0458:501A.0028: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 321.348594][ T8] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 321.369503][ T28] kye 0003:0458:501A.0028: unknown main item tag 0x7 [ 321.382327][ T28] kye 0003:0458:501A.0028: hidraw0: USB HID v0.0c Device [HID 0458:501a] on usb-dummy_hcd.3-1/input0 [ 321.394098][ T28] kye 0003:0458:501A.0028: tablet-enabling feature report not found [ 321.403519][ T28] kye 0003:0458:501A.0028: tablet enabling failed [ 321.528456][ T5765] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 321.548675][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 321.562460][ T28] usb 4-1: USB disconnect, device number 56 [ 321.579627][ T8] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 321.593123][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.601349][ T8] usb 2-1: Product: syz [ 321.605684][ T8] usb 2-1: Manufacturer: syz [ 321.617539][ T8] usb 2-1: SerialNumber: syz [ 321.628667][ T8] usb 2-1: config 0 descriptor?? [ 321.686210][ T5884] usbhid 1-1:0.0: can't add hid device: -71 [ 321.695173][ T5884] usbhid: probe of 1-1:0.0 failed with error -71 [ 321.705726][ T5884] usb 1-1: USB disconnect, device number 53 [ 321.714536][ T5765] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 321.737271][ T5765] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 321.751042][ T5765] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.764146][ T5765] usb 3-1: config 0 descriptor?? [ 321.777021][ T5765] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 322.044975][ T8] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 322.055538][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 322.065811][ T8] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 322.073962][ T8] usb 2-1: media controller created [ 322.099161][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 322.293503][ T27] audit: type=1326 audit(1787191529.820:5672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.3.1437" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ee1f9e0d9 code=0x7ffc0000 [ 322.321988][ T27] audit: type=1326 audit(1787191529.820:5673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.3.1437" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ee1f9e0d9 code=0x7ffc0000 [ 322.350748][ T27] audit: type=1326 audit(1787191529.850:5674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.3.1437" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ee1f9e0d9 code=0x7ffc0000 [ 322.377695][ T27] audit: type=1326 audit(1787191529.850:5675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.3.1437" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ee1f9e0d9 code=0x7ffc0000 [ 322.406916][ T27] audit: type=1326 audit(1787191529.850:5676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.3.1437" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f3ee1f9e0d9 code=0x7ffc0000 [ 322.437873][ T27] audit: type=1326 audit(1787191529.850:5677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.3.1437" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ee1f9e0d9 code=0x7ffc0000 [ 322.475157][ T27] audit: type=1326 audit(1787191529.850:5678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.3.1437" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ee1f9e0d9 code=0x7ffc0000 [ 322.501534][ T27] audit: type=1326 audit(1787191529.880:5679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.3.1437" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ee1f9e0d9 code=0x7ffc0000 [ 322.578379][ T27] audit: type=1326 audit(1787191529.880:5680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.3.1437" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ee1f9e0d9 code=0x7ffc0000 [ 322.607527][ T27] audit: type=1326 audit(1787191529.880:5681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.3.1437" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3ee1f9e0d9 code=0x7ffc0000 [ 322.680975][ T8] zl10353_read_register: readreg error (reg=127, ret==0) [ 322.712702][ T8] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 322.722454][ T9830] ------------[ cut here ]------------ [ 322.728178][ T9830] usb 2-1: BOGUS control dir, pipe 80002e80 doesn't match bRequestType c0 [ 322.741705][ T8] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 322.757046][ T9830] WARNING: CPU: 0 PID: 9830 at drivers/usb/core/urb.c:413 usb_submit_urb+0x108d/0x17a0 [ 322.768749][ T9830] Modules linked in: [ 322.772754][ T9830] CPU: 0 PID: 9830 Comm: syz.1.1433 Not tainted syzkaller #0 [ 322.782723][ T9830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 322.793859][ T9830] RIP: 0010:usb_submit_urb+0x108d/0x17a0 [ 322.800306][ T9830] Code: fc ff df 41 0f b6 44 05 00 84 c0 0f 85 18 06 00 00 45 0f b6 07 48 c7 c7 40 16 6c 8b 48 8b 34 24 4c 89 e2 89 e9 e8 43 83 e5 fa <0f> 0b 48 bd 00 00 00 00 00 fc ff df e9 91 f4 ff ff 44 89 f1 80 e1 [ 322.821232][ T9830] RSP: 0018:ffffc9000ba875b8 EFLAGS: 00010246 [ 322.827662][ T9830] RAX: 3fc068bfcc592a00 RBX: ffff88807b3d4000 RCX: 0000000000080000 [ 322.836267][ T9830] RDX: ffffc9000d22b000 RSI: 00000000000033f8 RDI: 00000000000033f9 [ 322.844490][ T9830] RBP: 0000000080002e80 R08: ffffc9000ba871c7 R09: 1ffff92001750e38 [ 322.852918][ T9830] R10: dffffc0000000000 R11: fffff52001750e39 R12: ffff88814e6b5d98 [ 322.861055][ T9830] R13: 1ffff1100ec3d3f9 R14: ffff888025eb90f8 R15: ffff8880761e9fc8 [ 322.869157][ T9830] FS: 00007f66192af6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 322.878344][ T9830] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 322.884993][ T9830] CR2: 00007fe485f5da08 CR3: 0000000025aa3000 CR4: 00000000003526f0 [ 322.893145][ T9830] Call Trace: [ 322.896485][ T9830] [ 322.899561][ T9830] ? __init_swait_queue_head+0xa8/0x140 [ 322.905190][ T9830] usb_start_wait_urb+0x140/0x580 [ 322.910414][ T9830] ? usb_api_blocking_completion+0xb0/0xb0 [ 322.916323][ T9830] usb_control_msg+0x235/0x3e0 [ 322.921265][ T9830] dtv5100_i2c_msg+0x231/0x2f0 [ 322.926139][ T9830] dtv5100_i2c_xfer+0x1a5/0x610 [ 322.931138][ T9830] ? rt_mutex_slowlock+0x367/0x610 [ 322.936324][ T9830] ? dtv5100_tuner_attach+0x100/0x100 [ 322.941872][ T9830] __i2c_transfer+0x891/0x2090 [ 322.946729][ T9830] ? i2c_cmd+0x110/0x110 [ 322.951096][ T9830] ? i2c_transfer+0x11b/0x3a0 [ 322.955846][ T9830] i2c_transfer+0x261/0x3a0 [ 322.960513][ T9830] ? __i2c_transfer+0x2090/0x2090 [ 322.965634][ T9830] ? __might_fault+0xaa/0x120 [ 322.970440][ T9830] i2c_transfer_buffer_flags+0x10e/0x1a0 [ 322.976152][ T9830] ? i2c_transfer+0x3a0/0x3a0 [ 322.980967][ T9830] ? __might_fault+0xc6/0x120 [ 322.985737][ T9830] ? _copy_from_user+0xa5/0xe0 [ 322.990798][ T9830] i2cdev_write+0x8b/0x120 [ 322.995285][ T9830] do_iter_write+0x4e5/0xc50 [ 323.000077][ T9830] ? i2cdev_read+0x180/0x180 [ 323.004750][ T9830] ? vfs_iter_write+0xa0/0xa0 [ 323.009614][ T9830] ? __import_iovec+0x5f2/0x850 [ 323.014551][ T9830] ? import_iovec+0x73/0xa0 [ 323.019217][ T9830] do_writev+0x27f/0x480 [ 323.023527][ T9830] ? do_readv+0x460/0x460 [ 323.027936][ T9830] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 323.034048][ T9830] ? lock_chain_count+0x20/0x20 [ 323.039025][ T9830] ? lockdep_hardirqs_on+0x98/0x150 [ 323.044300][ T9830] do_syscall_64+0x55/0xb0 [ 323.048833][ T9830] ? clear_bhb_loop+0x40/0x90 [ 323.053579][ T9830] ? clear_bhb_loop+0x40/0x90 [ 323.058484][ T9830] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 323.064630][ T9830] RIP: 0033:0x7f661839e0d9 [ 323.069220][ T9830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.089302][ T9830] RSP: 002b:00007f66192af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 323.097806][ T9830] RAX: ffffffffffffffda RBX: 00007f6618625fa0 RCX: 00007f661839e0d9 [ 323.105955][ T9830] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000004 [ 323.114071][ T9830] RBP: 00007f6618435024 R08: 0000000000000000 R09: 0000000000000000 [ 323.122224][ T9830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.130344][ T9830] R13: 00007f6618626038 R14: 00007f6618625fa0 R15: 00007ffc878bf6c8 [ 323.138459][ T9830] [ 323.141537][ T9830] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 323.148863][ T9830] CPU: 0 PID: 9830 Comm: syz.1.1433 Not tainted syzkaller #0 [ 323.156261][ T9830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 323.166354][ T9830] Call Trace: [ 323.169654][ T9830] [ 323.172613][ T9830] dump_stack_lvl+0x18c/0x250 [ 323.177320][ T9830] ? show_regs_print_info+0x20/0x20 [ 323.182547][ T9830] ? load_image+0x420/0x420 [ 323.187084][ T9830] panic+0x2ca/0x720 [ 323.191013][ T9830] ? bpf_jit_dump+0xd0/0xd0 [ 323.195559][ T9830] __warn+0x2e0/0x470 [ 323.199575][ T9830] ? usb_submit_urb+0x108d/0x17a0 [ 323.204639][ T9830] ? usb_submit_urb+0x108d/0x17a0 [ 323.209688][ T9830] report_bug+0x2be/0x4f0 [ 323.214052][ T9830] ? usb_submit_urb+0x108d/0x17a0 [ 323.219105][ T9830] ? usb_submit_urb+0x108d/0x17a0 [ 323.224165][ T9830] ? usb_submit_urb+0x108f/0x17a0 [ 323.229219][ T9830] handle_bug+0xcf/0x120 [ 323.233494][ T9830] exc_invalid_op+0x1a/0x50 [ 323.238024][ T9830] asm_exc_invalid_op+0x1a/0x20 [ 323.242906][ T9830] RIP: 0010:usb_submit_urb+0x108d/0x17a0 [ 323.248580][ T9830] Code: fc ff df 41 0f b6 44 05 00 84 c0 0f 85 18 06 00 00 45 0f b6 07 48 c7 c7 40 16 6c 8b 48 8b 34 24 4c 89 e2 89 e9 e8 43 83 e5 fa <0f> 0b 48 bd 00 00 00 00 00 fc ff df e9 91 f4 ff ff 44 89 f1 80 e1 [ 323.268236][ T9830] RSP: 0018:ffffc9000ba875b8 EFLAGS: 00010246 [ 323.274334][ T9830] RAX: 3fc068bfcc592a00 RBX: ffff88807b3d4000 RCX: 0000000000080000 [ 323.282330][ T9830] RDX: ffffc9000d22b000 RSI: 00000000000033f8 RDI: 00000000000033f9 [ 323.290324][ T9830] RBP: 0000000080002e80 R08: ffffc9000ba871c7 R09: 1ffff92001750e38 [ 323.298320][ T9830] R10: dffffc0000000000 R11: fffff52001750e39 R12: ffff88814e6b5d98 [ 323.306346][ T9830] R13: 1ffff1100ec3d3f9 R14: ffff888025eb90f8 R15: ffff8880761e9fc8 [ 323.314450][ T9830] ? usb_submit_urb+0x108d/0x17a0 [ 323.319524][ T9830] ? __init_swait_queue_head+0xa8/0x140 [ 323.325109][ T9830] usb_start_wait_urb+0x140/0x580 [ 323.330167][ T9830] ? usb_api_blocking_completion+0xb0/0xb0 [ 323.336021][ T9830] usb_control_msg+0x235/0x3e0 [ 323.340992][ T9830] dtv5100_i2c_msg+0x231/0x2f0 [ 323.345786][ T9830] dtv5100_i2c_xfer+0x1a5/0x610 [ 323.350844][ T9830] ? rt_mutex_slowlock+0x367/0x610 [ 323.355998][ T9830] ? dtv5100_tuner_attach+0x100/0x100 [ 323.361399][ T9830] __i2c_transfer+0x891/0x2090 [ 323.366209][ T9830] ? i2c_cmd+0x110/0x110 [ 323.370488][ T9830] ? i2c_transfer+0x11b/0x3a0 [ 323.375201][ T9830] i2c_transfer+0x261/0x3a0 [ 323.379756][ T9830] ? __i2c_transfer+0x2090/0x2090 [ 323.384840][ T9830] ? __might_fault+0xaa/0x120 [ 323.389569][ T9830] i2c_transfer_buffer_flags+0x10e/0x1a0 [ 323.395295][ T9830] ? i2c_transfer+0x3a0/0x3a0 [ 323.400018][ T9830] ? __might_fault+0xc6/0x120 [ 323.404755][ T9830] ? _copy_from_user+0xa5/0xe0 [ 323.409570][ T9830] i2cdev_write+0x8b/0x120 [ 323.414055][ T9830] do_iter_write+0x4e5/0xc50 [ 323.418727][ T9830] ? i2cdev_read+0x180/0x180 [ 323.423372][ T9830] ? vfs_iter_write+0xa0/0xa0 [ 323.428103][ T9830] ? __import_iovec+0x5f2/0x850 [ 323.433015][ T9830] ? import_iovec+0x73/0xa0 [ 323.437577][ T9830] do_writev+0x27f/0x480 [ 323.441872][ T9830] ? do_readv+0x460/0x460 [ 323.446271][ T9830] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 323.452300][ T9830] ? lock_chain_count+0x20/0x20 [ 323.457196][ T9830] ? lockdep_hardirqs_on+0x98/0x150 [ 323.462448][ T9830] do_syscall_64+0x55/0xb0 [ 323.466910][ T9830] ? clear_bhb_loop+0x40/0x90 [ 323.471627][ T9830] ? clear_bhb_loop+0x40/0x90 [ 323.476351][ T9830] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 323.482283][ T9830] RIP: 0033:0x7f661839e0d9 [ 323.486739][ T9830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.506396][ T9830] RSP: 002b:00007f66192af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 323.514852][ T9830] RAX: ffffffffffffffda RBX: 00007f6618625fa0 RCX: 00007f661839e0d9 [ 323.522859][ T9830] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000004 [ 323.530867][ T9830] RBP: 00007f6618435024 R08: 0000000000000000 R09: 0000000000000000 [ 323.538877][ T9830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.546881][ T9830] R13: 00007f6618626038 R14: 00007f6618625fa0 R15: 00007ffc878bf6c8 [ 323.554907][ T9830] [ 323.558671][ T9830] Kernel Offset: disabled [ 323.563100][ T9830] Rebooting in 86400 seconds..