last executing test programs: 9.908538821s ago: executing program 1 (id=2258): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x4018480c, &(0x7f0000000200)={0x6, 0xffffffff, 0x2}) 7.372466043s ago: executing program 0 (id=2278): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000140)="d8dd2e807c88060a9a005000001d0166baa00066edb805000000b9009000000f01d9670fc7bb467d0f793e440f23cdb7b707000000440f22c0660f571965670f01ca", 0x42}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000080)=@arm64={0x0, 0x1, 0x4, '\x00', 0xfffffffffffff02f}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) 7.227951575s ago: executing program 2 (id=2280): fsopen(0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000040)={0x5, 0x13, 0x6, 0x3, 0x200007, 0x0, 0x3, 0x54, 0x2d22b85d880a5550}) 7.123279059s ago: executing program 2 (id=2281): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x3, 0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100005520f010402038b1420100000001090238000100000000090400000371055900090582eb10000000010200090502f3"], 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, &(0x7f0000000500)) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x178, &(0x7f0000000740)={[{0x160, 0x4e00, "47f483db1e35c376b6454bd5a4725ebc62164cd7415bec9d12d439dbccea8cbe45203e045dbf024f6e434ffedf49006990c70f9665587d59007b67f29c381503396b8ad60044709bb480b6f69a9a232c0d3ef817972be9921c98340b9c87c5a494fc68a5d03f0500a145c190119542a462c14bd864aaeb9ff19d317c4364b9c87dadfa60af984a85ca9f26e8f6c053aa5eeffe3f4510ebdbd2a5fd24e9a1730e4c3f50e292478c77c21cde3cbd43c6c1258a654816d36dcb3e9ad792932eabec56cdd8132a62fd7cedddeafb3ad6af8dd4b21deece556372779c56fea99974e22f3c690127d69af4e338f1e7b7d095651d80d6833e213126138baff976442a3bfb35f1bf2d6ca1dfbfae1afd13cdf5c9add657d96a93fafd533652a066f532539188ab3b5322dea7561285aee7494e48cb59cd0d52e9f5ec601d8e990b0031d8ec787a03c2fe713e8718d8d19f81f4fce977e698873c3f7450b59598d02e80fe"}, {0x5, 0x4e00, "2b766d0aaf"}, {}, {}]}) r2 = syz_usb_connect$hid(0x2, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, &(0x7f0000000240)={0x14, &(0x7f00000000c0)=ANY=[], 0x0}, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000000), 0xb430, 0x700a80) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r4) syz_open_dev$char_usb(0xc, 0xb4, 0x1) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000100)=""/4) read$hidraw(r3, &(0x7f0000000080)=""/127, 0x7f) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 7.040274579s ago: executing program 0 (id=2282): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x80840, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000300)=ANY=[]) 7.039764308s ago: executing program 4 (id=2283): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x201c}, 0x4000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r3 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f00000001c0)={0x0, 0x0, {0x1, 0x0, 0x3012, 0x0, 0xd, 0x2, 0x2}}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_OPEN(r5, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) syz_emit_ethernet(0x6c, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) getrandom(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) epoll_create1(0x80000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80387, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x7}) 7.008082708s ago: executing program 0 (id=2284): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001581c2908570b2885396d0102030109021b00010001000b0904c80201030102030905d85f10"], 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000140), 0x7, 0x5e5140) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x100000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x12, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) 6.986908364s ago: executing program 4 (id=2285): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000300)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080321100c4e28ddc8dcd000000c182fd3f0000c850220000b801000000b9a6080000b9800000c00f3235000800000f30ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x6a}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x5, 0x3, 0x100000009a, 0x3b8c, 0x3, 0x6, 0x2000000000000008, 0x200c, 0x5, 0x100000002, 0x2, 0x2004, 0xbaaf, 0x5, 0x2, 0x7], 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.755909381s ago: executing program 1 (id=2286): setpriority(0x1, 0x0, 0x2a14b58) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r1 = syz_open_pts(r0, 0x80) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) dup3(r1, r0, 0x80000) 6.660309451s ago: executing program 1 (id=2287): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004898b610c2154500201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) r2 = syz_usb_connect$uac3(0x3, 0xa4, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x9, 0x20, 0xc, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0xf7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x2e, 0x1003}, [@output_terminal={0x13, 0x24, 0x3, 0x3, 0x0, 0x0, 0x6, 0x0, 0x4, 0x8, 0x4, 0xa}, @extension_unit={0x11, 0x24, 0xa, 0x6, 0x1, [0x0, 0x173ea21786b5b7df, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x2b0, 0x8, 0x5, 0xf8, {0xa, 0x25, 0x25, 0x2, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x2, 0x21, {0xa, 0x25, 0x25, 0x4, 0x2}}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x425}}}, 0x0) syz_usb_control_io$uac2(r2, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000180)={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001095494209911a3682afa010203010902120001010740010904520700ffffff3d8d"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r3, 0x0, 0x0) write$char_usb(r3, 0x0, 0x0) 6.60419347s ago: executing program 4 (id=2288): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10004}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfe33) 6.563848457s ago: executing program 4 (id=2289): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 5.60214121s ago: executing program 0 (id=2291): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c6888240da0b7f3127a0010203010902240001000000000904000002ffffff0009050d"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000240)={0x0, 0x0, 0x3, "6f27c5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000140)={0x40, 0x13, 0x3, "2d48b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002700)={0x44, &(0x7f0000001440)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f00000006c0)={0x40, 0x16, 0x4, "bfb4640c"}, 0x0, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x3, 0x2}}, 0x0, &(0x7f00000008c0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000900)={0x40, 0x9, 0x1, 0xc}, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x0, &(0x7f0000000a80)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000ac0)={0x40, 0x1c, 0x1, 0x3}, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0xffffff5a, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) 4.848606162s ago: executing program 2 (id=2292): syz_open_dev$hidraw(&(0x7f0000000340), 0x7, 0x180240) syz_usb_connect(0x0, 0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f62760009051cc200000000000705e37e1b82e60905f202"], 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xde, 0xc9, 0x70, 0x10, 0x35bc, 0x107, 0xb8da, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x4, 0x50, 0x0, "", [{{0x9, 0x4, 0xd0, 0xb, 0x0, 0xff, 0xff, 0xff}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f0000000040)=@string={0x29, 0x3, "18da06bb98d87d24d0064b0c440ab24865b80cddab2589b86cfad40e5fdacb5b7fce349c1f9b11"}}]}) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x1b, &(0x7f0000001440)={{0x12, 0x1, 0x310, 0x3e, 0xbb, 0xaf, 0x10, 0x5ac, 0x12a8, 0xd4d0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0xc, 0x5, 0x80, 0x73}}]}}, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x82, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_connect(0x0, 0x43, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e7c2f708210435030e5f0000000109023100010000000009040000000202ff00052406000005240200000d240f", @ANYRESOCT=0x0], 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0) syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c4b868085a230901dabd000000010902f10001000000000904000005"], 0x0) r2 = syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000060000402505a1a440000102030109025c0002010000000901000100020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010120ee0e"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f00000000c0)="cc") syz_usb_disconnect(r1) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_connect$midi(0x5, 0x46, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x499, 0x1007, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x1, 0x18, 0x10, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0x6, [@midi_out_jack={0x7, 0x24, 0x3, 0x2, 0x4, 0x0, [], 0x7}], [{{0x9, 0x5, 0x8e, 0xb, 0x20, 0xf, 0x8, 0x2, {0x4}}}, {{0x9, 0x5, 0x8c, 0x2, 0x200, 0x6d, 0xf7, 0x80, {0x5, 0x25, 0x1, 0x1, ':'}}}]}}}}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="000877000000b6a43578cdf2594846e94a96a7d8a705b2db1249db32c4380dbcc34009dd6af6f15f03cc1b4b5931a5696c6337115dd271fc921822a5f931c05a7faa769c0855caeb9017392eee372eeb3c797b25c1102933fb2ff91f2daf18512ca2b9691695dfdcda4c5d3d1225220f0ebab886d01eb663f5fb5aca04"], 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$rtl8150(r5, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x20, 0x31, 0x3, "9e07f8"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r5, &(0x7f0000000480)={0x14, &(0x7f0000000380)={0x40, 0xd, 0x8f, {0x8f, 0xc, "a050fa06fcb571c8b38906c5a5187e9cbd19489bff8307128e3b26bb25e2945eb75cee84a18a00eeb96e31e589375122cd117fad0e352aeee79b7808a90b2e56f4031587166cd750a0626d820c51661cceec43d12a74ea80aa370c2dd38b9dc94674e59457f7cf2a651f9e0492f9e23db1eaa17fe77f16aa50f9f42aa6c87087a848cc0ced1807de9e01551399"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x300a}}}, &(0x7f0000000680)={0x34, &(0x7f00000004c0)={0x40, 0xc, 0x53, "545f594c4f846321588381a756d1eec16ea8c33983bf40fe8fd93670ae4ba4c8a08e6563008a751e7996132a13fa767db2e60142421824d037b1e6c5622da556f25013b78b6fb9931f12d0a2b7b9479efb9b04"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000005c0)={0x20, 0x0, 0x32, {0x30, "cba33537340ffdae3052b2dfa7d089e71cfe8c8c4195857d9aa1076bcfd05cbf530e44bd7b80f3477426af8a21ae4e93"}}, &(0x7f0000000600)={0x20, 0x1, 0x1, 0xcf}, &(0x7f0000000640)={0x20, 0x0, 0x1, 0x24}}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) 3.959800594s ago: executing program 3 (id=2293): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001140)=ANY=[@ANYBLOB="405085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.324207412s ago: executing program 4 (id=2294): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) capset(0x0, &(0x7f0000000680)={0xffff0162, 0x8, 0x27, 0x693d, 0x6, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) alarm(0x38) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\f\x00\x00\x00\x00\x00\b\x00'}}}]}, 0x48}}, 0x0) 2.612901838s ago: executing program 2 (id=2295): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x201c}, 0x4000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r3 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f00000001c0)={0x0, 0x0, {0x1, 0x0, 0x3012, 0x0, 0xd, 0x2, 0x2}}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_OPEN(r5, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) syz_emit_ethernet(0x6c, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) getrandom(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) epoll_create1(0x80000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80387, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x7}) 2.530799789s ago: executing program 2 (id=2296): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='statm\x00') preadv(r1, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x1, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000003c0), 0x4) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0xfffffffffffffdc8, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000203030000000000005a000000000000090002000800006102000000"], 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80100, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x2, 0xb}, {0xa, 0x5}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x5}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) close_range(r0, r5, 0x2) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000140)=0x2000004) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r7, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x110, r8, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x40}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x24044084}, 0x80) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@broadcast, @random="05009211d49c", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x88, 0x0, @private=0xa010101, @broadcast}, @address_request={0x11, 0x0, 0x0, 0x7e}}}}}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_RESET(r9, 0xc00c5512) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x284362, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0xf) pwritev(r0, &(0x7f0000000400), 0x0, 0x9, 0x1) 2.148448635s ago: executing program 3 (id=2297): setpriority(0x1, 0x0, 0x2a14b58) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r1 = syz_open_pts(r0, 0x80) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) dup3(r1, r0, 0x80000) 2.14526143s ago: executing program 2 (id=2298): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRES8=r0, @ANYRESHEX=r0, @ANYRES16, @ANYBLOB="bfacecc81a7d30cba554752bdadaf33426d2902cb0006549a6dbbec5602670630f0538b5f876ce76b28aa64f791917d2ba0c74925ae681bc8cbaecd5fe05adf1b7d3d6ae7f85568f0ccd8f7a9574a4b8114723f5df3518606441cfc39debc3fcfa6b5b560e84153da8227dde18c4ffcc8717e02f1e4a005ad681c56cf4d1039f6393383968ac902f2da52f3d8d9f8caab4a34ead3cd0ea7dbd03637eb9692741b0c3f321ee41015a00b9139701865f4de0c54347", @ANYRES8=r0, @ANYRESDEC=r0, @ANYBLOB="8d657b0ad8ee95a861e8d3884c6e8968ad5ee1b5a3c42e9c52d8856bfca3f3f3773a296f07ebdba3bdd8f78e24d1ff0048b8e589fe8fe1c62fbef9b485282299a174b0597124e192d15bc0a07db473d728ec372e4dbcb864514a34cc5d8ae9395ce7d368", @ANYBLOB="2089f82bf6b207", @ANYRES8], 0x0) r2 = syz_open_dev$evdev(&(0x7f0000001640), 0x0, 0x80a80) ioctl$EVIOCSKEYCODE_V2(r2, 0xc0189436, 0xfffffffffffffffd) syz_usb_control_io(r1, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x9a64, 0x40800) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f0000000040)=""/49) syz_usb_disconnect(r0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) 2.016262352s ago: executing program 1 (id=2299): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10004}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfe33) 2.016115973s ago: executing program 3 (id=2300): syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) 1.997996571s ago: executing program 0 (id=2301): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="40011e0000004d61501d01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.872867089s ago: executing program 1 (id=2302): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a310000"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 1.768884289s ago: executing program 1 (id=2303): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x7f) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYRESOCT=r1, @ANYBLOB="77223a7160d55a7c9c00205a86cc4518900ed2a87f5d0940de411e9ba9dc58b3f1302d6b0161aad75d1fb201726cbb7179b968f1d248dd08577e825671335f25175e87ece2591140ac25410c74f13a18d636adbcd1dce9156bd604fa690dbbba80b9d3442dca5070b107d085e697f5d136e9"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCRMFF(r1, 0x4004550d, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000300)=""/227, 0xe3) read$char_usb(r2, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400"], 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604) r4 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r4) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r0], 0x0) 692.141942ms ago: executing program 4 (id=2304): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x22, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa0000008097") syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="40011e0000004d61501d015a000000000000100000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000340)={0x20, 0xe, 0x13, "48501772defcfe27df3d93a3002f738e001150"}, 0x0, 0x0, 0x0, 0x0}) 265.591471ms ago: executing program 0 (id=2305): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)={0x40, 0x41}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 145.76046ms ago: executing program 3 (id=2306): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x201c}, 0x4000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r3 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f00000001c0)={0x0, 0x0, {0x1, 0x0, 0x3012, 0x0, 0xd, 0x2, 0x2}}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_OPEN(r5, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) syz_emit_ethernet(0x6c, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) getrandom(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) epoll_create1(0x80000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80387, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x7}) 67.302804ms ago: executing program 3 (id=2307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a310000000005000100070000003400078018000180f2000240fe8000"/66], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 0s ago: executing program 3 (id=2308): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0x51, 0xffff, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0xb, 0xfffb, 0xa}, 0x0, 0x0}}) kernel console output (not intermixed with test programs): r of length 255, skipping remainder of the config [ 388.482841][ T5722] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 388.494537][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 388.509011][ T24] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 388.527789][ T5722] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 388.541203][ T24] usb 5-1: string descriptor 0 read error: -22 [ 388.548126][ T24] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 388.561313][ T5722] quatech2 2-1:0.51: device disconnected [ 388.579439][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.616464][ T24] adutux 5-1:168.0: interrupt endpoints not found [ 388.773981][ T9952] loop2: detected capacity change from 0 to 7 [ 388.800907][ T9952] Dev loop2: unable to read RDB block 7 [ 388.812295][ T9952] loop2: unable to read partition table [ 388.822414][ T9952] loop2: partition table beyond EOD, truncated [ 388.833038][ T5712] usb 5-1: USB disconnect, device number 38 [ 388.837537][ T9952] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 389.107626][ T9956] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 389.156308][ T9959] netlink: Conntrack attr has 1 unknown bytes [ 389.185265][ T9959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.299024][ T5722] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 389.315425][ T5712] hid-generic 0005:0468:B012.000A: hidraw0: BLUETOOTH HID v0.00 Device [syz1] on syz0 [ 389.329043][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.993'. [ 389.478255][ T5722] usb 3-1: Using ep0 maxpacket: 16 [ 389.498815][ T5722] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 389.529677][ T5722] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 389.538959][ T7409] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 389.552529][ T5722] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 389.562353][ T5722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.570964][ T5722] usb 3-1: Product: syz [ 389.575290][ T5722] usb 3-1: Manufacturer: syz [ 389.580008][ T5722] usb 3-1: SerialNumber: syz [ 389.589694][ T24] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 389.604409][ T5722] usb 3-1: 0:2 : does not exist [ 389.698073][ T7409] usb 2-1: Using ep0 maxpacket: 32 [ 389.707760][ T7409] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 389.723636][ T7409] usb 2-1: config 0 has no interface number 0 [ 389.739526][ T7409] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 389.756432][ T7409] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.764989][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 389.771143][ T7409] usb 2-1: Product: syz [ 389.780844][ T7409] usb 2-1: Manufacturer: syz [ 389.788133][ T5712] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 389.798254][ T7409] usb 2-1: SerialNumber: syz [ 389.805409][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 389.807354][ T7409] usb 2-1: config 0 descriptor?? [ 389.840114][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 389.858917][ T7409] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 389.875689][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 389.888990][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.898851][ T24] usb 4-1: Product: syz [ 389.904865][ T24] usb 4-1: Manufacturer: syz [ 389.910399][ T24] usb 4-1: SerialNumber: syz [ 389.957929][ T5722] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 389.958090][ T5712] usb 5-1: Using ep0 maxpacket: 16 [ 389.960580][ T5712] usb 5-1: config 0 has an invalid interface number: 249 but max is 0 [ 390.015230][ T5712] usb 5-1: config 0 has no interface number 0 [ 390.034987][ T5712] usb 5-1: config 0 interface 249 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.072756][ T5712] usb 5-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 390.074928][ T24] usb 4-1: 0:2 : does not exist [ 390.091372][ T5722] usb 3-1: USB disconnect, device number 44 [ 390.100324][ T7409] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 390.113918][ T5712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.126536][ T24] usb 4-1: unit 6 not found! [ 390.169000][ T7409] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 390.186551][ T5712] usb 5-1: config 0 descriptor?? [ 390.321566][ T24] usb 4-1: USB disconnect, device number 47 [ 390.451249][ T9748] udevd[9748]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 390.482631][ T9703] udevd[9703]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 390.861553][ T5712] uclogic 0003:5543:006E.000B: interface is invalid, ignoring [ 391.133055][ T9987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1002'. [ 391.228863][ T5712] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 391.410063][ T5712] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 391.430185][ T5712] usb 4-1: config 0 has no interface number 0 [ 391.445939][ T5712] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.479953][ T5712] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.512430][ T5712] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 391.547784][ T5712] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 391.571144][ T5712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.597911][ T5712] usb 4-1: config 0 descriptor?? [ 391.639988][ T9996] loop6: detected capacity change from 0 to 524288000 [ 391.699638][ T9996] loop6: detected capacity change from 524288000 to 0 [ 391.968107][ T24] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 392.142717][ T24] usb 1-1: config 1 has an invalid interface number: 69 but max is 0 [ 392.172476][ T24] usb 1-1: config 1 has no interface number 0 [ 392.202811][ T24] usb 1-1: config 1 interface 69 has no altsetting 0 [ 392.222686][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 392.223186][ T5722] usb 2-1: USB disconnect, device number 43 [ 392.250844][ T24] usb 1-1: New USB device found, idVendor=0a46, idProduct=0269, bcdDevice=d8.46 [ 392.286037][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.329707][ T5722] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 392.341109][ T24] usb 1-1: Product: syz [ 392.361387][ T24] usb 1-1: Manufacturer: syz [ 392.376419][ T24] usb 1-1: SerialNumber: syz [ 392.404149][ T5722] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 392.468996][ T5722] quatech2 2-1:0.51: device disconnected [ 392.689368][ T24] dm9601 1-1:1.69: probe with driver dm9601 failed with error -22 [ 392.739029][ T24] usb 1-1: USB disconnect, device number 42 [ 393.215304][ T7409] usb 5-1: USB disconnect, device number 39 [ 393.270923][ T9981] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1001'. [ 393.319752][ T5712] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0042.000C/input/input14 [ 393.451424][ T5712] uclogic 0003:28BD:0042.000C: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.3-1/input1 [ 393.496769][ T5712] usb 4-1: USB disconnect, device number 48 [ 393.621993][T10009] fido_id[10009]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 393.818108][ T5698] usb 1-1: new low-speed USB device number 43 using dummy_hcd [ 394.010447][ T5698] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 394.042012][ T5698] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 394.087214][ T5698] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 394.120266][ T5698] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 394.170734][ T5698] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 394.206549][ T5698] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 394.280319][ T5698] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 394.302388][ T5698] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 394.349676][T10028] fuse: Bad value for 'user_id' [ 394.364176][ T5698] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 394.400694][T10028] fuse: Bad value for 'user_id' [ 394.421214][ T5698] usb 1-1: string descriptor 0 read error: -22 [ 394.451882][ T5698] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 394.491120][ T5698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.530546][ T5698] adutux 1-1:168.0: interrupt endpoints not found [ 394.743580][T10032] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 394.758754][ T7409] usb 1-1: USB disconnect, device number 43 [ 394.936162][T10032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1012'. [ 395.198144][ T7409] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 395.362538][ T7409] usb 4-1: Using ep0 maxpacket: 16 [ 395.381208][ T7409] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.414402][ T7409] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 395.447627][ T7409] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 395.472389][ T7409] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.512477][ T7409] usb 4-1: Product: syz [ 395.522763][ T7409] usb 4-1: Manufacturer: syz [ 395.528109][ T7409] usb 4-1: SerialNumber: syz [ 395.555658][ T7409] usb 4-1: 0:2 : does not exist [ 395.585844][ T7409] usb 4-1: unit 6 not found! [ 395.808776][ T24] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 395.817183][ T5698] usb 4-1: USB disconnect, device number 49 [ 396.009177][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 396.021054][ T24] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 396.034413][ T24] usb 3-1: config 0 has no interface number 0 [ 396.042684][ T24] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 396.056297][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.071150][ T24] usb 3-1: config 0 descriptor?? [ 396.148712][ T5722] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 396.188651][ T24] viperboard 3-1:0.143: version 0.00 found at bus 003 address 045 [ 396.216828][ T24] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 396.230021][ T24] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 396.328218][ T5722] usb 1-1: Using ep0 maxpacket: 16 [ 396.337403][ T5722] usb 1-1: config 4 has an invalid interface number: 9 but max is 0 [ 396.348771][ T5722] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 396.359922][ T5722] usb 1-1: config 4 has no interface number 0 [ 396.366244][ T5722] usb 1-1: config 4 interface 9 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 396.382923][ T5722] usb 1-1: config 4 interface 9 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 396.397719][ T5722] usb 1-1: config 4 interface 9 has no altsetting 0 [ 396.413037][ T5722] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 396.424295][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.432961][ T5722] usb 1-1: Product: syz [ 396.453251][ T5722] usb 1-1: Manufacturer: syz [ 396.472718][ T5722] usb 1-1: SerialNumber: syz [ 396.544749][ T5722] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 396.602054][ T5698] usb 3-1: USB disconnect, device number 45 [ 397.086911][T10075] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1026'. [ 397.112243][T10075] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1026'. [ 397.134132][T10075] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1026'. [ 397.562900][T10089] capability: warning: `syz.2.1033' uses 32-bit capabilities (legacy support in use) [ 397.602462][ T1170] usb 1-1: Failed to submit usb control message: -110 [ 397.608739][T10089] program syz.2.1033 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 397.621112][ T1170] usb 1-1: unable to send the bmi data to the device: -110 [ 397.640154][ T1170] usb 1-1: unable to get target info from device [ 397.665602][ T1170] usb 1-1: could not get target info (-110) [ 397.682562][ T1170] usb 1-1: could not probe fw (-110) [ 397.765668][T10099] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1036' sets config #1 [ 398.797349][ T5698] usb 1-1: USB disconnect, device number 44 [ 399.122976][T10142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1055'. [ 399.176175][T10147] 8021q: VLANs not supported on lo [ 399.559057][T10163] syzkaller0: entered promiscuous mode [ 399.564692][T10163] syzkaller0: entered allmulticast mode [ 399.694740][T10166] netlink: 'syz.0.1066': attribute type 12 has an invalid length. [ 399.897333][T10178] sctp: [Deprecated]: syz.4.1068 (pid 10178) Use of int in max_burst socket option. [ 399.897333][T10178] Use struct sctp_assoc_value instead [ 399.945027][T10178] sctp: [Deprecated]: syz.4.1068 (pid 10178) Use of int in maxseg socket option. [ 399.945027][T10178] Use struct sctp_assoc_value instead [ 400.737199][T10210] bridge1: entered promiscuous mode [ 400.751423][T10210] bridge1: entered allmulticast mode [ 400.786433][T10210] team0: Port device bridge1 added [ 400.869525][T10215] bridge0: port 1(team0) entered blocking state [ 400.900616][T10215] bridge0: port 1(team0) entered disabled state [ 400.919317][T10215] team0: entered allmulticast mode [ 400.946857][T10215] team0: entered promiscuous mode [ 401.198619][T10237] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1094'. [ 404.083763][ T1170] syzkaller0: tun_net_xmit 76 [ 404.119586][ T24] syzkaller0: tun_net_xmit 76 [ 404.131628][ T1170] syzkaller0: tun_net_xmit 48 [ 404.161270][T10337] syzkaller0: delete flow: hash 904841385 index 1 [ 404.253208][T10366] capability: warning: `syz.3.1152' uses deprecated v2 capabilities in a way that may be insecure [ 404.773861][ T24] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 404.782671][ T5722] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 404.958458][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 404.965819][ T24] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 404.974325][ T5722] usb 4-1: Using ep0 maxpacket: 16 [ 404.998544][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.034142][ T5722] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 405.043585][ T24] usb 3-1: config 0 has no interface number 0 [ 405.050047][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.060349][ T5722] usb 4-1: Product: syz [ 405.077096][ T5722] usb 4-1: Manufacturer: syz [ 405.082300][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 405.105401][ T5722] usb 4-1: SerialNumber: syz [ 405.110643][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.121180][ T24] usb 3-1: Product: syz [ 405.139480][ T24] usb 3-1: Manufacturer: syz [ 405.145389][ T24] usb 3-1: SerialNumber: syz [ 405.176996][ T24] usb 3-1: config 0 descriptor?? [ 405.409624][ T24] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 405.417796][ T24] uvcvideo 3-1:0.105: No valid video chain found. [ 406.580753][ T5722] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 406.616730][ T5722] usb 4-1: USB disconnect, device number 50 [ 407.546052][ T5722] usb 3-1: USB disconnect, device number 46 [ 408.154397][ T5722] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 408.329548][ T5722] usb 3-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 408.352898][ T5722] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 408.376895][ T5722] usb 3-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 408.402144][ T5722] usb 3-1: config 0 interface 0 has no altsetting 0 [ 408.412648][ T5722] usb 3-1: New USB device found, idVendor=056a, idProduct=0316, bcdDevice= 0.00 [ 408.431436][ T5722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.464361][ T5722] usb 3-1: config 0 descriptor?? [ 408.904272][ T5722] wacom 0003:056A:0316.000D: unknown main item tag 0x0 [ 408.911284][ T5722] wacom 0003:056A:0316.000D: unknown main item tag 0x0 [ 408.921644][ T5722] wacom 0003:056A:0316.000D: unknown main item tag 0x0 [ 408.928678][ T5722] wacom 0003:056A:0316.000D: unknown main item tag 0x0 [ 408.935756][ T5722] wacom 0003:056A:0316.000D: unknown main item tag 0x0 [ 408.948674][ T5722] wacom 0003:056A:0316.000D: unknown main item tag 0x0 [ 408.955753][ T5722] wacom 0003:056A:0316.000D: unknown main item tag 0x0 [ 408.963844][ T5722] wacom 0003:056A:0316.000D: unknown main item tag 0x0 [ 408.970861][ T5722] wacom 0003:056A:0316.000D: unknown main item tag 0x0 [ 408.977833][ T5722] wacom 0003:056A:0316.000D: unknown main item tag 0x0 [ 409.055582][T10400] tipc: Enabling of bearer rejected, failed to enable media [ 409.097298][ T5722] usb 3-1: USB disconnect, device number 47 [ 409.797457][T10440] input: syz1 as /devices/virtual/input/input15 [ 410.338092][ T5698] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 410.498621][ T5698] usb 5-1: Using ep0 maxpacket: 8 [ 410.517249][ T5698] usb 5-1: unable to get BOS descriptor or descriptor too short [ 410.534015][ T5698] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 410.551216][ T5698] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 410.575137][ T5698] usb 5-1: config 4 has no interface number 0 [ 410.590808][ T5698] usb 5-1: language id specifier not provided by device, defaulting to English [ 410.610979][ T5698] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 410.623063][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.639222][ T5698] usb 5-1: Product: syz [ 410.646861][ T5698] usb 5-1: Manufacturer: syz [ 410.652118][ T5698] usb 5-1: SerialNumber: syz [ 410.898223][ T5698] uvcvideo 5-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 410.914666][ T5698] uvcvideo 5-1:4.147: No valid video chain found. [ 410.933555][ T5698] usb 5-1: USB disconnect, device number 40 [ 411.522005][T10466] binder_alloc: binder_alloc_mmap_handler: 10465 200000142000-200000143000 already mapped failed -16 [ 411.900257][T10474] team0: Device ipvlan2 failed to register rx_handler [ 412.228623][T10480] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1194'. [ 412.764426][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 412.764447][ T30] audit: type=1326 audit(1785904321.996:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.2.1176" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd237d9e019 code=0x7fc00000 [ 413.038105][ T7409] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 413.190521][ T7409] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 413.211132][ T7409] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 413.236901][ T7409] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 413.258844][ T7409] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.274499][ T7409] usb 1-1: Product: syz [ 413.289638][ T7409] usb 1-1: Manufacturer: syz [ 413.300854][ T7409] usb 1-1: SerialNumber: syz [ 413.547233][ T7409] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 45 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 413.961486][ T5722] usb 1-1: USB disconnect, device number 45 [ 413.989299][ T5722] usblp0: removed [ 415.713471][T10577] netlink: 'syz.2.1234': attribute type 7 has an invalid length. [ 415.740012][T10577] netlink: 'syz.2.1234': attribute type 5 has an invalid length. [ 415.758456][T10577] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1234'. [ 416.062938][T10586] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1229'. [ 416.063012][T10586] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1229'. [ 416.388172][ T7409] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 416.550406][ T7409] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 416.568150][ T7409] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 416.595793][ T7409] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 416.613388][ T7409] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 416.632295][ T7409] usb 4-1: SerialNumber: syz [ 416.650763][T10591] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 416.865136][T10591] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 417.281452][ T7409] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 417.490925][ T7409] usb 4-1: USB disconnect, device number 51 [ 418.318131][ T24] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 418.513585][ T24] usb 2-1: config 255 has 1 interface, different from the descriptor's value: 11 [ 418.531759][ T24] usb 2-1: config 255 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 418.565533][ T24] usb 2-1: config 255 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 418.590414][ T24] usb 2-1: config 255 interface 0 has no altsetting 0 [ 418.608031][ T24] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 418.628025][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.656985][ T24] ums-sddr09 2-1:255.0: USB Mass Storage device detected [ 418.828935][ T24] ums-sddr09 2-1:255.0: probe with driver ums-sddr09 failed with error -22 [ 418.884658][ T24] usb 2-1: USB disconnect, device number 44 [ 419.822636][T10628] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1251'. [ 419.843012][T10628] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1251'. [ 419.868162][T10628] netlink: 'syz.1.1251': attribute type 5 has an invalid length. [ 419.893989][T10628] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1251'. [ 420.899566][ T7409] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 421.078035][ T7409] usb 2-1: Using ep0 maxpacket: 16 [ 421.096127][ T7409] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 421.115371][ T7409] usb 2-1: config 0 has no interface number 0 [ 421.127782][ T7409] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 421.150767][ T7409] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 421.180891][ T7409] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 421.195046][ T7409] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.213304][ T7409] usb 2-1: Product: syz [ 421.223176][ T7409] usb 2-1: Manufacturer: syz [ 421.235068][ T7409] usb 2-1: SerialNumber: syz [ 421.261499][ T7409] usb 2-1: config 0 descriptor?? [ 421.274549][T10641] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 421.285663][T10641] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 421.446093][T10654] Invalid argument reading file caps for ./file0 [ 421.518054][ T24] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 421.519262][T10641] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 421.519415][T10641] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 421.704158][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 421.719255][ T24] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 421.721196][ T7409] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 421.737360][ T24] usb 4-1: can't read configurations, error -71 [ 421.756861][ T7409] asix 2-1:0.34: probe with driver asix failed with error -61 [ 423.421602][T10687] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1272'. [ 423.743423][ T7409] usb 2-1: USB disconnect, device number 45 [ 424.363750][T10707] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1280'. [ 424.902978][ T30] audit: type=1326 audit(1785904334.136:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10723 comm="syz.3.1289" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e1859e019 code=0x0 [ 425.706546][T10752] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1301'. [ 425.726923][ T5722] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 425.889119][ T5722] usb 5-1: Using ep0 maxpacket: 16 [ 425.905294][ T5722] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 425.930311][ T5722] usb 5-1: config 0 has no interface number 0 [ 425.946850][ T5722] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 425.974261][ T5722] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 425.997021][ T5722] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 426.034558][ T5722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.073330][ T5722] usb 5-1: Product: syz [ 426.081233][ T5722] usb 5-1: Manufacturer: syz [ 426.100460][ T5722] usb 5-1: SerialNumber: syz [ 426.116837][ T5722] usb 5-1: config 0 descriptor?? [ 426.129628][T10743] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 426.145420][T10743] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 426.389294][T10743] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 426.421768][T10743] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 426.644831][ T5722] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 426.676043][ T5722] asix 5-1:0.34: probe with driver asix failed with error -61 [ 427.258146][ T5722] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 427.418074][ T5722] usb 3-1: Using ep0 maxpacket: 32 [ 427.434736][ T5722] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 427.453329][ T5722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.471631][ T5722] usb 3-1: Product: syz [ 427.480390][ T5722] usb 3-1: Manufacturer: syz [ 427.491886][ T5722] usb 3-1: SerialNumber: syz [ 427.722888][ T5722] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 427.987896][ T5722] usb 3-1: USB disconnect, device number 48 [ 428.044079][ T9703] udevd[9703]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 428.531944][ T5722] usb 5-1: USB disconnect, device number 41 [ 429.269722][ T5722] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 429.451248][ T5722] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 429.485000][ T5722] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 429.527331][ T5722] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 429.561456][ T5722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 429.578031][ T5722] usb 5-1: SerialNumber: syz [ 429.601156][T10812] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 429.788364][ T7409] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 429.837288][T10812] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 429.960304][ T7409] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 429.994425][ T7409] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 430.025883][ T7409] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 430.053770][ T7409] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 430.073803][ T7409] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.073940][ T5722] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 430.094119][ T7409] usb 1-1: Product: syz [ 430.099052][ T7409] usb 1-1: Manufacturer: syz [ 430.109999][ T7409] usb 1-1: SerialNumber: syz [ 430.125971][ T5722] usb 5-1: USB disconnect, device number 42 [ 430.148236][ T7409] hub 1-1:1.0: bad descriptor, ignoring hub [ 430.166436][ T7409] hub 1-1:1.0: probe with driver hub failed with error -5 [ 430.362389][ T7409] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 46 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 430.746231][ T5722] usb 1-1: USB disconnect, device number 46 [ 430.773036][ T5722] usblp0: removed [ 431.914938][T10861] kvm: pic: non byte write [ 432.021488][ T5698] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 432.198765][ T5698] usb 4-1: Using ep0 maxpacket: 16 [ 432.214932][ T5698] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 432.235231][ T5698] usb 4-1: config 0 has no interface number 0 [ 432.247855][ T5698] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 432.269550][ T5698] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 432.294662][ T5698] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 432.314179][ T5698] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.333408][ T5698] usb 4-1: Product: syz [ 432.347091][ T5698] usb 4-1: Manufacturer: syz [ 432.361475][ T5698] usb 4-1: SerialNumber: syz [ 432.389340][ T5698] usb 4-1: config 0 descriptor?? [ 432.407702][T10860] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 432.427856][T10860] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 432.575227][T10873] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 432.672859][T10860] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 432.699685][T10860] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 432.923065][ T5698] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 432.947128][ T5698] asix 4-1:0.34: probe with driver asix failed with error -61 [ 433.068837][ T7409] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 433.251854][ T7409] usb 2-1: config 0 interface 0 has no altsetting 0 [ 433.268961][ T7409] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 433.290130][ T7409] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.317667][ T7409] usb 2-1: config 0 descriptor?? [ 433.352923][T10884] wireguard0: entered promiscuous mode [ 433.774776][ T7409] usbhid 2-1:0.0: can't add hid device: -71 [ 433.793034][ T7409] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 433.819908][ T7409] usb 2-1: USB disconnect, device number 46 [ 434.203591][T10894] tipc: Started in network mode [ 434.214883][T10894] tipc: Node identity ac14140f, cluster identity 4711 [ 434.223545][T10894] tipc: New replicast peer: 255.255.255.255 [ 434.245103][T10894] tipc: Enabled bearer , priority 10 [ 434.758376][ T5722] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 434.852982][ T7409] usb 4-1: USB disconnect, device number 54 [ 434.931562][ T5722] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 434.962957][ T5722] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 435.013367][ T5722] usb 5-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 435.055627][ T5722] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 435.078688][ T5722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.094506][ T5722] usb 5-1: Product: syz [ 435.107738][ T5722] usb 5-1: Manufacturer: syz [ 435.113196][ T5722] usb 5-1: SerialNumber: syz [ 435.183496][ T5722] usb-storage 5-1:1.0: USB Mass Storage device detected [ 435.201761][ T5722] usb-storage 5-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 435.229487][ T5722] scsi host1: usb-storage 5-1:1.0 [ 435.351987][ T5698] tipc: Node number set to 2886997007 [ 435.451283][ T7409] usb 5-1: USB disconnect, device number 43 [ 436.103409][ T30] audit: type=1326 audit(1785904345.336:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10946 comm="syz.4.1373" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c9f9e019 code=0x7ffc0000 [ 436.168684][ T30] audit: type=1326 audit(1785904345.336:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10946 comm="syz.4.1373" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c9f9e019 code=0x7ffc0000 [ 436.260319][ T30] audit: type=1326 audit(1785904345.346:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10946 comm="syz.4.1373" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa3c9f9e019 code=0x7ffc0000 [ 436.321079][ T30] audit: type=1326 audit(1785904345.346:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10946 comm="syz.4.1373" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c9f9e019 code=0x7ffc0000 [ 436.384425][ T30] audit: type=1326 audit(1785904345.346:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10946 comm="syz.4.1373" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c9f9e019 code=0x7ffc0000 [ 436.412432][ T30] audit: type=1326 audit(1785904345.356:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10946 comm="syz.4.1373" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fa3c9f9e019 code=0x7ffc0000 [ 436.467791][ T30] audit: type=1326 audit(1785904345.356:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10946 comm="syz.4.1373" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c9f9e019 code=0x7ffc0000 [ 438.739797][T11023] input: syz1 as /devices/virtual/input/input16 [ 438.798750][T11024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1402'. [ 439.721836][T11064] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1417'. [ 440.290294][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.308509][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.769026][T11107] netlink: 'syz.4.1436': attribute type 29 has an invalid length. [ 440.788926][T11107] netlink: 'syz.4.1436': attribute type 29 has an invalid length. [ 441.659436][T11156] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1457'. [ 441.698834][T11156] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1457'. [ 441.911732][T11169] netlink: 'syz.4.1465': attribute type 29 has an invalid length. [ 441.939477][T11169] netlink: 'syz.4.1465': attribute type 29 has an invalid length. [ 442.256345][T11187] tipc: Started in network mode [ 442.271592][T11187] tipc: Node identity 4, cluster identity 4711 [ 442.296688][T11187] tipc: Node number set to 4 [ 446.503896][T11256] sctp: [Deprecated]: syz.0.1488 (pid 11256) Use of int in maxseg socket option. [ 446.503896][T11256] Use struct sctp_assoc_value instead [ 446.719858][ T5722] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 446.838882][T11259] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1490'. [ 446.885863][T11259] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1490'. [ 446.898108][ T5722] usb 4-1: Using ep0 maxpacket: 16 [ 446.911409][ T5722] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.926719][ T5722] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 446.939194][T11259] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1490'. [ 446.949631][ T5722] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 446.966487][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.984752][ T5722] usb 4-1: Product: syz [ 446.994142][ T5722] usb 4-1: Manufacturer: syz [ 447.001961][T11259] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1490'. [ 447.004312][ T5722] usb 4-1: SerialNumber: syz [ 447.051198][ T5722] usb 4-1: 0:2 : does not exist [ 447.052837][T11259] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1490'. [ 447.094021][T11259] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1490'. [ 447.118176][T11259] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1490'. [ 447.131351][T11259] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1490'. [ 447.142854][T11259] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1490'. [ 447.153935][T11259] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1490'. [ 447.260630][ T5722] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 447.270562][T11261] macsec1: entered promiscuous mode [ 447.394086][ T5722] usb 4-1: USB disconnect, device number 55 [ 447.542784][ T9703] udevd[9703]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 447.849204][ T24] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 448.018353][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 448.055817][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 448.076575][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 448.096445][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 448.121133][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 448.138537][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.156514][ T24] usb 3-1: Product: syz [ 448.162939][ T24] usb 3-1: Manufacturer: syz [ 448.178255][ T24] usb 3-1: SerialNumber: syz [ 448.328762][ T5722] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 448.414030][ T24] usb 3-1: 0:1 : does not exist [ 448.431993][ T24] usb 3-1: BAAD HEADSET c_chmask mismatch [ 448.509133][ T5722] usb 4-1: Using ep0 maxpacket: 8 [ 448.525522][ T5722] usb 4-1: unable to get BOS descriptor or descriptor too short [ 448.552878][ T5722] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 448.578626][ T5722] usb 4-1: config 0 has no interface number 0 [ 448.586745][ T24] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 448.603288][ T5722] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 448.671052][ T24] usb 3-1: USB disconnect, device number 49 [ 448.735762][ T5722] usb 4-1: config 0 interface 88 has no altsetting 0 [ 448.764217][ T5722] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 448.803587][ T9703] udevd[9703]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 448.821672][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 448.892208][ T5722] usb 4-1: Product: syz [ 448.903036][ T5722] usb 4-1: Manufacturer: syz [ 448.916691][ T5722] usb 4-1: SerialNumber: syz [ 448.931289][ T5722] usb 4-1: config 0 descriptor?? [ 449.151217][T11299] warning: `syz.2.1501' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 449.214745][ T5722] usb 4-1: USB disconnect, device number 56 [ 452.260630][T11388] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 454.428598][ T5722] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 454.610361][ T5722] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 454.633199][ T5722] usb 5-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice= 0.00 [ 454.646302][ T5722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.663688][ T5722] usb 5-1: Product: syz [ 454.672816][ T5722] usb 5-1: Manufacturer: syz [ 454.682760][ T5722] usb 5-1: SerialNumber: syz [ 454.706578][ T5722] gspca_main: spca500-2.14.0 probing 046d:0900 [ 455.120481][ T5722] gspca_spca500: reg write: error -71 [ 455.138806][ T5722] gspca_spca500: reg write: error -71 [ 455.162015][ T5722] gspca_spca500: reg write: error -71 [ 455.185784][ T5722] gspca_spca500: reg write: error -71 [ 455.206991][ T5722] gspca_spca500: reg write: error -71 [ 455.223946][ T5722] gspca_spca500: reg write: error -71 [ 455.237888][ T5722] gspca_spca500: reg write: error -71 [ 455.254445][ T5722] gspca_spca500: reg write: error -71 [ 455.264445][ T5722] gspca_spca500: reg write: error -71 [ 455.277331][ T5722] gspca_spca500: reg write: error -71 [ 455.292598][T11439] xt_TPROXY: Can be used only with -p tcp or -p udp [ 455.293486][ T5722] gspca_spca500: reg write: error -71 [ 455.315521][ T5722] gspca_spca500: reg write: error -71 [ 455.327886][ T5722] gspca_spca500: reg write: error -71 [ 455.365665][ T5722] usb 5-1: USB disconnect, device number 44 [ 455.458957][ T5712] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 455.632097][ T5712] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 455.655721][ T5712] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 455.685357][ T5712] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 455.719945][ T5712] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 455.753361][ T5712] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice= 1.00 [ 455.776727][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.803515][ T5712] usb 3-1: Product: syz [ 455.822784][ T5712] usb 3-1: Manufacturer: syz [ 455.838711][ T5712] usb 3-1: SerialNumber: syz [ 455.862866][T11438] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 455.908380][T11438] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 456.967408][ T5712] redrat3 3-1:1.0: Firmware rev: [ 457.126265][T11458] ip_tables: iptables: counters copy to user failed while replacing table [ 457.175733][ T5712] redrat3 3-1:1.0: Failed to read timeout from hardware [ 457.249219][T11463] __nla_validate_parse: 136 callbacks suppressed [ 457.249304][T11463] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1543'. [ 457.318034][ T5712] rc_core: IR keymap rc-hauppauge not found [ 457.330238][ T5712] Registered IR keymap rc-empty [ 457.355071][ T5712] rc rc0: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/rc/rc0 [ 457.378700][ T5712] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/rc/rc0/input17 [ 457.729848][ T5712] redrat3 3-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 457.750214][ T5712] redrat3 3-1:1.0: redrat3_enable_detector: detector status: -5, should be 1 [ 457.855702][ T5712] redrat3 3-1:1.0: probe with driver redrat3 failed with error -5 [ 457.870545][ T5712] usb 3-1: USB disconnect, device number 50 [ 459.134807][T11481] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 459.280068][ T5722] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 459.448063][ T5722] usb 4-1: Using ep0 maxpacket: 32 [ 459.482938][ T5722] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 459.493005][ T5722] usb 4-1: config 0 has no interface number 0 [ 459.506734][ T5722] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 459.516344][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.524437][ T5722] usb 4-1: Product: syz [ 459.528825][ T5722] usb 4-1: Manufacturer: syz [ 459.533476][ T5722] usb 4-1: SerialNumber: syz [ 459.558675][ T5722] usb 4-1: config 0 descriptor?? [ 460.048103][ T5712] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 460.201413][ T5712] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.212289][ T5712] usb 1-1: config 0 has no interfaces? [ 460.217892][ T5712] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 460.227525][ T5712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.268734][ T5712] usb 1-1: config 0 descriptor?? [ 460.620389][ T5722] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 460.631555][ T5722] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 460.641587][ T5722] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 460.653326][ T5722] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 460.675082][ T5722] usb 4-1: USB disconnect, device number 57 [ 460.705031][T11454] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 461.304191][T11506] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 462.802652][T11522] trusted_key: encrypted_key: key user:syz not found [ 462.865720][ T5712] usb 1-1: USB disconnect, device number 47 [ 463.210067][T11535] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1564'. [ 463.214799][T11534] netlink: 272 bytes leftover after parsing attributes in process `syz.3.1563'. [ 465.161152][T11576] tipc: Enabling not permitted [ 465.180276][T11576] tipc: Enabling of bearer rejected, failed to enable media [ 468.416416][ T30] audit: type=1326 audit(1785904377.646:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11619 comm="syz.1.1594" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b43d9e019 code=0x7ffc0000 [ 468.507604][ T30] audit: type=1326 audit(1785904377.646:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11619 comm="syz.1.1594" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b43d9e019 code=0x7ffc0000 [ 468.582951][ T30] audit: type=1326 audit(1785904377.686:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11619 comm="syz.1.1594" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b43d9e019 code=0x7ffc0000 [ 468.654231][ T30] audit: type=1326 audit(1785904377.686:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11619 comm="syz.1.1594" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b43d9e019 code=0x7ffc0000 [ 468.727242][ T30] audit: type=1326 audit(1785904377.686:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11619 comm="syz.1.1594" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6b43d9e019 code=0x7ffc0000 [ 468.824641][ T30] audit: type=1326 audit(1785904377.686:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11619 comm="syz.1.1594" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b43d9e019 code=0x7ffc0000 [ 468.896724][ T30] audit: type=1326 audit(1785904377.686:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11619 comm="syz.1.1594" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b43d9e019 code=0x7ffc0000 [ 468.956244][ T30] audit: type=1326 audit(1785904377.686:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11619 comm="syz.1.1594" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b43d9e019 code=0x7ffc0000 [ 469.017131][ T30] audit: type=1326 audit(1785904377.686:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11619 comm="syz.1.1594" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b43d9e019 code=0x7ffc0000 [ 469.067439][ T30] audit: type=1326 audit(1785904377.686:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11619 comm="syz.1.1594" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f6b43d9e019 code=0x7ffc0000 [ 470.120478][T11653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1604'. [ 470.248201][ T5712] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 470.446603][ T5712] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 470.551707][ T5712] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 470.586579][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 470.625448][ T5712] usb 4-1: Product: syz [ 470.655512][ T5712] usb 4-1: Manufacturer: syz [ 470.686008][ T5712] usb 4-1: SerialNumber: syz [ 471.017337][T11664] kvm: pic: non byte write [ 471.037518][ T5712] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 58 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 471.272672][ T5722] usb 4-1: USB disconnect, device number 58 [ 471.328493][ T5722] usblp0: removed [ 473.914795][T11725] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 475.203937][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 475.203958][ T30] audit: type=1800 audit(1785904384.436:801): pid=11732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1632" name="file0" dev="fuse" ino=18446744073709551613 res=0 errno=0 [ 475.633382][T11752] xt_hashlimit: size too large, truncated to 1048576 [ 476.119314][ T7409] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 476.314763][ T7409] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 476.344956][ T7409] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.367451][ T7409] usb 5-1: config 0 descriptor?? [ 476.437758][ T7409] pwc: Samsung MPC-C10 USB webcam detected. [ 477.565891][T11785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1651'. [ 477.667640][T11780] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 479.986616][ T7409] pwc: send_video_command error -71 [ 480.014420][ T7409] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 480.035195][ T7409] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 480.064547][ T7409] usb 5-1: USB disconnect, device number 45 [ 481.657078][T11833] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1669'. [ 482.098075][ T7409] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 482.250372][ T7409] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 482.260227][ T7409] usb 5-1: config 1 has no interface number 0 [ 482.270501][ T7409] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 482.283296][ T7409] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 482.305985][ T7409] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.359465][ T7409] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 482.388063][ T7409] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.420047][ T7409] usb 5-1: Product: syz [ 482.444055][ T7409] usb 5-1: Manufacturer: syz [ 482.454348][ T7409] usb 5-1: SerialNumber: syz [ 482.481677][T11841] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 482.911205][ T7409] usb 5-1: Error in usbnet_get_endpoints (-71) [ 482.977634][ T7409] usb 5-1: USB disconnect, device number 46 [ 483.760983][T11860] syz.2.1677: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 483.796095][T11860] CPU: 1 UID: 0 PID: 11860 Comm: syz.2.1677 Not tainted syzkaller #0 PREEMPT(full) [ 483.796126][T11860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 483.796140][T11860] Call Trace: [ 483.796150][T11860] [ 483.796160][T11860] dump_stack_lvl+0xe8/0x150 [ 483.796205][T11860] warn_alloc+0x24c/0x270 [ 483.796268][T11860] ? stack_depot_save_flags+0x33/0x800 [ 483.796304][T11860] ? __pfx_warn_alloc+0x10/0x10 [ 483.796335][T11860] ? kasan_save_track+0x3e/0x80 [ 483.796362][T11860] ? __kasan_kmalloc+0x93/0xb0 [ 483.796392][T11860] ? xsk_setsockopt+0x52a/0x960 [ 483.796509][T11860] ? do_sock_setsockopt+0x17c/0x1b0 [ 483.796536][T11860] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 483.796560][T11860] ? do_syscall_64+0x174/0x580 [ 483.796587][T11860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.796621][T11860] __vmalloc_node_range_noprof+0x12c/0x1730 [ 483.796680][T11860] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 483.796712][T11860] ? __kasan_kmalloc+0x93/0xb0 [ 483.796741][T11860] ? __kmalloc_cache_noprof+0x32d/0x660 [ 483.796769][T11860] ? __kmalloc_cache_noprof+0x150/0x660 [ 483.796800][T11860] vmalloc_user_noprof+0xad/0xe0 [ 483.796827][T11860] ? xskq_create+0xbf/0x170 [ 483.796853][T11860] xskq_create+0xbf/0x170 [ 483.796882][T11860] xsk_init_queue+0x8a/0xe0 [ 483.796908][T11860] xsk_setsockopt+0x52a/0x960 [ 483.796931][T11860] ? __fget_files+0x2a/0x420 [ 483.796961][T11860] ? __pfx_xsk_setsockopt+0x10/0x10 [ 483.796985][T11860] ? __pfx_aa_sk_perm+0x10/0x10 [ 483.797040][T11860] ? aa_sock_opt_perm+0xff/0x1a0 [ 483.797068][T11860] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 483.797106][T11860] ? __pfx_xsk_setsockopt+0x10/0x10 [ 483.797131][T11860] do_sock_setsockopt+0x17c/0x1b0 [ 483.797162][T11860] __x64_sys_setsockopt+0x13d/0x1b0 [ 483.797189][T11860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.797213][T11860] do_syscall_64+0x174/0x580 [ 483.797248][T11860] ? trace_irq_disable+0x3b/0x140 [ 483.797276][T11860] ? clear_bhb_loop+0x40/0x90 [ 483.797302][T11860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.797323][T11860] RIP: 0033:0x7fd237d9e019 [ 483.797344][T11860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.797363][T11860] RSP: 002b:00007fd238c13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 483.797389][T11860] RAX: ffffffffffffffda RBX: 00007fd238025fa0 RCX: 00007fd237d9e019 [ 483.797405][T11860] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000d [ 483.797418][T11860] RBP: 00007fd237e3500c R08: 0000000000000029 R09: 0000000000000000 [ 483.797432][T11860] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 483.797450][T11860] R13: 00007fd238026038 R14: 00007fd238025fa0 R15: 00007fd23814fa48 [ 483.797485][T11860] [ 484.074090][T11860] Mem-Info: [ 484.078269][T11860] active_anon:80257 inactive_anon:49 isolated_anon:512 [ 484.078269][T11860] active_file:9 inactive_file:59853 isolated_file:0 [ 484.078269][T11860] unevictable:768 dirty:268 writeback:0 [ 484.078269][T11860] slab_reclaimable:11372 slab_unreclaimable:106720 [ 484.078269][T11860] mapped:36249 shmem:74767 pagetables:1370 [ 484.078269][T11860] sec_pagetables:0 bounce:0 [ 484.078269][T11860] kernel_misc_reclaimable:0 [ 484.078269][T11860] free:1216537 free_pcp:11398 free_cma:0 [ 484.124195][T11860] Node 0 active_anon:321028kB inactive_anon:196kB active_file:36kB inactive_file:239212kB unevictable:1536kB isolated(anon):2048kB isolated(file):0kB mapped:144996kB dirty:1068kB writeback:0kB shmem:297532kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15344kB pagetables:5352kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 484.159427][T11860] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 484.192207][T11860] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 484.222705][T11860] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 484.228704][T11860] Node 0 DMA32 free:902672kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:321320kB inactive_anon:196kB active_file:36kB inactive_file:239212kB unevictable:1536kB writepending:1068kB zspages:0kB present:3129332kB managed:2548548kB mlocked:0kB bounce:0kB free_pcp:49388kB local_pcp:29968kB free_cma:0kB [ 484.263500][T11860] lowmem_reserve[]: 0 0 0 0 0 [ 484.268500][T11860] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:256kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 484.298181][T11860] lowmem_reserve[]: 0 0 0 0 0 [ 484.304194][T11860] Node 1 Normal free:3948116kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 484.336522][T11860] lowmem_reserve[]: 0 0 0 0 0 [ 484.341512][T11860] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 484.354516][T11860] Node 0 DMA32: 862*4kB (UM) 451*8kB (UME) 436*16kB (UME) 684*32kB (UM) 397*64kB (UME) 185*128kB (UME) 54*256kB (UME) 10*512kB (UM) 6*1024kB (UM) 1*2048kB (U) 193*4096kB (UM) = 902672kB [ 484.379107][T11860] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 484.398866][T11860] Node 1 Normal: 1*4kB (U) 4*8kB (UM) 5*16kB (UM) 7*32kB (UM) 6*64kB (UM) 3*128kB (UM) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 2*2048kB (U) 962*4096kB (M) = 3948116kB [ 484.436584][T11860] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 484.457537][T11860] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 484.478811][T11860] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 484.508285][T11860] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 484.528075][T11860] 133854 total pagecache pages [ 484.537998][T11860] 4 pages in swap cache [ 484.546000][T11860] Free swap = 124980kB [ 484.558152][T11860] Total swap = 124996kB [ 484.568375][T11860] 2097051 pages RAM [ 484.583711][T11860] 0 pages HighMem/MovableOnly [ 484.595739][T11860] 428235 pages reserved [ 484.614618][T11869] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1681'. [ 484.624015][T11860] 0 pages cma reserved [ 484.991055][T11879] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 486.156264][T11904] futex_wake_op: syz.0.1688 tries to shift op by 144; fix this program [ 486.454211][T11909] bridge_slave_0: left allmulticast mode [ 486.458066][ T7409] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 486.473333][T11909] bridge_slave_0: left promiscuous mode [ 486.487293][T11909] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.516122][T11909] bridge_slave_1: left allmulticast mode [ 486.537394][T11909] bridge_slave_1: left promiscuous mode [ 486.560340][T11909] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.621443][T11909] bond0: (slave bond_slave_0): Releasing backup interface [ 486.628075][ T7409] usb 3-1: Using ep0 maxpacket: 32 [ 486.649772][ T7409] usb 3-1: unable to get BOS descriptor or descriptor too short [ 486.669359][ T7409] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 486.689846][ T7409] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 486.714282][ T7409] usb 3-1: config 14 has no interface number 0 [ 486.717094][T11909] bond0: (slave bond_slave_1): Releasing backup interface [ 486.731128][ T7409] usb 3-1: config 14 has no interface number 1 [ 486.747359][ T7409] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 486.775969][ T7409] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 486.789990][T11909] team0: Port device team_slave_0 removed [ 486.804345][ T7409] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 486.817883][T11909] team0: Port device team_slave_1 removed [ 486.830309][ T7409] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 486.840173][T11909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.856764][ T7409] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 486.862044][ T30] audit: type=1326 audit(1785904396.086:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11902 comm="syz.4.1692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c9f9e019 code=0x7ffc0000 [ 486.887353][ T7409] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 486.915242][T11909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.929800][ T7409] usb 3-1: config 14 interface 57 has no altsetting 0 [ 486.938485][T11909] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 486.946886][ T7409] usb 3-1: config 14 interface 228 has no altsetting 0 [ 486.965922][ T30] audit: type=1326 audit(1785904396.086:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11902 comm="syz.4.1692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c9f9e019 code=0x7ffc0000 [ 486.993989][ T7409] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 487.012719][T11910] team0: Port device xfrm0 added [ 487.022645][ T7409] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.035485][ T30] audit: type=1326 audit(1785904396.106:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11902 comm="syz.4.1692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fa3c9f9e019 code=0x7ffc0000 [ 487.049744][T11911] tipc: Started in network mode [ 487.065071][ T7409] usb 3-1: Product: syz [ 487.082823][ T7409] usb 3-1: Manufacturer: syz [ 487.110974][ T7409] usb 3-1: SerialNumber: syz [ 487.113440][T11911] tipc: Node identity fe89aab161ae, cluster identity 4711 [ 487.127426][ T30] audit: type=1326 audit(1785904396.116:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11902 comm="syz.4.1692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c9f9e019 code=0x7ffc0000 [ 487.165523][T11911] tipc: Enabled bearer , priority 0 [ 487.200133][ T30] audit: type=1326 audit(1785904396.116:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11902 comm="syz.4.1692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c9f9e019 code=0x7ffc0000 [ 487.270407][ T30] audit: type=1326 audit(1785904396.146:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11902 comm="syz.4.1692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa3c9f9e019 code=0x7ffc0000 [ 487.328154][ T30] audit: type=1326 audit(1785904396.146:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11902 comm="syz.4.1692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c9f9e019 code=0x7ffc0000 [ 487.398305][ T30] audit: type=1326 audit(1785904396.146:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11902 comm="syz.4.1692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c9f9e019 code=0x7ffc0000 [ 487.461935][ T30] audit: type=1326 audit(1785904396.146:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11902 comm="syz.4.1692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa3c9f9e019 code=0x7ffc0000 [ 487.573641][ T7409] legousbtower 3-1:14.57: interrupt endpoints not found [ 487.600440][ T30] audit: type=1326 audit(1785904396.146:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11902 comm="syz.4.1692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c9f9e019 code=0x7ffc0000 [ 487.616637][T11919] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 487.986548][ T7409] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 488.012973][ T7409] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 488.170195][ T5722] tipc: Node number set to 2670176945 [ 488.759262][ T5722] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 488.870267][ T24] usb 3-1: USB disconnect, device number 51 [ 488.870346][ C0] usb 3-1: tower_interrupt_in_callback: usb_submit_urb failed (-19) [ 488.941388][ T5722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.953029][ T5722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.964149][ T5722] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 488.973961][ T5722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.005684][ T5722] usb 5-1: config 0 descriptor?? [ 489.509931][ T24] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 489.518405][ T5722] hid_parser_main: 30 callbacks suppressed [ 489.518493][ T5722] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 489.556234][ T5722] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 489.563826][ T5722] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 489.575537][ T5722] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 489.583221][ T5722] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 489.605756][ T5722] cm6533_jd 0003:0D8C:0022.000E: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 489.646254][ T5722] usb 5-1: USB disconnect, device number 47 [ 489.828967][T11949] fido_id[11949]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 490.230629][T11963] futex_wake_op: syz.3.1706 tries to shift op by 144; fix this program [ 490.617369][T11971] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 491.757178][T11989] input: syz1 as /devices/virtual/input/input18 [ 492.298112][ T5722] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 492.459952][ T5722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.471496][ T5722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.482243][ T5722] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 492.493672][ T5722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.511302][ T5722] usb 4-1: config 0 descriptor?? [ 492.940417][ T5722] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 492.958576][ T5722] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 492.980068][ T5722] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 492.999348][ T5722] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 493.018906][ T5722] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 493.050782][ T5722] cm6533_jd 0003:0D8C:0022.000F: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 493.143459][ T5722] usb 4-1: USB disconnect, device number 59 [ 493.699607][T12020] binder_alloc: 12019: pid 12019 spamming oneway? 1 buffers allocated for a total size of 4096 [ 494.249026][T12040] futex_wake_op: syz.3.1723 tries to shift op by 144; fix this program [ 494.348011][ T24] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 494.514527][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 494.537002][ T24] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 494.559089][ T24] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 494.593040][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 494.614941][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.635308][ T24] usb 1-1: Product: syz [ 494.642996][ T24] usb 1-1: Manufacturer: syz [ 494.651772][ T24] usb 1-1: SerialNumber: syz [ 494.672301][ T24] hub 1-1:1.0: bad descriptor, ignoring hub [ 494.681856][ T24] hub 1-1:1.0: probe with driver hub failed with error -5 [ 494.891358][ T24] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 48 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 495.998684][ T7409] usb 1-1: USB disconnect, device number 48 [ 496.011281][ T5722] logitech-hidpp-device 0005:046D:B012.0010: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 496.020294][ T7409] usblp0: removed [ 496.373120][T12094] futex_wake_op: syz.2.1742 tries to shift op by 144; fix this program [ 497.178156][ T7409] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 497.348427][ T7409] usb 5-1: Using ep0 maxpacket: 16 [ 497.367379][ T7409] usb 5-1: config 32 has an invalid interface number: 64 but max is 0 [ 497.398104][ T7409] usb 5-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 497.426090][ T7409] usb 5-1: config 32 has no interface number 0 [ 497.426405][T12108] netlink: 'syz.0.1746': attribute type 2 has an invalid length. [ 497.445430][ T7409] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 497.470341][ T7409] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.499260][ T7409] uvcvideo 5-1:32.64: Found UVC 0.00 device (0bd3:0569) [ 497.517345][ T7409] uvcvideo 5-1:32.64: No valid video chain found. [ 497.523172][T12108] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 497.575434][T12110] bridge0: port 1(syz_tun) entered blocking state [ 497.587576][T12110] bridge0: port 1(syz_tun) entered disabled state [ 497.597137][T12110] syz_tun: entered allmulticast mode [ 497.607301][T12110] syz_tun: entered promiscuous mode [ 497.814406][ T5719] usb 5-1: USB disconnect, device number 48 [ 498.648053][ T24] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 498.821270][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.837187][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.860394][ T24] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 498.869828][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.881584][ T24] usb 4-1: config 0 descriptor?? [ 499.317424][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 499.336984][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 499.371620][ T24] usb 4-1: USB disconnect, device number 60 [ 499.393060][T12147] futex_wake_op: syz.1.1760 tries to shift op by 144; fix this program [ 501.680758][ T7409] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 501.753874][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.760722][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.884384][ T7409] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.948013][ T7409] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.968257][ T7409] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 501.977468][ T7409] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.995531][ T7409] usb 1-1: config 0 descriptor?? [ 502.143861][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 502.143881][ T30] audit: type=1326 audit(1785904411.376:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12199 comm="syz.2.1783" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd237d9e019 code=0x0 [ 502.299002][T12205] futex_wake_op: syz.4.1782 tries to shift op by 144; fix this program [ 502.456527][ T7409] usbhid 1-1:0.0: can't add hid device: -71 [ 502.480580][ T7409] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 502.514596][ T7409] usb 1-1: USB disconnect, device number 49 [ 502.813633][T12210] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 505.148092][ T24] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 505.321016][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.348192][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.364658][ T24] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 505.386810][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.423572][ T24] usb 4-1: config 0 descriptor?? [ 505.722895][ T5719] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 505.862838][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 505.886154][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 505.897891][ T5719] usb 1-1: Using ep0 maxpacket: 32 [ 505.921077][ T5719] usb 1-1: unable to get BOS descriptor or descriptor too short [ 505.936321][ T24] usb 4-1: USB disconnect, device number 61 [ 505.952304][ T5719] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 505.984332][ T5719] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 506.006059][ T5719] usb 1-1: config 14 has no interface number 0 [ 506.017642][ T5719] usb 1-1: config 14 has no interface number 1 [ 506.025301][ T5719] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 506.039436][ T5719] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 506.061092][ T5719] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 506.073397][ T5719] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 506.095707][ T5719] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 506.121950][ T5719] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 506.138889][ T5719] usb 1-1: config 14 interface 57 has no altsetting 0 [ 506.146071][ T5719] usb 1-1: config 14 interface 228 has no altsetting 0 [ 506.156541][ T5719] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 506.166849][ T5719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.177160][ T5719] usb 1-1: Product: syz [ 506.198299][ T5719] usb 1-1: Manufacturer: syz [ 506.202990][ T5719] usb 1-1: SerialNumber: syz [ 506.641182][ T5719] legousbtower 1-1:14.57: interrupt endpoints not found [ 507.059652][ T5719] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 507.087259][ T5719] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 507.821932][ C1] usb 1-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 507.840735][ T5719] usb 1-1: USB disconnect, device number 50 [ 507.884840][ T5719] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected [ 509.896582][T12328] binder: 12327:12328 ioctl c0306201 200000000080 returned -14 [ 509.910194][T12328] binder: 12327:12328 ioctl c0306201 2000000003c0 returned -14 [ 512.462045][T12377] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 512.878915][T12380] kvm: kvm [12379]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 514.733625][T12429] futex_wake_op: syz.2.1858 tries to shift op by 144; fix this program [ 517.168063][ T24] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 517.225525][T12470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.287650][T12470] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.348014][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 517.364317][ T24] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 517.388170][ T24] usb 3-1: config 0 has no interface number 0 [ 517.397355][T12470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.410556][ T24] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 517.437544][ T24] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 517.479935][ T24] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 517.505985][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.528075][ T24] usb 3-1: Product: syz [ 517.542780][ T24] usb 3-1: Manufacturer: syz [ 517.555731][ T24] usb 3-1: SerialNumber: syz [ 517.582648][ T24] usb 3-1: config 0 descriptor?? [ 517.615515][T12467] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 517.653770][T12467] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 517.753494][T12470] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 517.785720][T12470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 517.823575][T12479] netlink: 'syz.4.1880': attribute type 2 has an invalid length. [ 517.875583][T12479] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1880'. [ 517.889221][T12470] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 517.916537][T12467] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 517.958207][T12467] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 518.213026][ T24] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 518.626733][T12501] futex_wake_op: syz.3.1885 tries to shift op by 144; fix this program [ 518.651538][ T7409] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 518.818333][ T7409] usb 5-1: Using ep0 maxpacket: 32 [ 518.824215][ T24] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 518.843899][ T7409] usb 5-1: unable to get BOS descriptor or descriptor too short [ 518.856073][ T24] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 518.881305][ T7409] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 518.899157][ T24] asix 3-1:0.34: probe with driver asix failed with error -71 [ 518.903627][ T7409] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 518.929040][ T7409] usb 5-1: config 14 has no interface number 0 [ 518.940873][ T24] usb 3-1: USB disconnect, device number 52 [ 518.947626][ T7409] usb 5-1: config 14 has no interface number 1 [ 518.957827][ T7409] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 518.980457][ T7409] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 519.050467][ T7409] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 519.080110][ T7409] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 519.108046][ T7409] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 519.139910][ T7409] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 519.175303][ T7409] usb 5-1: config 14 interface 57 has no altsetting 0 [ 519.194111][ T7409] usb 5-1: config 14 interface 228 has no altsetting 0 [ 519.213092][ T7409] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 519.223476][T12511] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1892'. [ 519.228045][ T7409] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.256190][ T7409] usb 5-1: Product: syz [ 519.268491][ T7409] usb 5-1: Manufacturer: syz [ 519.274809][ T7409] usb 5-1: SerialNumber: syz [ 519.721218][ T7409] legousbtower 5-1:14.57: interrupt endpoints not found [ 520.121820][ T7409] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 520.176570][ T7409] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 520.400349][T12542] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1905'. [ 520.452785][T12540] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.460151][T12540] bridge0: port 2(bridge_slave_1) entered listening state [ 520.469859][T12540] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.477093][T12540] bridge0: port 1(bridge_slave_0) entered listening state [ 520.640357][T12540] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 520.887031][ T5722] usb 5-1: USB disconnect, device number 49 [ 520.929432][ T5722] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 521.000638][T12558] netlink: 'syz.1.1913': attribute type 29 has an invalid length. [ 521.015981][T12558] netlink: 'syz.1.1913': attribute type 29 has an invalid length. [ 521.337506][T12569] futex_wake_op: syz.3.1914 tries to shift op by 144; fix this program [ 521.470806][T12573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1919'. [ 521.491491][T12573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1919'. [ 522.235840][T12593] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1928'. [ 523.361056][T12619] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1938'. [ 523.386240][T12619] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1938'. [ 523.536332][T12623] netlink: 'syz.3.1940': attribute type 2 has an invalid length. [ 524.407889][T12661] futex_wake_op: syz.0.1948 tries to shift op by 144; fix this program [ 525.156239][T12692] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1960'. [ 525.171749][T12692] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1960'. [ 525.745035][T12709] netlink: 'syz.0.1968': attribute type 6 has an invalid length. [ 525.956613][T12718] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1972'. [ 526.261622][T12729] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1977'. [ 527.045927][T12741] netlink: 'syz.3.1971': attribute type 2 has an invalid length. [ 527.089398][T12741] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 528.686287][T12768] netlink: 'syz.4.1991': attribute type 29 has an invalid length. [ 529.131894][T12784] tap0: tun_chr_ioctl cmd 1074025681 [ 530.998785][ T7409] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 531.158431][ T7409] usb 3-1: Using ep0 maxpacket: 32 [ 531.183738][ T7409] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 531.206150][ T7409] usb 3-1: config 0 has no interface number 0 [ 531.216339][ T7409] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 531.236043][ T7409] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 531.256238][ T7409] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 531.279407][ T7409] usb 3-1: config 0 interface 196 has no altsetting 0 [ 531.304834][ T7409] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 531.321689][ T7409] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.344949][ T7409] usb 3-1: Product: syz [ 531.357425][ T7409] usb 3-1: Manufacturer: syz [ 531.374110][ T7409] usb 3-1: SerialNumber: syz [ 531.397063][ T7409] usb 3-1: config 0 descriptor?? [ 531.413675][T12835] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 531.723246][T12853] fuse: Invalid uid '00000000000000000004' [ 531.847894][ T7409] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 531.880404][ T7409] ipheth 3-1:0.196: probe with driver ipheth failed with error -22 [ 532.065233][ T7409] usb 3-1: USB disconnect, device number 53 [ 534.078369][ T5722] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 534.218795][ T5722] usb 3-1: device descriptor read/64, error -71 [ 534.364431][T12924] netlink: 763 bytes leftover after parsing attributes in process `syz.4.2060'. [ 534.479383][ T5722] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 534.628537][ T5722] usb 3-1: device descriptor read/64, error -71 [ 534.748766][ T5722] usb usb3-port1: attempt power cycle [ 535.108511][ T5722] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 535.119267][ T24] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 535.158815][ T5722] usb 3-1: device descriptor read/8, error -71 [ 535.299026][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 535.316736][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 535.355045][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 535.376409][ T24] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 535.401903][ T24] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 535.414151][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.422706][ T24] usb 1-1: Product: syz [ 535.427129][ T24] usb 1-1: Manufacturer: syz [ 535.432708][ T5722] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 535.443680][ T24] usb 1-1: SerialNumber: syz [ 535.459509][ T5722] usb 3-1: device descriptor read/8, error -71 [ 535.513672][T12948] netlink: 763 bytes leftover after parsing attributes in process `syz.4.2071'. [ 535.568560][ T5722] usb usb3-port1: unable to enumerate USB device [ 535.670749][ T24] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 535.680113][ T24] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 536.079492][ T24] usb 1-1: USB disconnect, device number 51 [ 536.870564][T12967] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 537.045516][T12972] xt_hashlimit: size too large, truncated to 1048576 [ 537.723951][T12993] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 537.733577][T12993] IPv6: NLM_F_CREATE should be set when creating new route [ 537.986127][T12993] tipc: Resetting bearer [ 538.054395][ T7425] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 538.099452][ T5712] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 538.212506][ T7425] usb 1-1: device descriptor read/64, error -71 [ 538.259102][T13010] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2096'. [ 538.275582][ T5712] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 538.312797][ T5712] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 538.347432][ T5712] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 538.370417][ T5712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 538.388040][ T5712] usb 3-1: SerialNumber: syz [ 538.468543][ T7425] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 538.628640][ T7425] usb 1-1: device descriptor read/64, error -71 [ 538.648434][ T5712] usb 3-1: 0:2 : does not exist [ 538.721074][ T5712] usb 3-1: USB disconnect, device number 58 [ 538.750390][ T7425] usb usb1-port1: attempt power cycle [ 538.782435][ T9703] udevd[9703]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 538.967677][T13025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2103'. [ 538.979213][ T5721] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 539.118352][ T7425] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 539.128049][ T5721] usb 2-1: device descriptor read/64, error -71 [ 539.140559][ T7425] usb 1-1: device descriptor read/8, error -71 [ 539.328153][ T5712] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 539.378021][ T5721] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 539.400526][ T7425] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 539.430048][ T7425] usb 1-1: device descriptor read/8, error -71 [ 539.491230][ T5712] usb 5-1: Using ep0 maxpacket: 8 [ 539.501002][ T5712] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 539.518438][ T5721] usb 2-1: device descriptor read/64, error -71 [ 539.531813][ T5712] usb 5-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 539.548049][ T5712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.549257][ T7425] usb usb1-port1: unable to enumerate USB device [ 539.560496][ T5712] usb 5-1: Product: syz [ 539.572917][ T5712] usb 5-1: Manufacturer: syz [ 539.581035][ T5712] usb 5-1: SerialNumber: syz [ 539.640656][ T5721] usb usb2-port1: attempt power cycle [ 539.947679][ T5712] usb 5-1: USB disconnect, device number 50 [ 539.989701][ T5721] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 540.012417][ T9703] udevd[9703]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 540.050958][ T5721] usb 2-1: device descriptor read/8, error -71 [ 540.298169][ T5721] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 540.329375][ T5721] usb 2-1: device descriptor read/8, error -71 [ 540.439842][ T5721] usb usb2-port1: unable to enumerate USB device [ 541.878610][ T7425] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 542.038066][ T7425] usb 4-1: device descriptor read/64, error -71 [ 542.308061][ T7425] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 542.451581][ T7425] usb 4-1: device descriptor read/64, error -71 [ 542.572899][ T7425] usb usb4-port1: attempt power cycle [ 542.928982][ T7425] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 542.959055][ T7425] usb 4-1: device descriptor read/8, error -71 [ 543.182129][T13134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2146'. [ 543.198118][ T7425] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 543.232038][ T7425] usb 4-1: device descriptor read/8, error -71 [ 543.348608][ T7425] usb usb4-port1: unable to enumerate USB device [ 543.566370][ T7425] logitech-hidpp-device 0005:046D:B012.0011: item fetching failed at offset 34/35 [ 543.594283][ T7425] logitech-hidpp-device 0005:046D:B012.0011: hidpp_probe:parse failed [ 543.620192][ T7425] logitech-hidpp-device 0005:046D:B012.0011: probe with driver logitech-hidpp-device failed with error -22 [ 544.298301][ T30] audit: type=1800 audit(1785904453.526:838): pid=13127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2144" name="file1" dev="ramfs" ino=47303 res=0 errno=0 [ 545.678028][ T5712] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 545.828038][ T5712] usb 5-1: device descriptor read/64, error -71 [ 546.088036][ T5712] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 546.238025][ T5712] usb 5-1: device descriptor read/64, error -71 [ 546.378914][ T5712] usb usb5-port1: attempt power cycle [ 546.728091][ T5712] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 546.768833][ T5712] usb 5-1: device descriptor read/8, error -71 [ 547.018066][ T5712] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 547.056968][ T5712] usb 5-1: device descriptor read/8, error -71 [ 547.128821][T13221] IPv6: NLM_F_CREATE should be specified when creating new route [ 547.198509][ T5712] usb usb5-port1: unable to enumerate USB device [ 547.388113][ T7425] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 547.550114][ T7425] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 107, changing to 10 [ 547.571650][ T7425] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18284, setting to 1024 [ 547.595329][ T7425] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 547.622549][ T7425] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 547.632329][ T7425] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.647070][ T7425] usb 4-1: config 0 descriptor?? [ 547.659718][T13221] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 547.867483][T13229] netlink: 'syz.2.2187': attribute type 2 has an invalid length. [ 548.139213][ T7425] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 548.407564][T13246] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2195'. [ 548.415110][ T7425] usb 4-1: USB disconnect, device number 66 [ 549.055872][T13274] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2206'. [ 549.298103][ T7425] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 549.481384][ T7425] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 549.493311][T13295] fuse: Bad value for 'fd' [ 549.502827][ T7425] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 549.522427][ T7425] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 549.540625][ T7425] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.570276][ T7425] usb 2-1: config 0 descriptor?? [ 549.643248][T13301] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2219'. [ 550.019100][T13318] fuse: Bad value for 'fd' [ 550.117747][T13322] tipc: Enabling of bearer rejected, failed to enable media [ 550.200518][T13327] xt_hashlimit: size too large, truncated to 1048576 [ 550.283930][ T1185] logitech-hidpp-device 0005:046D:B012.0013: item fetching failed at offset 36/37 [ 550.312595][ T1185] logitech-hidpp-device 0005:046D:B012.0013: hidpp_probe:parse failed [ 550.335488][ T1185] logitech-hidpp-device 0005:046D:B012.0013: probe with driver logitech-hidpp-device failed with error -22 [ 551.011022][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 551.020832][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 552.120784][ T1185] usb 2-1: USB disconnect, device number 51 [ 552.599742][ T5712] logitech-hidpp-device 0005:046D:B012.0014: item fetching failed at offset 36/37 [ 552.684621][ T5712] logitech-hidpp-device 0005:046D:B012.0014: hidpp_probe:parse failed [ 552.751749][ T5712] logitech-hidpp-device 0005:046D:B012.0014: probe with driver logitech-hidpp-device failed with error -22 [ 553.059732][T13402] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2251'. [ 553.748044][ T1185] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 553.858073][ T5712] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 553.920860][ T1185] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.955557][ T1185] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 553.980679][ T1185] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 554.004372][ T1185] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.020318][ T5712] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.024049][ T1185] usb 2-1: config 0 descriptor?? [ 554.062525][ T5712] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.097980][ T5712] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 554.112992][ T5712] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 554.147977][ T5712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.160526][ T5712] usb 3-1: config 0 descriptor?? [ 554.603945][ T5712] plantronics 0003:047F:FFFF.0015: unbalanced collection at end of report description [ 554.628116][ T5712] plantronics 0003:047F:FFFF.0015: parse failed [ 554.643444][ T5712] plantronics 0003:047F:FFFF.0015: probe with driver plantronics failed with error -22 [ 554.807604][ T5712] usb 3-1: USB disconnect, device number 59 [ 555.024970][ T7425] logitech-hidpp-device 0005:046D:B012.0016: item fetching failed at offset 36/37 [ 555.047095][ T7425] logitech-hidpp-device 0005:046D:B012.0016: hidpp_probe:parse failed [ 555.066092][ T7425] logitech-hidpp-device 0005:046D:B012.0016: probe with driver logitech-hidpp-device failed with error -22 [ 555.404361][ T5712] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 555.442695][ T5712] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 556.398118][ T5712] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 556.498883][ T5721] usb 2-1: USB disconnect, device number 52 [ 556.551218][ T5712] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 556.561952][ T5712] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 556.577679][ T5712] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 556.588262][ T7425] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 556.589232][ T5712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 556.604585][ T5712] usb 4-1: SerialNumber: syz [ 556.678314][ T1185] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 556.760645][ T7425] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 556.769572][ T7425] usb 1-1: config 0 has no interface number 0 [ 556.775743][ T7425] usb 1-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 556.792404][ T7425] usb 1-1: config 0 interface 200 altsetting 2 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 556.805163][ T7425] usb 1-1: config 0 interface 200 has no altsetting 0 [ 556.814339][ T7425] usb 1-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 556.820281][ T5712] usb 4-1: 0:2 : does not exist [ 556.823854][ T7425] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.839464][ T7425] usb 1-1: Product: syz [ 556.843763][ T7425] usb 1-1: Manufacturer: syz [ 556.848926][ T1185] usb 3-1: Using ep0 maxpacket: 16 [ 556.854389][ T7425] usb 1-1: SerialNumber: syz [ 556.860894][ T1185] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.873936][ T1185] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 556.886894][ T7425] usb 1-1: config 0 descriptor?? [ 556.899067][ T1185] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 556.906804][ T5712] usb 4-1: USB disconnect, device number 67 [ 556.910284][ T1185] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 556.926050][ T1185] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 556.940582][ T1185] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 556.950780][ T1185] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.961548][ T9703] udevd[9703]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 556.975483][ T1185] usb 3-1: config 0 descriptor?? [ 557.008212][ T5721] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 557.040741][ T5699] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 557.090950][ T1185] rc_core: IR keymap rc-hauppauge not found [ 557.097189][ T1185] Registered IR keymap rc-empty [ 557.109869][ T1185] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 557.119908][ T7425] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.200/input/input21 [ 557.141569][ C1] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 557.149124][ C1] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 557.156436][ C1] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 557.163781][ C1] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 557.171431][ C1] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 557.178974][ C1] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 557.186316][ C1] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 557.193770][ C1] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 557.202098][ C1] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 557.209555][ C1] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 557.216863][ T1185] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 557.216952][ C1] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 557.224252][ C1] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 557.225326][ T5699] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 557.231528][ C1] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 557.231768][ C1] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 557.263405][ C1] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 557.270876][ C1] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 557.276794][ T5699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.278384][ C1] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 557.278600][ C1] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 557.301563][ C1] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 557.303053][ T5699] usb 5-1: Product: syz [ 557.308926][ C1] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 557.309018][ T7425] usb 1-1: USB disconnect, device number 56 [ 557.309149][ C1] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 557.309169][ C1] usb 1-1: hanwang_irq - usb_submit_urb failed with result -19 [ 557.339388][ T1185] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1 [ 557.358093][ T5721] usb 2-1: Using ep0 maxpacket: 16 [ 557.363390][ T1185] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1/input20 [ 557.379262][ T5721] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 557.428604][ T5721] usb 2-1: config 0 interface 0 has no altsetting 0 [ 557.435271][ T5699] usb 5-1: Manufacturer: syz [ 557.441203][ T1185] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 557.448676][ T5699] usb 5-1: SerialNumber: syz [ 557.473383][ T5721] usb 2-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 557.486590][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.499737][ T1185] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 557.508921][ T5721] usb 2-1: Product: syz [ 557.513315][ T5721] usb 2-1: Manufacturer: syz [ 557.518735][ T5721] usb 2-1: SerialNumber: syz [ 557.532312][ T5721] usb 2-1: config 0 descriptor?? [ 557.541663][ T1185] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 557.568732][ T1185] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 557.588118][ T1185] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 557.618207][ T1185] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 557.638204][ T1185] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 557.658182][ T1185] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 557.679979][ T1185] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 557.718197][ T1185] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 557.740631][ T1185] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 557.758071][ T7407] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 557.785128][ T1185] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 557.797049][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 557.811846][ T5721] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input22 [ 557.824638][ T1185] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 557.863034][ T5699] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 557.865604][ T5721] imon:send_packet: packet tx failed (-71) [ 557.875943][ T5699] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 557.898098][ T5721] imon 2-1:0.0: panel buttons/knobs setup failed [ 557.906878][ T188] usb 3-1: USB disconnect, device number 60 [ 557.928125][ T7407] usb 4-1: Using ep0 maxpacket: 8 [ 557.940765][ T7407] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 557.953383][ T7407] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 557.975135][ T7407] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 557.986104][ T5712] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 557.987980][ T5721] rc_core: IR keymap rc-imon-pad not found [ 557.997756][ T7407] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 558.011882][ T5721] Registered IR keymap rc-empty [ 558.019598][ T7407] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 558.019680][ T7407] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 558.019703][ T7407] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.065652][ T5721] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 558.076062][ T5721] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 558.087435][ T5721] imon:send_packet: packet tx failed (-71) [ 558.108585][ T5721] imon 2-1:0.0: remote input dev register failed [ 558.116992][ T5721] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 558.145266][ T5721] imon 2-1:0.0: unable to initialize intf0, err 0 [ 558.151999][ T5721] imon:imon_probe: failed to initialize context! [ 558.159940][ T5721] imon 2-1:0.0: unable to register, err -19 [ 558.162176][ T5712] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.172259][ T5721] usb 2-1: USB disconnect, device number 53 [ 558.183183][ T5712] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 558.194198][ T5712] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 558.224220][ T5712] usb 1-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=a0.27 [ 558.236873][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.245795][ T7407] usb 4-1: usb_control_msg returned -32 [ 558.252898][ T7407] usbtmc 4-1:16.0: can't read capabilities [ 558.259209][ T5712] usb 1-1: Product: syz [ 558.264294][ T5712] usb 1-1: Manufacturer: syz [ 558.273367][ T5712] usb 1-1: SerialNumber: syz [ 558.290980][ T5712] usb 1-1: config 0 descriptor?? [ 558.498106][ T5721] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 558.563829][T13496] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 558.564219][ T7425] usb 4-1: USB disconnect, device number 68 [ 558.659796][ T5721] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 558.671947][ T5721] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 558.683372][ T5721] usb 2-1: config 0 interface 0 has no altsetting 0 [ 558.692506][ T5721] usb 2-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 558.701757][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.709819][ T5721] usb 2-1: Product: syz [ 558.714303][ T5721] usb 2-1: Manufacturer: syz [ 558.719410][ T5721] usb 2-1: SerialNumber: syz [ 558.727374][ T5721] usb 2-1: config 0 descriptor?? [ 558.732530][ T1185] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 558.742038][T13488] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 558.888136][ T1185] usb 3-1: Using ep0 maxpacket: 32 [ 558.895644][ T1185] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 558.904535][ T1185] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.914989][ T1185] usb 3-1: config 0 has no interface number 0 [ 558.921236][ T1185] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 558.933606][ T1185] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 558.944163][ T1185] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 558.954297][ T1185] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 558.966127][ T1185] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 558.968354][T13488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.980797][ T1185] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 558.988373][T13488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.998110][ T1185] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 559.016907][ T1185] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 559.029705][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 559.040170][ T1185] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 559.054046][ T5721] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input24 [ 559.071031][ T1185] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 559.086486][ T1185] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.097020][ T1185] usb 3-1: Product: syz [ 559.101457][ T1185] usb 3-1: Manufacturer: syz [ 559.106114][ T1185] usb 3-1: SerialNumber: syz [ 559.110302][ T5699] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 559.124992][ T5699] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 559.133550][ T1185] usb 3-1: config 0 descriptor?? [ 559.145845][T13501] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 559.156396][ T1185] usb 3-1: will this work? Command EP is not usually 12 [ 559.164055][ T1185] usb 3-1: will this work? Response EP is not usually 3 [ 559.171655][ T1185] usb 3-1: will this work? Image data EP is not usually 2 [ 559.183424][ T1185] scsi host1: microtekX6 [ 559.212466][ T1128] usb 3-1: error -90 submitting URB [ 559.250436][ T11] usb 3-1: error -90 submitting URB [ 559.298159][ T11] usb 3-1: error -90 submitting URB [ 559.312466][ T5721] rc_core: IR keymap rc-imon-pad not found [ 559.319007][ T5721] Registered IR keymap rc-empty [ 559.324008][ T5721] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 559.336079][ T5721] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 559.343356][ T5699] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000118. ret = -EPROTO [ 559.359711][ T11] usb 3-1: error -90 submitting URB [ 559.384138][ T5699] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 559.392460][T13501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.402782][ T5699] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 559.433482][ T5699] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 559.440067][T13501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.459006][ T5721] rc rc1: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 559.480008][ T5699] usb 5-1: USB disconnect, device number 55 [ 559.513941][ T5721] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input25 [ 559.561486][ T5721] imon 2-1:0.0: iMON device (15c2:0045, intf0) on usb<2:54> initialized [ 559.649767][T13488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.668544][ T1185] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 559.702233][T13501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.718095][T13488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.732036][T13501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.774863][T13501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.801118][T13501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.815688][T13501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.842228][T13501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.861547][ T1185] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 559.877274][ T1185] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 559.896587][ T1185] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 559.901328][T13501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.907068][ T1185] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 559.929702][T13501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.944231][ T1185] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 559.954232][ T1185] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.124135][T13515] imon:lcd_write: invalid payload size: 0 (expected 8) [ 560.135265][T13515] imon:lcd_write: invalid payload size: 0 (expected 8) [ 560.149593][ T5699] usb 3-1: USB disconnect, device number 61 [ 560.393507][ T1185] gud 4-1:1.0: Unexpected status OK for failed transfer [ 560.407445][ T1185] gud 4-1:1.0: probe with driver gud failed with error -32 [ 560.603116][ T5699] usb 4-1: USB disconnect, device number 69 [ 561.226975][ T5699] usb 2-1: USB disconnect, device number 54 [ 561.302456][ T5721] usb 1-1: USB disconnect, device number 57 [ 561.495918][T13535] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2302'. [ 561.519194][ T1185] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 561.648756][ T5712] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 561.690805][ T1185] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 561.699960][ T1185] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 561.710979][ T1185] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 561.722716][ T1185] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.737406][ T1185] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 561.747185][ T1185] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 561.755440][ T5721] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 561.763787][ T1185] usb 3-1: Product: syz [ 561.768490][ T1185] usb 3-1: Manufacturer: syz [ 561.782287][ T1185] cdc_wdm 3-1:1.0: skipping garbage [ 561.788115][ T1185] cdc_wdm 3-1:1.0: skipping garbage [ 561.796179][ T1185] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 561.803141][ T1185] cdc_wdm 3-1:1.0: Unknown control protocol [ 561.818211][ T5712] usb 4-1: Using ep0 maxpacket: 8 [ 561.840307][ T5712] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 561.849638][ T5712] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 561.878000][ T5712] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 561.897951][ T5712] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 561.918009][ T5699] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 561.919986][ T5721] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 561.936399][ T5721] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 561.938071][ T5712] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 561.959477][ T5721] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 561.968619][ T5712] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 561.983961][ T5721] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 561.997945][ T5712] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 562.002923][ T1185] usb 3-1: USB disconnect, device number 62 [ 562.021681][ T5712] usb 4-1: config 168 interface 0 has no altsetting 0 [ 562.024331][ T5721] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 562.039926][ T5712] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 562.048807][ T5712] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 562.055428][ T5721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.072118][ T5712] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 562.096814][ T5712] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 562.127959][ T5712] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 562.140413][ T5699] usb 2-1: Using ep0 maxpacket: 32 [ 562.158338][ T5712] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 562.171313][ T5712] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 562.185741][ T5699] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 562.196568][ T5712] usb 4-1: config 168 interface 0 has no altsetting 0 [ 562.205822][ T5712] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 562.216685][ T5712] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 562.229260][ T5712] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 562.241714][ T5699] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 562.251451][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 562.260284][ T5712] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 562.272613][ T5699] usb 2-1: Product: syz [ 562.276880][ T5699] usb 2-1: Manufacturer: syz [ 562.281831][ T5712] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 562.293666][ T5699] usb 2-1: SerialNumber: syz [ 562.300560][ T5712] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 562.312748][ T5712] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 562.327670][ T5699] usb 2-1: config 0 descriptor?? [ 562.334794][T13537] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 562.344747][ T5699] hub 2-1:0.0: bad descriptor, ignoring hub [ 562.351528][ T5699] hub 2-1:0.0: probe with driver hub failed with error -5 [ 562.359417][ T5712] usb 4-1: config 168 interface 0 has no altsetting 0 [ 562.374161][ T5712] usb 4-1: string descriptor 0 read error: -22 [ 562.381182][ T5712] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 562.396080][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.436532][ T5712] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 562.514492][ T5712] usb 1-1: USB disconnect, device number 58 [ 562.518093][ T1185] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 562.634491][ T5721] usb 4-1: USB disconnect, device number 70 [ 562.699939][ T1185] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 562.710425][ T1185] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 562.721024][ T1185] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 562.731455][ T1185] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.744430][ T1185] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 562.753791][ T1185] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 562.762033][ T1185] usb 3-1: Product: syz [ 562.766387][ T1185] usb 3-1: Manufacturer: syz [ 562.777482][ T1185] cdc_wdm 3-1:1.0: skipping garbage [ 562.782881][ T1185] cdc_wdm 3-1:1.0: skipping garbage [ 562.791518][ T1185] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 562.797820][ T1185] cdc_wdm 3-1:1.0: Unknown control protocol [ 562.849078][ T7407] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 562.958896][T13537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.967755][T13537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.020272][ T7407] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 563.041831][ T7407] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 563.054960][ T7407] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 563.071304][ T7407] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 563.092486][ T7407] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 563.114789][ T7407] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.169813][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.176270][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.233302][T13540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.249674][T13540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.262780][T13540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.272497][T13540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.283103][T13546] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2307'. [ 563.341427][T13549] ================================================================== [ 563.349706][T13549] BUG: KASAN: slab-out-of-bounds in strlen+0x57/0x70 [ 563.356558][T13549] Read of size 1 at addr ffff88802fda3758 by task syz.2.2298/13549 [ 563.364480][T13549] [ 563.366850][T13549] CPU: 1 UID: 0 PID: 13549 Comm: syz.2.2298 Not tainted syzkaller #0 PREEMPT(full) [ 563.366890][T13549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 563.366903][T13549] Call Trace: [ 563.366913][T13549] [ 563.366923][T13549] dump_stack_lvl+0xe8/0x150 [ 563.366955][T13549] print_address_description+0x55/0x1e0 [ 563.366984][T13549] ? strlen+0x57/0x70 [ 563.367002][T13549] print_report+0x58/0x70 [ 563.367027][T13549] kasan_report+0x117/0x150 [ 563.367060][T13549] ? strlen+0x57/0x70 [ 563.367089][T13549] strlen+0x57/0x70 [ 563.367109][T13549] str_to_user+0x20/0x90 [ 563.367171][T13549] evdev_ioctl_handler+0x1164/0x1f60 [ 563.367223][T13549] ? do_vfs_ioctl+0x116f/0x1530 [ 563.367246][T13549] ? __pfx_evdev_ioctl_handler+0x10/0x10 [ 563.367270][T13549] ? hook_file_ioctl+0x1f0/0x5f0 [ 563.367291][T13549] ? __fget_files+0x2a/0x420 [ 563.367308][T13549] ? bpf_lsm_file_ioctl+0x9/0x20 [ 563.367332][T13549] ? __pfx_evdev_ioctl+0x10/0x10 [ 563.367360][T13549] __se_sys_ioctl+0xfc/0x170 [ 563.367379][T13549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.367401][T13549] do_syscall_64+0x174/0x580 [ 563.367420][T13549] ? trace_irq_disable+0x3b/0x140 [ 563.367435][T13549] ? clear_bhb_loop+0x40/0x90 [ 563.367447][T13549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.367459][T13549] RIP: 0033:0x7fd237d9e019 [ 563.367475][T13549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.367492][T13549] RSP: 002b:00007fd238bf2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 563.367514][T13549] RAX: ffffffffffffffda RBX: 00007fd238026090 RCX: 00007fd237d9e019 [ 563.367528][T13549] RDX: 0000200000000040 RSI: 0000000080404506 RDI: 0000000000000005 [ 563.367541][T13549] RBP: 00007fd237e3500c R08: 0000000000000000 R09: 0000000000000000 [ 563.367553][T13549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 563.367565][T13549] R13: 00007fd238026128 R14: 00007fd238026090 R15: 00007fd23814fa48 [ 563.367577][T13549] [ 563.367582][T13549] [ 563.398488][ T5699] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 563.403587][T13549] Allocated by task 11955: [ 563.403652][T13549] kasan_save_track+0x3e/0x80 [ 563.403682][T13549] __kasan_kmalloc+0x93/0xb0 [ 563.594374][T13549] __kmalloc_cache_noprof+0x32d/0x660 [ 563.599767][T13549] br_vlan_add+0x22d/0x1060 [ 563.604381][T13549] __vlan_add+0x46b/0x29e0 [ 563.608916][T13549] nbp_vlan_add+0x27c/0xb20 [ 563.613449][T13549] br_vlan_info+0x100/0x470 [ 563.618100][T13549] br_process_vlan_info+0x61f/0x8b0 [ 563.623320][T13549] br_afspec+0x3a5/0x600 [ 563.627584][T13549] br_setlink+0x34f/0x830 [ 563.631920][T13549] rtnl_bridge_setlink+0x5b6/0x7e0 [ 563.637042][T13549] rtnetlink_rcv_msg+0x7b9/0xc00 [ 563.642085][T13549] netlink_rcv_skb+0x226/0x4a0 [ 563.646862][T13549] netlink_unicast+0x7bb/0x940 [ 563.651629][T13549] netlink_sendmsg+0x813/0xb40 [ 563.656401][T13549] sock_sendmsg_nosec+0x13a/0x180 [ 563.661436][T13549] ____sys_sendmsg+0x54e/0x850 [ 563.666205][T13549] ___sys_sendmsg+0x2a5/0x360 [ 563.670883][T13549] __sys_sendmmsg+0x273/0x4d0 [ 563.675576][T13549] __x64_sys_sendmmsg+0xa0/0xc0 [ 563.680440][T13549] do_syscall_64+0x174/0x580 [ 563.685038][T13549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.690942][T13549] [ 563.693269][T13549] The buggy address belongs to the object at ffff88802fda3000 [ 563.693269][T13549] which belongs to the cache kmalloc-2k of size 2048 [ 563.707498][T13549] The buggy address is located 832 bytes to the right of [ 563.707498][T13549] allocated 1048-byte region [ffff88802fda3000, ffff88802fda3418) [ 563.722393][T13549] [ 563.724735][T13549] The buggy address belongs to the physical page: [ 563.731373][T13549] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2fda0 [ 563.740164][T13549] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 563.748791][T13549] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 563.756353][T13549] page_type: f5(slab) [ 563.760355][T13549] raw: 00fff00000000040 ffff88801b002000 dead000000000100 dead000000000122 [ 563.769131][T13549] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 563.777725][T13549] head: 00fff00000000040 ffff88801b002000 dead000000000100 dead000000000122 [ 563.786488][T13549] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 563.795161][T13549] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 563.804614][T13549] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 563.813296][T13549] page dumped because: kasan: bad access detected [ 563.819718][T13549] page_owner tracks the page as allocated [ 563.825438][T13549] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5649, tgid 5649 (syz-executor), ts 82561046137, free_ts 57555710775 [ 563.846281][T13549] post_alloc_hook+0x1f9/0x250 [ 563.851058][T13549] get_page_from_freelist+0x21fa/0x2270 [ 563.856619][T13549] __alloc_frozen_pages_noprof+0x18d/0x380 [ 563.862435][T13549] allocate_slab+0x79/0x5e0 [ 563.866941][T13549] refill_objects+0x2d5/0x350 [ 563.871621][T13549] __pcs_replace_empty_main+0x2bf/0x6b0 [ 563.877169][T13549] __kmalloc_cache_noprof+0x3a7/0x660 [ 563.882559][T13549] batadv_hard_if_event+0x282a/0x3520 [ 563.888012][T13549] notifier_call_chain+0x1a5/0x3d0 [ 563.893132][T13549] register_netdevice+0x18a4/0x1eb0 [ 563.898434][T13549] veth_newlink+0x49f/0xb70 [ 563.903020][T13549] rtnl_newlink_create+0x310/0xb00 [ 563.908143][T13549] rtnl_newlink+0x167f/0x1bd0 [ 563.912829][T13549] rtnetlink_rcv_msg+0x802/0xc00 [ 563.917779][T13549] netlink_rcv_skb+0x226/0x4a0 [ 563.922549][T13549] netlink_unicast+0x7bb/0x940 [ 563.927340][T13549] page last free pid 5421 tgid 5421 stack trace: [ 563.933663][T13549] __free_frozen_pages+0xc1e/0xd10 [ 563.938820][T13549] __slab_free+0x274/0x2c0 [ 563.943269][T13549] qlist_free_all+0x99/0x100 [ 563.947890][T13549] kasan_quarantine_reduce+0x148/0x160 [ 563.953368][T13549] __kasan_slab_alloc+0x22/0x80 [ 563.958231][T13549] kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 563.963701][T13549] do_getname+0x2e/0x250 [ 563.967949][T13549] __se_sys_chroot+0x8d/0x3f0 [ 563.972631][T13549] do_syscall_64+0x174/0x580 [ 563.977228][T13549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.983129][T13549] [ 563.985461][T13549] Memory state around the buggy address: [ 563.991163][T13549] ffff88802fda3600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 563.999317][T13549] ffff88802fda3680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 564.007415][T13549] >ffff88802fda3700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 564.015651][T13549] ^ [ 564.022583][T13549] ffff88802fda3780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 564.030641][T13549] ffff88802fda3800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 564.038784][T13549] ================================================================== [ 564.066752][T13549] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 564.074000][T13549] CPU: 1 UID: 0 PID: 13549 Comm: syz.2.2298 Not tainted syzkaller #0 PREEMPT(full) [ 564.083384][T13549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 564.093496][T13549] Call Trace: [ 564.096784][T13549] [ 564.099740][T13549] vpanic+0x56c/0xa60 [ 564.103756][T13549] ? __pfx_vpanic+0x10/0x10 [ 564.108267][T13549] ? __pfx___schedule+0x10/0x10 [ 564.113157][T13549] panic+0xc5/0xd0 [ 564.116892][T13549] ? __pfx_panic+0x10/0x10 [ 564.121342][T13549] ? preempt_schedule_thunk+0x16/0x40 [ 564.126851][T13549] ? strlen+0x57/0x70 [ 564.130862][T13549] check_panic_on_warn+0x89/0xb0 [ 564.135824][T13549] ? strlen+0x57/0x70 [ 564.139826][T13549] end_report+0x73/0x170 [ 564.144100][T13549] ? strlen+0x57/0x70 [ 564.148084][T13549] kasan_report+0x128/0x150 [ 564.152595][T13549] ? strlen+0x57/0x70 [ 564.156591][T13549] strlen+0x57/0x70 [ 564.160413][T13549] str_to_user+0x20/0x90 [ 564.164673][T13549] evdev_ioctl_handler+0x1164/0x1f60 [ 564.169982][T13549] ? do_vfs_ioctl+0x116f/0x1530 [ 564.174864][T13549] ? __pfx_evdev_ioctl_handler+0x10/0x10 [ 564.180547][T13549] ? hook_file_ioctl+0x1f0/0x5f0 [ 564.185587][T13549] ? __fget_files+0x2a/0x420 [ 564.190199][T13549] ? bpf_lsm_file_ioctl+0x9/0x20 [ 564.195143][T13549] ? __pfx_evdev_ioctl+0x10/0x10 [ 564.200089][T13549] __se_sys_ioctl+0xfc/0x170 [ 564.204687][T13549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.210757][T13549] do_syscall_64+0x174/0x580 [ 564.215361][T13549] ? trace_irq_disable+0x3b/0x140 [ 564.220397][T13549] ? clear_bhb_loop+0x40/0x90 [ 564.225086][T13549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.230992][T13549] RIP: 0033:0x7fd237d9e019 [ 564.235452][T13549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 564.255155][T13549] RSP: 002b:00007fd238bf2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 564.263593][T13549] RAX: ffffffffffffffda RBX: 00007fd238026090 RCX: 00007fd237d9e019 [ 564.271582][T13549] RDX: 0000200000000040 RSI: 0000000080404506 RDI: 0000000000000005 [ 564.279563][T13549] RBP: 00007fd237e3500c R08: 0000000000000000 R09: 0000000000000000 [ 564.287549][T13549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.295525][T13549] R13: 00007fd238026128 R14: 00007fd238026090 R15: 00007fd23814fa48 [ 564.303509][T13549] [ 564.306838][T13549] Kernel Offset: disabled [ 564.311156][T13549] Rebooting in 86400 seconds..