last executing test programs: 3m33.493230254s ago: executing program 3 (id=967): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x6, 0x14f882) r1 = syz_open_dev$loop(&(0x7f0000002500), 0x100000000, 0xd18135cf551e5e3d) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000000)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x4, 0x4, 0x0, 0x0, 0x3, 0x0, "0500000000860600d1f8a0e91dd2aca79603dda1af1ea80000000000edffffff0000deff00ffffffffffffffe300000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061acfc3fdc15dfb8ea28000000000400", "90be8b1c55f9640000000000000000000000000002000000efffffffff11e4ff", [0x802]}}) 3m33.358886342s ago: executing program 3 (id=970): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 3m33.080193436s ago: executing program 3 (id=975): r0 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000100)=""/200, 0xc8}], 0x1, 0x1000, 0x3f2f07de) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000080)={0x0, 0x4, 0x7}) 3m32.962526038s ago: executing program 3 (id=977): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700000000000000f8313c1c9884b2370008000100544545000900020073797a32000000000900010073797a3100000000140005800800014000008917080002"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 3m32.724365862s ago: executing program 3 (id=981): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000002) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x20) 3m32.529047735s ago: executing program 3 (id=983): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80101) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="141bdf000060", @ANYRES64=r0], 0xb2) 3m17.386983933s ago: executing program 32 (id=983): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80101) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="141bdf000060", @ANYRES64=r0], 0xb2) 6.087267764s ago: executing program 4 (id=3129): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x6) accept(r0, 0x0, 0x0) shutdown(r0, 0x1) 5.198654253s ago: executing program 4 (id=3143): memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\xe4\xda\xf9\xcd7el\xb7\xe6\b\x00\xd8\x8f\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x92\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xd9\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7\xf2\xa0D-N\xf9\xba!L]h;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00\x00\xeaq\xbb\x03&\xb4mi\xc7\xff\xca\xd8\x9f\xae\xa3\x04\xaa\x10\xe7\x98\xe48\x8d', 0x3) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a000090400000103010100092100080001220100090581"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 3.079881233s ago: executing program 0 (id=3172): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) ptrace$setregset(0x4211, r0, 0x1, 0x0) 2.923393139s ago: executing program 0 (id=3175): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setreuid(0xffffffffffffffff, 0xee01) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f5, &(0x7f0000000000)) 2.874303231s ago: executing program 0 (id=3176): mknod$loop(&(0x7f0000000400)='./file0\x00', 0xfff, 0x1) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 2.635368218s ago: executing program 0 (id=3180): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x28, r2, 0x21, 0x72bd25, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 2.523168907s ago: executing program 0 (id=3182): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0}, 0x11}], 0x1, 0x10162, 0x0) 2.428879072s ago: executing program 0 (id=3185): syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xba, 0xa2, 0x24, 0x20, 0x2357, 0x100, 0xa70f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0xb, 0x10, 0x6, "", [{{0x9, 0x4, 0xaa, 0xa, 0x0, 0x2, 0x2, 0xff, 0x7, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0xf76, 0x8, 0x200, 0x4}, [@acm={0x4, 0x24, 0x2, 0x2}]}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x490d0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) 2.104018796s ago: executing program 1 (id=3191): r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0x6534, 0x4) sendmmsg(r0, &(0x7f0000000000)=[{{&(0x7f0000000640)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0, 0x12}, {&(0x7f0000000180)=""/129, 0x81}], 0x2}}], 0x1, 0x2002, 0x0) 2.087810756s ago: executing program 4 (id=3192): openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa001) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000), 0x804000, &(0x7f0000001580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1.895750641s ago: executing program 1 (id=3194): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x40104d05, &(0x7f0000000240)="0000010100000009000001") 1.783562912s ago: executing program 1 (id=3196): memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000e80)={0x18, 0x56, 0x601, 0x2, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) 1.7060479s ago: executing program 1 (id=3198): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000200)={0x1, 0x9}, 0x2) 1.28568178s ago: executing program 2 (id=3202): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/tls_stat\x00', 0x0, 0x0) read(r0, &(0x7f0000000100), 0x64) 1.143432198s ago: executing program 1 (id=3203): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/kvm_intel/parameters/dump_invalid_vmcs\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='yB', 0x2) 1.143214245s ago: executing program 2 (id=3204): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x4}}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000140001000000000004000000e00000020000000000000000000000000000000000000000000000000000000000000000100000000a0020"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) 1.08786714s ago: executing program 4 (id=3205): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='\\x01000000 2000000000 0 0 0 krb5 \\x00000000ffffffff00000000000000001200000000000000000000', 0x59) 1.086139821s ago: executing program 1 (id=3206): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f00000005c0)={0x40, 0xc, 0x5, "7d351ef310"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 1.03497874s ago: executing program 2 (id=3207): r0 = semget$private(0x0, 0x4000000009, 0x208) semtimedop(r0, &(0x7f0000000100)=[{0x1, 0xffc0, 0x3000}], 0x1, 0x0) semop(r0, &(0x7f00000001c0)=[{0x0, 0xfffb, 0x1000}, {0x4, 0x5, 0x1800}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0xa8f]) 931.372786ms ago: executing program 4 (id=3208): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e7, 0x0) 884.041711ms ago: executing program 4 (id=3209): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='mem', 0x3) 147.774189ms ago: executing program 2 (id=3210): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 27.504859ms ago: executing program 2 (id=3211): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x9, 0x3}, 0x30, 0x0) landlock_restrict_self(r1, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c, 0x0}}], 0x4d, 0x24000000) 0s ago: executing program 2 (id=3212): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0xa021, 0x2}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r1, 0x5460, 0xfffffffffffc) kernel console output (not intermixed with test programs): 81 comm="syz.0.1324" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e204e0d9 code=0x7ffc0000 [ 230.103098][ T38] audit: type=1326 audit(1786360044.645:41): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=8981 comm="syz.0.1324" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e204e0d9 code=0x7ffc0000 [ 230.103227][ T38] audit: type=1326 audit(1786360044.645:42): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=8981 comm="syz.0.1324" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e204e0d9 code=0x7ffc0000 [ 230.258000][ T8967] dvb-usb: bulk message failed: -22 (4/0) [ 230.258022][ T8967] cxusb: i2c read failed [ 230.320869][ T824] usb 3-1: selecting invalid altsetting 7 [ 230.320888][ T824] cxusb: set interface failed [ 230.320899][ T824] dvb-usb: bulk message failed: -22 (1/0) [ 230.406970][ T824] DVB: Unable to find symbol lgdt330x_attach() [ 230.406980][ T824] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 230.505222][ T824] rc_core: IR keymap rc-dvico-portable not found [ 230.505243][ T824] Registered IR keymap rc-empty [ 230.567821][ T824] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 230.570729][ T824] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input12 [ 230.571719][ T8991] kvm [8990]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0xffffffffffffffff [ 230.615091][ T824] dvb-usb: schedule remote query interval to 100 msecs. [ 230.615107][ T824] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 230.656729][ T824] usb 3-1: USB disconnect, device number 16 [ 230.905568][ T824] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 231.639891][ T9018] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 232.659940][ T9046] binder: 9045:9046 ioctl c0189378 0 returned -22 [ 232.825087][ T9050] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1352'. [ 233.646075][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 233.676328][ T9086] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1370'. [ 233.795007][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 233.811951][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 233.811976][ T9] usb 3-1: config 0 has no interface number 0 [ 233.812014][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 233.812041][ T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 233.812059][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.905617][ T9] usb 3-1: config 0 descriptor?? [ 233.951523][ T9] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 234.131993][ T50] usb 3-1: USB disconnect, device number 17 [ 234.154168][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 234.318245][ T10] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 234.318276][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.323005][ T10] usb 1-1: config 0 descriptor?? [ 234.365956][ T10] cp210x 1-1:0.0: cp210x converter detected [ 234.551294][ T9098] block2mtd: illegal erase size [ 234.767274][ T10] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 234.904069][ T10] usb 1-1: cp210x converter now attached to ttyUSB0 [ 235.000403][ T50] usb 1-1: USB disconnect, device number 13 [ 235.035510][ T50] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 235.161347][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 235.201262][ T9112] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (das16m1) [ 235.294210][ T50] cp210x 1-1:0.0: device disconnected [ 235.584598][ T5684] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 235.755974][ T5684] usb 3-1: Using ep0 maxpacket: 16 [ 235.757815][ T5684] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 235.757844][ T5684] usb 3-1: config 0 interface 0 has no altsetting 0 [ 235.757878][ T5684] usb 3-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 235.757894][ T5684] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.804313][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 235.827037][ T5684] usb 3-1: config 0 descriptor?? [ 236.010360][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 236.014392][ T9] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 236.014421][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.062724][ T9] usb 1-1: config 0 descriptor?? [ 236.344951][ T5684] hid_parser_main: 222 callbacks suppressed [ 236.344982][ T5684] cypress 0003:04B4:07B1.001F: unknown main item tag 0x0 [ 236.345013][ T5684] cypress 0003:04B4:07B1.001F: unknown main item tag 0x0 [ 236.345040][ T5684] cypress 0003:04B4:07B1.001F: unknown main item tag 0x0 [ 236.345066][ T5684] cypress 0003:04B4:07B1.001F: unknown main item tag 0x0 [ 236.345094][ T5684] cypress 0003:04B4:07B1.001F: unknown main item tag 0x0 [ 236.345121][ T5684] cypress 0003:04B4:07B1.001F: unknown main item tag 0x0 [ 236.345148][ T5684] cypress 0003:04B4:07B1.001F: unknown main item tag 0x0 [ 236.345175][ T5684] cypress 0003:04B4:07B1.001F: unknown main item tag 0x0 [ 236.345203][ T5684] cypress 0003:04B4:07B1.001F: unknown main item tag 0x0 [ 236.345229][ T5684] cypress 0003:04B4:07B1.001F: unknown main item tag 0x0 [ 236.347939][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 236.464495][ T5684] cypress 0003:04B4:07B1.001F: hidraw0: USB HID v0.05 Device [HID 04b4:07b1] on usb-dummy_hcd.2-1/input0 [ 236.471176][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 236.494223][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 236.494279][ T9] usb 1-1: media controller created [ 236.511244][ T5684] usb 3-1: USB disconnect, device number 18 [ 236.551753][ T9120] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 236.662076][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 236.810710][ T9] az6027: usb out operation failed. (-71) [ 236.811160][ T9] az6027: usb out operation failed. (-71) [ 236.811176][ T9] stb0899_attach: Driver disabled by Kconfig [ 236.811186][ T9] az6027: no front-end attached [ 236.811186][ T9] [ 236.812100][ T9] az6027: usb out operation failed. (-71) [ 236.812116][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 236.929191][ T9134] fido_id[9134]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 236.932609][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 237.121212][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 237.121235][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 237.161986][ T9] usb 1-1: USB disconnect, device number 14 [ 237.314672][ T5590] Bluetooth: hci3: command 0x0406 tx timeout [ 237.453550][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 237.469160][ T9153] ALSA: mixer_oss: invalid OSS volume '' [ 237.469963][ T9153] ALSA: mixer_oss: invalid OSS volume '' [ 237.864106][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 237.878772][ T10] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 238.059629][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.059661][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 238.059684][ T10] usb 2-1: config 1 has no interface number 0 [ 238.059732][ T10] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 238.059761][ T10] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 238.059791][ T10] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 238.070394][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 238.070491][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.070539][ T10] usb 2-1: Product: syz [ 238.070578][ T10] usb 2-1: Manufacturer: syz [ 238.070628][ T10] usb 2-1: SerialNumber: syz [ 238.133943][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 238.168553][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 238.168582][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 238.262678][ T9162] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 238.265243][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 238.265288][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.265309][ T9] usb 1-1: Product: syz [ 238.265322][ T9] usb 1-1: Manufacturer: syz [ 238.265336][ T9] usb 1-1: SerialNumber: syz [ 238.338635][ T9] usb 1-1: config 0 descriptor?? [ 238.391623][ T9] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 238.391883][ T9] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 238.738773][ T9162] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 239.027722][ T9] em28xx 1-1:0.0: unknown em28xx chip ID (255) [ 239.155830][ T10] cdc_ncm 2-1:1.1: bind() failure [ 239.265733][ T9] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 239.268586][ T9] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 239.268607][ T9] em28xx 1-1:0.0: No AC97 audio processor [ 239.329571][ T10] usb 2-1: USB disconnect, device number 14 [ 239.380575][ T9] usb 1-1: USB disconnect, device number 15 [ 239.496379][ T9] em28xx 1-1:0.0: Disconnecting em28xx [ 239.712501][ T9] em28xx: Freeing device [ 239.947449][ T9210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1404'. [ 240.219413][ T9219] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1407'. [ 240.724681][ T10] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 240.938570][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 240.938599][ T10] usb 1-1: config 0 has no interface number 0 [ 240.938641][ T10] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 240.938668][ T10] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.938691][ T10] usb 1-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 240.938725][ T10] usb 1-1: config 0 interface 1 has no altsetting 0 [ 240.954206][ T10] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 240.954289][ T10] usb 1-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 240.954348][ T10] usb 1-1: Manufacturer: syz [ 241.038208][ T10] usb 1-1: config 0 descriptor?? [ 241.335584][ T50] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 241.527727][ T50] usb 3-1: Using ep0 maxpacket: 8 [ 241.554578][ T50] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 241.554612][ T50] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.554633][ T50] usb 3-1: Product: syz [ 241.554648][ T50] usb 3-1: Manufacturer: syz [ 241.554663][ T50] usb 3-1: SerialNumber: syz [ 241.639215][ T50] usb 3-1: config 0 descriptor?? [ 241.700343][ T10] input: syz Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:145F:0212.0020/input/input14 [ 241.869259][ T50] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 241.960079][ T10] input: syz Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:145F:0212.0020/input/input15 [ 242.044780][ T10] uclogic 0003:145F:0212.0020: input,hidraw0: USB HID v4.06 Keypad [syz] on usb-dummy_hcd.0-1/input1 [ 242.072883][ T10] usb 1-1: USB disconnect, device number 16 [ 242.407112][ T5603] Bluetooth: hci0: ISO packet too small [ 242.495012][ T50] usb write operation failed. (-71) [ 242.543304][ T50] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 242.557910][ T50] dvbdev: DVB: registering new adapter (Terratec H7) [ 242.557968][ T50] usb 3-1: media controller created [ 242.559842][ T50] usb read operation failed. (-71) [ 242.561510][ T50] usb write operation failed. (-71) [ 242.612929][ T50] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 242.637378][ T50] usb 3-1: USB disconnect, device number 19 [ 242.706894][ T9269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1423'. [ 242.883176][ T9273] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (das16m1) [ 243.203400][ T9283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1426'. [ 243.242624][ T9280] fido_id[9280]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 244.094022][ T50] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 244.277326][ T50] usb 1-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 244.277355][ T50] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.308003][ T50] usb 1-1: config 0 descriptor?? [ 244.341240][ T50] pwc: Creative Labs Webcam 5 detected. [ 244.559344][ T9321] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1439'. [ 245.143682][ T50] pwc: recv_control_msg error -71 req 02 val 2700 [ 245.147114][ T50] pwc: recv_control_msg error -71 req 04 val 1600 [ 245.147595][ T50] pwc: recv_control_msg error -71 req 02 val 2c00 [ 245.161915][ T50] pwc: recv_control_msg error -71 req 04 val 1000 [ 245.178220][ T50] pwc: recv_control_msg error -71 req 04 val 1300 [ 245.178724][ T50] pwc: recv_control_msg error -71 req 04 val 1400 [ 245.179184][ T50] pwc: recv_control_msg error -71 req 02 val 2000 [ 245.180860][ T50] pwc: recv_control_msg error -71 req 02 val 2100 [ 245.181347][ T50] pwc: recv_control_msg error -71 req 06 val 0600 [ 245.181813][ T50] pwc: recv_control_msg error -71 req 04 val 1500 [ 245.228980][ T50] pwc: recv_control_msg error -71 req 02 val 2500 [ 245.229549][ T50] pwc: recv_control_msg error -71 req 02 val 2400 [ 245.230059][ T50] pwc: recv_control_msg error -71 req 02 val 2600 [ 245.230527][ T50] pwc: recv_control_msg error -71 req 02 val 2900 [ 245.230987][ T50] pwc: recv_control_msg error -71 req 02 val 2800 [ 245.231669][ T50] pwc: recv_control_msg error -71 req 04 val 1100 [ 245.232141][ T50] pwc: recv_control_msg error -71 req 04 val 1200 [ 245.232600][ T50] pwc: Failed to power off camera (-71) [ 245.251871][ T9341] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1446'. [ 245.316490][ T50] pwc: Registered as video103. [ 245.319631][ T50] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input16 [ 245.340670][ T9341] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1446'. [ 245.354086][ T50] usb 1-1: USB disconnect, device number 17 [ 248.080571][ T9419] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 249.198036][ T9459] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 249.328422][ T9465] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 249.328456][ T9465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.984159][ T5691] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 250.144522][ T5691] usb 2-1: Using ep0 maxpacket: 16 [ 250.146784][ T5691] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 250.146827][ T5691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 243, changing to 11 [ 250.146853][ T5691] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 250.146894][ T5691] usb 2-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 250.146922][ T5691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.155922][ T5691] usb 2-1: config 0 descriptor?? [ 250.249561][ T9500] loop9: detected capacity change from 0 to 524287936 [ 250.370929][ T9503] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1518'. [ 250.601631][ T5691] hid_parser_main: 28 callbacks suppressed [ 250.601657][ T5691] elecom 0003:056E:00FE.0021: unknown main item tag 0x4 [ 250.601688][ T5691] elecom 0003:056E:00FE.0021: reserved main item tag 0xd [ 250.601718][ T5691] elecom 0003:056E:00FE.0021: item fetching failed at offset 39/40 [ 250.602445][ T5691] elecom 0003:056E:00FE.0021: probe with driver elecom failed with error -22 [ 250.771236][ T5842] Flush: task=udevd[5842] dev=loop9 state=2 [ 250.809349][ T824] usb 2-1: USB disconnect, device number 15 [ 250.874542][ T5842] Teardown: task=udevd[5842] dev=loop9 state=2 [ 251.803935][ T5603] Bluetooth: hci3: command 0x0406 tx timeout [ 252.062186][ T9556] netlink: 'syz.2.1541': attribute type 83 has an invalid length. [ 253.152554][ T5603] Bluetooth: hci4: link tx timeout [ 253.152767][ T5603] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 254.071762][ T5603] Bluetooth: hci4: link tx timeout [ 254.071783][ T5603] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 254.421774][ T9628] kAFS: bad VL server IP address [ 254.631446][ T824] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 254.783799][ T824] usb 2-1: Using ep0 maxpacket: 8 [ 254.785891][ T824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 254.785936][ T824] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 254.785958][ T824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.790368][ T824] usb 2-1: config 0 descriptor?? [ 254.983887][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 255.059577][ T824] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 255.117934][ T9638] bond0: entered promiscuous mode [ 255.117949][ T9638] bond_slave_0: entered promiscuous mode [ 255.118099][ T9638] bond_slave_1: entered promiscuous mode [ 255.137194][ T10] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 255.139955][ T10] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 255.172080][ T10] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 255.172111][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.172132][ T10] usb 1-1: Product: syz [ 255.172146][ T10] usb 1-1: Manufacturer: syz [ 255.172159][ T10] usb 1-1: SerialNumber: syz [ 255.191102][ T5603] Bluetooth: hci4: link tx timeout [ 255.191151][ T5603] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 255.256587][ T5603] Bluetooth: hci4: command 0x0406 tx timeout [ 255.257645][ T10] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 255.281233][ T10] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 255.294838][ T10] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 255.422183][ T10] usb 2-1: USB disconnect, device number 16 [ 255.719104][ T50] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 255.788716][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.788969][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.900474][ T50] usb 3-1: Using ep0 maxpacket: 16 [ 255.902746][ T50] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.902804][ T50] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 255.902910][ T50] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 255.902935][ T50] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 255.902961][ T50] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 255.905297][ T50] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 255.906373][ T50] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 255.906431][ T50] usb 3-1: Manufacturer: syz [ 256.083069][ T50] usb 3-1: config 0 descriptor?? [ 256.514942][ T50] rc_core: IR keymap rc-hauppauge not found [ 256.514962][ T50] Registered IR keymap rc-empty [ 256.522088][ T50] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 256.545282][ T50] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 256.573511][ T50] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 256.602664][ T50] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input17 [ 256.656303][ T9634] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 256.681663][ T9634] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 256.681695][ T9634] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 256.682833][ T9634] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 256.709382][ T50] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 256.717249][ T10] usb 1-1: USB disconnect, device number 18 [ 256.743729][ T50] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 256.756882][ T50] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 256.776962][ T50] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 256.797607][ T50] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 256.827509][ T50] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 256.830437][ T10] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 256.847950][ T50] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 256.879200][ T50] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 256.880123][ T10] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 256.881149][ T10] ti_usb_3410_5052 1-1:2.0: device disconnected [ 256.980667][ T50] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 256.998568][ T50] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 257.057922][ T50] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 257.057957][ T50] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 257.093248][ T50] usb 3-1: USB disconnect, device number 20 [ 257.898587][ T9686] kvm [9683]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0x2ff [ 259.230177][ T9740] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 259.338991][ T5691] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 259.436103][ T50] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 259.514920][ T5691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.514965][ T5691] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 259.514982][ T5691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.530506][ T5691] usb 2-1: config 0 descriptor?? [ 259.610229][ T50] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 259.610259][ T50] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.653624][ T50] usb 3-1: config 0 descriptor?? [ 259.704447][ T50] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 259.773402][ T5691] usbhid 2-1:0.0: can't add hid device: -71 [ 259.773658][ T5691] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 259.851057][ T5691] usb 2-1: USB disconnect, device number 17 [ 260.262134][ T824] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 260.291117][ T50] gspca_cpia1: usb_control_msg 01, error -71 [ 260.291134][ T50] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 260.304123][ T50] usb 3-1: USB disconnect, device number 21 [ 260.384335][ T5691] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 260.415224][ T824] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 260.415252][ T824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.418372][ T824] usb 1-1: config 0 descriptor?? [ 260.536287][ T5691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 260.536333][ T5691] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.40 [ 260.536357][ T5691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.540960][ T5691] usb 2-1: config 0 descriptor?? [ 260.592744][ T5691] input: USB Pegasus Device 0e20:0101 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input18 [ 260.659987][ T824] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 260.788220][ C1] usb 2-1: unknown answer from device [ 261.028381][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 261.028684][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 261.028782][ T4943] usb 2-1: control msg error: -71 [ 261.028936][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 261.029019][ C1] usb 2-1: pegasus_irq - usb_submit_urb failed with result -1 [ 261.104279][ T824] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 261.104305][ T824] [drm] Initialized udl on minor 2 [ 261.117304][ T5691] usb 2-1: USB disconnect, device number 18 [ 261.137243][ T9760] program syz.4.1618 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 261.192818][ T824] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 261.274583][ T824] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 261.369540][ T824] usb 1-1: USB disconnect, device number 19 [ 261.371650][ T5696] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 261.372190][ T5696] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 261.549529][ T9762] netlink: 'syz.4.1619': attribute type 1 has an invalid length. [ 261.549551][ T9762] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1619'. [ 261.549569][ T9762] netlink: 'syz.4.1619': attribute type 2 has an invalid length. [ 261.549581][ T9762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1619'. [ 262.407531][ T5774] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 262.569953][ T5774] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.569983][ T5774] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 262.570004][ T5774] usb 2-1: config 1 has no interface number 0 [ 262.570050][ T5774] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 262.570071][ T5774] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 262.570091][ T5774] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 262.632640][ T5774] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 262.632671][ T5774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.632691][ T5774] usb 2-1: Product: syz [ 262.632705][ T5774] usb 2-1: Manufacturer: syz [ 262.632726][ T5774] usb 2-1: SerialNumber: syz [ 262.680768][ T9770] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 263.050943][ T5684] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 263.090382][ T9770] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 263.242253][ T5684] usb 1-1: Using ep0 maxpacket: 32 [ 263.248491][ T5684] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 263.248517][ T5684] usb 1-1: config 0 has no interface number 0 [ 263.256771][ T5684] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 263.256975][ T5684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.257030][ T5684] usb 1-1: Product: syz [ 263.257417][ T5684] usb 1-1: Manufacturer: syz [ 263.257460][ T5684] usb 1-1: SerialNumber: syz [ 263.336774][ T5774] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS [ 263.336819][ T5774] cdc_ncm 2-1:1.1: bind() failure [ 263.372498][ T5684] usb 1-1: config 0 descriptor?? [ 263.386793][ T5774] usb 2-1: USB disconnect, device number 19 [ 263.402327][ T5684] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 263.631593][ T5684] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 263.694480][ T5684] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 264.063207][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 264.064759][ T5684] usb 1-1: USB disconnect, device number 20 [ 264.099436][ T5684] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 264.143444][ T5684] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 264.147196][ T5684] quatech2 1-1:0.51: device disconnected [ 264.711940][ T9834] genirq: Flags mismatch irq 7. 00202000 (pcl812) vs. 00202000 (das16m1) [ 265.194950][ T5774] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 265.366004][ T5774] usb 3-1: Using ep0 maxpacket: 8 [ 265.371753][ T5774] usb 3-1: config 0 has no interfaces? [ 265.374204][ T5774] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 265.374234][ T5774] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.374256][ T5774] usb 3-1: Product: syz [ 265.374271][ T5774] usb 3-1: Manufacturer: syz [ 265.374287][ T5774] usb 3-1: SerialNumber: syz [ 265.435094][ T5774] usb 3-1: config 0 descriptor?? [ 265.653101][ T5684] usb 3-1: USB disconnect, device number 22 [ 265.939612][ T5774] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 266.090540][ T5774] usb 2-1: Using ep0 maxpacket: 32 [ 266.093006][ T5774] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 266.093032][ T5774] usb 2-1: config 0 has no interface number 0 [ 266.093076][ T5774] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.093103][ T5774] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.093140][ T5774] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 266.093161][ T5774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.097901][ T5774] usb 2-1: config 0 descriptor?? [ 266.320721][ T9873] fuse: fd is not a fuse device [ 266.752336][ T5774] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0094.0022/input/input19 [ 267.023295][ T5774] uclogic 0003:28BD:0094.0022: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.1-1/input1 [ 267.047250][ T5774] usb 2-1: USB disconnect, device number 20 [ 267.192702][ T9888] fido_id[9888]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 267.574286][ T9894] loop5: detected capacity change from 0 to 7 [ 267.626914][ T9894] Dev loop5: unable to read RDB block 7 [ 267.626942][ T9894] loop5: AHDI p1 [ 267.626959][ T9894] loop5: partition table partially beyond EOD, truncated [ 267.852212][ T5842] Flush: task=udevd[5842] dev=loop5 state=2 [ 268.037220][ T5842] Teardown: task=udevd[5842] dev=loop5 state=2 [ 268.100318][ T9907] kAFS: Invalid Command on /proc/fs/afs/cells file [ 269.673686][ T9942] kAFS: bad VL server IP address [ 269.865810][ T5696] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 269.983262][ T9948] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1700'. [ 270.014815][ T5696] usb 3-1: Using ep0 maxpacket: 16 [ 270.023433][ T5696] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 270.023461][ T5696] usb 3-1: config 0 has no interface number 0 [ 270.023505][ T5696] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 270.023549][ T5696] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 270.043831][ T5696] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 270.043939][ T5696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.043989][ T5696] usb 3-1: Product: syz [ 270.044029][ T5696] usb 3-1: Manufacturer: syz [ 270.044059][ T5696] usb 3-1: SerialNumber: syz [ 270.097418][ T5696] usb 3-1: config 0 descriptor?? [ 270.098447][ T9938] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 270.098642][ T9938] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 270.263057][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 270.364907][ T9938] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 270.365089][ T9938] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 270.427558][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 270.447944][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.448060][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 270.448089][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 270.448130][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 270.448209][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.472107][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 270.472535][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 270.472765][ T9] usb 2-1: Manufacturer: syz [ 270.585247][ T5696] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 270.640912][ T9] usb 2-1: config 0 descriptor?? [ 270.990765][ T9] rc_core: IR keymap rc-hauppauge not found [ 270.990786][ T9] Registered IR keymap rc-empty [ 270.990995][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 271.005652][ T5696] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 271.005923][ T5696] asix 3-1:0.34: probe with driver asix failed with error -71 [ 271.010983][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 271.070465][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 271.107218][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input20 [ 271.147197][ T5696] usb 3-1: USB disconnect, device number 23 [ 271.344937][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 271.364865][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 271.382958][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 271.404193][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 271.423785][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 271.443333][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 271.463378][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 271.487158][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 271.510670][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 271.523814][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 271.567883][ T9] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 271.569000][ T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 271.719823][ T9] usb 2-1: USB disconnect, device number 21 [ 271.897412][ T9961] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1706'. [ 272.485468][ T9964] input: syz1 as /devices/virtual/input/input21 [ 272.892162][ T5742] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 273.042360][ T5742] usb 3-1: Using ep0 maxpacket: 16 [ 273.066132][ T5742] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.066185][ T5742] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.066210][ T5742] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 273.066256][ T5742] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 273.066280][ T5742] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.109362][ T5742] usb 3-1: config 0 descriptor?? [ 273.599360][ T5742] shield 0003:0955:7214.0023: unknown main item tag 0x2 [ 273.599399][ T5742] shield 0003:0955:7214.0023: item fetching failed at offset 2/5 [ 273.609588][ T5742] shield 0003:0955:7214.0023: Parse failed [ 273.609799][ T5742] shield 0003:0955:7214.0023: probe with driver shield failed with error -22 [ 273.813009][ T50] usb 3-1: USB disconnect, device number 24 [ 274.549797][ T9999] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1725'. [ 274.549914][ T9999] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1725'. [ 275.836263][T10047] Invalid ELF header magic: != ELF [ 275.838902][T10047] Invalid ELF header magic: != ELF [ 276.126557][ T9] IPVS: starting estimator thread 0... [ 276.220226][T10059] IPVS: using max 8 ests per chain, 19200 per kthread [ 276.851734][T10092] comedi comedi1: aio_aio12_8: I/O port conflict (0x100,32) [ 277.246005][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 277.397855][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 277.402441][ T9] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 277.402486][ T9] usb 3-1: config 0 has no interface number 0 [ 277.423116][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 277.423187][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.423242][ T9] usb 3-1: Product: syz [ 277.423282][ T9] usb 3-1: Manufacturer: syz [ 277.423320][ T9] usb 3-1: SerialNumber: syz [ 277.466535][T10111] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1773'. [ 277.532324][ T9] usb 3-1: config 0 descriptor?? [ 277.951115][T10106] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.988582][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 277.988606][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 278.201592][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 278.201975][ T9] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 278.252599][ T9] usb 3-1: USB disconnect, device number 25 [ 278.656903][ T5684] libceph: connect (1)[c::]:6789 error -101 [ 278.681362][ T5684] libceph: mon0 (1)[c::]:6789 connect error [ 278.687449][T10131] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1781'. [ 278.700192][T10106] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.767186][ T5684] libceph: connect (1)[c::]:6789 error -101 [ 278.767330][ T5684] libceph: mon0 (1)[c::]:6789 connect error [ 279.028788][ T5684] libceph: connect (1)[c::]:6789 error -101 [ 279.028915][ T5684] libceph: mon0 (1)[c::]:6789 connect error [ 279.240748][T10106] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.307844][T10127] ceph: No mds server is up or the cluster is laggy [ 279.734329][T10106] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.575304][ T194] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.825662][ T194] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.990476][ T194] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.022131][T10183] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1805'. [ 281.164097][T10188] [U] ^A [ 281.331643][ T151] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.344367][T10180] input: syz0 as /devices/virtual/input/input22 [ 284.423514][T10287] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1853'. [ 284.908295][T10296] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 285.309213][T10324] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 285.603027][T10337] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 285.603027][T10337] The task syz.0.1872 (10337) triggered the difference, watch for misbehavior. [ 285.780587][T10342] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 285.794729][T10342] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 286.047209][T10351] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1880'. [ 286.067189][T10351] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1880'. [ 287.094260][ T5774] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 287.260123][ T5774] usb 2-1: unable to get BOS descriptor or descriptor too short [ 287.261329][ T5774] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.263708][ T5774] usb 2-1: New USB device found, idVendor=0c45, idProduct=624f, bcdDevice=af.98 [ 287.263743][ T5774] usb 2-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 287.263765][ T5774] usb 2-1: Product: syz [ 287.263779][ T5774] usb 2-1: Manufacturer: syz [ 287.263794][ T5774] usb 2-1: SerialNumber: syz [ 287.533321][ T5774] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:624f [ 287.533989][ T5774] gspca_sn9c20x: Write register 1000 failed -71 [ 287.534012][ T5774] gspca_sn9c20x: Device initialization failed [ 287.534088][ T5774] gspca_sn9c20x 2-1:1.0: probe with driver gspca_sn9c20x failed with error -71 [ 287.569937][ T5774] usb 2-1: USB disconnect, device number 22 [ 288.682327][T10409] loop1: detected capacity change from 0 to 107 [ 288.731630][ T60] Bluetooth: hci2: command 0x0406 tx timeout [ 289.133516][ T5603] Bluetooth: hci4: command 0x0406 tx timeout [ 289.229577][ T5842] Flush: task=udevd[5842] dev=loop1 state=2 [ 289.387378][ T5842] Teardown: task=udevd[5842] dev=loop1 state=2 [ 290.183712][ T824] kernel read not supported for file /media6 (pid: 824 comm: kworker/0:2) [ 292.698061][T10500] program syz.1.1948 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.711992][T10498] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1947'. [ 292.810796][T10502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1950'. [ 293.067391][T10514] program syz.1.1955 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.563006][ T50] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 293.758538][ T50] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D is Bulk; changing to Interrupt [ 293.758571][ T50] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 293.758592][ T50] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 293.758622][ T50] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x98, changing to 0x88 [ 293.758649][ T50] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 is Bulk; changing to Interrupt [ 293.758686][ T50] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 293.758719][ T50] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 293.758740][ T50] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.853465][ T9] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 293.863223][ T50] usb 1-1: config 0 descriptor?? [ 293.882082][T10520] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 294.016531][ T9] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 294.016558][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 294.019600][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 294.019629][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.019650][ T9] usb 2-1: Product: syz [ 294.019664][ T9] usb 2-1: Manufacturer: syz [ 294.019678][ T9] usb 2-1: SerialNumber: syz [ 294.095480][ T50] usb 1-1: USB disconnect, device number 21 [ 294.170107][ T9] usb 2-1: 0:2 : does not exist [ 294.170230][ T9] usb 2-1: unit 9 not found! [ 294.342465][ T9] usb 2-1: 4:0: cannot get min/max values for control 1 (id 4) [ 294.403808][ T9] usb 2-1: 4:0: cannot get min/max values for control 2 (id 4) [ 294.424577][ T9] usb 2-1: 4:0: cannot get min/max values for control 9 (id 4) [ 294.442858][ T9] usb 2-1: 4:0: cannot get min/max values for control 10 (id 4) [ 294.620166][ T9] usb 2-1: USB disconnect, device number 23 [ 294.626716][ T5774] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 294.804946][ T5774] usb 3-1: not running at top speed; connect to a high speed hub [ 294.806433][ T5774] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.806485][ T5774] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 294.806527][ T5774] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 294.806559][ T5774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.884472][ T5774] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 294.902247][ T5774] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 294.962758][ T5774] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 294.992939][ T5774] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 294.993097][ T5774] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 295.018416][ T5774] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 295.433456][T10557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1975'. [ 295.520878][ T9] usb 3-1: USB disconnect, device number 26 [ 295.540785][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 295.604648][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 295.605766][ T9] keyspan 3-1:1.0: device disconnected [ 295.908213][T10567] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1980'. [ 296.495822][ T5774] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 296.664340][ T5774] usb 1-1: unable to get BOS descriptor or descriptor too short [ 296.679067][ T5774] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 296.679105][ T5774] usb 1-1: can't read configurations, error -71 [ 297.247119][ T5696] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 297.417686][ T5696] usb 3-1: Using ep0 maxpacket: 8 [ 297.420375][ T5696] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 297.420403][ T5696] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 297.420431][ T5696] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 297.420448][ T5696] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 297.420479][ T5696] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 297.420496][ T5696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.692838][ T5696] usb 3-1: GET_CAPABILITIES returned 0 [ 297.692889][ T5696] usbtmc 3-1:16.0: can't read capabilities [ 297.907978][ T5774] usb 3-1: USB disconnect, device number 27 [ 298.291340][ T5696] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 298.445084][ T5696] usb 2-1: Using ep0 maxpacket: 8 [ 298.449717][ T5696] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 298.449745][ T5696] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 298.449778][ T5696] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 298.449802][ T5696] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 298.449844][ T5696] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 298.449866][ T5696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.754267][ T5696] usb 2-1: GET_CAPABILITIES returned 0 [ 298.754313][ T5696] usbtmc 2-1:16.0: can't read capabilities [ 298.958858][ T50] usb 2-1: USB disconnect, device number 24 [ 299.156359][T10647] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2017'. [ 299.241094][ T5603] Bluetooth: Wrong link type (-71) [ 300.419123][ T50] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 300.573074][ T50] usb 1-1: Using ep0 maxpacket: 32 [ 300.575363][ T50] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.580597][ T50] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 300.580628][ T50] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.580648][ T50] usb 1-1: Product: syz [ 300.580662][ T50] usb 1-1: Manufacturer: syz [ 300.580676][ T50] usb 1-1: SerialNumber: syz [ 300.645878][ T50] usb 1-1: config 0 descriptor?? [ 300.665610][ T50] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 301.293263][ T50] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 301.293356][ T50] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 301.319357][ T50] usb 1-1: USB disconnect, device number 24 [ 301.451856][T10716] jffs2: notice: (10716) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 301.613033][T10722] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2054'. [ 301.838496][T10730] fuse: fd is not a fuse device [ 302.233270][T10733] syz.0.2059 (10733) used greatest stack depth: 17704 bytes left [ 302.566861][ T824] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 302.658298][ T5684] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 302.724094][ T824] usb 1-1: Using ep0 maxpacket: 32 [ 302.732392][ T824] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 302.732415][ T824] usb 1-1: config 0 has no interface number 0 [ 302.757630][ T824] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 302.757659][ T824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.757676][ T824] usb 1-1: Product: syz [ 302.757689][ T824] usb 1-1: Manufacturer: syz [ 302.757703][ T824] usb 1-1: SerialNumber: syz [ 302.798054][ T824] usb 1-1: config 0 descriptor?? [ 302.829979][ T5684] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.830050][ T5684] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 302.830077][ T5684] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 302.830099][ T5684] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 302.830123][ T5684] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 302.833166][ T5684] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 302.833193][ T5684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.833214][ T5684] usb 3-1: Product: syz [ 302.833229][ T5684] usb 3-1: Manufacturer: syz [ 302.833243][ T5684] usb 3-1: SerialNumber: syz [ 302.927205][T10752] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 302.944738][ T5684] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 302.945181][ T5684] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 87 [ 302.945271][ T5684] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 7 [ 302.972357][ T5684] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 302.972460][ T5684] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 302.972531][ T5684] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 85 [ 302.972627][ T5684] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 5 [ 302.983049][ T5684] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 303.029322][ T5684] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 83 [ 303.029415][ T5684] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 303.029498][ T5684] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 3 [ 303.029582][ T5684] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 4 [ 303.029667][ T5684] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 86 [ 303.029772][ T5684] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 303.035324][ T5684] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 303.233557][T10761] Failed to get privilege flags for destination (handle=0x2:0x0) [ 303.307462][ T824] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 303.307494][ T824] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 303.359841][T10763] do_umount: task=syz.1.2073[10763] !list_empty(&mnt->mnt_mounts)=0 mnt_get_count(mnt)=3 [ 303.453772][ T5684] usb 3-1: USB disconnect, device number 28 [ 303.475899][ T5684] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 303.492882][ T5684] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 303.493811][ T5684] keyspan 3-1:1.0: device disconnected [ 303.526687][ T824] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 303.526919][ T824] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 303.557865][ T824] usb 1-1: USB disconnect, device number 25 [ 303.596472][T10765] netlink: 'syz.1.2074': attribute type 2 has an invalid length. [ 303.890582][T10773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2078'. [ 304.155851][T10783] sg_write: data in/out 352220/136 bytes for SCSI command 0x0-- guessing data in; [ 304.155851][T10783] program syz.0.2082 not setting count and/or reply_len properly [ 304.983239][T10802] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2091'. [ 305.219013][T10808] input: syz0 as /devices/virtual/input/input23 [ 306.116391][T10807] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.493350][ T5603] Bluetooth: hci4: link tx timeout [ 306.493369][ T5603] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 306.740418][T10807] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.906514][T10845] MTRR 1 not used [ 307.262248][T10807] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.284372][ T824] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 307.475313][ T824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 307.475355][ T824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.475380][ T824] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 307.475394][ T824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.493077][ T824] usb 1-1: config 0 descriptor?? [ 307.982776][ T824] isku 0003:1E7D:319C.0024: unknown main item tag 0x0 [ 307.982809][ T824] isku 0003:1E7D:319C.0024: unknown main item tag 0x0 [ 307.982832][ T824] isku 0003:1E7D:319C.0024: unknown main item tag 0x0 [ 307.982854][ T824] isku 0003:1E7D:319C.0024: unknown global tag 0xc [ 307.982869][ T824] isku 0003:1E7D:319C.0024: item 0 2 1 12 parsing failed [ 307.983445][ T824] isku 0003:1E7D:319C.0024: parse failed [ 307.983509][ T824] isku 0003:1E7D:319C.0024: probe with driver isku failed with error -22 [ 308.063741][T10807] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.183607][ T5684] usb 1-1: USB disconnect, device number 26 [ 308.272715][T10866] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (das16m1) [ 308.459260][T10871] fuse: fd is not a fuse device [ 308.567349][ T5590] Bluetooth: hci4: command 0x0406 tx timeout [ 309.566087][ T5684] logitech-hidpp-device 0005:046D:B012.0025: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 309.741512][T10890] fido_id[10890]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 309.741863][ T1492] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.139660][ T70] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.549942][ T70] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.751110][ T1492] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.268320][T10929] block2mtd: illegal erase size [ 312.830750][ T5691] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 312.991884][ T5691] usb 1-1: Using ep0 maxpacket: 8 [ 313.002371][ T5691] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 313.002408][ T5691] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 313.002435][ T5691] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 313.002461][ T5691] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 313.002505][ T5691] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 313.002530][ T5691] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.308827][ T5691] usb 1-1: GET_CAPABILITIES returned 0 [ 313.308877][ T5691] usbtmc 1-1:16.0: can't read capabilities [ 313.459795][T11005] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 313.688212][T10981] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -71 [ 313.691837][ T824] usb 1-1: USB disconnect, device number 27 [ 315.715837][ T5691] kernel write not supported for file task/812/attr/prev (pid: 5691 comm: kworker/1:5) [ 315.923084][T11107] netlink: Unknown nat attribute (0) [ 315.923116][T11107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.051035][ T5691] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 316.204411][ T5691] usb 3-1: config 0 has an invalid interface number: 235 but max is 0 [ 316.204443][ T5691] usb 3-1: config 0 has no interface number 0 [ 316.204490][ T5691] usb 3-1: config 0 interface 235 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.204517][ T5691] usb 3-1: config 0 interface 235 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.204541][ T5691] usb 3-1: config 0 interface 235 has no altsetting 0 [ 316.204573][ T5691] usb 3-1: New USB device found, idVendor=e57f, idProduct=ffff, bcdDevice= 0.00 [ 316.204596][ T5691] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.279221][ T5691] usb 3-1: config 0 descriptor?? [ 316.711632][ T5691] hid-generic 0003:E57F:FFFF.0026: unbalanced collection at end of report description [ 316.729628][ T5691] hid-generic 0003:E57F:FFFF.0026: probe with driver hid-generic failed with error -22 [ 316.797143][T11131] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 316.950963][ T9] usb 3-1: USB disconnect, device number 29 [ 317.480212][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.480309][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.658762][T11160] nfsd: exp_rootfh path not found \ [ 318.780192][T11195] loop5: detected capacity change from 0 to 524287998 [ 319.424217][ T5842] Flush: task=udevd[5842] dev=loop5 state=2 [ 319.500075][ T5842] Teardown: task=udevd[5842] dev=loop5 state=2 [ 320.591152][ T824] IPVS: starting estimator thread 0... [ 320.673256][T11259] IPVS: using max 8 ests per chain, 19200 per kthread [ 321.701821][ T5603] Bluetooth: hci3: Malformed LE Event: 0x0d [ 322.047236][ T824] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 322.197315][ T824] usb 2-1: Using ep0 maxpacket: 8 [ 322.220582][ T824] usb 2-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 322.220606][ T824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 322.220621][ T824] usb 2-1: Product: syz [ 322.220631][ T824] usb 2-1: Manufacturer: syz [ 322.220642][ T824] usb 2-1: SerialNumber: syz [ 322.247782][ T824] usb 2-1: config 0 descriptor?? [ 322.304385][ T824] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 322.500829][ T824] gspca_sn9c2028: read1 error -32 [ 322.501441][ T824] gspca_sn9c2028: read1 error -32 [ 322.726769][ T50] usb 2-1: USB disconnect, device number 25 [ 323.384759][T11335] netlink: 822 bytes leftover after parsing attributes in process `syz.1.2277'. [ 323.483730][T11338] program syz.4.2278 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 324.262602][ T824] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 324.414902][ T824] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 324.414934][ T824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.428932][ T824] usb 3-1: config 0 descriptor?? [ 324.465117][ T824] cp210x 3-1:0.0: cp210x converter detected [ 324.684359][ T824] usb 3-1: cp210x converter now attached to ttyUSB0 [ 324.881147][ T823] usb 3-1: USB disconnect, device number 30 [ 324.897686][ T823] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 324.899647][ T823] cp210x 3-1:0.0: device disconnected [ 325.646191][ T823] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 325.801221][ T823] usb 2-1: unable to get BOS descriptor or descriptor too short [ 325.803672][ T823] usb 2-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 325.853970][ T823] usb 2-1: string descriptor 0 read error: -22 [ 325.854099][ T823] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 325.854121][ T823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.106014][T11427] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 326.106038][T11427] syzkaller1: group set to 776 [ 327.324623][ T823] usb 2-1: USB disconnect, device number 26 [ 327.722537][T11446] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2329'. [ 327.778571][T11448] input: syz0 as /devices/virtual/input/input27 [ 328.190993][T11459] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2334'. [ 328.876047][ T824] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 328.908441][T11484] netlink: 'syz.4.2345': attribute type 10 has an invalid length. [ 329.057300][ T824] usb 3-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 329.057354][ T824] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 329.057382][ T824] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 329.057408][ T824] usb 3-1: config 0 interface 0 has no altsetting 0 [ 329.057440][ T824] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0a1a, bcdDevice= 0.00 [ 329.057462][ T824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.132511][ T824] usb 3-1: config 0 descriptor?? [ 329.133557][T11473] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 329.169457][T11484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.228822][T11484] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 329.230671][T11487] netlink: 'syz.1.2347': attribute type 27 has an invalid length. [ 329.606332][ T824] hid-corsair-void 0003:1B1C:0A1A.0027: unknown main item tag 0x0 [ 329.606372][ T824] hid-corsair-void 0003:1B1C:0A1A.0027: unknown main item tag 0x0 [ 329.606400][ T824] hid-corsair-void 0003:1B1C:0A1A.0027: unknown main item tag 0x2 [ 329.606427][ T824] hid-corsair-void 0003:1B1C:0A1A.0027: unknown main item tag 0x0 [ 329.606455][ T824] hid-corsair-void 0003:1B1C:0A1A.0027: unknown main item tag 0x0 [ 329.606482][ T824] hid-corsair-void 0003:1B1C:0A1A.0027: unknown main item tag 0x0 [ 329.606509][ T824] hid-corsair-void 0003:1B1C:0A1A.0027: unknown main item tag 0x0 [ 329.606536][ T824] hid-corsair-void 0003:1B1C:0A1A.0027: unknown main item tag 0x0 [ 329.606564][ T824] hid-corsair-void 0003:1B1C:0A1A.0027: unknown main item tag 0x0 [ 329.606591][ T824] hid-corsair-void 0003:1B1C:0A1A.0027: unknown main item tag 0x0 [ 329.606672][ T824] hid-corsair-void 0003:1B1C:0A1A.0027: item fetching failed at offset 18/40 [ 329.613419][ T824] hid-corsair-void 0003:1B1C:0A1A.0027: parse failed (reason: -22) [ 329.613538][ T824] hid-corsair-void 0003:1B1C:0A1A.0027: probe with driver hid-corsair-void failed with error -22 [ 329.800646][ T50] usb 3-1: USB disconnect, device number 31 [ 329.997668][T11501] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 330.107913][T11504] Format for deleting device is "id" (uint). [ 330.808407][ T5696] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 330.959218][ T5696] usb 2-1: Using ep0 maxpacket: 16 [ 330.962246][ T5696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.962296][ T5696] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 330.962321][ T5696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.003412][ T5696] usb 2-1: config 0 descriptor?? [ 331.450012][ T5696] mcp2221 0003:04D8:00DD.0028: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 331.627197][ C0] usb 2-1: input irq status -75 received [ 331.981985][ T5842] Flush: task=udevd[5842] dev=loop8 state=2 [ 332.080358][ T5696] usb 2-1: USB disconnect, device number 27 [ 332.114225][ T5842] Teardown: task=udevd[5842] dev=loop8 state=2 [ 332.557005][T11565] kAFS: Invalid Command on /proc/fs/afs/cells file [ 333.421394][ T50] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz1] on syz0 [ 333.554232][ T5842] udevd[5842]: 'fido_id' [11595] terminated by signal 11 (Segmentation fault) [ 333.802077][T11605] netlink: 766 bytes leftover after parsing attributes in process `syz.0.2400'. [ 334.328732][ T823] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 334.358588][T11623] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 334.371973][T11625] sg_write: data in/out 355776/136 bytes for SCSI command 0x0-- guessing data in; [ 334.371973][T11625] program syz.0.2408 not setting count and/or reply_len properly [ 334.463546][ T5696] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 334.492966][ T823] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 334.492990][ T823] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 32 [ 334.493016][ T823] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 334.493031][ T823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.570232][ T5842] udevd[5842]: 'fido_id' [11628] terminated by signal 11 (Segmentation fault) [ 334.596056][T11616] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 334.596178][T11616] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 334.613427][ T823] cyberjack 3-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 334.640707][ T823] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 334.968977][ T5696] usb 3-1: USB disconnect, device number 32 [ 335.068637][ T5696] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 335.071041][ T5696] cyberjack 3-1:1.0: device disconnected [ 335.619070][ T5696] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 335.771544][ T5696] usb 2-1: Using ep0 maxpacket: 8 [ 335.786748][ T5696] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 335.786775][ T5696] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 335.786834][ T5696] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 335.786861][ T5696] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 335.786906][ T5696] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 335.786930][ T5696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.009904][ T823] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 336.098776][ T5696] usb 2-1: GET_CAPABILITIES returned 0 [ 336.098816][ T5696] usbtmc 2-1:16.0: can't read capabilities [ 336.191795][ T823] usb 3-1: Using ep0 maxpacket: 32 [ 336.205704][ T823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.205740][ T823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.205778][ T823] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 336.205802][ T823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.263659][ T823] usb 3-1: config 0 descriptor?? [ 336.268162][ T823] hub 3-1:0.0: USB hub found [ 336.343952][ T5696] usb 2-1: USB disconnect, device number 28 [ 336.487209][ T823] hub 3-1:0.0: 1 port detected [ 336.696764][ T823] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 336.696792][ T823] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 336.718360][ T823] usbhid 3-1:0.0: can't add hid device: -71 [ 336.718476][ T823] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 336.755445][ T823] usb 3-1: USB disconnect, device number 33 [ 337.020975][T11661] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2424'. [ 337.501595][ T5590] Bluetooth: hci0: Zero size dump init pkt [ 337.750590][T11689] netlink: 'syz.1.2436': attribute type 7 has an invalid length. [ 338.193962][T11706] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2443'. [ 338.430286][T11700] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 338.446214][T11700] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 338.798853][T11700] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 338.798934][T11700] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 338.872392][T11700] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 339.257611][T11735] Zero length message leads to an empty skb [ 340.408765][ T5590] Bluetooth: hci0: command 0x0c1a tx timeout [ 340.809919][ T5590] Bluetooth: hci3: command 0x0406 tx timeout [ 341.050220][ T5590] Bluetooth: hci2: command 0x0406 tx timeout [ 341.111644][T11700] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 341.118741][T11700] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 341.201994][T11700] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 341.303271][T11700] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 341.532548][ T5696] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 341.672094][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 341.682135][ T5696] usb 2-1: Using ep0 maxpacket: 32 [ 341.688927][ T5696] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.689021][ T5696] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.689084][ T5696] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 341.689167][ T5696] usb 2-1: config 0 interface 0 has no altsetting 0 [ 341.689235][ T5696] usb 2-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.00 [ 341.689288][ T5696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.716715][ T5696] usb 2-1: config 0 descriptor?? [ 341.863791][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 341.863820][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.871252][ T9] usb 1-1: config 0 descriptor?? [ 341.891700][ T5691] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 341.915203][ T9] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 342.041987][ T5691] usb 3-1: Using ep0 maxpacket: 8 [ 342.047956][ T5691] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 342.048002][ T5691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.048024][ T5691] usb 3-1: Product: syz [ 342.048037][ T5691] usb 3-1: Manufacturer: syz [ 342.048050][ T5691] usb 3-1: SerialNumber: syz [ 342.090972][ T5691] usb 3-1: config 0 descriptor?? [ 342.106796][ T5691] gspca_main: se401-2.14.0 probing 047d:5003 [ 342.164503][ T5696] ntrig 0003:1B96:0012.002B: hidraw0: USB HID v0.01 Device [HID 1b96:0012] on usb-dummy_hcd.1-1/input0 [ 342.227716][ T5598] udevd[5598]: 'fido_id' [11775] terminated by signal 11 (Segmentation fault) [ 342.346348][ T5696] ntrig 0003:1B96:0012.002B: Firmware version: 1.15.25.63.3 (ff43 fb27) [ 342.505695][ T5603] Bluetooth: hci0: command 0x0c1a tx timeout [ 342.584836][ T5696] usb 2-1: USB disconnect, device number 29 [ 342.761416][ T5691] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input28 [ 342.799344][ T9] usb 1-1: USB disconnect, device number 28 [ 342.893710][ T5603] Bluetooth: hci3: command 0x0406 tx timeout [ 342.941276][ T5842] udevd[5842]: 'v4l_id /dev/video103' [11778] terminated by signal 11 (Segmentation fault) [ 342.969361][ T824] usb 3-1: USB disconnect, device number 34 [ 343.140783][ T5603] Bluetooth: hci2: command 0x0406 tx timeout [ 343.214415][ T5603] Bluetooth: hci4: command 0x0406 tx timeout [ 343.685178][ T5691] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 343.838453][ T5691] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 343.838491][ T5691] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 343.838515][ T5691] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 343.842492][ T5691] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 343.842521][ T5691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 343.842541][ T5691] usb 1-1: Product: syz [ 343.842555][ T5691] usb 1-1: Manufacturer: syz [ 343.842569][ T5691] usb 1-1: SerialNumber: syz [ 343.975616][ T5774] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 344.138195][ T5774] usb 3-1: Using ep0 maxpacket: 8 [ 344.165412][ T5774] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 344.165435][ T5774] usb 3-1: config 0 has no interface number 0 [ 344.165467][ T5774] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 344.165484][ T5774] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 344.165502][ T5774] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 344.165521][ T5774] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 344.165551][ T5774] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 344.165568][ T5774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.257366][ T5774] usb 3-1: config 0 descriptor?? [ 344.279604][ T5691] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 344.283151][ T5774] ldusb 3-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 344.366739][ T9] usb 1-1: USB disconnect, device number 29 [ 344.399541][ T9] usblp0: removed [ 344.495392][ T824] usb 3-1: USB disconnect, device number 35 [ 344.518569][ T824] ldusb 3-1:0.55: LD USB Device #1 now disconnected [ 344.576775][ T5603] Bluetooth: hci0: command 0x0c1a tx timeout [ 344.977616][ T5603] Bluetooth: hci3: command 0x0406 tx timeout [ 345.217978][ T5603] Bluetooth: hci2: command 0x0406 tx timeout [ 345.702072][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 345.864854][ T9] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 345.864888][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 345.864920][ T9] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 345.864942][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.910071][ T9] usb 1-1: config 0 descriptor?? [ 345.913329][T11837] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 346.219419][T11851] ADFS-fs (mtdblock0): error: can't find an ADFS filesystem on dev mtdblock0. [ 346.362456][ T9] hid (null): global environment stack underflow [ 346.465264][ T9] hid_parser_main: 13 callbacks suppressed [ 346.465285][ T9] waterforce 0003:1044:7A4D.002C: unknown main item tag 0x0 [ 346.465310][ T9] waterforce 0003:1044:7A4D.002C: unknown main item tag 0x0 [ 346.465330][ T9] waterforce 0003:1044:7A4D.002C: unknown main item tag 0x0 [ 346.465351][ T9] waterforce 0003:1044:7A4D.002C: unknown main item tag 0x0 [ 346.465374][ T9] waterforce 0003:1044:7A4D.002C: unknown main item tag 0x0 [ 346.465395][ T9] waterforce 0003:1044:7A4D.002C: unknown main item tag 0x0 [ 346.465418][ T9] waterforce 0003:1044:7A4D.002C: unknown main item tag 0x0 [ 346.465456][ T9] waterforce 0003:1044:7A4D.002C: unknown main item tag 0x0 [ 346.465479][ T9] waterforce 0003:1044:7A4D.002C: unknown main item tag 0x0 [ 346.465502][ T9] waterforce 0003:1044:7A4D.002C: unknown main item tag 0x0 [ 346.467084][ T9] waterforce 0003:1044:7A4D.002C: global environment stack underflow [ 346.467100][ T9] waterforce 0003:1044:7A4D.002C: item 0 2 1 11 parsing failed [ 346.467687][ T9] waterforce 0003:1044:7A4D.002C: hid parse failed with -22 [ 346.467787][ T9] waterforce 0003:1044:7A4D.002C: probe with driver waterforce failed with error -22 [ 346.640032][ T9] usb 1-1: USB disconnect, device number 30 [ 348.368835][ C0] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank [ 348.434639][T11888] syzkaller1: entered promiscuous mode [ 348.434677][T11888] syzkaller1: entered allmulticast mode [ 349.926378][ T5696] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 350.078915][ T5696] usb 1-1: config index 0 descriptor too short (expected 45, got 28) [ 350.078945][ T5696] usb 1-1: config 1 descriptor has 1 excess byte, ignoring [ 350.078993][ T5696] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 350.084684][ T5696] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 350.084712][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.084733][ T5696] usb 1-1: Product: syz [ 350.084747][ T5696] usb 1-1: Manufacturer: syz [ 350.084762][ T5696] usb 1-1: SerialNumber: syz [ 350.179955][ T5696] rtl8150 1-1:1.0: couldn't find required endpoints [ 350.180247][ T5696] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 350.386089][ T5696] usb 1-1: USB disconnect, device number 31 [ 350.633942][T11935] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2542'. [ 351.924653][T11974] i2c i2c-0: new_device: Extra parameters [ 352.259185][T11984] sg_write: data in/out 366944/136 bytes for SCSI command 0x0-- guessing data in; [ 352.259185][T11984] program syz.0.2565 not setting count and/or reply_len properly [ 352.554815][T11992] nvme_fcloop: unknown parameter or missing value 'ww' [ 352.829223][T12001] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 353.177287][T12012] netlink: 'syz.0.2579': attribute type 1 has an invalid length. [ 353.754398][T12030] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 353.754428][T12030] CPU: 0 UID: 0 PID: 12030 Comm: syz.2.2585 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 353.754461][T12030] Tainted: [L]=SOFTLOCKUP [ 353.754469][T12030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 353.754499][T12030] Call Trace: [ 353.754508][T12030] [ 353.754518][T12030] dump_stack_lvl+0xe8/0x150 [ 353.754554][T12030] sysfs_create_dir_ns+0x271/0x2a0 [ 353.754581][T12030] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 353.754610][T12030] ? rt_spin_unlock+0x163/0x200 [ 353.754655][T12030] kobject_add_internal+0x62c/0xce0 [ 353.754689][T12030] kobject_add+0x163/0x240 [ 353.754714][T12030] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 353.754754][T12030] ? __pfx_kobject_add+0x10/0x10 [ 353.754783][T12030] ? get_device_parent+0x370/0x3a0 [ 353.754804][T12030] ? __pfx_klist_children_get+0x10/0x10 [ 353.754837][T12030] device_add+0x3fa/0xb80 [ 353.754861][T12030] tty_register_device_attr+0x422/0x950 [ 353.754890][T12030] ? __pfx_tty_register_device_attr+0x10/0x10 [ 353.754919][T12030] ? tty_port_init+0x140/0x1b0 [ 353.754941][T12030] ? gsm_dlci_alloc+0x341/0x650 [ 353.754968][T12030] gsm_activate_mux+0x110/0x2a0 [ 353.754997][T12030] gsmld_ioctl+0x12d3/0x1930 [ 353.755030][T12030] ? __pfx_gsmld_ioctl+0x10/0x10 [ 353.755053][T12030] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 353.755080][T12030] ? ldsem_down_read+0x12/0x40 [ 353.755106][T12030] ? __pfx_gsmld_ioctl+0x10/0x10 [ 353.755120][T12030] tty_ioctl+0x9c3/0xde0 [ 353.755134][T12030] ? __pfx_tty_ioctl+0x10/0x10 [ 353.755151][T12030] __se_sys_ioctl+0xff/0x170 [ 353.755173][T12030] do_syscall_64+0x17b/0x530 [ 353.755188][T12030] ? irqentry_exit+0x10f/0x8f0 [ 353.755201][T12030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.755216][T12030] ? clear_bhb_loop+0x40/0x90 [ 353.755236][T12030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.755251][T12030] RIP: 0033:0x7f4dc0fee0d9 [ 353.755266][T12030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.755279][T12030] RSP: 002b:00007f4dbf225028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 353.755295][T12030] RAX: ffffffffffffffda RBX: 00007f4dc1276090 RCX: 00007f4dc0fee0d9 [ 353.755306][T12030] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003 [ 353.755315][T12030] RBP: 00007f4dc1085024 R08: 0000000000000000 R09: 0000000000000000 [ 353.755325][T12030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.755333][T12030] R13: 00007f4dc1276128 R14: 00007f4dc1276090 R15: 00007ffef95bf178 [ 353.755355][T12030] [ 353.768300][T12030] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 353.878371][T12033] openvswitch: netlink: IP tunnel dst address not specified [ 353.878450][T12033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.028047][T12056] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2599'. [ 355.093444][T12060] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2600'. [ 355.544006][T12068] netlink: 'syz.0.2604': attribute type 1 has an invalid length. [ 356.635759][T12105] ALSA: mixer_oss: invalid OSS volume '' [ 356.635786][T12105] ALSA: mixer_oss: invalid OSS volume ']b#oDticJ]xD\Z' [ 356.635807][T12105] ALSA: mixer_oss: invalid OSS volume '73KY*@X,ebفLkJDris' [ 356.635830][T12105] ALSA: mixer_oss: invalid OSS volume '=' [ 356.635876][T12105] ALSA: mixer_oss: invalid OSS volume 'cW$u}<\Lu|GKiLО"' [ 356.635938][T12105] ALSA: mixer_oss: invalid OSS volume ',`! Q$9hy7zj;' [ 356.635970][T12105] ALSA: mixer_oss: invalid OSS volume 's' [ 356.635992][T12105] ALSA: mixer_oss: invalid OSS volume 'n(\bʬc_2&tg| 3' [ 356.636102][T12105] ALSA: mixer_oss: invalid OSS volume 's)dŹ-Ç<2~]/' [ 356.636119][T12105] ALSA: mixer_oss: invalid OSS volume '33Ѵe1?' [ 356.636146][T12105] ALSA: mixer_oss: invalid OSS volume 'P/Ǡ6{<`lN' [ 356.636164][T12105] ALSA: mixer_oss: invalid OSS volume 'W^5}愔˵_N[T[o\' [ 356.645168][T12105] ALSA: mixer_oss: invalid OSS volume '' [ 357.073320][T12124] syz.4.2629 (12124): attempted to duplicate a private mapping with mremap. This is not supported. [ 357.689043][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 357.850886][ T9] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 357.850919][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.863757][ T9] usb 3-1: config 0 descriptor?? [ 357.876023][ T9] cp210x 3-1:0.0: cp210x converter detected [ 358.339136][ T9] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 358.399863][ T9] usb 3-1: cp210x converter now attached to ttyUSB0 [ 358.557929][ T9] usb 3-1: USB disconnect, device number 36 [ 358.582480][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 358.790532][ T5774] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 358.830904][ T9] cp210x 3-1:0.0: device disconnected [ 358.950541][ T5774] usb 1-1: Using ep0 maxpacket: 16 [ 358.962148][ T5774] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 358.962175][ T5774] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.962195][ T5774] usb 1-1: Product: syz [ 358.962209][ T5774] usb 1-1: Manufacturer: syz [ 358.962222][ T5774] usb 1-1: SerialNumber: syz [ 358.969443][ T5774] usb 1-1: config 0 descriptor?? [ 359.215419][T12186] < [ 359.407227][ T5774] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 359.501909][ T5774] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 359.502768][ T5774] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 359.502825][ T5774] usb 1-1: media controller created [ 359.542816][ T5774] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 359.564630][T12192] loop6: detected capacity change from 0 to 524288000 [ 359.635001][T12193] loop6: detected capacity change from 524288000 to 0 [ 359.659967][ T5774] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 359.659987][ T5774] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 359.859659][ T5774] usb 1-1: USB disconnect, device number 32 [ 359.906844][ T5774] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 360.242144][T12200] sctp: [Deprecated]: syz.1.2663 (pid 12200) Use of struct sctp_assoc_value in delayed_ack socket option. [ 360.242144][T12200] Use struct sctp_sack_info instead [ 360.943489][ T50] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 361.098524][ T50] usb 2-1: Using ep0 maxpacket: 16 [ 361.108171][ T50] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 361.108197][ T50] usb 2-1: config 0 has no interface number 0 [ 361.108251][ T50] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 361.108277][ T50] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 1025, setting to 1024 [ 361.108392][ T50] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 361.108413][ T50] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.145966][ T50] usb 2-1: config 0 descriptor?? [ 361.147203][T12208] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 361.770282][ T50] uclogic 0003:28BD:0071.002D: failed retrieving string descriptor #100: -71 [ 361.770342][ T50] uclogic 0003:28BD:0071.002D: failed retrieving pen parameters: -71 [ 361.770359][ T50] uclogic 0003:28BD:0071.002D: pen probing failed: -71 [ 361.770376][ T50] uclogic 0003:28BD:0071.002D: failed probing parameters: -71 [ 361.770477][ T50] uclogic 0003:28BD:0071.002D: probe with driver uclogic failed with error -71 [ 361.831527][ T50] usb 2-1: USB disconnect, device number 30 [ 362.171581][T12250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2687'. [ 362.494273][T12268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2693'. [ 364.012706][T12309] ieee802154 phy0 wpan0: encryption failed: -22 [ 364.134544][T12311] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2714'. [ 364.434089][T12323] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2721'. [ 365.050654][T12347] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd20 [ 365.898380][T12371] gadgetfs: bound to dummy_udc driver [ 366.170515][ T50] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 366.170874][ C1] gadgetfs: connected [ 366.171264][ T50] gadgetfs: disconnected [ 366.327087][ C1] gadgetfs: connected [ 366.327915][ T50] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 366.327934][ T50] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.418528][ C1] gadgetfs: configuration #1 [ 366.446104][ T50] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input29 [ 366.475003][T12370] gadgetfs: suspended from state 3 [ 366.475327][T12370] gadgetfs: disconnected [ 366.707357][ C1] usbtouchscreen 1-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 366.753025][ T50] usb 1-1: USB disconnect, device number 33 [ 367.069990][T12397] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (das16m1) [ 367.528280][T12411] VFS: file-max limit 0 reached [ 367.622634][ T50] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 367.782587][ T50] usb 1-1: Using ep0 maxpacket: 16 [ 367.790573][ T50] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 367.790601][ T50] usb 1-1: config 1 has no interface number 0 [ 367.790644][ T50] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 367.790670][ T50] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 367.790692][ T50] usb 1-1: config 1 interface 105 has no altsetting 0 [ 367.841445][ T50] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 367.841477][ T50] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 367.841498][ T50] usb 1-1: Product: syz [ 367.841513][ T50] usb 1-1: Manufacturer: syz [ 367.841528][ T50] usb 1-1: SerialNumber: syz [ 367.894378][T12409] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 367.894495][T12409] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 367.951826][T12421] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 368.317655][T12409] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 368.317912][T12409] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 368.724647][ T50] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 368.726846][ T50] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 368.727478][ T50] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 369.085681][ T50] aqc111 1-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 76:a2:1c:9c:01:3c [ 369.209204][ T50] usb 1-1: USB disconnect, device number 34 [ 369.284625][ T50] aqc111 1-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 369.817637][ T50] aqc111 1-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 369.817796][ T50] aqc111 1-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 369.817925][ T50] aqc111 1-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 370.085773][T12465] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 370.222791][T12471] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2786'. [ 370.222821][T12471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2786'. [ 370.446005][ T50] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 370.608439][ T50] usb 2-1: unable to get BOS descriptor or descriptor too short [ 370.609020][ T50] usb 2-1: not running at top speed; connect to a high speed hub [ 370.614659][ T50] usb 2-1: config 1 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 370.614694][ T50] usb 2-1: config 1 interface 0 has no altsetting 0 [ 370.654513][ T50] usb 2-1: New USB device found, idVendor=04da, idProduct=104d, bcdDevice= 0.40 [ 370.654547][ T50] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.654569][ T50] usb 2-1: Product: syz [ 370.654584][ T50] usb 2-1: Manufacturer: syz [ 370.654599][ T50] usb 2-1: SerialNumber: syz [ 370.732378][ T38] kauditd_printk_skb: 10 callbacks suppressed [ 370.732447][ T38] audit: type=1326 audit(1786360449.862:53): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12484 comm="syz.0.2793" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e204e0d9 code=0x7ffc0000 [ 370.732511][ T38] audit: type=1326 audit(1786360449.862:54): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12484 comm="syz.0.2793" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e204e0d9 code=0x7ffc0000 [ 370.755265][ T38] audit: type=1326 audit(1786360449.872:55): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12484 comm="syz.0.2793" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e204e0d9 code=0x7ffc0000 [ 370.755379][ T38] audit: type=1326 audit(1786360449.872:56): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12484 comm="syz.0.2793" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e204e0d9 code=0x7ffc0000 [ 370.755434][ T38] audit: type=1326 audit(1786360449.872:57): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12484 comm="syz.0.2793" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd7e204e0d9 code=0x7ffc0000 [ 370.755549][ T38] audit: type=1326 audit(1786360449.872:58): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12484 comm="syz.0.2793" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e204e0d9 code=0x7ffc0000 [ 370.755594][ T38] audit: type=1326 audit(1786360449.872:59): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12484 comm="syz.0.2793" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e204e0d9 code=0x7ffc0000 [ 370.755711][ T38] audit: type=1326 audit(1786360449.872:60): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12484 comm="syz.0.2793" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e204e0d9 code=0x7ffc0000 [ 370.755757][ T38] audit: type=1326 audit(1786360449.872:61): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12484 comm="syz.0.2793" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd7e204e0d9 code=0x7ffc0000 [ 370.755861][ T38] audit: type=1326 audit(1786360449.882:62): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12484 comm="syz.0.2793" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e204e0d9 code=0x7ffc0000 [ 370.990550][ T50] usbhid 2-1:1.0: can't add hid device: -71 [ 370.990689][ T50] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 371.021531][ T50] usb 2-1: USB disconnect, device number 31 [ 371.067295][T12487] input: syz1 as /devices/virtual/input/input30 [ 371.084522][ T5691] kernel read not supported for file /bus/input/devices (pid: 5691 comm: kworker/1:5) [ 371.264158][T12492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2796'. [ 371.296268][T12494] netlink: 'syz.0.2797': attribute type 83 has an invalid length. [ 371.672779][T12508] CIFS: bad ip= option (1270.0.1) [ 371.672977][T12507] HELLO WORLD FROM SYZ [ 371.673037][T12508] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 371.673650][T12508] CIFS: Attempting to mount (null) [ 371.707497][ T50] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 371.782267][T12508] CIFS: VFS: Error connecting to socket. Aborting operation. [ 371.782503][T12508] CIFS: VFS: cifs_mount failed w/return code = -111 [ 371.869278][ T50] usb 1-1: Using ep0 maxpacket: 16 [ 371.873291][ T50] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.873356][ T50] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 371.873433][ T50] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.917489][ T50] usb 1-1: config 0 descriptor?? [ 372.146328][T12500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.146957][T12500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.166169][ T5603] Bluetooth: hci3: adv larger than maximum supported [ 372.166280][ T5603] Bluetooth: hci3: Malformed LE Event: 0x0d [ 372.181896][ T9] usb 1-1: USB disconnect, device number 35 [ 372.648999][T12528] kAFS: Invalid Command on /proc/fs/afs/cells file [ 372.790788][T12530] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2815'. [ 373.121875][ T50] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 373.292681][ T50] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 373.292709][ T50] usb 2-1: config 0 has no interface number 0 [ 373.292752][ T50] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.292779][ T50] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.292823][ T50] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 373.292847][ T50] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.357738][ T50] usb 2-1: config 0 descriptor?? [ 373.660242][T12564] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 373.785777][ T50] hid_parser_main: 173 callbacks suppressed [ 373.785802][ T50] prodikeys 0003:041E:2801.002E: unknown main item tag 0x7 [ 373.806650][ T50] prodikeys 0003:041E:2801.002E: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input1 [ 373.809441][ T50] hid_prodikeys: hid-prodikeys: failed to find output report [ 373.809441][ T50] [ 373.882300][ T5842] udevd[5842]: 'fido_id' [12570] terminated by signal 11 (Segmentation fault) [ 373.997705][ T9] usb 2-1: USB disconnect, device number 32 [ 374.582692][T12584] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 374.791353][ T5603] Bluetooth: hci2: unexpected subevent 0x04 length: 56 > 11 [ 375.229895][T12612] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2850'. [ 375.236711][T12612] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2850'. [ 375.240986][T12612] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2850'. [ 375.843022][T12637] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2863'. [ 375.880086][T12636] tap0: tun_chr_ioctl cmd 1074025675 [ 375.880108][T12636] tap0: persist disabled [ 376.853725][T12676] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 376.853806][T12676] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 377.451887][ T5696] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 377.606960][ T5696] usb 3-1: unable to get BOS descriptor or descriptor too short [ 377.609021][ T5696] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 7 [ 377.633286][ T5696] usb 3-1: string descriptor 0 read error: -22 [ 377.633442][ T5696] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 377.633468][ T5696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.418087][T12714] Unable to locate "_" for $SUBSYSTEM_PLUGIN_$HOST_ID [ 378.538515][ T5696] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 378.587318][ T5696] usb 3-1: USB disconnect, device number 37 [ 378.802814][ T5691] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 378.911948][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 378.952026][ T5691] usb 1-1: Using ep0 maxpacket: 16 [ 378.954554][ T5691] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 378.954581][ T5691] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 378.955748][ T5691] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 378.955776][ T5691] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 378.955790][ T5691] usb 1-1: SerialNumber: syz [ 379.029028][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.029129][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.082970][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 379.088223][ T9] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 379.088252][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.088265][ T9] usb 2-1: Product: syz [ 379.088275][ T9] usb 2-1: Manufacturer: syz [ 379.088284][ T9] usb 2-1: SerialNumber: syz [ 379.128415][ T9] usb 2-1: config 0 descriptor?? [ 379.142794][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 379.213662][ T5691] usb 1-1: USB disconnect, device number 36 [ 379.544735][ T9] gspca_se401: ExtraFeatures: 255 [ 379.544749][ T9] gspca_se401: Frame size: 0x27331 bayer [ 379.544758][ T9] gspca_se401: Frame size: 30244x30703 bayer [ 379.544766][ T9] gspca_se401: Frame size: 23702x12124 bayer [ 379.631739][ T50] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 379.766607][ T9] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input31 [ 379.781967][ T50] usb 3-1: Using ep0 maxpacket: 16 [ 379.799088][ T50] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 379.799125][ T50] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 379.831084][ T50] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 379.831115][ T50] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.831136][ T50] usb 3-1: Product: syz [ 379.831149][ T50] usb 3-1: Manufacturer: syz [ 379.831164][ T50] usb 3-1: SerialNumber: syz [ 379.877698][ T50] usb 3-1: config 0 descriptor?? [ 379.894327][ T50] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 379.894362][ T50] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 379.907152][ T9] usb 2-1: USB disconnect, device number 33 [ 380.033206][ T5842] udevd[5842]: 'v4l_id /dev/video103' [12730] terminated by signal 11 (Segmentation fault) [ 380.547846][ T50] em28xx 3-1:0.0: chip ID is em2874 [ 380.611511][ T5842] Flush: task=udevd[5842] dev=loop8 state=2 [ 380.728252][ T5842] Teardown: task=udevd[5842] dev=loop8 state=2 [ 380.785562][ T9] usb 3-1: USB disconnect, device number 38 [ 380.810015][ T9] em28xx 3-1:0.0: Disconnecting em28xx [ 380.899476][T12755] bad cache= option: none [ 380.899476][T12755] [ 380.899691][T12755] CIFS: VFS: bad cache= option: none [ 381.006485][ T9] em28xx: Freeing device [ 381.810320][T12789] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2934'. [ 382.448357][T12810] vxcan0: tx address claim with dlc 0 [ 383.561744][ T823] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 383.721960][ T823] usb 2-1: Using ep0 maxpacket: 32 [ 383.725500][ T823] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 383.725528][ T823] usb 2-1: config 0 has no interface number 0 [ 383.725575][ T823] usb 2-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255 [ 383.725601][ T823] usb 2-1: config 0 interface 184 has no altsetting 0 [ 383.729515][ T823] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 383.729543][ T823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.729564][ T823] usb 2-1: Product: syz [ 383.729579][ T823] usb 2-1: Manufacturer: syz [ 383.729595][ T823] usb 2-1: SerialNumber: syz [ 383.807973][ T823] usb 2-1: config 0 descriptor?? [ 383.821097][T12844] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 384.035823][T12844] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 384.084593][T12869] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 384.391927][ T5691] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 384.552751][ T5691] usb 1-1: Using ep0 maxpacket: 16 [ 384.555847][ T5691] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.555877][ T5691] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 384.555917][ T5691] usb 1-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 384.555996][ T5691] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.627670][ T5691] usb 1-1: config 0 descriptor?? [ 384.656429][T12882] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2975'. [ 384.665042][ T823] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 384.665073][ T823] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 384.678737][ T823] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 384.678770][ T823] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 384.678791][ T823] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 384.678810][ T823] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 384.679121][ T823] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 384.776905][ T823] usb 2-1: USB disconnect, device number 34 [ 385.061945][ T5691] pantherlord 0003:0810:0002.002F: unknown main item tag 0x0 [ 385.061985][ T5691] pantherlord 0003:0810:0002.002F: unknown main item tag 0x0 [ 385.062014][ T5691] pantherlord 0003:0810:0002.002F: unknown main item tag 0x0 [ 385.062042][ T5691] pantherlord 0003:0810:0002.002F: unknown main item tag 0x0 [ 385.062069][ T5691] pantherlord 0003:0810:0002.002F: unknown main item tag 0x0 [ 385.062096][ T5691] pantherlord 0003:0810:0002.002F: unknown main item tag 0x0 [ 385.062124][ T5691] pantherlord 0003:0810:0002.002F: unknown main item tag 0x0 [ 385.062152][ T5691] pantherlord 0003:0810:0002.002F: unknown main item tag 0x0 [ 385.062179][ T5691] pantherlord 0003:0810:0002.002F: unknown main item tag 0x0 [ 385.062206][ T5691] pantherlord 0003:0810:0002.002F: unknown main item tag 0x0 [ 385.140533][ T50] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 385.160539][ T5691] pantherlord 0003:0810:0002.002F: hidraw0: USB HID v0.08 Device [HID 0810:0002] on usb-dummy_hcd.0-1/input0 [ 385.160588][ T5691] pantherlord 0003:0810:0002.002F: no output reports found [ 385.245235][ T5842] udevd[5842]: 'fido_id' [12892] terminated by signal 11 (Segmentation fault) [ 385.286183][ T5691] usb 1-1: USB disconnect, device number 37 [ 385.301722][ T50] usb 3-1: Using ep0 maxpacket: 16 [ 385.305379][ T50] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.308661][ T50] usb 3-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 385.308691][ T50] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.308713][ T50] usb 3-1: Product: syz [ 385.308728][ T50] usb 3-1: Manufacturer: syz [ 385.308743][ T50] usb 3-1: SerialNumber: syz [ 385.365318][ T50] usb 3-1: config 0 descriptor?? [ 385.670039][ T9] usb 3-1: USB disconnect, device number 39 [ 385.737579][ T5842] udevd[5842]: 'scsi_id --export --whitelisted -d /dev/sda' [12904] terminated by signal 11 (Segmentation fault) [ 386.084550][T12919] netlink: 'syz.4.2989': attribute type 1 has an invalid length. [ 386.358527][T12929] IPVS: lc: FWM 3 0x00000003 - no destination available [ 387.040517][ T1544] netdevsim netdevsim12 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.402172][ T50] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 387.581911][ T50] usb 2-1: Using ep0 maxpacket: 8 [ 387.586190][ T50] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 387.586226][ T50] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 387.586253][ T50] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 387.586277][ T50] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 387.586321][ T50] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 387.586344][ T50] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.910110][ T50] usb 2-1: GET_CAPABILITIES returned 0 [ 387.910161][ T50] usbtmc 2-1:16.0: can't read capabilities [ 388.083360][T12961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3010'. [ 388.120645][ T823] usb 2-1: USB disconnect, device number 35 [ 388.120917][T12961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3010'. [ 388.194206][ T50] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 388.354241][ T50] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 388.354269][ T50] usb 3-1: config 0 has no interface number 0 [ 388.354333][ T50] usb 3-1: config 0 interface 41 has no altsetting 0 [ 388.358495][ T50] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 388.358528][ T50] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.358549][ T50] usb 3-1: Product: syz [ 388.358565][ T50] usb 3-1: Manufacturer: syz [ 388.358580][ T50] usb 3-1: SerialNumber: syz [ 388.421026][ T50] usb 3-1: config 0 descriptor?? [ 388.969406][T12989] netlink: 368 bytes leftover after parsing attributes in process `syz.0.3022'. [ 389.060224][ T50] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 389.077337][ T50] usb 3-1: USB disconnect, device number 40 [ 389.081870][ T824] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 389.112353][ T5842] udevd[5842]: setting owner of /dev/bus/usb/003/040 to uid=0, gid=0 failed: No such file or directory [ 389.176575][T12993] binder: 12992:12993 ioctl 40046210 0 returned -14 [ 389.247934][ T824] usb 2-1: Using ep0 maxpacket: 16 [ 389.266350][ T824] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 389.266380][ T824] usb 2-1: config 0 has no interface number 0 [ 389.269060][ T824] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 389.269091][ T824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.269113][ T824] usb 2-1: Product: syz [ 389.269128][ T824] usb 2-1: Manufacturer: syz [ 389.269143][ T824] usb 2-1: SerialNumber: syz [ 389.342121][ T824] usb 2-1: config 0 descriptor?? [ 389.360343][ T824] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 389.513643][T13002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3029'. [ 390.170584][ T824] gspca_spca1528: reg_w err -71 [ 390.181994][ T824] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 390.195193][ T824] usb 2-1: USB disconnect, device number 36 [ 390.405986][T13024] scsi_dev_info_list_add_str: bad dev info string 'v_' '' '' [ 390.761840][ T824] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 390.775670][T13035] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3044'. [ 390.912091][ T824] usb 3-1: Using ep0 maxpacket: 8 [ 390.928774][ T824] usb 3-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.928810][ T824] usb 3-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.928836][ T824] usb 3-1: config 0 interface 0 has no altsetting 0 [ 390.928872][ T824] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 390.928889][ T824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.964923][ T824] usb 3-1: config 0 descriptor?? [ 391.231015][T13042] sctp: [Deprecated]: syz.1.3047 (pid 13042) Use of struct sctp_assoc_value in delayed_ack socket option. [ 391.231015][T13042] Use struct sctp_sack_info instead [ 391.413056][ T824] hid_parser_main: 28 callbacks suppressed [ 391.413082][ T824] ryos 0003:1E7D:3138.0030: unknown main item tag 0x0 [ 391.413115][ T824] ryos 0003:1E7D:3138.0030: unknown main item tag 0x0 [ 391.413141][ T824] ryos 0003:1E7D:3138.0030: item fetching failed at offset 6/40 [ 391.416507][ T824] ryos 0003:1E7D:3138.0030: parse failed [ 391.416600][ T824] ryos 0003:1E7D:3138.0030: probe with driver ryos failed with error -22 [ 391.607913][ T9] usb 3-1: USB disconnect, device number 41 [ 391.751925][ T824] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 391.901831][ T824] usb 1-1: Using ep0 maxpacket: 32 [ 391.903785][ T824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.903814][ T824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.903837][ T824] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 391.903865][ T824] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 391.903880][ T824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.908511][ T824] usb 1-1: config 0 descriptor?? [ 392.075577][T13052] tmpfs: Cannot retroactively limit size [ 392.373315][ T824] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0031/input/input32 [ 392.409960][ T824] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0031/input/input33 [ 392.491839][ T823] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 392.584784][T13060] i2c i2c-0: new_device: Can't parse I2C address [ 392.649237][ T823] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 392.666111][ T823] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 392.666144][ T823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.666166][ T823] usb 3-1: Product: syz [ 392.666181][ T823] usb 3-1: Manufacturer: syz [ 392.666197][ T823] usb 3-1: SerialNumber: syz [ 392.751835][ T823] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 392.759604][ T824] kye 0003:0458:5011.0031: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 392.864171][ T5840] udevd[5840]: 'fido_id' [13062] terminated by signal 11 (Segmentation fault) [ 393.065230][ T5691] usb 1-1: USB disconnect, device number 38 [ 393.297119][ T823] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 393.297664][ T823] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 393.297717][ T823] usb 3-1: media controller created [ 393.362480][ T823] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 393.469815][ T823] usb 3-1: USB disconnect, device number 42 [ 393.626247][T13072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3061'. [ 393.921341][T13084] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 394.021760][ T5691] usb 1-1: new low-speed USB device number 39 using dummy_hcd [ 394.184344][ T5691] usb 1-1: config 0 interface 0 altsetting 31 endpoint 0x81 has invalid maxpacket 903, setting to 8 [ 394.184381][ T5691] usb 1-1: config 0 interface 0 altsetting 31 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 394.184410][ T5691] usb 1-1: config 0 interface 0 has no altsetting 0 [ 394.184444][ T5691] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 394.184467][ T5691] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.245129][ T5691] usb 1-1: config 0 descriptor?? [ 394.249923][T13077] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 394.687341][ T5691] hid (null): global environment stack underflow [ 394.687363][ T5691] hid (null): unknown global tag 0xe [ 394.726612][ T5691] aquacomputer_d5next 0003:0C70:F0B6.0032: unknown main item tag 0x2 [ 394.726651][ T5691] aquacomputer_d5next 0003:0C70:F0B6.0032: global environment stack underflow [ 394.726668][ T5691] aquacomputer_d5next 0003:0C70:F0B6.0032: item 0 4 1 11 parsing failed [ 394.733903][ T5691] aquacomputer_d5next 0003:0C70:F0B6.0032: probe with driver aquacomputer_d5next failed with error -22 [ 394.900672][ T5691] usb 1-1: USB disconnect, device number 39 [ 394.971522][T13112] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(9) [ 395.111969][T13116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3080'. [ 395.591793][ T824] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 395.747594][ T824] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 395.747623][ T824] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 395.747646][ T824] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 395.762014][ T824] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 395.762046][ T824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 395.762068][ T824] usb 2-1: Product: syz [ 395.762083][ T824] usb 2-1: Manufacturer: syz [ 395.762099][ T824] usb 2-1: SerialNumber: syz [ 396.054405][ T824] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 37 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 396.324074][ T5684] usb 2-1: USB disconnect, device number 37 [ 396.350726][ T5684] usblp0: removed [ 397.318994][T13196] block2mtd: too many arguments [ 397.431155][T13201] netlink: 'syz.4.3119': attribute type 2 has an invalid length. [ 397.431178][T13201] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3119'. [ 397.558526][T13207] sg_write: data in/out 294976/136 bytes for SCSI command 0x0-- guessing data in; [ 397.558526][T13207] program syz.4.3121 not setting count and/or reply_len properly [ 397.686839][T13212] tap0: tun_chr_ioctl cmd 1074025677 [ 397.687060][T13212] tap0: linktype set to 3 [ 399.023383][ T824] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 399.176678][ T824] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 399.176706][ T824] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 399.177840][ T824] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 399.177868][ T824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 399.177882][ T824] usb 3-1: SerialNumber: syz [ 399.456713][ T824] usb 3-1: 0:2 : does not exist [ 399.529246][T13270] IPVS: lc: FWM 3 0x00000003 - no destination available [ 399.562775][ T824] usb 3-1: USB disconnect, device number 43 [ 399.642983][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 400.386931][T13292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3161'. [ 400.460641][T13296] Context (ID=0x0) not attached to queue pair (handle=0xffffffff:0x1) [ 400.671498][T13304] [ 401.274150][T13325] program syz.2.3177 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 401.561145][T13338] kvm [13335]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x20 [ 401.685031][T13344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3186'. [ 401.971466][T13352] tipc: Started in network mode [ 401.971514][T13352] tipc: Node identity 7f000001, cluster identity 4711 [ 401.999746][T13352] tipc: New replicast peer: 127.0.0.1 [ 402.017607][T13352] tipc: Enabled bearer , priority 10 [ 402.160048][T13360] base or size exceeds the MTRR width [ 402.433986][T13369] misc userio: Can't change port type on an already running userio instance [ 402.910778][T13381] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3204'. [ 403.115562][ T824] tipc: Node number set to 2130706433 [ 403.167785][T13393] PM: suspend entry (deep) [ 403.301988][ T5691] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 403.470285][ T164] Filesystems sync: 0.282 seconds [ 403.506492][ T5691] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 403.506521][ T5691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.506540][ T5691] usb 2-1: Product: syz [ 403.506553][ T5691] usb 2-1: Manufacturer: syz [ 403.506567][ T5691] usb 2-1: SerialNumber: syz [ 403.999590][T13393] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 404.003451][T13393] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 404.017833][T13393] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 404.018110][T13393] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 404.077121][T13393] Freezing user space processes [ 404.138970][T13393] Freezing user space processes completed (elapsed 0.061 seconds) [ 404.139346][T13393] OOM killer disabled. [ 404.139354][T13393] Freezing remaining freezable tasks [ 404.185617][T13393] Freezing remaining freezable tasks completed (elapsed 0.046 seconds) [ 404.187512][T13393] printk: Suspending console(s) (use no_console_suspend to debug) [ 405.324011][T13393] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 405.375304][T13393] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 405.416272][T13393] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 405.457641][T13393] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 405.500616][T13393] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 405.545377][T13393] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 405.582046][T13393] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 405.623930][T13393] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 405.669046][T13393] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 405.741967][ T5603] Bluetooth: hci0: command 0x0c1a tx timeout [ 405.782691][T13393] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 405.784461][T13393] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 405.828631][T13393] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 405.875899][T13393] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 405.915922][T13393] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 405.956230][T13393] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 405.990972][T13393] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 406.061749][ T5603] Bluetooth: hci4: command 0x0406 tx timeout [ 406.061791][ T5603] Bluetooth: hci2: command 0x0406 tx timeout [ 406.061833][ T5603] Bluetooth: hci3: command 0x0406 tx timeout [ 409.405369][T13393] ACPI: PM: Preparing to enter system sleep state S3 [ 409.406990][T13393] ACPI: PM: Saving platform NVS memory [ 409.447529][T13393] Disabling non-boot CPUs ... [ 409.611880][T13393] smpboot: CPU 1 is now offline [ 409.703719][T13393] ACPI: PM: Low-level resume complete [ 409.703791][T13393] ACPI: PM: Restoring platform NVS memory [ 409.734569][T13393] Enabling non-boot CPUs ... [ 409.739911][T13393] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 409.831453][T13393] CPU1 is up [ 409.835316][T13393] ACPI: PM: Waking up from system sleep state S3 [ 412.001354][T13393] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 412.164179][T13393] virtio-pci 0000:00:04.0: PM: dpm_run_callback(): pci_pm_resume returns -4 [ 412.164792][T13393] virtio-pci 0000:00:04.0: PM: failed to resume: error -4 [ 412.171235][T13393] virtio-pci 0000:00:06.0: PM: dpm_run_callback(): pci_pm_resume returns -4 [ 412.171516][T13393] virtio-pci 0000:00:06.0: PM: failed to resume: error -4 [ 412.219636][T13393] virtio-pci 0000:00:07.0: PM: dpm_run_callback(): pci_pm_resume returns -4 [ 412.219962][T13393] virtio-pci 0000:00:07.0: PM: failed to resume: error -4 [ 413.958632][T13393] usb 2-1: PM: dpm_run_callback(): usb_dev_resume returns -107 [ 413.958973][T13393] usb 2-1: PM: failed to resume: error -107 [ 414.156479][T13393] OOM killer enabled. [ 414.156493][T13393] Restarting tasks: Starting [ 414.158629][ T9] ================================================================== [ 414.158645][ T9] BUG: KASAN: slab-use-after-free in virtqueue_get_buf_ctx+0x1630/0x2150 [ 414.158677][ T9] Read of size 4 at addr ffff88801bb46448 by task kworker/0:0/9 [ 414.158690][ T9] [ 414.158723][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 414.158745][ T9] Tainted: [L]=SOFTLOCKUP [ 414.158751][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 414.158762][ T9] Workqueue: events_freezable update_balloon_stats_func [ 414.158787][ T9] Call Trace: [ 414.158794][ T9] [ 414.158802][ T9] dump_stack_lvl+0xe8/0x150 [ 414.158823][ T9] print_address_description+0x55/0x1e0 [ 414.158860][ T9] ? virtqueue_get_buf_ctx+0x1630/0x2150 [ 414.158884][ T9] print_report+0x58/0x70 [ 414.158907][ T9] kasan_report+0x117/0x150 [ 414.158922][ T9] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 414.158946][ T9] ? virtqueue_get_buf_ctx+0x1630/0x2150 [ 414.158974][ T9] virtqueue_get_buf_ctx+0x1630/0x2150 [ 414.159006][ T9] update_balloon_stats_func+0x121/0x300 [ 414.159029][ T9] ? __pfx_update_balloon_stats_func+0x10/0x10 [ 414.159054][ T9] ? rcu_is_watching+0x15/0xb0 [ 414.159075][ T9] ? process_one_work+0x7fd/0x1480 [ 414.159092][ T9] process_one_work+0xaaf/0x1480 [ 414.159115][ T9] ? __pfx_process_one_work+0x10/0x10 [ 414.159130][ T9] ? do_raw_spin_lock+0x12b/0x2f0 [ 414.159156][ T9] ? assign_work+0x3cf/0x5d0 [ 414.159174][ T9] worker_thread+0xb05/0x10d0 [ 414.159201][ T9] kthread+0x388/0x470 [ 414.159224][ T9] ? __pfx_worker_thread+0x10/0x10 [ 414.159240][ T9] ? __pfx_kthread+0x10/0x10 [ 414.159262][ T9] ret_from_fork+0x514/0xb70 [ 414.159288][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 414.159310][ T9] ? __switch_to+0xc89/0x1420 [ 414.159330][ T9] ? __pfx_kthread+0x10/0x10 [ 414.159361][ T9] ret_from_fork_asm+0x1a/0x30 [ 414.159413][ T9] [ 414.159420][ T9] [ 414.159431][ T9] Allocated by task 1: [ 414.159440][ T9] kasan_save_track+0x3e/0x80 [ 414.159466][ T9] __kasan_kmalloc+0x93/0xb0 [ 414.159489][ T9] __kmalloc_cache_noprof+0x3cd/0x670 [ 414.159513][ T9] __vring_new_virtqueue_split+0x65/0x940 [ 414.159538][ T9] vring_create_virtqueue+0x16f/0x3b0 [ 414.159563][ T9] setup_vq+0xe8/0x2e0 [ 414.159578][ T9] vp_setup_vq+0xc4/0x3f0 [ 414.159592][ T9] vp_find_vqs+0x55d/0x790 [ 414.159617][ T9] init_vqs+0x316/0x6d0 [ 414.159634][ T9] virtballoon_probe+0x3df/0x1030 [ 414.159653][ T9] virtio_dev_probe+0xdf6/0x10c0 [ 414.159686][ T9] really_probe+0x254/0xae0 [ 414.159705][ T9] __driver_probe_device+0x1e8/0x360 [ 414.159723][ T9] driver_probe_device+0x4f/0x240 [ 414.159744][ T9] __driver_attach+0x339/0x600 [ 414.159760][ T9] bus_for_each_dev+0x23e/0x2c0 [ 414.159783][ T9] bus_add_driver+0x348/0x670 [ 414.159806][ T9] driver_register+0x23a/0x320 [ 414.159832][ T9] do_one_initcall+0x250/0x870 [ 414.159855][ T9] do_initcall_level+0x10a/0x1a0 [ 414.159873][ T9] do_initcalls+0x59/0xa0 [ 414.159893][ T9] kernel_init_freeable+0x29d/0x3e0 [ 414.159912][ T9] kernel_init+0x22/0x1d0 [ 414.159930][ T9] ret_from_fork+0x514/0xb70 [ 414.159949][ T9] ret_from_fork_asm+0x1a/0x30 [ 414.159969][ T9] [ 414.159973][ T9] Freed by task 13393: [ 414.159980][ T9] kasan_save_track+0x3e/0x80 [ 414.160001][ T9] kasan_save_free_info+0x40/0x50 [ 414.160018][ T9] __kasan_slab_free+0x5c/0x80 [ 414.160040][ T9] kfree+0x1c5/0x6c0 [ 414.160058][ T9] vp_del_vqs+0x424/0x960 [ 414.160081][ T9] virtballoon_freeze+0x3b/0x50 [ 414.160098][ T9] virtio_device_freeze+0x11a/0x300 [ 414.160116][ T9] virtio_pci_suspend+0x128/0x1e0 [ 414.160131][ T9] pci_pm_suspend+0x26a/0x5b0 [ 414.160155][ T9] dpm_run_callback+0x84/0x2a0 [ 414.160170][ T9] device_suspend+0x8c2/0x1050 [ 414.160184][ T9] dpm_suspend+0x6b8/0x980 [ 414.160198][ T9] dpm_suspend_start+0x4f/0x70 [ 414.160213][ T9] suspend_devices_and_enter+0x21c/0x10d0 [ 414.160234][ T9] pm_suspend+0x52b/0x760 [ 414.160251][ T9] state_store+0x206/0x290 [ 414.160262][ T9] kernfs_fop_write_iter+0x3a5/0x540 [ 414.160283][ T9] vfs_write+0x61e/0xbb0 [ 414.160298][ T9] ksys_write+0x156/0x270 [ 414.160314][ T9] do_syscall_64+0x17b/0x530 [ 414.160329][ T9] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.160344][ T9] [ 414.160356][ T9] The buggy address belongs to the object at ffff88801bb46400 [ 414.160356][ T9] which belongs to the cache kmalloc-256 of size 256 [ 414.160371][ T9] The buggy address is located 72 bytes inside of [ 414.160371][ T9] freed 256-byte region [ffff88801bb46400, ffff88801bb46500) [ 414.160387][ T9] [ 414.160391][ T9] The buggy address belongs to the physical page: [ 414.160405][ T9] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1bb46 [ 414.160422][ T9] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 414.160436][ T9] flags: 0x80000000000040(head|node=0|zone=1) [ 414.160455][ T9] page_type: f5(slab) [ 414.160471][ T9] raw: 0080000000000040 ffff88813fe37b40 dead000000000100 dead000000000122 [ 414.160485][ T9] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 414.160500][ T9] head: 0080000000000040 ffff88813fe37b40 dead000000000100 dead000000000122 [ 414.160514][ T9] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 414.160529][ T9] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 414.160543][ T9] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002 [ 414.160552][ T9] page dumped because: kasan: bad access detected [ 414.160565][ T9] page_owner tracks the page as allocated [ 414.160571][ T9] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 4392155731 [ 414.160597][ T9] post_alloc_hook+0x1f9/0x250 [ 414.160621][ T9] get_page_from_freelist+0x264c/0x26c0 [ 414.160648][ T9] __alloc_frozen_pages_noprof+0x222/0x5b0 [ 414.160677][ T9] allocate_slab+0x7c/0x5e0 [ 414.160693][ T9] refill_objects+0x2d8/0x350 [ 414.160710][ T9] __pcs_replace_empty_main+0x330/0x690 [ 414.160727][ T9] __kmalloc_flags_noprof+0x65e/0x7f0 [ 414.160750][ T9] do_kmem_cache_create+0x8cb/0x9c0 [ 414.160766][ T9] __kmem_cache_create_args+0x31d/0x450 [ 414.160788][ T9] netfs_init+0x140/0x290 [ 414.160801][ T9] do_one_initcall+0x250/0x870 [ 414.160820][ T9] do_initcall_level+0x10a/0x1a0 [ 414.160839][ T9] do_initcalls+0x59/0xa0 [ 414.160860][ T9] kernel_init_freeable+0x29d/0x3e0 [ 414.160881][ T9] kernel_init+0x22/0x1d0 [ 414.160899][ T9] ret_from_fork+0x514/0xb70 [ 414.160918][ T9] page_owner free stack trace missing [ 414.160923][ T9] [ 414.160926][ T9] Memory state around the buggy address: [ 414.160935][ T9] ffff88801bb46300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 414.160946][ T9] ffff88801bb46380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 414.160956][ T9] >ffff88801bb46400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 414.160964][ T9] ^ [ 414.160973][ T9] ffff88801bb46480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 414.160983][ T9] ffff88801bb46500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 414.160991][ T9] ================================================================== [ 414.161008][ T9] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 414.161022][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 414.161043][ T9] Tainted: [L]=SOFTLOCKUP [ 414.161049][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 414.161060][ T9] Workqueue: events_freezable update_balloon_stats_func [ 414.161081][ T9] Call Trace: [ 414.161088][ T9] [ 414.161095][ T9] vpanic+0x56c/0xa60 [ 414.161113][ T9] ? __pfx_vpanic+0x10/0x10 [ 414.161133][ T9] panic+0xc5/0xd0 [ 414.161148][ T9] ? __pfx_panic+0x10/0x10 [ 414.161167][ T9] ? virtqueue_get_buf_ctx+0x1630/0x2150 [ 414.161199][ T9] ? virtqueue_get_buf_ctx+0x1630/0x2150 [ 414.161226][ T9] check_panic_on_warn+0x89/0xb0 [ 414.161249][ T9] ? virtqueue_get_buf_ctx+0x1630/0x2150 [ 414.161272][ T9] end_report+0x73/0x170 [ 414.161285][ T9] ? virtqueue_get_buf_ctx+0x1630/0x2150 [ 414.161309][ T9] kasan_report+0x128/0x150 [ 414.161323][ T9] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 414.161354][ T9] ? virtqueue_get_buf_ctx+0x1630/0x2150 [ 414.161384][ T9] virtqueue_get_buf_ctx+0x1630/0x2150 [ 414.161414][ T9] update_balloon_stats_func+0x121/0x300 [ 414.161435][ T9] ? __pfx_update_balloon_stats_func+0x10/0x10 [ 414.161459][ T9] ? rcu_is_watching+0x15/0xb0 [ 414.161478][ T9] ? process_one_work+0x7fd/0x1480 [ 414.161495][ T9] process_one_work+0xaaf/0x1480 [ 414.161519][ T9] ? __pfx_process_one_work+0x10/0x10 [ 414.161534][ T9] ? do_raw_spin_lock+0x12b/0x2f0 [ 414.161560][ T9] ? assign_work+0x3cf/0x5d0 [ 414.161578][ T9] worker_thread+0xb05/0x10d0 [ 414.161606][ T9] kthread+0x388/0x470 [ 414.161628][ T9] ? __pfx_worker_thread+0x10/0x10 [ 414.161647][ T9] ? __pfx_kthread+0x10/0x10 [ 414.161670][ T9] ret_from_fork+0x514/0xb70 [ 414.161693][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 414.161736][ T9] ? __switch_to+0xc89/0x1420 [ 414.161758][ T9] ? __pfx_kthread+0x10/0x10 [ 414.161782][ T9] ret_from_fork_asm+0x1a/0x30 [ 414.161813][ T9] [ 414.165615][ T9] Kernel Offset: disabled