last executing test programs: 10.686221667s ago: executing program 4 (id=1152): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="2013040000002c"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) close(0xffffffffffffffff) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x420080, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x0, 0x30, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000740)={0x20, 0x3, 0x1, 'T'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000500)={0x14, 0x0, 0x0}, &(0x7f0000000900)={0x44, &(0x7f0000000540)={0x40, 0xd, 0x4, "608f2c25"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000640)={0x20, 0x81, 0x3, "44b0e2"}, &(0x7f00000006c0)={0x20, 0x82, 0x2, "1af5"}, &(0x7f0000000700)={0x20, 0x83, 0x1, ';'}, &(0x7f0000000780)={0x20, 0x84, 0x1, 'F'}, &(0x7f00000007c0)={0x20, 0x85, 0x3, "2756be"}}) syz_usb_control_io(r0, 0x0, 0x0) 7.059901s ago: executing program 4 (id=1176): r0 = msgget$private(0x0, 0xfffffffffffffbdd) msgrcv(r0, 0x0, 0x0, 0x1, 0x3000) 6.12160485s ago: executing program 4 (id=1181): socket(0x2c, 0x3, 0x2) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x440f1}, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000400)=ANY=[@ANYBLOB="66696c746500000000000000010000000000000000000000000000000000000005"], 0x78) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0xf01c, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @multicast}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) mmap(&(0x7f00005dc000/0x2000)=nil, 0x2000, 0x2, 0x30, r4, 0xf8ea7000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x10000000004) syz_emit_ethernet(0x58, &(0x7f00000009c0)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x22, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x22, 0x1, "683059d2c59b"}, {0x18}]}}}}}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r6, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) socket$nl_netfilter(0x10, 0x3, 0xc) 4.619057747s ago: executing program 4 (id=1186): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x437, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, 0x50561}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg(r0, &(0x7f0000000340)=[{{&(0x7f00000002c0)=@xdp={0x2c, 0xa888, r2, 0x7}, 0x14, 0x0}}], 0x1, 0x80) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f0009058202"], 0x0) 3.975651357s ago: executing program 0 (id=1191): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_io_uring_setup(0x34b8, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000380)=@in6={0xa, 0x4e20, 0x4, @loopback, 0x5}}) io_uring_enter(r1, 0x5, 0x1, 0x1, 0x0, 0x1) 3.778343173s ago: executing program 0 (id=1192): unshare(0x22020600) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) 3.5345699s ago: executing program 2 (id=1195): r0 = socket(0x2b, 0x1, 0x1) listen(r0, 0x5) accept4$vsock_stream(r0, 0x0, 0x0, 0x80800) accept4(r0, 0x0, 0x0, 0x80000) 3.403021964s ago: executing program 0 (id=1196): socket(0x2c, 0x3, 0x2) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x440f1}, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000400)=ANY=[@ANYBLOB="66696c746500000000000000010000000000000000000000000000000000000005"], 0x78) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0xf01c, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @multicast}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) mmap(&(0x7f00005dc000/0x2000)=nil, 0x2000, 0x2, 0x30, r4, 0xf8ea7000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x10000000004) syz_emit_ethernet(0x58, &(0x7f00000009c0)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x22, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x22, 0x1, "683059d2c59b"}, {0x18}]}}}}}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r6, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) socket$nl_netfilter(0x10, 0x3, 0xc) 3.342139707s ago: executing program 1 (id=1197): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}]}, &(0x7f0000000640)=0x10) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080)=0x8, 0x4) 3.206478781s ago: executing program 3 (id=1199): request_key(&(0x7f0000001880)='id_resolver\x00', &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0) 3.137611923s ago: executing program 3 (id=1200): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0xc, 0x12) 3.038220026s ago: executing program 4 (id=1201): r0 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fdatasync(r0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000002c0)={0x0, 0x0}) r3 = syz_usb_connect_ath9k(0x3, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "b1975a9d", {0x1, 0x4, 0x4, 0xff, 0x2}}) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "115e4ecd", {0x3, 0x100, 0x0, 0x4, 0x3, 0x8, 0xd}}) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffc2, &(0x7f0000000040)=ANY=[]) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0xac}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}]}}]}, 0x4c}}, 0x40440c0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="d6a365dd00ca"}, 0x14) r5 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r6 = fsmount(r5, 0x0, 0x80) r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000001c00), 0x12) sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) read(r0, 0x0, 0x0) 3.011776417s ago: executing program 3 (id=1202): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) syz_usb_connect(0x0, 0xb6, &(0x7f0000000280)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7200f2010203010902a400018104004f0904870605a97a37020a24010a0b06020102092403050703020496062404029cfe09050b004000800000072501af82a7ce1932dc70000464040507250103"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1555555555555709}) syz_open_dev$midi(&(0x7f0000000040), 0x3, 0x21c1) close_range(r1, 0xffffffffffffffff, 0x0) 2.649708118s ago: executing program 2 (id=1203): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x1, 0x11}, 0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000380)=@in6={0xa, 0x4e20, 0x4, @loopback, 0x5}}) io_uring_enter(r1, 0x5, 0x1, 0x1, 0x0, 0x1) 2.518391762s ago: executing program 2 (id=1204): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="158804000301040008001b000000000008000d00"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 2.26361304s ago: executing program 1 (id=1205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x5f, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) 1.885399762s ago: executing program 0 (id=1206): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x800) ioctl$int_in(r0, 0x5452, &(0x7f0000006a00)=0x1) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffff9]}, 0x0, 0x8) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) write$binfmt_aout(r1, &(0x7f0000000340)={{0xcc, 0x3, 0x6, 0x33, 0x2c1, 0x7fff, 0x38a, 0x7fffffff}}, 0x20) 1.648701279s ago: executing program 2 (id=1207): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141042, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0001, 0x0) socket(0x2000000015, 0x80005, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf0}, 0x2080) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0xd40, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.394200977s ago: executing program 1 (id=1208): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xca, 0x6, 0xbc7, 0x7f, 0x6a4, 0x0, 0xb119, 0x2, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000063c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56559, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffe0, 0xb}, {0x9, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x1, 0xb, 0x3ff, 0x401, 0x3}, {0xed, 0x1, 0x7ff, 0x40, 0x401}, 0x4, 0xfffffc01, 0x1045}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 1.210119523s ago: executing program 1 (id=1209): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) dup2(r0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x10, @loopback, 0x4}], 0x1c) sendto$inet6(r1, &(0x7f0000000600), 0x0, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35d}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0xb, 0x7fff0000}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x40}, 0x8) 1.093423356s ago: executing program 1 (id=1210): r0 = msgget$private(0x0, 0xfffffffffffffbdd) msgrcv(r0, 0x0, 0x0, 0x1, 0x3000) 1.015421209s ago: executing program 2 (id=1211): socket$unix(0x1, 0x1, 0x0) add_key$user(&(0x7f0000002100), 0x0, &(0x7f00000021c0), 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000002340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000100)='X', 0x1, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x4, 0x8, 0x0, 0x1, 0x3, 0x6, 0x0, 0x0, 0x63, 0xfd, 0x8, 0x1, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000340)=""/47, 0x2f}, {&(0x7f0000000380)=""/19, 0x13}], 0x2}, 0xffff}], 0x1, 0x406, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000580)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x4, @private0, 0x6}, {0xa, 0x4e20, 0x6, @private0, 0x9}, r4, 0x2}}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000c, 0x90012, 0xffffffffffffffff, 0xbb62c000) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x2, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x800c, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0xe, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x9, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x2fcd0, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0xfbfffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x6, 0xe, 0x5, 0x7, 0x6, 0x2, 0x2, 0x1, 0x8, 0x7, 0x20200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0xe8, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x101, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) ioctl$UI_DEV_CREATE(r6, 0x5501) request_key(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000180), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) recvmmsg(r5, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) 975.93064ms ago: executing program 3 (id=1212): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x6) sendmmsg(r0, &(0x7f0000002e00)=[{{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4, 0x3}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)="91", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000ed"], 0x10}}], 0x2, 0x40000050) 870.394223ms ago: executing program 0 (id=1213): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, 0x4000010}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x183200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b4a0d93481b232b11b819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x1000008]}}) 799.273085ms ago: executing program 3 (id=1214): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r0, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r1, 0x0, 0xbb) close(r1) 692.132759ms ago: executing program 0 (id=1215): r0 = socket(0x2b, 0x1, 0x1) listen(r0, 0x5) accept4$vsock_stream(r0, 0x0, 0x0, 0x80800) accept4(r0, 0x0, 0x0, 0x80000) 648.34974ms ago: executing program 3 (id=1216): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 158.344135ms ago: executing program 1 (id=1217): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="2013040000002c"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) close(0xffffffffffffffff) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x420080, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x0, 0x30, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000740)={0x20, 0x3, 0x1, 'T'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000500)={0x14, 0x0, 0x0}, &(0x7f0000000900)={0x44, &(0x7f0000000540)={0x40, 0xd, 0x4, "608f2c25"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000640)={0x20, 0x81, 0x3, "44b0e2"}, &(0x7f00000006c0)={0x20, 0x82, 0x2, "1af5"}, &(0x7f0000000700)={0x20, 0x83, 0x1, ';'}, &(0x7f0000000780)={0x20, 0x84, 0x1, 'F'}, &(0x7f00000007c0)={0x20, 0x85, 0x3, "2756be"}}) syz_usb_control_io(r0, 0x0, 0x0) 77.314358ms ago: executing program 2 (id=1218): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x5f, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) 0s ago: executing program 4 (id=1219): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xca, 0x6, 0xbc7, 0x7f, 0x6a4, 0x0, 0xb119, 0x2, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000063c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56559, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffe0, 0xb}, {0x9, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x1, 0xb, 0x3ff, 0x401, 0x3}, {0xed, 0x1, 0x7ff, 0x40, 0x401}, 0x4, 0xfffffc01, 0x1045}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0) kernel console output (not intermixed with test programs): has no interface number 0 [ 154.222523][ T4349] usb 5-1: config 129 has no interface number 1 [ 154.254308][ T4349] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 154.274637][ T4349] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 154.290014][ T4349] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 154.304237][ T4349] usb 5-1: config 129 interface 135 has no altsetting 0 [ 154.311480][ T5883] fuse: Bad value for 'fd' [ 154.316693][ T4349] usb 5-1: config 129 interface 5 has no altsetting 0 [ 154.327705][ T4349] usb 5-1: string descriptor 0 read error: -22 [ 154.334069][ T4349] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 154.347662][ T4349] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.376659][ T4349] usb 5-1: MIDIStreaming interface descriptor not found [ 154.387553][ T4359] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 154.399534][ T4359] usb 2-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 154.411814][ T4359] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.465856][ T4359] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 154.480955][ T4359] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.587598][ T4359] snd-usb-audio: probe of 2-1:27.0 failed with error -2 [ 154.679497][ T4265] udevd[4265]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 154.712487][ T4359] usb 2-1: USB disconnect, device number 19 [ 156.732479][ T7] usb 5-1: USB disconnect, device number 14 [ 157.365867][ T5920] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3979591798 (509387750144 ns) > initial count (364801339648 ns). Using initial count to start timer. [ 157.501802][ T5936] tipc: Enabling of bearer rejected, failed to enable media [ 157.589734][ T22] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 157.786254][ T22] usb 2-1: unable to get BOS descriptor or descriptor too short [ 157.805852][ T22] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 157.830813][ T22] usb 2-1: config 129 has an invalid interface number: 5 but max is 0 [ 157.850773][ T22] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 157.861617][ T22] usb 2-1: config 129 has no interface number 0 [ 157.870904][ T22] usb 2-1: config 129 has no interface number 1 [ 157.877609][ T22] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 157.891338][ T22] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 157.908506][ T22] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 157.933749][ T22] usb 2-1: config 129 interface 135 has no altsetting 0 [ 157.941781][ T22] usb 2-1: config 129 interface 5 has no altsetting 0 [ 157.959649][ T22] usb 2-1: string descriptor 0 read error: -22 [ 157.970105][ T22] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 157.980502][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.019891][ T22] usb 2-1: MIDIStreaming interface descriptor not found [ 158.119085][ T5950] capability: warning: `syz.0.573' uses deprecated v2 capabilities in a way that may be insecure [ 158.179436][ T14] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 158.368146][ T14] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 158.381630][ T14] usb 4-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 158.393862][ T14] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 158.410713][ T14] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 158.422127][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.461093][ T14] snd-usb-audio: probe of 4-1:27.0 failed with error -2 [ 158.514343][ T4265] udevd[4265]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 158.604584][ T4359] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 158.654748][ T7] usb 4-1: USB disconnect, device number 22 [ 158.813596][ T4359] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 158.831824][ T4359] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.861561][ T4359] usb 1-1: config 0 has no interfaces? [ 158.870870][ T4359] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 158.881526][ T4359] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.903353][ T4359] usb 1-1: config 0 descriptor?? [ 159.253857][ T5971] device syzkaller0 entered promiscuous mode [ 159.744440][ T4349] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 159.853381][ T5983] netlink: 20 bytes leftover after parsing attributes in process `syz.2.585'. [ 159.944439][ T4349] usb 4-1: Using ep0 maxpacket: 32 [ 159.956119][ T4349] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 159.972787][ T4349] usb 4-1: config 0 has no interface number 0 [ 159.979716][ T4349] usb 4-1: config 0 interface 12 has no altsetting 0 [ 160.000158][ T4349] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 160.024090][ T4349] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.048802][ T4349] usb 4-1: Product: syz [ 160.059908][ T4349] usb 4-1: Manufacturer: syz [ 160.070488][ T4349] usb 4-1: SerialNumber: syz [ 160.090288][ T4349] usb 4-1: config 0 descriptor?? [ 160.404559][ T22] usb 2-1: USB disconnect, device number 20 [ 160.691976][ T5997] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 160.894409][ T22] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 161.084349][ T22] usb 2-1: Using ep0 maxpacket: 8 [ 161.093939][ T22] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 161.104491][ T7] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 161.164890][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 161.194114][ T22] usb 2-1: Product: syz [ 161.202490][ T22] usb 2-1: Manufacturer: syz [ 161.207296][ T22] usb 2-1: SerialNumber: syz [ 161.226492][ T22] usb 2-1: config 0 descriptor?? [ 161.261540][ T22] gspca_main: sq905-2.14.0 probing 2770:9120 [ 161.306597][ T7] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 161.316941][ T7] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 161.328028][ T7] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.344416][ T7] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 161.353578][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.389788][ T7] usb 5-1: invalid MIDI out EP 0 [ 161.414716][ T4313] usb 1-1: USB disconnect, device number 16 [ 161.512832][ T7] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 161.531003][ T4263] udevd[4263]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.579336][ T7] usb 5-1: USB disconnect, device number 15 [ 161.645229][ T5995] snd_virmidi snd_virmidi.0: control 0:57412:0:syz0:0 is already present [ 161.656985][ T22] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 161.664936][ T22] sq905: probe of 2-1:0.0 failed with error -71 [ 161.680936][ T22] usb 2-1: USB disconnect, device number 21 [ 162.939887][ T4349] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 162.947575][ T4349] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 162.955308][ T4349] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 162.962978][ T4349] f81534: probe of 4-1:0.12 failed with error -71 [ 162.978610][ T4349] usb 4-1: USB disconnect, device number 23 [ 165.980814][ T6019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.598'. [ 166.204579][ T7] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 166.212243][ T14] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 166.334318][ T4262] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 166.408555][ T7] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 166.418187][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.426506][ T7] usb 1-1: Product: syz [ 166.430797][ T7] usb 1-1: Manufacturer: syz [ 166.435611][ T14] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 166.446523][ T7] usb 1-1: SerialNumber: syz [ 166.451579][ T14] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 166.468059][ T7] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 166.476997][ T14] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 166.486148][ T4262] usb 5-1: device descriptor read/64, error -71 [ 166.494738][ T14] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 166.509290][ T14] usb 3-1: Manufacturer: syz [ 166.518002][ T14] usb 3-1: config 0 descriptor?? [ 166.526619][ T7] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 166.536440][ T14] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 166.664458][ T4349] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 166.764598][ T4262] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 166.844357][ T4349] usb 4-1: Using ep0 maxpacket: 8 [ 166.857283][ T4349] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 166.867213][ T4349] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 166.875531][ T4349] usb 4-1: Product: syz [ 166.879720][ T4349] usb 4-1: Manufacturer: syz [ 166.884483][ T4349] usb 4-1: SerialNumber: syz [ 166.891193][ T4349] usb 4-1: config 0 descriptor?? [ 166.899440][ T4349] gspca_main: sq905-2.14.0 probing 2770:9120 [ 166.914403][ T14] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 166.922329][ T4262] usb 5-1: device descriptor read/64, error -71 [ 167.044525][ T4262] usb usb5-port1: attempt power cycle [ 167.116687][ T14] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 167.127232][ T14] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 167.143016][ T14] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.156120][ T14] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 167.166076][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.182680][ T14] usb 2-1: invalid MIDI out EP 0 [ 167.216506][ T14] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 167.248829][ T4266] udevd[4266]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 167.301362][ T6031] snd_virmidi snd_virmidi.0: control 0:57412:0:syz0:0 is already present [ 167.317628][ T4349] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 167.329289][ T4349] sq905: probe of 4-1:0.0 failed with error -71 [ 167.339725][ T4349] usb 4-1: USB disconnect, device number 24 [ 167.350239][ T26] audit: type=1326 audit(1781953438.845:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6013 comm="syz.0.593" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b1d39ce59 code=0x0 [ 167.389647][ T4359] usb 2-1: USB disconnect, device number 22 [ 167.464435][ T4262] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 167.495552][ T4262] usb 5-1: device descriptor read/8, error -71 [ 167.774439][ T4262] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 167.804858][ T4262] usb 5-1: device descriptor read/8, error -71 [ 167.925240][ T4262] usb usb5-port1: unable to enumerate USB device [ 168.164347][ T4359] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 168.174389][ T7] usb 1-1: Service connection timeout for: 258 [ 168.180852][ T7] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 168.203424][ T7] ath9k_htc: Failed to initialize the device [ 168.211198][ T7] usb 1-1: ath9k_htc: USB layer deinitialized [ 168.334333][ T22] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 168.347334][ T4359] usb 4-1: unable to get BOS descriptor or descriptor too short [ 168.356760][ T4359] usb 4-1: config 129 has an invalid interface number: 135 but max is 0 [ 168.365306][ T4359] usb 4-1: config 129 has an invalid interface number: 5 but max is 0 [ 168.373518][ T4359] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 168.382740][ T4359] usb 4-1: config 129 has no interface number 0 [ 168.389111][ T4359] usb 4-1: config 129 has no interface number 1 [ 168.396025][ T4359] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 168.409395][ T4359] usb 4-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 168.420369][ T4359] usb 4-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 168.433859][ T4359] usb 4-1: config 129 interface 135 has no altsetting 0 [ 168.440889][ T4359] usb 4-1: config 129 interface 5 has no altsetting 0 [ 168.451538][ T4359] usb 4-1: string descriptor 0 read error: -22 [ 168.457883][ T4359] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 168.466988][ T4359] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.483269][ T4359] usb 4-1: MIDIStreaming interface descriptor not found [ 168.534966][ T22] usb 2-1: unable to get BOS descriptor or descriptor too short [ 168.565410][ T22] usb 2-1: config 64 has an invalid interface number: 44 but max is 0 [ 168.573635][ T22] usb 2-1: config 64 has no interface number 0 [ 168.594247][ T22] usb 2-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 168.609467][ T22] usb 2-1: config 64 interface 44 has no altsetting 0 [ 168.619874][ T22] usb 2-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 168.629078][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.637654][ T22] usb 2-1: Product: syz [ 168.641836][ T22] usb 2-1: Manufacturer: syz [ 168.657018][ T22] usb 2-1: SerialNumber: syz [ 168.757560][ T4359] usb 4-1: USB disconnect, device number 25 [ 168.869962][ T6043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.878811][ T6043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.890319][ T6043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.899371][ T6043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.925271][ T22] iowarrior 2-1:64.44: no interrupt-out endpoint found [ 168.943765][ T22] usb 2-1: USB disconnect, device number 23 [ 168.987098][ T4313] usb 3-1: USB disconnect, device number 17 [ 169.029035][ T4262] usb 1-1: USB disconnect, device number 17 [ 169.183349][ T6054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.611'. [ 169.392964][ T6063] loop5: detected capacity change from 0 to 7 [ 169.402598][ T4265] Dev loop5: unable to read RDB block 7 [ 169.411891][ T4265] loop5: unable to read partition table [ 169.418655][ T4265] loop5: partition table beyond EOD, truncated [ 169.429198][ T6063] Dev loop5: unable to read RDB block 7 [ 169.435121][ T6063] loop5: unable to read partition table [ 169.440932][ T6063] loop5: partition table beyond EOD, truncated [ 169.457631][ T6063] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 169.586826][ T6067] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 169.645317][ T4359] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 169.723915][ T6072] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3979591798 (509387750144 ns) > initial count (364801339648 ns). Using initial count to start timer. [ 169.814852][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 169.823653][ T6075] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 169.840279][ T4359] usb 4-1: Using ep0 maxpacket: 8 [ 169.844492][ T4262] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 169.850500][ T4359] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 169.862265][ T4359] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 169.870786][ T4359] usb 4-1: Product: syz [ 169.884806][ T4359] usb 4-1: Manufacturer: syz [ 169.889463][ T4359] usb 4-1: SerialNumber: syz [ 169.911067][ T4359] usb 4-1: config 0 descriptor?? [ 169.916276][ T4349] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 169.930779][ T4359] gspca_main: sq905-2.14.0 probing 2770:9120 [ 170.056803][ T6081] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3979591798 (509387750144 ns) > initial count (364801339648 ns). Using initial count to start timer. [ 170.061345][ T4262] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 170.088116][ T4262] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 170.099470][ T4262] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.112620][ T4262] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 170.115729][ T4349] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 170.121746][ T4262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.147917][ T4349] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.152719][ T4262] usb 3-1: invalid MIDI out EP 0 [ 170.160820][ T4349] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 170.186133][ T4262] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 170.189138][ T4349] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 170.213478][ T4349] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 170.219742][ T4266] udevd[4266]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.222047][ T4349] usb 2-1: Manufacturer: syz [ 170.258364][ T22] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 170.272693][ T4349] usb 2-1: config 0 descriptor?? [ 170.288465][ T4349] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 170.339514][ T6061] snd_virmidi snd_virmidi.0: control 0:57412:0:syz0:0 is already present [ 170.379047][ T6085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.624'. [ 170.390112][ T4359] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 170.402288][ T4359] sq905: probe of 4-1:0.0 failed with error -71 [ 170.417944][ T4359] usb 4-1: USB disconnect, device number 26 [ 170.429696][ T22] usb 5-1: device descriptor read/64, error -71 [ 170.437406][ T4349] usb 3-1: USB disconnect, device number 18 [ 170.558046][ T6089] fuse: Bad value for 'fd' [ 170.704269][ T22] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 170.854329][ T22] usb 5-1: device descriptor read/64, error -71 [ 170.874332][ T129] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 170.974855][ T22] usb usb5-port1: attempt power cycle [ 171.056681][ T129] usb 1-1: unable to get BOS descriptor or descriptor too short [ 171.075707][ T129] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 171.084111][ T129] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 171.103672][ T129] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 171.124729][ T129] usb 1-1: config 129 has no interface number 0 [ 171.145744][ T129] usb 1-1: config 129 has no interface number 1 [ 171.155607][ T129] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 171.169420][ T129] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 171.194319][ T129] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 171.209813][ T129] usb 1-1: config 129 interface 135 has no altsetting 0 [ 171.218087][ T129] usb 1-1: config 129 interface 5 has no altsetting 0 [ 171.245183][ T129] usb 1-1: string descriptor 0 read error: -22 [ 171.251516][ T129] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 171.261121][ T129] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.278494][ T129] usb 1-1: MIDIStreaming interface descriptor not found [ 171.288783][ T6106] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 171.338154][ T6106] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.384397][ T22] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 171.405397][ T6103] device syzkaller1 entered promiscuous mode [ 171.424893][ T22] usb 5-1: device descriptor read/8, error -71 [ 171.579105][ T4359] usb 1-1: USB disconnect, device number 18 [ 171.694375][ T22] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 171.725054][ T22] usb 5-1: device descriptor read/8, error -71 [ 171.844627][ T22] usb usb5-port1: unable to enumerate USB device [ 172.134116][ T6119] netlink: 48 bytes leftover after parsing attributes in process `syz.3.634'. [ 172.155178][ T6121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.635'. [ 172.228922][ T6123] loop5: detected capacity change from 0 to 7 [ 172.240579][ T6123] Dev loop5: unable to read RDB block 7 [ 172.263150][ T6123] loop5: unable to read partition table [ 172.269391][ T6123] loop5: partition table beyond EOD, truncated [ 172.275976][ T6123] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 172.666291][ T22] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 172.684457][ T4316] usb 2-1: USB disconnect, device number 24 [ 172.845223][ T129] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 172.862204][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 172.883736][ T22] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 172.899935][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 172.919921][ T22] usb 4-1: Product: syz [ 172.929382][ T22] usb 4-1: Manufacturer: syz [ 172.941321][ T22] usb 4-1: SerialNumber: syz [ 172.967064][ T22] usb 4-1: config 0 descriptor?? [ 172.980353][ T22] gspca_main: sq905-2.14.0 probing 2770:9120 [ 173.072998][ T129] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 173.084742][ T129] usb 1-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 173.097047][ T129] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 173.114118][ T129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.145090][ T129] usb 1-1: invalid MIDI out EP 0 [ 173.276404][ T129] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 173.290663][ T4267] udevd[4267]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 173.360962][ T4316] usb 1-1: USB disconnect, device number 19 [ 173.386214][ T6129] snd_virmidi snd_virmidi.0: control 0:57412:0:syz0:0 is already present [ 173.401436][ T22] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 173.410984][ T22] sq905: probe of 4-1:0.0 failed with error -71 [ 173.429384][ T22] usb 4-1: USB disconnect, device number 27 [ 174.160402][ T6156] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 174.371299][ T6160] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3979591798 (509387750144 ns) > initial count (364801339648 ns). Using initial count to start timer. [ 174.610940][ T6163] loop5: detected capacity change from 0 to 7 [ 174.622892][ T4265] Dev loop5: unable to read RDB block 7 [ 174.629034][ T4265] loop5: unable to read partition table [ 174.636845][ T4265] loop5: partition table beyond EOD, truncated [ 174.654528][ T6163] Dev loop5: unable to read RDB block 7 [ 174.660164][ T6163] loop5: unable to read partition table [ 174.668509][ T6163] loop5: partition table beyond EOD, truncated [ 174.684290][ T6163] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 174.797863][ T6139] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 174.813314][ T6139] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 174.968122][ T6153] netlink: 48 bytes leftover after parsing attributes in process `syz.0.646'. [ 175.074102][ T6170] device syzkaller0 entered promiscuous mode [ 175.164304][ T22] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 175.356540][ T22] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 175.367951][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.377910][ T22] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 175.401685][ T22] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 175.414373][ T4316] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 175.421431][ T22] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 175.433083][ T22] usb 2-1: Manufacturer: syz [ 175.439681][ T22] usb 2-1: config 0 descriptor?? [ 175.447982][ T22] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 175.455419][ T4359] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 175.544318][ T4313] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 175.574281][ T4316] usb 4-1: device descriptor read/64, error -71 [ 175.574364][ T129] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 175.651013][ T4359] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 175.660262][ T4359] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.669308][ T4359] usb 3-1: Product: syz [ 175.673516][ T4359] usb 3-1: Manufacturer: syz [ 175.678167][ T4359] usb 3-1: SerialNumber: syz [ 175.687432][ T4359] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 175.706914][ T4359] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 175.736217][ T4313] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 175.747434][ T4313] usb 5-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 175.758186][ T4313] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 175.767477][ T129] usb 1-1: Using ep0 maxpacket: 8 [ 175.772614][ T4313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.786041][ T129] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 175.797450][ T4313] usb 5-1: invalid MIDI out EP 0 [ 175.803434][ T129] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 175.812664][ T129] usb 1-1: Product: syz [ 175.817707][ T129] usb 1-1: Manufacturer: syz [ 175.824975][ T129] usb 1-1: SerialNumber: syz [ 175.835122][ T129] usb 1-1: config 0 descriptor?? [ 175.844604][ T4316] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 175.847737][ T129] gspca_main: sq905-2.14.0 probing 2770:9120 [ 175.863814][ T4313] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 175.902703][ T4266] udevd[4266]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.005437][ T4316] usb 4-1: device descriptor read/64, error -71 [ 176.014338][ T14] usb 5-1: USB disconnect, device number 24 [ 176.144409][ T4316] usb usb4-port1: attempt power cycle [ 176.246311][ T6180] snd_virmidi snd_virmidi.0: control 0:57412:0:syz0:0 is already present [ 176.257246][ T129] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 176.272203][ T129] sq905: probe of 1-1:0.0 failed with error -71 [ 176.292809][ T129] usb 1-1: USB disconnect, device number 20 [ 176.527222][ T26] audit: type=1326 audit(1781953448.025:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6174 comm="syz.2.655" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f64a619ce59 code=0x0 [ 176.554354][ T4316] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 176.594851][ T4316] usb 4-1: device descriptor read/8, error -71 [ 176.610733][ T6184] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 176.864346][ T4316] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 176.905649][ T4316] usb 4-1: device descriptor read/8, error -71 [ 176.997767][ T6194] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 177.008394][ T6194] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 177.035122][ T4316] usb usb4-port1: unable to enumerate USB device [ 177.117501][ T6197] netlink: 48 bytes leftover after parsing attributes in process `syz.0.662'. [ 177.365951][ T4359] usb 3-1: Service connection timeout for: 258 [ 177.372185][ T4359] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 177.410841][ T4359] ath9k_htc: Failed to initialize the device [ 177.420554][ T4359] usb 3-1: ath9k_htc: USB layer deinitialized [ 177.446784][ T6201] device syzkaller1 entered promiscuous mode [ 177.784303][ T14] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 177.915349][ T22] usb 2-1: USB disconnect, device number 25 [ 177.979709][ T14] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 177.991375][ T14] usb 5-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 178.002648][ T14] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 178.012456][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.030089][ T14] usb 5-1: invalid MIDI out EP 0 [ 178.054941][ T14] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 178.088899][ T6211] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 178.101589][ T4378] udevd[4378]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.243250][ T7] usb 3-1: USB disconnect, device number 19 [ 178.255129][ T22] usb 5-1: USB disconnect, device number 25 [ 178.438141][ T6221] netlink: 48 bytes leftover after parsing attributes in process `syz.3.674'. [ 178.522837][ T6225] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3979591798 (509387750144 ns) > initial count (364801339648 ns). Using initial count to start timer. [ 178.554274][ T4359] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 178.744373][ T4359] usb 1-1: Using ep0 maxpacket: 8 [ 178.753670][ T4359] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 178.784319][ T4359] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 178.823920][ T4359] usb 1-1: Product: syz [ 178.835430][ T4359] usb 1-1: Manufacturer: syz [ 178.853784][ T4359] usb 1-1: SerialNumber: syz [ 178.862232][ T4359] usb 1-1: config 0 descriptor?? [ 178.908427][ T4359] gspca_main: sq905-2.14.0 probing 2770:9120 [ 178.945954][ T6237] device syzkaller1 entered promiscuous mode [ 179.237495][ T6245] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 179.254349][ T129] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 179.304977][ T6215] snd_virmidi snd_virmidi.0: control 0:57412:0:syz0:0 is already present [ 179.329785][ T4359] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 179.354343][ T4359] sq905: probe of 1-1:0.0 failed with error -71 [ 179.376740][ T4359] usb 1-1: USB disconnect, device number 21 [ 179.414312][ T129] usb 2-1: device descriptor read/64, error -71 [ 179.508630][ T6250] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 179.694442][ T129] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 179.716607][ T4316] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 179.854304][ T129] usb 2-1: device descriptor read/64, error -71 [ 179.948196][ T4316] usb 4-1: unable to get BOS descriptor or descriptor too short [ 179.974391][ T4316] usb 4-1: config 129 has an invalid interface number: 135 but max is 0 [ 179.977371][ T129] usb usb2-port1: attempt power cycle [ 179.993625][ T4316] usb 4-1: config 129 has an invalid interface number: 5 but max is 0 [ 180.002571][ T4316] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 180.018840][ T4316] usb 4-1: config 129 has no interface number 0 [ 180.026419][ T4316] usb 4-1: config 129 has no interface number 1 [ 180.032717][ T4316] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 180.047612][ T4316] usb 4-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 180.059967][ T4316] usb 4-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 180.083423][ T4316] usb 4-1: config 129 interface 135 has no altsetting 0 [ 180.093772][ T4316] usb 4-1: config 129 interface 5 has no altsetting 0 [ 180.143714][ T4316] usb 4-1: string descriptor 0 read error: -22 [ 180.152530][ T4316] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 180.162452][ T4316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.191812][ T4316] usb 4-1: MIDIStreaming interface descriptor not found [ 180.206577][ T4359] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 180.404881][ T129] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 180.424135][ T4359] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 180.441837][ T4359] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 180.464420][ T4359] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 180.475071][ T129] usb 2-1: device descriptor read/8, error -71 [ 180.494684][ T4359] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 180.509575][ T4359] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.592218][ T6274] device syzkaller1 entered promiscuous mode [ 180.592791][ T4359] snd-usb-audio: probe of 1-1:27.0 failed with error -12 [ 180.605351][ T6276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.694'. [ 180.630461][ T4359] usb 4-1: USB disconnect, device number 32 [ 180.666412][ T4378] udevd[4378]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 180.759740][ T4316] usb 1-1: USB disconnect, device number 22 [ 180.764383][ T129] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 180.820665][ T129] usb 2-1: device descriptor read/8, error -71 [ 180.840342][ T6278] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3979591798 (509387750144 ns) > initial count (364801339648 ns). Using initial count to start timer. [ 180.906390][ T6281] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 180.956866][ T129] usb usb2-port1: unable to enumerate USB device [ 181.370631][ T6295] device macvtap1 entered promiscuous mode [ 181.376670][ T6295] device veth1_to_team entered promiscuous mode [ 181.602369][ T6302] netlink: 12 bytes leftover after parsing attributes in process `syz.0.705'. [ 181.780185][ T6304] device syzkaller1 entered promiscuous mode [ 181.816307][ T6306] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 181.910915][ T6311] loop5: detected capacity change from 0 to 7 [ 181.918831][ T4265] Dev loop5: unable to read RDB block 7 [ 181.925901][ T4265] loop5: unable to read partition table [ 181.944485][ T4265] loop5: partition table beyond EOD, truncated [ 181.953223][ T6311] Dev loop5: unable to read RDB block 7 [ 181.964833][ T6311] loop5: unable to read partition table [ 181.970779][ T6311] loop5: partition table beyond EOD, truncated [ 182.014504][ T6311] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 182.178244][ T6313] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 182.450827][ T6330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.717'. [ 182.454382][ T129] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 182.504364][ T4313] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 182.664374][ T4313] usb 5-1: device descriptor read/64, error -71 [ 182.677132][ T129] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 182.693626][ T129] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 182.711397][ T129] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 182.757974][ T129] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 182.770562][ T129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.820122][ T6338] device syzkaller1 entered promiscuous mode [ 182.848737][ T129] snd-usb-audio: probe of 2-1:27.0 failed with error -12 [ 182.895099][ T4378] udevd[4378]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.934621][ T4313] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 183.012288][ T129] usb 2-1: USB disconnect, device number 30 [ 183.084495][ T4313] usb 5-1: device descriptor read/64, error -71 [ 183.205487][ T4313] usb usb5-port1: attempt power cycle [ 183.314368][ T22] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 183.474319][ T22] usb 4-1: device descriptor read/64, error -71 [ 183.624454][ T4313] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 183.666077][ T4313] usb 5-1: device descriptor read/8, error -71 [ 183.758888][ T22] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 183.854394][ T129] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 183.914357][ T22] usb 4-1: device descriptor read/64, error -71 [ 183.944422][ T4313] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 183.995682][ T6358] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 184.016330][ T4313] usb 5-1: device descriptor read/8, error -71 [ 184.039402][ T22] usb usb4-port1: attempt power cycle [ 184.061126][ T129] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 184.073558][ T129] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.089094][ T129] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.099544][ T129] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 184.119400][ T129] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 184.129081][ T129] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 184.142914][ T129] usb 3-1: Manufacturer: syz [ 184.150568][ T129] usb 3-1: config 0 descriptor?? [ 184.164877][ T4313] usb usb5-port1: unable to enumerate USB device [ 184.454370][ T22] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 184.505738][ T22] usb 4-1: device descriptor read/8, error -71 [ 184.535650][ T6362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.729'. [ 184.570657][ T129] usbhid 3-1:0.0: can't add hid device: -71 [ 184.581807][ T129] usbhid: probe of 3-1:0.0 failed with error -71 [ 184.593893][ T129] usb 3-1: USB disconnect, device number 20 [ 184.774437][ T22] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 184.805275][ T22] usb 4-1: device descriptor read/8, error -71 [ 184.880608][ T6369] device syzkaller1 entered promiscuous mode [ 184.924470][ T22] usb usb4-port1: unable to enumerate USB device [ 185.069224][ T6371] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 185.192582][ T6374] device syzkaller0 entered promiscuous mode [ 185.516847][ T6386] loop5: detected capacity change from 0 to 7 [ 185.535665][ T6386] Dev loop5: unable to read RDB block 7 [ 185.541309][ T6386] loop5: unable to read partition table [ 185.550809][ T6386] loop5: partition table beyond EOD, truncated [ 185.562379][ T6386] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 185.614626][ T22] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 185.651498][ T6388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.740'. [ 185.690438][ T129] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 185.808625][ T6394] device syzkaller1 entered promiscuous mode [ 185.827760][ T22] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 185.837360][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.846197][ T22] usb 1-1: Product: syz [ 185.850471][ T22] usb 1-1: Manufacturer: syz [ 185.856072][ T22] usb 1-1: SerialNumber: syz [ 185.876068][ T129] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 185.888107][ T22] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 185.896329][ T129] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 185.910482][ T129] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 185.920726][ T129] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 185.930155][ T129] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.963872][ T22] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 186.019393][ T129] snd-usb-audio: probe of 5-1:27.0 failed with error -12 [ 186.060310][ T4378] udevd[4378]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 186.178331][ T7] usb 5-1: USB disconnect, device number 30 [ 186.226565][ T6398] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 186.265174][ T4316] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 186.412383][ T6405] device syzkaller0 entered promiscuous mode [ 186.455879][ T4316] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 186.467026][ T4316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.478552][ T4316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.493658][ T4316] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 186.508929][ T4316] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 186.518517][ T4316] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 186.526710][ T4316] usb 3-1: Manufacturer: syz [ 186.533049][ T4316] usb 3-1: config 0 descriptor?? [ 186.584476][ T14] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 186.786170][ T26] audit: type=1326 audit(1781953458.285:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6377 comm="syz.0.735" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b1d39ce59 code=0x0 [ 186.788605][ T14] usb 4-1: unable to get BOS descriptor or descriptor too short [ 186.826868][ T14] usb 4-1: config 129 has an invalid interface number: 135 but max is 0 [ 186.840511][ T14] usb 4-1: config 129 has an invalid interface number: 5 but max is 0 [ 186.850329][ T14] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 186.886021][ T14] usb 4-1: config 129 has no interface number 0 [ 186.892376][ T14] usb 4-1: config 129 has no interface number 1 [ 186.893985][ T6414] loop5: detected capacity change from 0 to 7 [ 186.904627][ T14] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 186.915741][ T6414] Dev loop5: unable to read RDB block 7 [ 186.923208][ T14] usb 4-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 186.924116][ T6414] loop5: unable to read partition table [ 186.941333][ T6414] loop5: partition table beyond EOD, truncated [ 186.941771][ T14] usb 4-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 186.961369][ T6414] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 186.967302][ T14] usb 4-1: config 129 interface 135 has no altsetting 0 [ 186.980069][ T14] usb 4-1: config 129 interface 5 has no altsetting 0 [ 186.995225][ T4316] usbhid 3-1:0.0: can't add hid device: -71 [ 187.002985][ T4316] usbhid: probe of 3-1:0.0 failed with error -71 [ 187.016879][ T14] usb 4-1: string descriptor 0 read error: -22 [ 187.026574][ T14] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 187.038514][ T4316] usb 3-1: USB disconnect, device number 21 [ 187.053088][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.080220][ T14] usb 4-1: MIDIStreaming interface descriptor not found [ 187.144427][ T4262] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 187.307372][ T6419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.753'. [ 187.357990][ T4316] usb 4-1: USB disconnect, device number 37 [ 187.364823][ T4262] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.379122][ T4262] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.398952][ T4262] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 187.415949][ T4262] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.441756][ T4262] usb 5-1: config 0 descriptor?? [ 187.605030][ T22] usb 1-1: Service connection timeout for: 258 [ 187.611278][ T22] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 187.618709][ T6425] device syzkaller1 entered promiscuous mode [ 187.647855][ T22] ath9k_htc: Failed to initialize the device [ 187.686152][ T22] usb 1-1: ath9k_htc: USB layer deinitialized [ 187.854652][ T6411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.875570][ T6411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.918223][ T4262] usbhid 5-1:0.0: can't add hid device: -71 [ 187.931381][ T4262] usbhid: probe of 5-1:0.0 failed with error -71 [ 187.939778][ T4262] usb 5-1: USB disconnect, device number 31 [ 188.055296][ T6435] device syzkaller0 entered promiscuous mode [ 188.294449][ T127] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 188.380111][ T4262] usb 1-1: USB disconnect, device number 23 [ 188.488251][ T127] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 188.504255][ T127] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 188.516010][ T127] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 188.528868][ T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.549764][ T6438] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 188.600584][ T6454] device syzkaller1 entered promiscuous mode [ 188.777782][ T127] usb 4-1: USB disconnect, device number 38 [ 188.888227][ T4262] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 189.029514][ T6463] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 189.087440][ T4262] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 189.098477][ T4262] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.109761][ T4262] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.119576][ T4262] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 189.136844][ T4262] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 189.146206][ T4262] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 189.154561][ T4262] usb 1-1: Manufacturer: syz [ 189.161391][ T4262] usb 1-1: config 0 descriptor?? [ 189.244462][ T4318] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 189.344299][ T127] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 189.436825][ T4318] usb 5-1: unable to get BOS descriptor or descriptor too short [ 189.450622][ T4318] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 189.459080][ T4318] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 189.474298][ T4318] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 189.483489][ T4318] usb 5-1: config 129 has no interface number 0 [ 189.489882][ T4318] usb 5-1: config 129 has no interface number 1 [ 189.496318][ T4318] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 189.509633][ T4318] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 189.520603][ T4318] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 189.533856][ T4318] usb 5-1: config 129 interface 135 has no altsetting 0 [ 189.542039][ T4318] usb 5-1: config 129 interface 5 has no altsetting 0 [ 189.546380][ T127] usb 2-1: unable to get BOS descriptor or descriptor too short [ 189.558972][ T127] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 189.568602][ T127] usb 2-1: config 129 has an invalid interface number: 5 but max is 0 [ 189.580062][ T4318] usb 5-1: string descriptor 0 read error: -22 [ 189.583973][ T4262] usbhid 1-1:0.0: can't add hid device: -71 [ 189.593599][ T127] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 189.603654][ T4262] usbhid: probe of 1-1:0.0 failed with error -71 [ 189.605222][ T4318] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 189.611519][ T127] usb 2-1: config 129 has no interface number 0 [ 189.625560][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.635509][ T4262] usb 1-1: USB disconnect, device number 24 [ 189.642144][ T127] usb 2-1: config 129 has no interface number 1 [ 189.650345][ T14] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 189.662264][ T127] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 189.663789][ T4318] usb 5-1: MIDIStreaming interface descriptor not found [ 189.676915][ T127] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 189.700617][ T127] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 189.714444][ T127] usb 2-1: config 129 interface 135 has no altsetting 0 [ 189.721512][ T127] usb 2-1: config 129 interface 5 has no altsetting 0 [ 189.731958][ T127] usb 2-1: string descriptor 0 read error: -22 [ 189.738642][ T127] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 189.756847][ T127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.837692][ T127] usb 2-1: MIDIStreaming interface descriptor not found [ 189.854893][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 189.863876][ T14] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 189.873295][ T14] usb 3-1: config 0 has no interface number 0 [ 189.912706][ T14] usb 3-1: config 0 interface 12 has no altsetting 0 [ 189.938554][ T14] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 189.966247][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.980886][ T14] usb 3-1: Product: syz [ 189.985606][ T14] usb 3-1: Manufacturer: syz [ 189.990308][ T14] usb 3-1: SerialNumber: syz [ 189.996933][ T127] usb 5-1: USB disconnect, device number 32 [ 190.012963][ T14] usb 3-1: config 0 descriptor?? [ 190.063922][ T4262] usb 2-1: USB disconnect, device number 31 [ 190.504305][ T4318] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 190.689310][ T4318] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 190.704730][ T6488] device syzkaller1 entered promiscuous mode [ 190.706513][ T4318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.731649][ T4318] usb 1-1: Product: syz [ 190.740078][ T4318] usb 1-1: Manufacturer: syz [ 190.744852][ T4318] usb 1-1: SerialNumber: syz [ 190.775293][ T4318] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 190.830350][ T4318] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 191.003657][ T6496] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 191.124344][ T4280] Bluetooth: hci1: command 0x0406 tx timeout [ 191.124792][ T4279] Bluetooth: hci2: command 0x0406 tx timeout [ 191.130419][ T4280] Bluetooth: hci0: command 0x0406 tx timeout [ 191.136464][ T4279] Bluetooth: hci3: command 0x0406 tx timeout [ 191.136493][ T4279] Bluetooth: hci4: command 0x0406 tx timeout [ 191.640943][ T6510] device syzkaller0 entered promiscuous mode [ 191.651387][ T26] audit: type=1326 audit(1781953463.145:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.0.776" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b1d39ce59 code=0x0 [ 191.653080][ T6510] tipc: Enabled bearer , priority 0 [ 191.675207][ T22] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 191.700396][ T6509] tipc: Resetting bearer [ 191.753301][ T6509] tipc: Disabling bearer [ 191.876273][ T22] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 191.893485][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.905768][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.916470][ T22] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 191.931489][ T22] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 191.941363][ T22] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 191.950048][ T22] usb 4-1: Manufacturer: syz [ 191.967423][ T22] usb 4-1: config 0 descriptor?? [ 192.134321][ T4313] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 192.326270][ T4313] usb 2-1: unable to get BOS descriptor or descriptor too short [ 192.336360][ T4313] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 192.344833][ T4313] usb 2-1: config 129 has an invalid interface number: 5 but max is 0 [ 192.353073][ T4313] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 192.362310][ T4313] usb 2-1: config 129 has no interface number 0 [ 192.368668][ T4313] usb 2-1: config 129 has no interface number 1 [ 192.375066][ T4313] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 192.388530][ T4313] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 192.399800][ T4313] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 192.414519][ T4313] usb 2-1: config 129 interface 135 has no altsetting 0 [ 192.423524][ T4313] usb 2-1: config 129 interface 5 has no altsetting 0 [ 192.432922][ T22] usbhid 4-1:0.0: can't add hid device: -71 [ 192.439087][ T22] usbhid: probe of 4-1:0.0 failed with error -71 [ 192.457348][ T22] usb 4-1: USB disconnect, device number 39 [ 192.464064][ T4313] usb 2-1: string descriptor 0 read error: -22 [ 192.473458][ T4313] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 192.484354][ T4318] usb 1-1: Service connection timeout for: 258 [ 192.490557][ T4318] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 192.499935][ T4313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.538542][ T4313] usb 2-1: MIDIStreaming interface descriptor not found [ 192.546419][ T4318] ath9k_htc: Failed to initialize the device [ 192.557162][ T4318] usb 1-1: ath9k_htc: USB layer deinitialized [ 192.704894][ T14] f81534 3-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71 [ 192.713368][ T14] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 192.731388][ T14] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 192.739342][ T14] f81534: probe of 3-1:0.12 failed with error -71 [ 192.755438][ T14] usb 3-1: USB disconnect, device number 22 [ 192.784642][ T4262] usb 2-1: USB disconnect, device number 32 [ 193.042647][ T6527] device syzkaller1 entered promiscuous mode [ 193.136432][ T6529] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 193.277482][ T4359] usb 1-1: USB disconnect, device number 25 [ 193.454112][ T6543] device syzkaller0 entered promiscuous mode [ 193.482301][ T6543] tipc: Enabled bearer , priority 0 [ 193.505083][ T6542] tipc: Resetting bearer [ 193.561469][ T6542] tipc: Disabling bearer [ 193.719849][ T6552] device syzkaller1 entered promiscuous mode [ 193.833749][ T6558] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 193.959546][ T6565] netlink: 24 bytes leftover after parsing attributes in process `syz.4.810'. [ 193.994400][ T4262] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 194.167562][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.173930][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.176560][ T4316] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 194.194387][ T4262] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 194.211171][ T4262] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.222805][ T4262] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.237647][ T4262] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 194.267175][ T4262] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 194.276523][ T14] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 194.284143][ T4262] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 194.293139][ T4262] usb 1-1: Manufacturer: syz [ 194.299149][ T4262] usb 1-1: config 0 descriptor?? [ 194.384809][ T4316] usb 2-1: Using ep0 maxpacket: 32 [ 194.395816][ T4316] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 194.415610][ T4316] usb 2-1: config 0 has no interface number 0 [ 194.434417][ T4316] usb 2-1: config 0 interface 12 has no altsetting 0 [ 194.464138][ T4316] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 194.478146][ T14] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 194.501125][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.524739][ T4316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.540116][ T14] usb 3-1: Product: syz [ 194.554010][ T4316] usb 2-1: Product: syz [ 194.559499][ T14] usb 3-1: Manufacturer: syz [ 194.564412][ T14] usb 3-1: SerialNumber: syz [ 194.579539][ T4316] usb 2-1: Manufacturer: syz [ 194.591071][ T6582] device syzkaller0 entered promiscuous mode [ 194.602309][ T4316] usb 2-1: SerialNumber: syz [ 194.613073][ T6582] tipc: Enabled bearer , priority 0 [ 194.633787][ T14] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 194.648689][ T4316] usb 2-1: config 0 descriptor?? [ 194.670278][ T6581] tipc: Resetting bearer [ 194.671706][ T4277] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 194.726816][ T4262] usbhid 1-1:0.0: can't add hid device: -71 [ 194.732959][ T4262] usbhid: probe of 1-1:0.0 failed with error -71 [ 194.750499][ T6581] tipc: Disabling bearer [ 194.765902][ T4262] usb 1-1: USB disconnect, device number 26 [ 195.485159][ T26] audit: type=1326 audit(1781953466.985:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.2.811" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f64a619ce59 code=0x0 [ 196.037213][ T6598] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 196.324412][ T4277] usb 3-1: Service connection timeout for: 258 [ 196.330995][ T4277] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 196.354085][ T4277] ath9k_htc: Failed to initialize the device [ 196.380506][ T4277] usb 3-1: ath9k_htc: USB layer deinitialized [ 196.554321][ T4313] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 196.586792][ T6611] device syzkaller0 entered promiscuous mode [ 196.598342][ T6611] tipc: Started in network mode [ 196.603271][ T6611] tipc: Node identity 168d33db3a86, cluster identity 4711 [ 196.611682][ T6611] tipc: Enabled bearer , priority 0 [ 196.620080][ T6610] tipc: Resetting bearer [ 196.660433][ T6610] tipc: Disabling bearer [ 196.746328][ T4313] usb 5-1: unable to get BOS descriptor or descriptor too short [ 196.766258][ T4313] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 196.775845][ T4313] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 196.791422][ T4313] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 196.800922][ T4313] usb 5-1: config 129 has no interface number 0 [ 196.807758][ T4313] usb 5-1: config 129 has no interface number 1 [ 196.814652][ T4313] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 196.829057][ T4313] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 196.840322][ T4313] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 196.853767][ T4313] usb 5-1: config 129 interface 135 has no altsetting 0 [ 196.860919][ T4313] usb 5-1: config 129 interface 5 has no altsetting 0 [ 196.871379][ T4313] usb 5-1: string descriptor 0 read error: -22 [ 196.877737][ T4313] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 196.887034][ T4313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.911422][ T4313] usb 5-1: MIDIStreaming interface descriptor not found [ 197.029679][ T4262] usb 3-1: USB disconnect, device number 23 [ 197.134314][ T22] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 197.173415][ T4318] usb 5-1: USB disconnect, device number 33 [ 197.277707][ T4316] f81534 2-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71 [ 197.293782][ T4316] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 197.317546][ T22] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 197.340153][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.340373][ T4316] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 197.382152][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.382264][ T4316] f81534: probe of 2-1:0.12 failed with error -71 [ 197.402853][ T22] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 197.424824][ T4316] usb 2-1: USB disconnect, device number 33 [ 197.462209][ T22] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 197.471728][ T22] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 197.486462][ T22] usb 1-1: Manufacturer: syz [ 197.504000][ T22] usb 1-1: config 0 descriptor?? [ 197.734266][ T4262] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 197.934692][ T4262] usb 4-1: Using ep0 maxpacket: 8 [ 197.941128][ T22] usbhid 1-1:0.0: can't add hid device: -71 [ 197.945499][ T4262] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 197.953442][ T22] usbhid: probe of 1-1:0.0 failed with error -71 [ 197.964933][ T4262] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 197.973276][ T4262] usb 4-1: Product: syz [ 197.975658][ T22] usb 1-1: USB disconnect, device number 27 [ 197.990739][ T4262] usb 4-1: Manufacturer: syz [ 198.010385][ T4262] usb 4-1: SerialNumber: syz [ 198.022123][ T4262] usb 4-1: config 0 descriptor?? [ 198.056131][ T4262] gspca_main: sq905-2.14.0 probing 2770:9120 [ 198.442972][ T6621] snd_virmidi snd_virmidi.0: control 0:57412:0:syz0:0 is already present [ 198.492907][ T4262] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 198.525540][ T4262] sq905: probe of 4-1:0.0 failed with error -71 [ 198.539318][ T4262] usb 4-1: USB disconnect, device number 40 [ 198.946882][ T22] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 199.137096][ T22] usb 3-1: unable to get BOS descriptor or descriptor too short [ 199.160734][ T22] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 199.178714][ T22] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 199.214738][ T22] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 199.259025][ T22] usb 3-1: config 129 has no interface number 0 [ 199.282713][ T22] usb 3-1: config 129 has no interface number 1 [ 199.319694][ T22] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 199.345722][ T22] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 199.393732][ T22] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 199.421816][ T22] usb 3-1: config 129 interface 135 has no altsetting 0 [ 199.431899][ T22] usb 3-1: config 129 interface 5 has no altsetting 0 [ 199.457863][ T22] usb 3-1: string descriptor 0 read error: -22 [ 199.470729][ T22] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 199.509581][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.540167][ T22] usb 3-1: MIDIStreaming interface descriptor not found [ 199.594291][ T4313] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 199.799175][ T129] usb 3-1: USB disconnect, device number 24 [ 199.806331][ T4313] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 199.840942][ T4313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.862249][ T4313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.872322][ T4313] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 199.892063][ T4313] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 199.911957][ T4313] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 199.929908][ T4313] usb 5-1: Manufacturer: syz [ 199.944995][ T4313] usb 5-1: config 0 descriptor?? [ 200.370990][ T4313] usbhid 5-1:0.0: can't add hid device: -71 [ 200.394920][ T4313] usbhid: probe of 5-1:0.0 failed with error -71 [ 200.442118][ T4313] usb 5-1: USB disconnect, device number 34 [ 200.685525][ T6693] device syzkaller0 entered promiscuous mode [ 200.718614][ T6693] tipc: Enabled bearer , priority 0 [ 200.749138][ T6692] tipc: Resetting bearer [ 200.810135][ T6692] tipc: Disabling bearer [ 200.979488][ T4359] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 201.173551][ T4359] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.206291][ T4359] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 201.227087][ T4359] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 201.247342][ T4359] usb 3-1: Product: syz [ 201.257460][ T4359] usb 3-1: Manufacturer: syz [ 201.267571][ T4359] usb 3-1: SerialNumber: syz [ 201.336934][ T4316] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 201.344569][ T129] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 201.493410][ T4359] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 201.504503][ T129] usb 2-1: device descriptor read/64, error -71 [ 201.555183][ T4316] usb 5-1: Using ep0 maxpacket: 32 [ 201.565229][ T4316] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 201.582134][ T4316] usb 5-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 201.594600][ T4316] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=d3.7e [ 201.605037][ T4316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.622143][ T4316] usb 5-1: Product: syz [ 201.627412][ T4316] usb 5-1: Manufacturer: syz [ 201.633143][ T4316] usb 5-1: SerialNumber: syz [ 201.774486][ T129] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 201.857627][ T4316] usb 5-1: USB disconnect, device number 35 [ 201.904358][ T4359] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 201.934818][ T129] usb 2-1: device descriptor read/64, error -71 [ 202.055690][ T129] usb usb2-port1: attempt power cycle [ 202.096685][ T4359] usb 1-1: unable to get BOS descriptor or descriptor too short [ 202.112200][ T4359] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 202.122336][ T4359] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 202.131100][ T4359] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 202.140715][ T4359] usb 1-1: config 129 has no interface number 0 [ 202.147313][ T4359] usb 1-1: config 129 has no interface number 1 [ 202.153624][ T4359] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 202.176615][ T4359] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 202.200379][ T4359] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 202.230633][ T4359] usb 1-1: config 129 interface 135 has no altsetting 0 [ 202.248470][ T4359] usb 1-1: config 129 interface 5 has no altsetting 0 [ 202.263890][ T4359] usb 1-1: string descriptor 0 read error: -22 [ 202.270234][ T4359] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 202.279454][ T4359] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.304740][ T4359] usb 1-1: MIDIStreaming interface descriptor not found [ 202.464453][ T129] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 202.495087][ T129] usb 2-1: device descriptor read/8, error -71 [ 202.514152][ T6731] loop5: detected capacity change from 0 to 7 [ 202.529140][ T6731] Dev loop5: unable to read RDB block 7 [ 202.540791][ T6731] loop5: unable to read partition table [ 202.557394][ T6731] loop5: partition table beyond EOD, truncated [ 202.560446][ T4313] usb 1-1: USB disconnect, device number 28 [ 202.591135][ T6731] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 202.774405][ T129] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 202.814903][ T129] usb 2-1: device descriptor read/8, error -71 [ 202.944541][ T129] usb usb2-port1: unable to enumerate USB device [ 203.024390][ T4359] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 203.217645][ T4359] usb 5-1: unable to get BOS descriptor or descriptor too short [ 203.228832][ T4359] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 203.243886][ T4359] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 203.252393][ T4359] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 203.276982][ T4359] usb 5-1: config 129 has no interface number 0 [ 203.283459][ T4359] usb 5-1: config 129 has no interface number 1 [ 203.291032][ T4359] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 203.305174][ T4359] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 203.317305][ T4359] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 203.341091][ T4359] usb 5-1: config 129 interface 135 has no altsetting 0 [ 203.353741][ T4359] usb 5-1: config 129 interface 5 has no altsetting 0 [ 203.375642][ T4359] usb 5-1: string descriptor 0 read error: -22 [ 203.390329][ T4359] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 203.419975][ T4359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.474172][ T4359] usb 5-1: MIDIStreaming interface descriptor not found [ 203.716042][ T4316] usb 5-1: USB disconnect, device number 36 [ 203.941968][ T6759] netlink: 16 bytes leftover after parsing attributes in process `syz.0.881'. [ 204.313384][ T6765] device syzkaller0 entered promiscuous mode [ 204.335981][ T6765] tipc: Enabled bearer , priority 0 [ 204.359807][ T6764] tipc: Resetting bearer [ 204.362214][ T6767] netlink: 20 bytes leftover after parsing attributes in process `syz.3.886'. [ 204.485626][ T6764] tipc: Disabling bearer [ 205.272311][ T6799] program syz.1.893 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.834363][ T4313] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 205.994313][ T4313] usb 5-1: device descriptor read/64, error -71 [ 206.264396][ T4313] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 206.278964][ T6815] device syzkaller0 entered promiscuous mode [ 206.425391][ T4313] usb 5-1: device descriptor read/64, error -71 [ 206.523539][ T6822] loop5: detected capacity change from 0 to 7 [ 206.535851][ T6822] Dev loop5: unable to read RDB block 7 [ 206.542603][ T6822] loop5: unable to read partition table [ 206.544551][ T4313] usb usb5-port1: attempt power cycle [ 206.553862][ T6822] loop5: partition table beyond EOD, truncated [ 206.570446][ T6822] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 206.964450][ T4313] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 207.015830][ T4313] usb 5-1: device descriptor read/8, error -71 [ 207.284485][ T4313] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 207.345039][ T4313] usb 5-1: device descriptor read/8, error -71 [ 207.464483][ T4313] usb usb5-port1: unable to enumerate USB device [ 208.293672][ T4277] usb 3-1: USB disconnect, device number 25 [ 208.310363][ T4277] usblp0: removed [ 208.612098][ T6843] netlink: 16 bytes leftover after parsing attributes in process `syz.1.906'. [ 208.853706][ T6855] sg_write: data in/out 301408/136 bytes for SCSI command 0x0-- guessing data in; [ 208.853706][ T6855] program syz.0.911 not setting count and/or reply_len properly [ 209.029299][ T4316] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 209.244391][ T4316] usb 5-1: Using ep0 maxpacket: 8 [ 209.251546][ T4316] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 209.260469][ T4316] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 209.271569][ T4316] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.285673][ T4316] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 209.295589][ T4316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.317437][ T4316] usbtmc 5-1:16.0: bulk endpoints not found [ 209.513061][ T6879] netlink: 16 bytes leftover after parsing attributes in process `syz.2.919'. [ 209.514263][ T4277] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 209.754290][ T4277] usb 2-1: Using ep0 maxpacket: 8 [ 209.760817][ T4277] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 209.797318][ T4277] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 209.817875][ T4277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.855246][ T4277] usb 2-1: config 0 descriptor?? [ 210.076797][ T4277] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 210.210395][ T6898] netlink: 44 bytes leftover after parsing attributes in process `syz.3.926'. [ 210.560663][ T4277] usb 2-1: USB disconnect, device number 38 [ 210.560740][ C1] iowarrior 2-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 210.628397][ T4359] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 210.824887][ T4359] usb 3-1: Using ep0 maxpacket: 32 [ 210.836031][ T4359] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.852842][ T4359] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.864117][ T4359] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 210.879035][ T4359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.889935][ T4359] usb 3-1: config 0 descriptor?? [ 210.902860][ T4359] hub 3-1:0.0: USB hub found [ 211.116803][ T4359] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 211.197415][ T6916] ALSA: mixer_oss: invalid OSS volume 'SPEA9¦KŸsË â¢+ñI2KER' [ 211.207269][ T6916] ALSA: mixer_oss: invalid OSS volume 'VOLUME:00000000' [ 211.214812][ T6916] ALSA: mixer_oss: invalid OSS volume '6' [ 211.220768][ T6916] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 211.254487][ T6916] ALSA: mixer_oss: invalid OSS volume '7' [ 211.361182][ T6921] device syzkaller0 entered promiscuous mode [ 211.371254][ T6922] device syzkaller1 entered promiscuous mode [ 211.379892][ T6921] tipc: Enabled bearer , priority 0 [ 211.443553][ T6919] tipc: Resetting bearer [ 211.490703][ T6919] tipc: Disabling bearer [ 211.536561][ T4359] hid-generic 0003:046D:C31C.0003: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 211.561519][ T6929] netlink: 44 bytes leftover after parsing attributes in process `syz.0.937'. [ 211.670984][ T4316] usb 5-1: USB disconnect, device number 41 [ 212.174705][ T6903] usb 3-1: reset high-speed USB device number 26 using dummy_hcd [ 212.374838][ T6903] usb 3-1: device firmware changed [ 212.390006][ T4277] usb 3-1: USB disconnect, device number 26 [ 212.574550][ T4277] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 212.712421][ T6954] device syzkaller1 entered promiscuous mode [ 212.774435][ T4277] usb 3-1: Using ep0 maxpacket: 32 [ 212.785053][ T4277] usb 3-1: unable to get BOS descriptor or descriptor too short [ 212.825065][ T4277] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 212.844305][ T4277] usb 3-1: can't read configurations, error -71 [ 213.177799][ T6961] device syzkaller0 entered promiscuous mode [ 213.193391][ T6961] tipc: Enabled bearer , priority 0 [ 213.200598][ T129] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 213.219724][ T6960] tipc: Resetting bearer [ 213.254535][ T6960] tipc: Disabling bearer [ 213.397963][ T129] usb 5-1: Using ep0 maxpacket: 8 [ 213.409913][ T129] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 213.428641][ T129] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 213.444330][ T4262] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 213.459739][ T129] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.496242][ T129] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 213.525881][ T129] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.563504][ T129] usbtmc 5-1:16.0: bulk endpoints not found [ 213.614049][ T6973] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 213.646997][ T4262] usb 1-1: unable to get BOS descriptor or descriptor too short [ 213.667253][ T4262] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 213.696702][ T4262] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 213.714295][ T4262] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 213.724854][ T4262] usb 1-1: config 129 has no interface number 0 [ 213.731146][ T4262] usb 1-1: config 129 has no interface number 1 [ 213.759169][ T4262] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 213.799294][ T4262] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 213.820142][ T4262] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 213.839289][ T4262] usb 1-1: config 129 interface 135 has no altsetting 0 [ 213.848276][ T4262] usb 1-1: config 129 interface 5 has no altsetting 0 [ 213.859673][ T4262] usb 1-1: string descriptor 0 read error: -22 [ 213.884425][ T4262] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 213.893529][ T4262] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.918100][ T4262] usb 1-1: MIDIStreaming interface descriptor not found [ 214.663119][ T7005] device syzkaller0 entered promiscuous mode [ 214.676152][ T7005] tipc: Enabled bearer , priority 0 [ 214.685697][ T7004] tipc: Resetting bearer [ 214.716154][ T7004] tipc: Disabling bearer [ 215.073485][ T7013] netlink: 36 bytes leftover after parsing attributes in process `syz.1.967'. [ 215.998968][ T129] usb 5-1: USB disconnect, device number 42 [ 216.271267][ T4277] usb 1-1: USB disconnect, device number 29 [ 216.514786][ T7047] tipc: Enabled bearer , priority 0 [ 216.564062][ T7042] tipc: Disabling bearer [ 217.282413][ T7069] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 217.389373][ T7060] device syzkaller0 entered promiscuous mode [ 217.494677][ T4316] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 217.502871][ T4262] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 217.704386][ T4262] usb 4-1: Using ep0 maxpacket: 8 [ 217.711557][ T4316] usb 1-1: unable to get BOS descriptor or descriptor too short [ 217.720686][ T4262] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 217.735478][ T4316] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 217.751391][ T4262] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 217.762030][ T4316] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 217.771771][ T4262] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 217.785062][ T4316] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 217.794581][ T4316] usb 1-1: config 129 has no interface number 0 [ 217.800935][ T4316] usb 1-1: config 129 has no interface number 1 [ 217.807755][ T4262] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 217.816964][ T4316] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 217.831686][ T4277] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 217.840126][ T4262] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.857795][ T4316] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 217.869223][ T4316] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 217.870363][ T4262] usbtmc 4-1:16.0: bulk endpoints not found [ 217.890753][ T4316] usb 1-1: config 129 interface 135 has no altsetting 0 [ 217.897832][ T4316] usb 1-1: config 129 interface 5 has no altsetting 0 [ 217.917547][ T4316] usb 1-1: string descriptor 0 read error: -22 [ 217.925404][ T4316] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 217.935599][ T4316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.970514][ T4316] usb 1-1: MIDIStreaming interface descriptor not found [ 218.057923][ T4277] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 218.073368][ T4277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.092057][ T4277] usb 2-1: Product: syz [ 218.096393][ T4277] usb 2-1: Manufacturer: syz [ 218.101014][ T4277] usb 2-1: SerialNumber: syz [ 218.140669][ T4277] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 218.190743][ T4277] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 219.106976][ T4316] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 219.121405][ T26] audit: type=1326 audit(1781953490.615:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.1.986" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f580f79ce59 code=0x0 [ 219.349377][ T4316] usb 5-1: unable to get BOS descriptor or descriptor too short [ 219.359230][ T4316] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 219.369536][ T4316] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 219.379660][ T4316] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 219.388993][ T4316] usb 5-1: config 129 has no interface number 0 [ 219.395693][ T4316] usb 5-1: config 129 has no interface number 1 [ 219.402101][ T4316] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 219.417419][ T4316] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 219.428843][ T4316] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 219.442923][ T4316] usb 5-1: config 129 interface 135 has no altsetting 0 [ 219.458312][ T4316] usb 5-1: config 129 interface 5 has no altsetting 0 [ 219.485643][ T4316] usb 5-1: string descriptor 0 read error: -22 [ 219.491972][ T4316] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 219.501141][ T4316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.530315][ T4316] usb 5-1: MIDIStreaming interface descriptor not found [ 219.844454][ T4277] usb 2-1: Service connection timeout for: 258 [ 219.852841][ T4277] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 219.886873][ T4277] ath9k_htc: Failed to initialize the device [ 219.897609][ T4277] usb 2-1: ath9k_htc: USB layer deinitialized [ 220.141603][ T4262] usb 1-1: USB disconnect, device number 30 [ 220.185426][ T4359] usb 5-1: USB disconnect, device number 43 [ 220.296594][ T4316] usb 4-1: USB disconnect, device number 41 [ 220.712512][ T7128] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 220.861132][ T4316] usb 2-1: USB disconnect, device number 39 [ 220.904531][ T4359] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 221.094290][ T4359] usb 1-1: Using ep0 maxpacket: 32 [ 221.110789][ T4359] usb 1-1: config 6 has an invalid interface number: 132 but max is 0 [ 221.119259][ T4359] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 221.136570][ T4359] usb 1-1: config 6 has no interface number 0 [ 221.143119][ T4359] usb 1-1: config 6 interface 132 altsetting 6 endpoint 0xA has an invalid bInterval 248, changing to 7 [ 221.160817][ T4359] usb 1-1: config 6 interface 132 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 221.179598][ T4359] usb 1-1: config 6 interface 132 has no altsetting 0 [ 221.192779][ T4359] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=d3.7e [ 221.207692][ T4359] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.217368][ T4359] usb 1-1: Product: syz [ 221.221758][ T4359] usb 1-1: Manufacturer: syz [ 221.230918][ T4359] usb 1-1: SerialNumber: syz [ 221.451428][ T4359] usbtest 1-1:6.132: couldn't get endpoints, -22 [ 221.461531][ T4359] usbtest: probe of 1-1:6.132 failed with error -22 [ 221.539952][ T4359] usb 1-1: USB disconnect, device number 31 [ 221.884406][ T4316] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 221.994535][ T7156] device syzkaller0 entered promiscuous mode [ 222.017778][ T7156] tipc: Enabled bearer , priority 0 [ 222.050152][ T7154] tipc: Resetting bearer [ 222.084455][ T4316] usb 4-1: Using ep0 maxpacket: 8 [ 222.091439][ T4316] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 222.108208][ T4316] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 222.123936][ T4316] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 222.135562][ T4316] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 222.142053][ T7154] tipc: Disabling bearer [ 222.151432][ T4316] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 222.170346][ T4316] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 222.180972][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.203093][ T4316] usbtmc 4-1:16.0: bulk endpoints not found [ 222.247050][ T7161] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 222.574932][ T129] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 222.766574][ T129] usb 2-1: unable to get BOS descriptor or descriptor too short [ 222.779889][ T129] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 222.789885][ T129] usb 2-1: config 129 has an invalid interface number: 5 but max is 0 [ 222.802487][ T129] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 222.814014][ T129] usb 2-1: config 129 has no interface number 0 [ 222.826970][ T129] usb 2-1: config 129 has no interface number 1 [ 222.833359][ T129] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 222.854076][ T129] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 222.870603][ T129] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 222.884166][ T129] usb 2-1: config 129 interface 135 has no altsetting 0 [ 222.896811][ T129] usb 2-1: config 129 interface 5 has no altsetting 0 [ 222.912444][ T129] usb 2-1: string descriptor 0 read error: -22 [ 222.920095][ T129] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 222.930116][ T129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.958831][ T129] usb 2-1: MIDIStreaming interface descriptor not found [ 223.129373][ T7197] loop5: detected capacity change from 0 to 7 [ 223.136842][ T4265] Dev loop5: unable to read RDB block 7 [ 223.142515][ T4265] loop5: unable to read partition table [ 223.149569][ T4265] loop5: partition table beyond EOD, truncated [ 223.159638][ T7197] Dev loop5: unable to read RDB block 7 [ 223.165943][ T7197] loop5: unable to read partition table [ 223.172975][ T7197] loop5: partition table beyond EOD, truncated [ 223.179739][ T7197] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 223.507695][ T7207] device syzkaller0 entered promiscuous mode [ 223.518794][ T7207] tipc: Enabled bearer , priority 0 [ 223.527023][ T7206] tipc: Resetting bearer [ 223.563664][ T7206] tipc: Disabling bearer [ 224.024366][ T4316] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 224.079492][ T7234] loop5: detected capacity change from 0 to 7 [ 224.087347][ T4265] Dev loop5: unable to read RDB block 7 [ 224.092955][ T4265] loop5: unable to read partition table [ 224.099692][ T4265] loop5: partition table beyond EOD, truncated [ 224.106819][ T7234] Dev loop5: unable to read RDB block 7 [ 224.115095][ T7234] loop5: unable to read partition table [ 224.120920][ T7234] loop5: partition table beyond EOD, truncated [ 224.135150][ T7234] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 224.234333][ T4316] usb 5-1: Using ep0 maxpacket: 8 [ 224.248555][ T4316] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 224.263321][ T4316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 224.273334][ T4316] usb 5-1: Product: syz [ 224.285774][ T4316] usb 5-1: Manufacturer: syz [ 224.291171][ T4316] usb 5-1: SerialNumber: syz [ 224.304519][ T4316] usb 5-1: config 0 descriptor?? [ 224.313427][ T4316] gspca_main: sq905-2.14.0 probing 2770:9120 [ 224.635105][ T4277] usb 4-1: USB disconnect, device number 42 [ 224.715959][ T7216] snd_virmidi snd_virmidi.0: control 0:57412:0:syz0:0 is already present [ 224.749449][ T4316] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 224.762746][ T4316] sq905: probe of 5-1:0.0 failed with error -71 [ 224.773430][ T4316] usb 5-1: USB disconnect, device number 44 [ 224.818316][ T7247] device syzkaller0 entered promiscuous mode [ 224.838629][ T7247] tipc: Enabled bearer , priority 0 [ 224.855859][ T7246] tipc: Resetting bearer [ 224.889105][ T7246] tipc: Disabling bearer [ 225.302375][ T7269] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1039'. [ 225.350860][ T4313] usb 2-1: USB disconnect, device number 40 [ 225.704497][ T129] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 225.857216][ T4313] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 225.897368][ T129] usb 5-1: Using ep0 maxpacket: 8 [ 225.904463][ T129] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 225.920205][ T129] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 225.939750][ T129] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.968842][ T129] usb 5-1: config 0 descriptor?? [ 225.978695][ T7286] device syzkaller0 entered promiscuous mode [ 226.005967][ T7286] tipc: Enabled bearer , priority 0 [ 226.027990][ T7285] tipc: Resetting bearer [ 226.056269][ T4313] usb 2-1: Using ep0 maxpacket: 8 [ 226.073058][ T4313] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 226.074792][ T7285] tipc: Disabling bearer [ 226.096752][ T4313] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 226.117620][ T4313] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 226.137677][ T4313] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 226.157695][ T4313] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 226.181057][ T4313] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 226.194140][ T129] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 226.231183][ T4313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.274364][ T4313] usbtmc 2-1:16.0: bulk endpoints not found [ 227.134313][ T4313] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 227.324283][ T4313] usb 4-1: Using ep0 maxpacket: 8 [ 227.335398][ T4313] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 227.352136][ T4313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 227.361587][ T4313] usb 4-1: Product: syz [ 227.372941][ T4313] usb 4-1: Manufacturer: syz [ 227.377810][ T4313] usb 4-1: SerialNumber: syz [ 227.396020][ T4313] usb 4-1: config 0 descriptor?? [ 227.412355][ T4313] gspca_main: sq905-2.14.0 probing 2770:9120 [ 227.784305][ T129] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 227.810809][ T7299] snd_virmidi snd_virmidi.0: control 0:57412:0:syz0:0 is already present [ 227.822728][ T4313] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 227.832171][ T4313] sq905: probe of 4-1:0.0 failed with error -71 [ 227.841101][ T4313] usb 4-1: USB disconnect, device number 43 [ 227.965487][ T129] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.976853][ T129] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.987008][ T129] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 228.000530][ T129] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 228.010194][ T129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.034634][ T129] usb 1-1: config 0 descriptor?? [ 228.119238][ T7312] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 228.452439][ T129] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 228.455960][ T7318] ALSA: mixer_oss: invalid OSS volume 'SPEA9¦KŸsË â¢+ñI2KER' [ 228.481081][ T129] plantronics 0003:047F:FFFF.0004: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 228.532958][ T129] usb 5-1: USB disconnect, device number 45 [ 228.661494][ T4316] usb 1-1: USB disconnect, device number 32 [ 228.756949][ T7321] fido_id[7321]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 229.024309][ T4262] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 229.094289][ T129] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 229.224708][ T4262] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 229.246528][ T4262] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 229.263535][ T4262] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 229.271743][ T4262] usb 4-1: Product: syz [ 229.276014][ T129] usb 3-1: Using ep0 maxpacket: 32 [ 229.281590][ T4262] usb 4-1: Manufacturer: syz [ 229.286315][ T4262] usb 4-1: SerialNumber: syz [ 229.286871][ T129] usb 3-1: config 6 has an invalid interface number: 132 but max is 0 [ 229.319726][ T129] usb 3-1: config 6 has no interface number 0 [ 229.326335][ T129] usb 3-1: config 6 interface 132 altsetting 6 endpoint 0xA has an invalid bInterval 248, changing to 7 [ 229.337902][ T129] usb 3-1: config 6 interface 132 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 229.354310][ T129] usb 3-1: config 6 interface 132 has no altsetting 0 [ 229.367409][ T129] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=d3.7e [ 229.388954][ T129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.397505][ T129] usb 3-1: Product: syz [ 229.401699][ T129] usb 3-1: Manufacturer: syz [ 229.412098][ T129] usb 3-1: SerialNumber: syz [ 229.474517][ T4313] usb 2-1: USB disconnect, device number 41 [ 229.520419][ T4262] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 44 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 229.630359][ T129] usbtest 3-1:6.132: couldn't get endpoints, -22 [ 229.646631][ T129] usbtest: probe of 3-1:6.132 failed with error -22 [ 229.657704][ T7341] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 229.660914][ T129] usb 3-1: USB disconnect, device number 29 [ 230.194443][ T4277] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 230.204389][ T129] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 230.394577][ T4277] usb 2-1: Using ep0 maxpacket: 8 [ 230.405314][ T4277] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 230.411939][ T129] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 230.414908][ T4277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 230.414934][ T4277] usb 2-1: Product: syz [ 230.414951][ T4277] usb 2-1: Manufacturer: syz [ 230.414966][ T4277] usb 2-1: SerialNumber: syz [ 230.451679][ T129] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.457850][ T4277] usb 2-1: config 0 descriptor?? [ 230.459825][ T129] usb 5-1: Product: syz [ 230.469509][ T129] usb 5-1: Manufacturer: syz [ 230.474127][ T129] usb 5-1: SerialNumber: syz [ 230.486450][ T129] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 230.489325][ T4277] gspca_main: sq905-2.14.0 probing 2770:9120 [ 230.513404][ T129] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 230.522786][ T22] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 230.704432][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 230.712885][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 230.732723][ T22] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 230.742542][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.753460][ T22] usb 3-1: config 0 descriptor?? [ 230.881200][ T7344] snd_virmidi snd_virmidi.0: control 0:57412:0:syz0:0 is already present [ 230.895836][ T4277] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 230.903354][ T4277] sq905: probe of 2-1:0.0 failed with error -71 [ 230.924598][ T4277] usb 2-1: USB disconnect, device number 42 [ 230.966503][ T22] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 231.168742][ T22] usb 3-1: USB disconnect, device number 30 [ 231.348774][ T26] audit: type=1326 audit(1781953502.845:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.4.1067" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f21a6b9ce59 code=0x0 [ 231.490645][ T7363] loop5: detected capacity change from 0 to 7 [ 231.506236][ T7363] loop5: [ 231.515878][ T7363] loop5: partition table partially beyond EOD, truncated [ 231.848102][ T7370] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 232.164574][ T129] usb 5-1: Service connection timeout for: 258 [ 232.170794][ T129] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 232.209605][ T129] ath9k_htc: Failed to initialize the device [ 232.223551][ T129] usb 5-1: ath9k_htc: USB layer deinitialized [ 233.016305][ T4359] usb 5-1: USB disconnect, device number 46 [ 233.328024][ T7389] device syzkaller0 entered promiscuous mode [ 233.817041][ T4277] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 233.915832][ T7411] loop5: detected capacity change from 0 to 7 [ 233.923791][ T4265] loop5: [ 233.932692][ T4265] loop5: partition table partially beyond EOD, truncated [ 233.951060][ T7411] loop5: [ 233.960123][ T7411] loop5: partition table partially beyond EOD, truncated [ 234.031691][ T4277] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.050832][ T4277] usb 5-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 234.067496][ T4277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.092877][ T4277] usb 5-1: config 0 descriptor?? [ 234.118650][ T4277] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 234.704956][ T4277] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 234.895034][ T4277] usb 1-1: Using ep0 maxpacket: 8 [ 234.917938][ T4277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 234.928982][ T4277] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 234.938439][ T4277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.955724][ T4277] usb 1-1: config 0 descriptor?? [ 235.183847][ T4277] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 235.390989][ T129] usb 1-1: USB disconnect, device number 33 [ 235.589254][ T4359] usb 5-1: USB disconnect, device number 47 [ 236.427220][ T4277] usb 4-1: USB disconnect, device number 44 [ 236.461141][ T4277] usblp0: removed [ 236.572241][ T7453] loop5: detected capacity change from 0 to 7 [ 236.580604][ T4265] Dev loop5: unable to read RDB block 7 [ 236.587438][ T4265] loop5: unable to read partition table [ 236.593281][ T4265] loop5: partition table beyond EOD, truncated [ 236.602632][ T7453] Dev loop5: unable to read RDB block 7 [ 236.609073][ T7453] loop5: unable to read partition table [ 236.627835][ T7453] loop5: partition table beyond EOD, truncated [ 236.646815][ T7453] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 236.714292][ T4359] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 236.858818][ T7457] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) ! [ 236.883664][ T7457] device syzkaller0 entered promiscuous mode [ 236.909210][ T4359] usb 2-1: unable to get BOS descriptor or descriptor too short [ 236.935377][ T4359] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 236.959403][ T4359] usb 2-1: config 129 has an invalid interface number: 5 but max is 0 [ 236.978025][ T4359] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 237.033214][ T4359] usb 2-1: config 129 has no interface number 0 [ 237.057607][ T4359] usb 2-1: config 129 has no interface number 1 [ 237.070082][ T4359] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 237.090233][ T4359] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 237.113739][ T4359] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 237.149674][ T4359] usb 2-1: config 129 interface 135 has no altsetting 0 [ 237.159518][ T7466] device syzkaller0 entered promiscuous mode [ 237.169381][ T4359] usb 2-1: config 129 interface 5 has no altsetting 0 [ 237.208492][ T4359] usb 2-1: string descriptor 0 read error: -22 [ 237.224406][ T4359] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 237.252833][ T4359] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.291420][ T4359] usb 2-1: MIDIStreaming interface descriptor not found [ 237.544389][ T4277] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 237.550739][ T4359] usb 2-1: USB disconnect, device number 43 [ 237.744403][ T4277] usb 4-1: Using ep0 maxpacket: 8 [ 237.753680][ T4277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 237.773031][ T4277] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 237.784845][ T4277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.810489][ T4277] usb 4-1: config 0 descriptor?? [ 238.030685][ T4277] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 238.455424][ T4262] usb 4-1: USB disconnect, device number 45 [ 239.095176][ T7490] ALSA: mixer_oss: invalid OSS volume 'SPEA9¦KŸsË â¢+ñI2KER' [ 240.822297][ T7499] loop5: detected capacity change from 0 to 7 [ 240.867390][ T4265] Dev loop5: unable to read RDB block 7 [ 240.873071][ T4265] loop5: unable to read partition table [ 240.882759][ T4265] loop5: partition table beyond EOD, truncated [ 240.899810][ T7499] Dev loop5: unable to read RDB block 7 [ 240.913697][ T7499] loop5: unable to read partition table [ 240.924036][ T7499] loop5: partition table beyond EOD, truncated [ 240.944346][ T7499] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 240.950072][ T7506] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) ! [ 241.000754][ T7506] device syzkaller0 entered promiscuous mode [ 241.486839][ T7529] ALSA: mixer_oss: invalid OSS volume 'SPEA9¦KŸsË â¢+ñI2KER' [ 241.614283][ T129] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 241.758923][ T7535] device syzkaller0 entered promiscuous mode [ 241.804384][ T129] usb 1-1: Using ep0 maxpacket: 8 [ 241.811897][ T129] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 241.843796][ T129] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 241.869201][ T129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.891717][ T129] usb 1-1: config 0 descriptor?? [ 242.122158][ T129] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 242.540754][ T129] usb 1-1: USB disconnect, device number 34 [ 243.191936][ T7551] loop5: detected capacity change from 0 to 7 [ 243.228287][ T7551] Dev loop5: unable to read RDB block 7 [ 243.234127][ T7551] loop5: unable to read partition table [ 243.243544][ T7551] loop5: partition table beyond EOD, truncated [ 243.264484][ T7551] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 244.536601][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1123'. [ 244.545746][ T7541] bond0: option lp_interval: invalid value (0) [ 244.551909][ T7541] bond0: option lp_interval: allowed values 1 - 2147483647 [ 244.567220][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 244.591913][ T7554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 244.637324][ T7558] device syzkaller0 entered promiscuous mode [ 244.894884][ T7574] ALSA: mixer_oss: invalid OSS volume 'SPEA9¦KŸsË â¢+ñI2KER' [ 245.314328][ T4313] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 245.508360][ T4313] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 245.532488][ T4313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.549916][ T4313] usb 2-1: Product: syz [ 245.557246][ T4313] usb 2-1: Manufacturer: syz [ 245.566062][ T4313] usb 2-1: SerialNumber: syz [ 245.590735][ T4313] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 245.646745][ T4313] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 245.666869][ T7599] device syzkaller0 entered promiscuous mode [ 245.774359][ T129] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 245.918947][ T7602] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) ! [ 245.948058][ T7602] device syzkaller0 entered promiscuous mode [ 245.954547][ T129] usb 3-1: Using ep0 maxpacket: 32 [ 245.961656][ T129] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 246.045100][ T129] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 246.071344][ T129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.082271][ T129] usb 3-1: Product: syz [ 246.092143][ T129] usb 3-1: Manufacturer: syz [ 246.103106][ T129] usb 3-1: SerialNumber: syz [ 246.161600][ T129] snd-ua101 3-1:1.1: invalid format type [ 246.173896][ T129] snd-ua101 3-1:1.0: invalid num_altsetting [ 246.354929][ T14] usb 3-1: USB disconnect, device number 31 [ 246.459735][ T26] audit: type=1326 audit(1781953517.955:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7582 comm="syz.1.1136" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f580f79ce59 code=0x0 [ 247.284650][ T4313] usb 2-1: Service connection timeout for: 258 [ 247.291483][ T4313] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 247.330683][ T129] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 247.359231][ T4313] ath9k_htc: Failed to initialize the device [ 247.379399][ T4313] usb 2-1: ath9k_htc: USB layer deinitialized [ 247.422047][ T7632] device syzkaller0 entered promiscuous mode [ 247.514688][ T129] usb 5-1: Using ep0 maxpacket: 32 [ 247.523434][ T129] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 247.533399][ T129] usb 5-1: config 0 has no interface number 0 [ 247.535210][ T7635] device syzkaller0 entered promiscuous mode [ 247.549056][ T129] usb 5-1: config 0 interface 12 has no altsetting 0 [ 247.561532][ T129] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 247.577291][ T129] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.588553][ T129] usb 5-1: Product: syz [ 247.592776][ T129] usb 5-1: Manufacturer: syz [ 247.610697][ T129] usb 5-1: SerialNumber: syz [ 247.617906][ T129] usb 5-1: config 0 descriptor?? [ 247.681776][ T7637] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) ! [ 247.714859][ T7637] device syzkaller0 entered promiscuous mode [ 247.835687][ T7642] loop5: detected capacity change from 0 to 7 [ 247.861293][ T7642] Dev loop5: unable to read RDB block 7 [ 247.894672][ T7642] loop5: unable to read partition table [ 247.920675][ T7642] loop5: partition table beyond EOD, truncated [ 247.952322][ T7642] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 248.018190][ T7648] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1159'. [ 248.112534][ T22] usb 2-1: USB disconnect, device number 44 [ 249.626186][ T7672] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) ! [ 249.669195][ T7672] device syzkaller0 entered promiscuous mode [ 250.060776][ T129] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 250.073851][ T129] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 250.101460][ T129] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 250.113417][ T129] f81534: probe of 5-1:0.12 failed with error -71 [ 250.132612][ T129] usb 5-1: USB disconnect, device number 48 [ 250.262118][ T7692] loop5: detected capacity change from 0 to 7 [ 250.270469][ T7692] Dev loop5: unable to read RDB block 7 [ 250.276575][ T7692] loop5: unable to read partition table [ 250.282751][ T7692] loop5: partition table beyond EOD, truncated [ 250.307218][ T7692] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 250.814455][ T4313] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 251.017520][ T4313] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 251.040139][ T4313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.067612][ T4313] usb 4-1: Product: syz [ 251.071798][ T4313] usb 4-1: Manufacturer: syz [ 251.091231][ T4313] usb 4-1: SerialNumber: syz [ 251.128137][ T4313] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 251.202745][ T4313] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 251.394491][ T4262] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 251.455395][ T7712] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) ! [ 251.469391][ T7712] device syzkaller0 entered promiscuous mode [ 251.594319][ T4262] usb 3-1: Using ep0 maxpacket: 8 [ 251.601725][ T4262] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 251.613205][ T4262] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 251.658438][ T4262] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 251.681812][ T4262] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 251.713704][ T4262] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 251.739978][ T4262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.871180][ T26] audit: type=1326 audit(1781953523.365:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7715 comm="syz.1.1183" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f580f79ce59 code=0x0 [ 251.974359][ T4262] usb 3-1: GET_CAPABILITIES returned 0 [ 251.985598][ T4262] usbtmc 3-1:16.0: can't read capabilities [ 252.013111][ T26] audit: type=1326 audit(1781953523.505:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.3.1173" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fceb079ce59 code=0x0 [ 252.203549][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 252.212930][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 252.222034][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 252.231112][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 252.249383][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 252.258495][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 252.267598][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 252.276692][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 252.291177][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 252.300303][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 252.309424][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 252.321882][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 252.331008][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 252.340080][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 252.349181][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 252.358269][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 252.433588][ T129] usb 3-1: USB disconnect, device number 32 [ 252.884628][ T4313] usb 4-1: Service connection timeout for: 258 [ 252.893272][ T4313] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 252.940273][ T4313] ath9k_htc: Failed to initialize the device [ 252.969576][ T4313] usb 4-1: ath9k_htc: USB layer deinitialized [ 253.213046][ T7740] device gretap1 entered promiscuous mode [ 253.521011][ T4316] usb 4-1: USB disconnect, device number 46 [ 253.524376][ T22] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 253.726279][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 253.753791][ T22] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 253.784147][ T22] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 253.804623][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.825019][ T22] usb 5-1: config 0 descriptor?? [ 254.039270][ T22] ath6kl: Failed to submit usb control message: -71 [ 254.054342][ T22] ath6kl: unable to send the bmi data to the device: -71 [ 254.061467][ T22] ath6kl: Unable to send get target info: -71 [ 254.116452][ T22] ath6kl: Failed to init ath6kl core: -71 [ 254.180144][ T22] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 254.188819][ T7762] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) ! [ 254.212625][ T22] usb 5-1: USB disconnect, device number 49 [ 254.229026][ T7762] device syzkaller0 entered promiscuous mode [ 254.925485][ T4262] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 254.994418][ T22] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 255.121691][ T4262] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 255.160518][ T4262] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.192183][ T4262] usb 5-1: Product: syz [ 255.199007][ T22] usb 4-1: unable to get BOS descriptor or descriptor too short [ 255.209104][ T4262] usb 5-1: Manufacturer: syz [ 255.213866][ T4262] usb 5-1: SerialNumber: syz [ 255.213896][ T22] usb 4-1: config 129 has an invalid interface number: 135 but max is 0 [ 255.252013][ T4262] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 255.269880][ T22] usb 4-1: config 129 has an invalid interface number: 5 but max is 0 [ 255.309647][ T4262] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 255.330246][ T22] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 255.369578][ T22] usb 4-1: config 129 has no interface number 0 [ 255.399293][ T22] usb 4-1: config 129 has no interface number 1 [ 255.440421][ T22] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 255.509761][ T22] usb 4-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 255.551354][ T22] usb 4-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 255.594318][ T22] usb 4-1: config 129 interface 135 has no altsetting 0 [ 255.616042][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.622435][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.639053][ T22] usb 4-1: config 129 interface 5 has no altsetting 0 [ 255.675952][ T22] usb 4-1: string descriptor 0 read error: -22 [ 255.691762][ T22] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 255.721316][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.782682][ T22] usb 4-1: MIDIStreaming interface descriptor not found [ 256.023344][ T4277] usb 4-1: USB disconnect, device number 47 [ 256.181482][ T26] audit: type=1326 audit(1781953527.675:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7782 comm="syz.4.1201" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f21a6b9ce59 code=0x0 [ 256.331650][ T7805] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) ! [ 256.341759][ T7805] device syzkaller0 entered promiscuous mode [ 256.837804][ T7811] input: syz1 as /devices/virtual/input/input5 [ 256.848923][ T7816] loop5: detected capacity change from 0 to 7 [ 256.874782][ T7816] Dev loop5: unable to read RDB block 7 [ 256.880743][ T7816] loop5: unable to read partition table [ 256.891539][ T7816] loop5: partition table beyond EOD, truncated [ 256.913117][ T7816] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 256.964381][ T4262] usb 5-1: Service connection timeout for: 258 [ 256.971836][ T4262] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 256.988526][ T7818] ALSA: mixer_oss: invalid OSS volume '' [ 257.018875][ T4262] ath9k_htc: Failed to initialize the device [ 257.035563][ T4262] usb 5-1: ath9k_htc: USB layer deinitialized [ 257.364414][ T4277] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 257.554406][ T4277] usb 4-1: Using ep0 maxpacket: 8 [ 257.561023][ T4277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 257.573234][ T4277] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 257.604144][ T4277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.627372][ T4277] usb 4-1: config 0 descriptor?? [ 257.677816][ T22] usb 5-1: USB disconnect, device number 50 [ 257.750230][ T7827] ------------[ cut here ]------------ [ 257.756103][ T7827] WARNING: CPU: 1 PID: 7827 at net/sched/sch_taprio.c:1026 taprio_get_start_time+0x139/0x160 [ 257.766415][ T7827] Modules linked in: [ 257.770351][ T7827] CPU: 1 PID: 7827 Comm: syz.2.1218 Not tainted syzkaller #0 [ 257.777797][ T7827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 257.787928][ T7827] RIP: 0010:taprio_get_start_time+0x139/0x160 [ 257.794049][ T7827] Code: 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 9c 21 72 f9 4c 89 23 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 47 f9 20 f9 <0f> 0b b8 f2 ff ff ff eb e7 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c [ 257.813748][ T7827] RSP: 0018:ffffc9000415ed68 EFLAGS: 00010283 [ 257.819898][ T7827] RAX: ffffffff886127c9 RBX: ffffc9000415ee78 RCX: 0000000000080000 [ 257.827939][ T7827] RDX: ffffc9000ddc9000 RSI: 0000000000005bc6 RDI: 0000000000005bc7 [ 257.835978][ T7827] RBP: 0000000000000002 R08: ffffffff90af23df R09: 1ffffffff215e47b [ 257.843991][ T7827] R10: dffffc0000000000 R11: fffffbfff215e47c R12: 18bac54b2d557bbc [ 257.852038][ T7827] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 257.860066][ T7827] FS: 00007f64a70cc6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 257.869067][ T7827] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 257.875716][ T7827] CR2: 000000110c45aa69 CR3: 000000007c5cb000 CR4: 00000000003506e0 [ 257.883728][ T7827] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 257.891793][ T7827] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 257.899822][ T7827] Call Trace: [ 257.903123][ T7827] [ 257.906125][ T7827] taprio_change+0x3f99/0x5390 [ 257.910952][ T7827] ? taprio_destroy+0x4b0/0x4b0 [ 257.915896][ T7827] ? lockdep_init_map_type+0x98/0x8d0 [ 257.921304][ T7827] ? rtnetlink_rcv_msg+0x863/0xfb0 [ 257.926500][ T7827] ? memset+0x1e/0x40 [ 257.930507][ T7827] ? fifo_init+0x3f6/0x6d0 [ 257.935010][ T7827] ? qdisc_peek_head+0x40/0x40 [ 257.939817][ T7827] ? rcu_is_watching+0x11/0xa0 [ 257.944685][ T7827] ? taprio_peek+0x590/0x590 [ 257.949317][ T7827] qdisc_create+0x7ef/0x10c0 [ 257.953950][ T7827] ? qdisc_notify+0x370/0x370 [ 257.958721][ T7827] ? lockdep_rtnl_is_held+0x22/0x30 [ 257.963961][ T7827] ? qdisc_lookup+0x35d/0x6b0 [ 257.968727][ T7827] tc_modify_qdisc+0xb43/0x1de0 [ 257.973615][ T7827] ? qdisc_offload_query_caps+0x150/0x150 [ 257.979437][ T7827] ? qdisc_offload_query_caps+0x150/0x150 [ 257.985233][ T7827] rtnetlink_rcv_msg+0x863/0xfb0 [ 257.990205][ T7827] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 257.995409][ T7827] ? rtnetlink_bind+0x80/0x80 [ 258.000113][ T7827] ? __local_bh_enable_ip+0x136/0x1c0 [ 258.005564][ T7827] ? lockdep_hardirqs_on+0x94/0x140 [ 258.010803][ T7827] ? __local_bh_enable_ip+0x136/0x1c0 [ 258.016243][ T7827] ? _local_bh_enable+0xa0/0xa0 [ 258.021130][ T7827] ? __dev_queue_xmit+0x281/0x3810 [ 258.026334][ T7827] ? __dev_queue_xmit+0x281/0x3810 [ 258.031487][ T7827] ? __dev_queue_xmit+0x1d84/0x3810 [ 258.036787][ T7827] ? __dev_queue_xmit+0x281/0x3810 [ 258.041941][ T7827] ? ref_tracker_free+0x682/0x830 [ 258.046925][ T4277] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 258.047063][ T7827] ? refcount_inc+0x70/0x70 [ 258.061808][ T7827] ? memcpy+0x3c/0x60 [ 258.065873][ T7827] ? __copy_skb_header+0x3ba/0x4f0 [ 258.071017][ T7827] ? __skb_clone+0x446/0x6c0 [ 258.071934][ T4277] usb 4-1: USB disconnect, device number 48 [ 258.075670][ T7827] netlink_rcv_skb+0x1ef/0x440 [ 258.075701][ T7827] ? rtnetlink_bind+0x80/0x80 [ 258.075724][ T7827] ? netlink_ack+0x1160/0x1160 [ 258.075755][ T7827] ? netlink_deliver_tap+0x2e/0x1b0 [ 258.075780][ T7827] netlink_unicast+0x7ad/0x920 [ 258.105962][ T7827] netlink_sendmsg+0x8ad/0xbd0 [ 258.110772][ T7827] ? netlink_getsockopt+0x550/0x550 [ 258.116055][ T7827] ? aa_sock_msg_perm+0x94/0x150 [ 258.121027][ T7827] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 258.126376][ T7827] ? security_socket_sendmsg+0x7c/0xa0 [ 258.131866][ T7827] ? netlink_getsockopt+0x550/0x550 [ 258.137140][ T7827] ____sys_sendmsg+0x5ed/0x9a0 [ 258.141948][ T7827] ? __sys_sendmsg_sock+0x30/0x30 [ 258.147058][ T7827] ? __import_iovec+0x306/0x510 [ 258.151948][ T7827] ? import_iovec+0x6f/0xa0 [ 258.156497][ T7827] ___sys_sendmsg+0x2a2/0x360 [ 258.161190][ T7827] ? __sys_sendmsg+0x2a0/0x2a0 [ 258.166069][ T7827] __se_sys_sendmsg+0x1c3/0x2b0 [ 258.170942][ T7827] ? __x64_sys_sendmsg+0x80/0x80 [ 258.175955][ T7827] ? lockdep_hardirqs_on+0x94/0x140 [ 258.176838][ T7834] fuse: Bad value for 'fd' [ 258.181173][ T7827] do_syscall_64+0x4c/0xa0 [ 258.181202][ T7827] ? clear_bhb_loop+0x60/0xb0 [ 258.181222][ T7827] ? clear_bhb_loop+0x60/0xb0 [ 258.199474][ T7827] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.205454][ T7827] RIP: 0033:0x7f64a619ce59 [ 258.209902][ T7827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.229602][ T7827] RSP: 002b:00007f64a70cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.238098][ T7827] RAX: ffffffffffffffda RBX: 00007f64a6415fa0 RCX: 00007f64a619ce59 [ 258.246145][ T7827] RDX: 0000000000008010 RSI: 00002000000012c0 RDI: 0000000000000006 [ 258.254150][ T7827] RBP: 00007f64a6232e6f R08: 0000000000000000 R09: 0000000000000000 [ 258.262189][ T7827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.270225][ T7827] R13: 00007f64a6416038 R14: 00007f64a6415fa0 R15: 00007ffe6c662428 [ 258.278277][ T7827] [ 258.281326][ T7827] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 258.288626][ T7827] CPU: 1 PID: 7827 Comm: syz.2.1218 Not tainted syzkaller #0 [ 258.296017][ T7827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 258.306090][ T7827] Call Trace: [ 258.309374][ T7827] [ 258.312324][ T7827] dump_stack_lvl+0x188/0x24e [ 258.316999][ T7827] ? memcpy+0x3c/0x60 [ 258.320978][ T7827] ? show_regs_print_info+0x12/0x12 [ 258.326183][ T7827] ? load_image+0x410/0x410 [ 258.330723][ T7827] panic+0x2d3/0x710 [ 258.334648][ T7827] ? bpf_jit_dump+0xd0/0xd0 [ 258.339174][ T7827] __warn+0x2f8/0x4f0 [ 258.343156][ T7827] ? taprio_get_start_time+0x139/0x160 [ 258.348623][ T7827] ? taprio_get_start_time+0x139/0x160 [ 258.354111][ T7827] report_bug+0x2ba/0x4f0 [ 258.358464][ T7827] ? taprio_get_start_time+0x139/0x160 [ 258.363969][ T7827] handle_bug+0x3a/0x70 [ 258.368149][ T7827] exc_invalid_op+0x16/0x40 [ 258.372666][ T7827] asm_exc_invalid_op+0x16/0x20 [ 258.377518][ T7827] RIP: 0010:taprio_get_start_time+0x139/0x160 [ 258.383605][ T7827] Code: 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 9c 21 72 f9 4c 89 23 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 47 f9 20 f9 <0f> 0b b8 f2 ff ff ff eb e7 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c [ 258.403209][ T7827] RSP: 0018:ffffc9000415ed68 EFLAGS: 00010283 [ 258.409282][ T7827] RAX: ffffffff886127c9 RBX: ffffc9000415ee78 RCX: 0000000000080000 [ 258.417272][ T7827] RDX: ffffc9000ddc9000 RSI: 0000000000005bc6 RDI: 0000000000005bc7 [ 258.425248][ T7827] RBP: 0000000000000002 R08: ffffffff90af23df R09: 1ffffffff215e47b [ 258.433229][ T7827] R10: dffffc0000000000 R11: fffffbfff215e47c R12: 18bac54b2d557bbc [ 258.441191][ T7827] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 258.449172][ T7827] ? taprio_get_start_time+0x139/0x160 [ 258.454662][ T7827] ? taprio_get_start_time+0x139/0x160 [ 258.460132][ T7827] taprio_change+0x3f99/0x5390 [ 258.464945][ T7827] ? taprio_destroy+0x4b0/0x4b0 [ 258.469830][ T7827] ? lockdep_init_map_type+0x98/0x8d0 [ 258.475224][ T7827] ? rtnetlink_rcv_msg+0x863/0xfb0 [ 258.480341][ T7827] ? memset+0x1e/0x40 [ 258.484340][ T7827] ? fifo_init+0x3f6/0x6d0 [ 258.488785][ T7827] ? qdisc_peek_head+0x40/0x40 [ 258.493578][ T7827] ? rcu_is_watching+0x11/0xa0 [ 258.498372][ T7827] ? taprio_peek+0x590/0x590 [ 258.502993][ T7827] qdisc_create+0x7ef/0x10c0 [ 258.507620][ T7827] ? qdisc_notify+0x370/0x370 [ 258.512311][ T7827] ? lockdep_rtnl_is_held+0x22/0x30 [ 258.517508][ T7827] ? qdisc_lookup+0x35d/0x6b0 [ 258.522183][ T7827] tc_modify_qdisc+0xb43/0x1de0 [ 258.527060][ T7827] ? qdisc_offload_query_caps+0x150/0x150 [ 258.532804][ T7827] ? qdisc_offload_query_caps+0x150/0x150 [ 258.538522][ T7827] rtnetlink_rcv_msg+0x863/0xfb0 [ 258.543467][ T7827] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 258.548604][ T7827] ? rtnetlink_bind+0x80/0x80 [ 258.553305][ T7827] ? __local_bh_enable_ip+0x136/0x1c0 [ 258.558706][ T7827] ? lockdep_hardirqs_on+0x94/0x140 [ 258.563945][ T7827] ? __local_bh_enable_ip+0x136/0x1c0 [ 258.569348][ T7827] ? _local_bh_enable+0xa0/0xa0 [ 258.574223][ T7827] ? __dev_queue_xmit+0x281/0x3810 [ 258.579363][ T7827] ? __dev_queue_xmit+0x281/0x3810 [ 258.584507][ T7827] ? __dev_queue_xmit+0x1d84/0x3810 [ 258.589746][ T7827] ? __dev_queue_xmit+0x281/0x3810 [ 258.594903][ T7827] ? ref_tracker_free+0x682/0x830 [ 258.599961][ T7827] ? refcount_inc+0x70/0x70 [ 258.604486][ T7827] ? memcpy+0x3c/0x60 [ 258.608496][ T7827] ? __copy_skb_header+0x3ba/0x4f0 [ 258.613643][ T7827] ? __skb_clone+0x446/0x6c0 [ 258.618266][ T7827] netlink_rcv_skb+0x1ef/0x440 [ 258.623061][ T7827] ? rtnetlink_bind+0x80/0x80 [ 258.627766][ T7827] ? netlink_ack+0x1160/0x1160 [ 258.632561][ T7827] ? netlink_deliver_tap+0x2e/0x1b0 [ 258.637790][ T7827] netlink_unicast+0x7ad/0x920 [ 258.642587][ T7827] netlink_sendmsg+0x8ad/0xbd0 [ 258.647388][ T7827] ? netlink_getsockopt+0x550/0x550 [ 258.652613][ T7827] ? aa_sock_msg_perm+0x94/0x150 [ 258.657581][ T7827] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 258.662890][ T7827] ? security_socket_sendmsg+0x7c/0xa0 [ 258.668373][ T7827] ? netlink_getsockopt+0x550/0x550 [ 258.673599][ T7827] ____sys_sendmsg+0x5ed/0x9a0 [ 258.678403][ T7827] ? __sys_sendmsg_sock+0x30/0x30 [ 258.683454][ T7827] ? __import_iovec+0x306/0x510 [ 258.688367][ T7827] ? import_iovec+0x6f/0xa0 [ 258.692889][ T7827] ___sys_sendmsg+0x2a2/0x360 [ 258.697578][ T7827] ? __sys_sendmsg+0x2a0/0x2a0 [ 258.698915][ T26] audit: type=1326 audit(1781953530.185:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.3.1222" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fceb079ce59 code=0x0 [ 258.725614][ T7827] __se_sys_sendmsg+0x1c3/0x2b0 [ 258.730467][ T7827] ? __x64_sys_sendmsg+0x80/0x80 [ 258.735422][ T7827] ? lockdep_hardirqs_on+0x94/0x140 [ 258.740640][ T7827] do_syscall_64+0x4c/0xa0 [ 258.745068][ T7827] ? clear_bhb_loop+0x60/0xb0 [ 258.749758][ T7827] ? clear_bhb_loop+0x60/0xb0 [ 258.754434][ T7827] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.760346][ T7827] RIP: 0033:0x7f64a619ce59 [ 258.764758][ T7827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.784360][ T7827] RSP: 002b:00007f64a70cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.792776][ T7827] RAX: ffffffffffffffda RBX: 00007f64a6415fa0 RCX: 00007f64a619ce59 [ 258.800753][ T7827] RDX: 0000000000008010 RSI: 00002000000012c0 RDI: 0000000000000006 [ 258.808743][ T7827] RBP: 00007f64a6232e6f R08: 0000000000000000 R09: 0000000000000000 [ 258.816722][ T7827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.824714][ T7827] R13: 00007f64a6416038 R14: 00007f64a6415fa0 R15: 00007ffe6c662428 [ 258.832710][ T7827] [ 258.835859][ T7827] Kernel Offset: disabled [ 258.840238][ T7827] Rebooting in 86400 seconds..