last executing test programs: 4.619644196s ago: executing program 1 (id=18598): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) 4.524833287s ago: executing program 1 (id=18602): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406a0545000000000000010902"], 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002aafee08f00a5167"], 0x0) 2.663095768s ago: executing program 4 (id=18624): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@loopback, 0x6e, r2}) 2.589016759s ago: executing program 4 (id=18625): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 2.444384153s ago: executing program 0 (id=18627): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x1c5}]}) 2.298122869s ago: executing program 0 (id=18629): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x486, 0x0, 0x6}]}) 2.195465365s ago: executing program 1 (id=18630): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x300}]}, 0x30}}, 0x0) 2.195015947s ago: executing program 2 (id=18631): setitimer(0x1, &(0x7f0000000040)={{0x100, 0x5}, {0xb, 0x4}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setitimer(0x1, &(0x7f0000000000)={{0x77359400}}, 0x0) 2.151769599s ago: executing program 1 (id=18632): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x101200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x797) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000ec0)={{0xd000, 0xd000, 0x10, 0x4, 0x7, 0xa, 0x2, 0x5, 0xa, 0x4, 0x1, 0x4}, {0x9000, 0x58000, 0x9, 0x6, 0x8, 0x7, 0x9, 0xe2, 0x7, 0x6, 0xd7, 0x20}, {0x70000, 0x4000, 0x9, 0x5, 0x2, 0xc0, 0xf7, 0x81, 0x3, 0x7f, 0x8, 0x7}, {0x88002000, 0x4, 0xc, 0x80, 0x0, 0x5a, 0x4, 0x6, 0x0, 0xc, 0x7, 0x91}, {0xe000, 0xdddd1000, 0xb, 0x9, 0x7, 0x3, 0x1, 0x1, 0x2, 0x5, 0x92, 0x9}, {0x30000, 0x9ae516fd0faf9f7f, 0xa, 0x2, 0x7, 0x33, 0x4, 0x1, 0x9e, 0x1, 0x2}, {0xffff1000, 0x26000, 0x3, 0x2e, 0x14, 0xd, 0x3, 0x6, 0x9, 0x9, 0x4d, 0x9}, {0x2, 0xe000, 0x10, 0x6d, 0x2, 0x1, 0x8, 0x6, 0xd7, 0x6, 0x3, 0x7}, {0x0, 0x1}, {0x80a0000, 0xc}, 0x80000004, 0x0, 0x100000, 0x2000, 0xb, 0xc000, 0xb000, 0x1, [0x16fc0000000, 0xe1, 0x9, 0x80]}) 2.150133606s ago: executing program 0 (id=18633): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x984d, 0x10000, 0x20, 0x273}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000000)='./file0\x00', 0x2e, 0x400, 0x23456}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) io_uring_enter(r0, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) 2.092905754s ago: executing program 2 (id=18634): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, 0x0}, 0x108) r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x40000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0xc0844123, &(0x7f0000000000)=0x6) 1.999395985s ago: executing program 2 (id=18635): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) 1.988602928s ago: executing program 4 (id=18636): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='net/unix\x00') syz_ublk_setup_queues(r5, r4, &(0x7f00000005c0)={0x0, 0x81ef, 0x80, 0x2, 0x388, 0x0, r0}, &(0x7f0000000d00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x146b, 0x8, 0x3, 0x118}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6ced, 0x18012, 0x3, 0x26, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x57fc, 0x40, 0x0, 0x237}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa120, 0x20, 0x3, 0x2d}}], 0x4, 0x0, 0x0) 1.97035985s ago: executing program 0 (id=18638): r0 = msgget$private(0x0, 0x384) msgrcv(r0, 0x0, 0x0, 0x3, 0x2000) msgrcv(r0, 0x0, 0x0, 0xe4b43f0e2aa28c96, 0x2000) msgsnd(r0, &(0x7f0000000000)={0x1}, 0x8, 0x0) 1.899094594s ago: executing program 4 (id=18639): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) 1.850570317s ago: executing program 1 (id=18640): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x6000)=nil, 0x6000, &(0x7f0000000140)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000540)='fou\x00') mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) 1.831698977s ago: executing program 4 (id=18641): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r1, &(0x7f0000003300)=[{&(0x7f0000000500)='-', 0x1}], 0x1, 0x9, 0x1ff) 1.818641564s ago: executing program 1 (id=18642): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003faff82083910012181250102030109021b00028c4400600904b6"], &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x1b, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0x20, 0x12, 0x1b, 0x10, 0x41e, 0x4041, 0x4025, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x1, 0x7, 0x40, 0x7}}]}}, 0x0) 1.799495293s ago: executing program 2 (id=18643): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905097a63"], 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000005c0)=0xfffffffd) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x10104) 1.723356049s ago: executing program 0 (id=18645): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x44, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) 1.647886504s ago: executing program 0 (id=18647): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000540)={0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="0000f50000000341e9", @ANYRES32=0x0, @ANYRES8, @ANYRES8], 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000280)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) 666.460975ms ago: executing program 3 (id=18657): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x360, 0x3706) ptrace$pokeuser(0x6, r0, 0x388, 0xffffffffffffffc0) 572.27945ms ago: executing program 3 (id=18658): r0 = syz_io_uring_setup(0x259a, &(0x7f0000000000)={0x0, 0xa550, 0x800, 0x1, 0x153}, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000001b00)=@IORING_OP_TIMEOUT={0xb, 0x1a, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, {0x0, r4}}) io_uring_enter(r0, 0x42be, 0xafb2, 0x8, 0x0, 0x0) 571.527863ms ago: executing program 3 (id=18659): syz_emit_ethernet(0x3a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa08004927002c00670000fc0b000000000000ac1e0001830739ac38c9018307efac1414bb0000150490780a010101"], 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB="08002700020001000800a0"], 0x34}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) 311.160342ms ago: executing program 3 (id=18660): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000000c0)=r0, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0xd0, &(0x7f0000000080), 0x1}, 0x0) 284.373101ms ago: executing program 4 (id=18661): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) 255.756336ms ago: executing program 3 (id=18662): r0 = syz_io_uring_setup(0xcc5, &(0x7f00000000c0)={0x0, 0xb499, 0x8, 0x3, 0x2212}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) r4 = openat$ublk_ctrl(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f0000000480)=@ublk_get_dev_info_sqe={0x2e, 0x40, 0x0, r4, 0x80207502, 0x0, 0x0, 0x0, 0x1, 0x800, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}}) io_uring_enter(r0, 0x20, 0xd9db, 0x8, 0x0, 0x0) 194.336754ms ago: executing program 2 (id=18663): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000023, 0x0, 0x7fffffffffffffff}]}) 100.347458ms ago: executing program 3 (id=18664): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet6_int(r0, 0x84, 0x16, 0x0, 0x0) 0s ago: executing program 2 (id=18665): r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) kernel console output (not intermixed with test programs): New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.608302][ T2144] usb 3-1: Product: syz [ 1008.621751][ T2144] usb 3-1: Manufacturer: syz [ 1008.641572][ T2144] usb 3-1: SerialNumber: syz [ 1008.842133][ T35] tipc: Disabling bearer [ 1008.860128][ T35] tipc: Disabling bearer [ 1008.872473][ T35] tipc: Disabling bearer [ 1008.894139][ T35] tipc: Left network mode [ 1008.914211][ T2144] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1008.943467][T11306] bridge0: port 2(syz_tun) entered blocking state [ 1008.951535][T11306] bridge0: port 2(syz_tun) entered disabled state [ 1008.958463][T11306] syz_tun: entered allmulticast mode [ 1008.966101][T11306] syz_tun: entered promiscuous mode [ 1008.990919][T11226] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.999502][T11226] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.007315][T11226] bridge_slave_0: entered allmulticast mode [ 1009.032080][T11226] bridge_slave_0: entered promiscuous mode [ 1009.101017][ T2144] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 1009.133411][ T2144] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1009.152466][ T2144] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 1009.162389][T11226] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.182831][T11226] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.204669][T11226] bridge_slave_1: entered allmulticast mode [ 1009.229808][T11226] bridge_slave_1: entered promiscuous mode [ 1009.497458][T11226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1009.512653][T11226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1009.524389][ T2144] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 1009.686004][T16754] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1009.697267][ T2144] usb 3-1: USB disconnect, device number 101 [ 1009.698675][T11226] team0: Port device team_slave_0 added [ 1009.715663][ T5698] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 1009.844752][T11226] team0: Port device team_slave_1 added [ 1009.882112][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1009.894383][T16754] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1009.911355][ T5698] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 1009.928698][T16754] usb 4-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1009.955222][ T5698] usb 1-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.00 [ 1009.980458][T16754] usb 4-1: string descriptor 0 read error: -22 [ 1009.988398][ T5698] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.997408][ T5627] Bluetooth: hci2: command tx timeout [ 1010.003024][T16754] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1010.004182][T11226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1010.024269][T16754] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.032383][T11226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.032411][T11226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1010.074371][ T5698] usb 1-1: config 0 descriptor?? [ 1010.082455][T11328] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1010.096349][T11226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1010.104059][T11226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.134917][T11226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1010.415439][ T29] audit: type=1326 audit(1782388754.335:3326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11344 comm="syz.2.17622" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76619ce59 code=0x7ffc0000 [ 1010.494181][T11226] hsr_slave_0: entered promiscuous mode [ 1010.501149][ T29] audit: type=1326 audit(1782388754.335:3327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11344 comm="syz.2.17622" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76619ce59 code=0x7ffc0000 [ 1010.526904][T11226] hsr_slave_1: entered promiscuous mode [ 1010.533463][ T5698] saitek 0003:0738:1709.00AD: unknown main item tag 0x2 [ 1010.543143][ T29] audit: type=1326 audit(1782388754.345:3328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11344 comm="syz.2.17622" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76619ce59 code=0x7ffc0000 [ 1010.568355][ T29] audit: type=1326 audit(1782388754.345:3329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11344 comm="syz.2.17622" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76619ce59 code=0x7ffc0000 [ 1010.570440][ T5698] saitek 0003:0738:1709.00AD: unknown main item tag 0x4 [ 1010.634308][ T29] audit: type=1326 audit(1782388754.345:3330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11344 comm="syz.2.17622" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fc76619ce59 code=0x7ffc0000 [ 1010.643937][ T5698] saitek 0003:0738:1709.00AD: unexpected long global item [ 1010.680752][ T5698] saitek 0003:0738:1709.00AD: parse failed [ 1010.708552][ T5698] saitek 0003:0738:1709.00AD: probe with driver saitek failed with error -22 [ 1010.738018][ T29] audit: type=1326 audit(1782388754.355:3331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11344 comm="syz.2.17622" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76619ce59 code=0x7ffc0000 [ 1010.746098][ T5698] usb 1-1: USB disconnect, device number 27 [ 1010.764719][T16763] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1010.792893][ T29] audit: type=1326 audit(1782388754.355:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11344 comm="syz.2.17622" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76619ce59 code=0x7ffc0000 [ 1010.829354][T16754] usb 4-1: failed to read current rate; disabling the check [ 1010.887239][ T29] audit: type=1326 audit(1782388754.355:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11344 comm="syz.2.17622" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76619ce59 code=0x7ffc0000 [ 1010.941035][T16763] usb 2-1: Using ep0 maxpacket: 16 [ 1010.977603][T16763] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 1010.989280][T16763] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8244, setting to 1024 [ 1011.000932][ T29] audit: type=1326 audit(1782388754.355:3334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11344 comm="syz.2.17622" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fc76619ce59 code=0x7ffc0000 [ 1011.063769][T16763] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1011.095119][T16763] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1011.099958][T16754] usb 4-1: USB disconnect, device number 25 [ 1011.104980][T16763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.194286][T16763] usb 2-1: config 0 descriptor?? [ 1011.233917][ T35] hsr_slave_0: left promiscuous mode [ 1011.247859][T16763] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input175 [ 1011.274021][ T35] hsr_slave_1: left promiscuous mode [ 1011.284703][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1011.321836][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1011.636578][T16763] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1011.683194][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1011.702546][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1011.815613][T16763] usb 3-1: Using ep0 maxpacket: 8 [ 1011.823243][T16763] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 1011.832882][T16763] usb 3-1: config 0 has no interface number 0 [ 1011.844237][T16763] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1011.856914][T16763] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1011.869003][T16763] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1011.881441][T16763] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1011.892790][T16762] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1011.901278][T16763] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1011.919559][T16763] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1011.929473][T16763] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.937907][T16763] usb 3-1: Product: syz [ 1011.942337][T16763] usb 3-1: Manufacturer: syz [ 1011.947476][T16763] usb 3-1: SerialNumber: syz [ 1011.959885][T16763] usb 3-1: config 0 descriptor?? [ 1011.983846][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1012.078257][T16749] usb 2-1: USB disconnect, device number 35 [ 1012.078430][ T5627] Bluetooth: hci2: command tx timeout [ 1012.095725][T16762] usb 1-1: Using ep0 maxpacket: 8 [ 1012.105374][T16762] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 1012.116597][T16762] usb 1-1: config 0 has no interface number 0 [ 1012.139451][T16762] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1012.165450][T16762] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1012.200458][T16762] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1012.222584][T16763] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 1012.236713][T16762] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 102, changing to 10 [ 1012.278844][T16762] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 24624, setting to 1024 [ 1012.313892][T16762] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1012.341258][T16762] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1012.355643][T16762] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.372632][T16762] usb 1-1: Product: syz [ 1012.379444][T16762] usb 1-1: Manufacturer: syz [ 1012.438175][T16762] usb 1-1: SerialNumber: syz [ 1012.478391][T16762] usb 1-1: config 0 descriptor?? [ 1012.492043][T16754] usb 3-1: USB disconnect, device number 102 [ 1012.761272][T16762] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 1013.000843][ C0] iowarrior 1-1:0.186: iowarrior_callback - usb_submit_urb failed with result -1 [ 1013.012256][T16754] usb 1-1: USB disconnect, device number 28 [ 1013.348275][ T35] IPVS: stop unused estimator thread 0... [ 1013.799332][T16762] IPVS: starting estimator thread 0... [ 1013.857787][T11419] netlink: 284 bytes leftover after parsing attributes in process `syz.2.17638'. [ 1013.920066][T11428] IPVS: using max 34 ests per chain, 81600 per kthread [ 1014.159239][ T5627] Bluetooth: hci2: command tx timeout [ 1014.541162][T11226] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1014.578780][T11226] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1014.581034][ C1] blk_print_req_error: 256 callbacks suppressed [ 1014.581050][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1014.598960][T11226] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1014.601337][ C1] buffer_io_error: 255 callbacks suppressed [ 1014.601351][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1014.621691][ C1] I/O error, dev loop9, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1014.630910][ C1] Buffer I/O error on dev loop9, logical block 1, async page read [ 1014.638795][ C1] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1014.648027][ C1] Buffer I/O error on dev loop9, logical block 2, async page read [ 1014.655899][ C1] I/O error, dev loop9, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1014.665086][ C1] Buffer I/O error on dev loop9, logical block 3, async page read [ 1014.672982][ C1] I/O error, dev loop9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1014.682193][ C1] Buffer I/O error on dev loop9, logical block 4, async page read [ 1014.690088][ C1] I/O error, dev loop9, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1014.699334][ C1] Buffer I/O error on dev loop9, logical block 5, async page read [ 1014.707228][ C1] I/O error, dev loop9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1014.716458][ C1] Buffer I/O error on dev loop9, logical block 6, async page read [ 1014.724650][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1014.733915][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1014.745876][T11226] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1014.748724][ C0] I/O error, dev loop9, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1014.762169][ C0] Buffer I/O error on dev loop9, logical block 1, async page read [ 1014.764877][T11226] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1014.770040][ C0] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1014.770116][ C0] Buffer I/O error on dev loop9, logical block 2, async page read [ 1014.803219][ T4992] ldm_validate_partition_table(): Disk read failed. [ 1014.816883][ T4992] Dev loop9: unable to read RDB block 0 [ 1014.841247][ T4992] loop9: unable to read partition table [ 1014.857255][ T4992] loop9: partition table beyond EOD, truncated [ 1014.862038][T11226] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1014.909553][T11226] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1014.960168][T11226] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1014.980408][T11470] nicvf0: tun_chr_ioctl cmd 2147767506 [ 1015.202996][T11226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1015.288644][T11226] 8021q: adding VLAN 0 to HW filter on device team0 [ 1015.310168][T11487] : renamed from vlan0 (while UP) [ 1015.354848][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.362068][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1015.384311][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.391524][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1015.581835][T11226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1015.720530][T11226] veth0_vlan: entered promiscuous mode [ 1015.749935][T11226] veth1_vlan: entered promiscuous mode [ 1015.826024][T16749] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1015.842480][T11226] veth0_macvtap: entered promiscuous mode [ 1015.881829][T11226] veth1_macvtap: entered promiscuous mode [ 1015.921867][T11226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1015.949429][T11226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1015.976879][ T76] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.986776][ T76] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.005458][ T76] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.017453][T16749] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1016.024546][ T76] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.050239][T16749] usb 1-1: config 0 has no interface number 0 [ 1016.069476][T16749] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1016.094943][T16749] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.140766][T16749] usb 1-1: Product: syz [ 1016.156100][T16749] usb 1-1: Manufacturer: syz [ 1016.175503][T16749] usb 1-1: SerialNumber: syz [ 1016.244248][T16749] usb 1-1: config 0 descriptor?? [ 1016.460796][ T3382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1016.487800][ T3382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1016.518762][T16749] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1016.549079][T16749] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1016.574554][T16749] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1016.622217][T16749] usb 1-1: media controller created [ 1016.695496][ T3382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1016.733295][T16749] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1016.752735][ T3382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1016.856267][T16749] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 1017.027579][T16749] usb 1-1: USB disconnect, device number 29 [ 1017.343937][T11543] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.550429][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1018.550452][ T29] audit: type=1326 audit(1782388762.475:3344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.3.17689" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf619ce59 code=0x7ffc0000 [ 1018.560204][T11604] openvswitch: netlink: Missing valid actions attribute. [ 1018.633712][ T29] audit: type=1326 audit(1782388762.515:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.3.17689" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf619ce59 code=0x7ffc0000 [ 1018.664633][T11604] openvswitch: netlink: Actions may not be safe on all matching packets [ 1018.728092][ T29] audit: type=1326 audit(1782388762.515:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.3.17689" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf619ce59 code=0x7ffc0000 [ 1018.800852][ T29] audit: type=1326 audit(1782388762.515:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.3.17689" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf619ce59 code=0x7ffc0000 [ 1018.845655][T16739] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1018.865989][ T29] audit: type=1326 audit(1782388762.525:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.3.17689" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7fabf619ce59 code=0x7ffc0000 [ 1018.907691][ T29] audit: type=1326 audit(1782388762.525:3349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.3.17689" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf619ce59 code=0x7ffc0000 [ 1018.972819][ T29] audit: type=1326 audit(1782388762.525:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.3.17689" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf619ce59 code=0x7ffc0000 [ 1019.028283][T16739] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1019.041629][ T29] audit: type=1326 audit(1782388762.525:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.3.17689" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf619ce59 code=0x7ffc0000 [ 1019.082768][T16739] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.101654][T16739] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1019.110795][ T29] audit: type=1326 audit(1782388762.525:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.3.17689" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf619ce59 code=0x7ffc0000 [ 1019.126561][T16739] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1019.219461][T16739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.245654][T16739] usb 4-1: Product: syz [ 1019.255212][T16739] usb 4-1: Manufacturer: syz [ 1019.272870][ T29] audit: type=1326 audit(1782388762.525:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.3.17689" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fabf615d68e code=0x7ffc0000 [ 1019.276669][T16739] usb 4-1: SerialNumber: syz [ 1019.569349][T16739] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1019.590541][T16739] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1019.602428][T16739] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1019.613577][T16739] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1019.621642][T16739] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1019.755391][T16739] usb 4-1: USB disconnect, device number 26 [ 1019.884585][T31006] udevd[31006]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1020.885757][T16749] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1021.045646][T16749] usb 2-1: Using ep0 maxpacket: 16 [ 1021.063308][T16749] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1021.078861][T16749] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1021.088319][T16749] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.102011][T16749] usb 2-1: config 0 descriptor?? [ 1021.543515][T16749] mcp2221 0003:04D8:00DD.00AE: unknown main item tag 0x0 [ 1021.598416][T16749] mcp2221 0003:04D8:00DD.00AE: unknown main item tag 0x0 [ 1021.607532][T16749] mcp2221 0003:04D8:00DD.00AE: unknown main item tag 0x0 [ 1021.614708][T16749] mcp2221 0003:04D8:00DD.00AE: unknown main item tag 0x0 [ 1021.639992][T16749] mcp2221 0003:04D8:00DD.00AE: unknown main item tag 0x0 [ 1021.649188][T16749] mcp2221 0003:04D8:00DD.00AE: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1021.734121][ C0] usb 2-1: input irq status -75 received [ 1021.959798][ T5698] usb 2-1: USB disconnect, device number 36 [ 1022.726147][T11703] pim6reg0: tun_chr_ioctl cmd 1074025676 [ 1022.742078][T11703] pim6reg0: owner set to 0 [ 1023.223112][T11575] Set syz1 is full, maxelem 65536 reached [ 1023.315958][ T5698] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1023.488392][ T5698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1023.502415][ T5698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1023.512928][ T5698] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1023.523736][ T5698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.542398][ T5698] usb 3-1: config 0 descriptor?? [ 1023.983707][ T5698] steelseries 0003:1038:12B6.00AF: unknown main item tag 0x7 [ 1024.022969][ T5698] steelseries 0003:1038:12B6.00AF: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.2-1/input0 [ 1024.205699][T16749] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1024.295657][T16758] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1024.335731][T16755] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1024.386041][T16749] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1024.398922][ T5698] usb 3-1: USB disconnect, device number 103 [ 1024.406717][T16749] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1024.418338][T16749] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1024.430860][T16749] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 1024.456296][T16758] usb 2-1: Using ep0 maxpacket: 32 [ 1024.465250][T16749] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1024.478496][T16749] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.490734][T16758] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 1024.499122][T16755] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1024.499476][T16758] usb 2-1: config 0 has no interface number 0 [ 1024.519124][T16749] usb 5-1: config 0 descriptor?? [ 1024.523594][T16755] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.529164][T16758] usb 2-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1024.543577][T16758] usb 2-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1024.555377][T16755] usb 1-1: Product: syz [ 1024.556262][T16758] usb 2-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 115, changing to 7 [ 1024.572082][T16755] usb 1-1: Manufacturer: syz [ 1024.574687][T16758] usb 2-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 25972, setting to 1024 [ 1024.588314][T16755] usb 1-1: SerialNumber: syz [ 1024.588755][T16758] usb 2-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1024.611268][T16758] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1024.620975][T16758] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.631790][T16758] usb 2-1: Product: syz [ 1024.639855][T16758] usb 2-1: Manufacturer: syz [ 1024.644605][T16758] usb 2-1: SerialNumber: syz [ 1024.652284][T16758] usb 2-1: config 0 descriptor?? [ 1024.664362][T16758] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.119/input/input176 [ 1024.945960][T16749] holtek_kbd 0003:04D9:A055.00B0: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.4-1/input0 [ 1025.030039][T16749] usb 2-1: USB disconnect, device number 37 [ 1025.143384][ T5698] usb 5-1: USB disconnect, device number 19 [ 1025.269193][T16755] rtl8150 1-1:1.0: eth1: rtl8150 is detected [ 1025.464791][ T5698] usb 1-1: USB disconnect, device number 30 [ 1025.566881][T16749] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1025.641317][T11780] ALSA: mixer_oss: invalid OSS volume '' [ 1025.656832][T11780] ALSA: mixer_oss: invalid OSS volume '' [ 1025.738283][T16749] usb 3-1: Using ep0 maxpacket: 16 [ 1025.758819][T11785] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1025.779202][T16749] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1025.805033][T16749] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.838082][T16749] usb 3-1: Product: syz [ 1025.852040][T16749] usb 3-1: Manufacturer: syz [ 1025.860688][T16749] usb 3-1: SerialNumber: syz [ 1025.891492][T16749] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1025.911976][T16749] r8152-cfgselector 3-1: config 0 descriptor?? [ 1026.132529][T16749] r8152-cfgselector 3-1: Needed 2 retries to read version [ 1026.162224][T16749] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1026.201598][T16749] r8152-cfgselector 3-1: No union descriptors [ 1026.337621][ T5698] r8152-cfgselector 3-1: USB disconnect, device number 104 [ 1026.451688][T11814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17771'. [ 1026.645867][T16749] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 1026.755693][T16755] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1026.827241][T16749] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 1026.845687][T16749] usb 5-1: config 0 has no interface number 0 [ 1026.851849][T16749] usb 5-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1026.890554][T16749] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1026.905599][T16749] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.915041][T16749] usb 5-1: Product: syz [ 1026.915929][T16755] usb 4-1: Using ep0 maxpacket: 16 [ 1026.934637][T16749] usb 5-1: Manufacturer: syz [ 1026.938535][T16755] usb 4-1: config index 0 descriptor too short (expected 65, got 36) [ 1026.946715][T16749] usb 5-1: SerialNumber: syz [ 1026.952978][T16755] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1026.970639][T16749] usb 5-1: config 0 descriptor?? [ 1026.983061][T11810] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1026.989272][T16755] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1027.019538][T16749] plusb 5-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, c6:6c:03:65:1c:e1 [ 1027.022235][T16755] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1027.080626][T16755] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1027.112013][T16755] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1027.144269][T16755] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.187125][T16755] usb 4-1: config 0 descriptor?? [ 1027.212917][T11818] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1027.240863][T16755] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input177 [ 1027.493536][ T5698] usb 4-1: USB disconnect, device number 27 [ 1028.307759][T11871] gretap0: entered promiscuous mode [ 1028.699589][T11888] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1028.780279][T16749] usb 5-1: USB disconnect, device number 20 [ 1028.811237][T16749] plusb 5-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 1029.581618][T11927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17806'. [ 1029.597139][T16755] hid-generic 0000:0000:0000.00B1: unknown main item tag 0x0 [ 1029.607542][T11927] netlink: 48 bytes leftover after parsing attributes in process `syz.0.17806'. [ 1029.626887][T16755] hid-generic 0000:0000:0000.00B1: unknown main item tag 0x0 [ 1029.656266][T11927] vlan2: entered allmulticast mode [ 1029.677321][T11927] macvlan1: entered allmulticast mode [ 1029.680548][T16755] hid-generic 0000:0000:0000.00B1: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1029.692251][T11927] veth1_vlan: entered allmulticast mode [ 1029.700480][T11932] tmpfs: Unknown parameter 'r%Ҵ\wӠR(4;a; [ 1029.700480][T11932] MUg6&x@2<5ʍ2TZ5wVU]TmPZ<M;xY9]gŞn;Oۧӌu [ 1029.700480][T11932] ~^>Ƥr&Dq.;쀯<2AU' [ 1029.942131][T11935] fido_id[11935]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1030.506234][T16758] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1030.675671][T16758] usb 3-1: Using ep0 maxpacket: 8 [ 1030.686888][T16758] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1030.719484][T16758] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1030.753612][T16758] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1030.779920][T16758] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1030.795008][T16758] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1030.827282][T16758] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1030.849898][T16758] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.012655][ C1] blk_print_req_error: 131 callbacks suppressed [ 1031.012674][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1031.028291][ C1] buffer_io_error: 130 callbacks suppressed [ 1031.028308][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1031.046281][ C0] I/O error, dev loop9, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1031.055588][ C0] Buffer I/O error on dev loop9, logical block 1, async page read [ 1031.063462][ C0] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1031.069464][T11988] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 1031.072664][ C0] Buffer I/O error on dev loop9, logical block 2, async page read [ 1031.087265][ C0] I/O error, dev loop9, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1031.096481][ C0] Buffer I/O error on dev loop9, logical block 3, async page read [ 1031.104328][ C0] I/O error, dev loop9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1031.113583][ C0] Buffer I/O error on dev loop9, logical block 4, async page read [ 1031.121431][ C0] I/O error, dev loop9, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1031.130644][ C0] Buffer I/O error on dev loop9, logical block 5, async page read [ 1031.138498][ C0] I/O error, dev loop9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1031.147751][ C0] Buffer I/O error on dev loop9, logical block 6, async page read [ 1031.156257][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1031.165508][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1031.173398][ C1] I/O error, dev loop9, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1031.182611][ C1] Buffer I/O error on dev loop9, logical block 1, async page read [ 1031.190487][ C1] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1031.199690][ C1] Buffer I/O error on dev loop9, logical block 2, async page read [ 1031.211543][T16758] usb 3-1: GET_CAPABILITIES returned 0 [ 1031.244392][ T4992] ldm_validate_partition_table(): Disk read failed. [ 1031.261660][T16758] usbtmc 3-1:16.0: can't read capabilities [ 1031.284121][ T4992] Dev loop9: unable to read RDB block 0 [ 1031.316671][ T4992] loop9: unable to read partition table [ 1031.335915][ T4992] loop9: partition table beyond EOD, truncated [ 1031.441917][T16758] usb 3-1: USB disconnect, device number 105 [ 1033.155674][T16749] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1033.327423][T16749] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.349065][T16749] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1033.386843][T16749] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.424426][T16749] usb 2-1: config 0 descriptor?? [ 1033.462016][T16749] pwc: Askey VC010 type 2 USB webcam detected. [ 1033.576173][T12095] netlink: 182 bytes leftover after parsing attributes in process `syz.4.17859'. [ 1033.754952][T12102] netlink: 104 bytes leftover after parsing attributes in process `syz.4.17861'. [ 1033.878594][T16749] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1034.051958][T12113] netlink: 'syz.0.17867': attribute type 13 has an invalid length. [ 1034.060860][T12113] netlink: 'syz.0.17867': attribute type 17 has an invalid length. [ 1034.103423][T16749] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1034.127621][T16749] pwc: recv_control_msg error -71 req 04 val 1000 [ 1034.149193][T16749] pwc: recv_control_msg error -71 req 04 val 1300 [ 1034.157826][T16749] pwc: recv_control_msg error -71 req 04 val 1400 [ 1034.178829][T16749] pwc: recv_control_msg error -71 req 02 val 2000 [ 1034.204365][T16749] pwc: recv_control_msg error -71 req 02 val 2100 [ 1034.220331][T16749] pwc: recv_control_msg error -71 req 04 val 1500 [ 1034.236271][T16749] pwc: recv_control_msg error -71 req 02 val 2500 [ 1034.248001][T16749] pwc: recv_control_msg error -71 req 02 val 2400 [ 1034.275675][T16749] pwc: recv_control_msg error -71 req 02 val 2600 [ 1034.293564][T16749] pwc: recv_control_msg error -71 req 02 val 2900 [ 1034.309632][T16749] pwc: recv_control_msg error -71 req 02 val 2800 [ 1034.327539][T16749] pwc: recv_control_msg error -71 req 04 val 1100 [ 1034.344755][T16749] pwc: recv_control_msg error -71 req 04 val 1200 [ 1034.367361][T16749] pwc: Registered as video103. [ 1034.382973][T16749] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input178 [ 1034.431158][T16749] usb 2-1: USB disconnect, device number 38 [ 1034.660772][T12129] binder: 12128:12129 ioctl c018620c 200000000000 returned -22 [ 1034.738348][T16755] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1034.905905][T16755] usb 5-1: Using ep0 maxpacket: 16 [ 1034.913252][T16755] usb 5-1: config 0 has no interfaces? [ 1034.920817][T16755] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1034.936169][T16758] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1034.938594][T16755] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1034.967142][T16755] usb 5-1: Manufacturer: syz [ 1034.987710][T16755] usb 5-1: config 0 descriptor?? [ 1035.122304][T16758] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.134328][T16758] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1035.147530][T16758] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1035.156989][T16758] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1035.165092][T16758] usb 4-1: SerialNumber: syz [ 1035.223818][T16749] usb 5-1: USB disconnect, device number 21 [ 1035.414276][T16758] usb 4-1: 0:2 : does not exist [ 1035.475489][T16758] usb 4-1: USB disconnect, device number 28 [ 1035.488815][T12171] sctp: [Deprecated]: syz.2.17891 (pid 12171) Use of int in max_burst socket option. [ 1035.488815][T12171] Use struct sctp_assoc_value instead [ 1035.538311][T28252] udevd[28252]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1036.013523][T12190] netlink: 44 bytes leftover after parsing attributes in process `syz.3.17899'. [ 1036.023742][T12190] netlink: 43 bytes leftover after parsing attributes in process `syz.3.17899'. [ 1036.035283][T12190] netlink: 'syz.3.17899': attribute type 5 has an invalid length. [ 1036.043981][T12190] netlink: 43 bytes leftover after parsing attributes in process `syz.3.17899'. [ 1036.306998][T12204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17905'. [ 1036.332111][T12204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17905'. [ 1036.619159][T12217] netlink: 104 bytes leftover after parsing attributes in process `syz.0.17911'. [ 1036.623233][T16755] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1036.799862][T16755] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1036.835647][T16755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.848560][T16755] usb 2-1: Product: syz [ 1036.871699][T16755] usb 2-1: Manufacturer: syz [ 1036.876691][T16755] usb 2-1: SerialNumber: syz [ 1036.906008][T16755] usb 2-1: config 0 descriptor?? [ 1037.453808][T12258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17929'. [ 1037.472270][T12258] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17929'. [ 1037.530348][T16755] usb 2-1: f81604_read: reg: 105 failed: -EPROTO [ 1037.543075][T16755] f81604 2-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 1037.554176][ T5698] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1037.568065][T16755] f81604 2-1:0.0: probe with driver f81604 failed with error -71 [ 1037.595445][T16755] usb 2-1: USB disconnect, device number 39 [ 1037.740169][ T5698] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1037.761779][ T5698] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1037.776165][ T5698] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1037.785700][T16749] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1037.786667][ T5698] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.811014][T12250] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1037.825278][ T5698] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1037.969521][T16749] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1037.989446][T16749] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.010135][T16749] usb 3-1: config 0 descriptor?? [ 1038.021589][T16749] cp210x 3-1:0.0: cp210x converter detected [ 1038.123701][ T480] usb 4-1: USB disconnect, device number 29 [ 1038.452618][T16749] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1038.477597][T16749] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1038.679113][ T5698] usb 3-1: USB disconnect, device number 106 [ 1038.712681][ T5698] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1038.748446][ T5698] cp210x 3-1:0.0: device disconnected [ 1038.804402][T12298] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1038.812866][T12298] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1038.825854][T16755] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 1038.943154][T12305] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17951'. [ 1038.977381][T16755] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1038.989729][T16755] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1039.020004][T16755] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1039.034475][T16755] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.047225][T16755] usb 5-1: config 0 descriptor?? [ 1039.195778][T16749] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1039.245938][ T480] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1039.385828][T16749] usb 1-1: Using ep0 maxpacket: 32 [ 1039.392572][T16749] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 1039.400747][T16749] usb 1-1: config 0 has no interface number 0 [ 1039.408010][T16749] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1039.419454][T16749] usb 1-1: config 0 interface 85 has no altsetting 0 [ 1039.427568][ T480] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1039.441015][ T480] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1039.452509][T16749] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1039.462585][T16749] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.466967][T16755] isku 0003:1E7D:319C.00B2: unknown main item tag 0x0 [ 1039.472117][ T480] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.487675][T16755] isku 0003:1E7D:319C.00B2: unknown main item tag 0x0 [ 1039.489405][T16749] usb 1-1: Product: syz [ 1039.497053][T16755] isku 0003:1E7D:319C.00B2: unknown main item tag 0x0 [ 1039.501236][T16749] usb 1-1: Manufacturer: syz [ 1039.508277][T16755] isku 0003:1E7D:319C.00B2: unknown main item tag 0x0 [ 1039.512096][ T480] usb 4-1: config 0 descriptor?? [ 1039.521663][T16755] isku 0003:1E7D:319C.00B2: unknown main item tag 0x0 [ 1039.529468][T16755] isku 0003:1E7D:319C.00B2: unknown main item tag 0x0 [ 1039.540288][T16749] usb 1-1: SerialNumber: syz [ 1039.545653][T16755] isku 0003:1E7D:319C.00B2: unknown main item tag 0x0 [ 1039.564599][T16749] usb 1-1: config 0 descriptor?? [ 1039.564639][T16755] isku 0003:1E7D:319C.00B2: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0 [ 1039.666981][T16755] isku 0003:1E7D:319C.00B2: couldn't init struct isku_device [ 1039.685491][T16755] isku 0003:1E7D:319C.00B2: couldn't install keyboard [ 1039.697944][T16755] isku 0003:1E7D:319C.00B2: probe with driver isku failed with error -71 [ 1039.719060][T16755] usb 5-1: USB disconnect, device number 22 [ 1039.962756][ T480] keytouch 0003:0926:3333.00B3: fixing up Keytouch IEC report descriptor [ 1039.996281][ T480] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.00B3/input/input180 [ 1040.154883][ T480] keytouch 0003:0926:3333.00B3: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1040.197103][T16749] appletouch 1-1:0.85: Geyser mode initialized. [ 1040.226865][T16749] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input179 [ 1040.526262][T16749] usb 1-1: USB disconnect, device number 31 [ 1040.542030][T16760] usb 4-1: USB disconnect, device number 30 [ 1040.579231][T12342] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1040.598679][T12344] loop5: detected capacity change from 0 to 7 [ 1040.616142][T16749] appletouch 1-1:0.85: input: appletouch disconnected [ 1040.638985][T12344] buffer_io_error: 130 callbacks suppressed [ 1040.639003][T12344] Buffer I/O error on dev loop5, logical block 0, async page read [ 1040.682760][T12344] Buffer I/O error on dev loop5, logical block 0, async page read [ 1040.701899][T12344] Buffer I/O error on dev loop5, logical block 0, async page read [ 1040.722349][T12344] Buffer I/O error on dev loop5, logical block 0, async page read [ 1040.736060][T12344] Buffer I/O error on dev loop5, logical block 0, async page read [ 1040.759109][T12344] Buffer I/O error on dev loop5, logical block 0, async page read [ 1040.768357][T12344] Buffer I/O error on dev loop5, logical block 0, async page read [ 1040.777440][T12344] ldm_validate_partition_table(): Disk read failed. [ 1040.784453][T12344] Buffer I/O error on dev loop5, logical block 0, async page read [ 1040.793144][T12344] Buffer I/O error on dev loop5, logical block 0, async page read [ 1040.811813][T12344] Buffer I/O error on dev loop5, logical block 0, async page read [ 1040.820342][T12344] Dev loop5: unable to read RDB block 0 [ 1040.835672][ T5698] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1040.848159][T12344] loop5: unable to read partition table [ 1040.854051][T12344] loop5: partition table beyond EOD, truncated [ 1040.863028][T12344] loop_reread_partitions: partition scan of loop5 (Sj̳P=?}X 5`ր5) failed (rc=-5) [ 1041.000002][ T5698] usb 5-1: Using ep0 maxpacket: 8 [ 1041.010239][T12346] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17967'. [ 1041.028294][ T5698] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1041.048680][ T5698] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1041.068332][ T5698] usb 5-1: can't read configurations, error -71 [ 1041.285393][T12368] random: crng reseeded on system resumption [ 1042.075730][T16749] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1042.280317][T16749] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1042.318632][T16749] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1042.332647][T16749] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1042.348452][T16749] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.369638][T16749] usb 3-1: config 0 descriptor?? [ 1042.428786][T12414] netlink: 'syz.1.17995': attribute type 8 has an invalid length. [ 1042.466572][ T5698] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 1042.628909][ T5698] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1042.665792][ T5698] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1042.695793][ T5698] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1042.702571][ T5698] usb 5-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 1042.739072][ T5698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.779755][ T5698] usb 5-1: config 0 descriptor?? [ 1042.804527][T12408] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1042.812462][T16749] playstation 0003:054C:0DF2.00B4: unknown main item tag 0x0 [ 1042.844045][T16749] playstation 0003:054C:0DF2.00B4: unknown main item tag 0x0 [ 1042.883801][T16749] playstation 0003:054C:0DF2.00B4: unknown main item tag 0x0 [ 1042.909007][T16749] playstation 0003:054C:0DF2.00B4: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 1043.177216][T12438] kvm: kvm [12437]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0xb [ 1043.217003][T16749] playstation 0003:054C:0DF2.00B4: Failed to retrieve feature with reportID 32: -71 [ 1043.233219][T16749] playstation 0003:054C:0DF2.00B4: Failed to retrieve DualSense firmware info: -71 [ 1043.243332][T16749] playstation 0003:054C:0DF2.00B4: Failed to get firmware info from DualSense [ 1043.253549][T16749] playstation 0003:054C:0DF2.00B4: Failed to create dualsense. [ 1043.271179][T16749] playstation 0003:054C:0DF2.00B4: probe with driver playstation failed with error -71 [ 1043.298638][T16749] usb 3-1: USB disconnect, device number 107 [ 1043.312302][ T480] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1043.392036][ T5698] betop 0003:11C2:2208.00B5: collection stack underflow [ 1043.400069][ T5698] betop 0003:11C2:2208.00B5: item 0 2 0 12 parsing failed [ 1043.408362][ T5698] betop 0003:11C2:2208.00B5: parse failed [ 1043.418144][ T5698] betop 0003:11C2:2208.00B5: probe with driver betop failed with error -22 [ 1043.488749][T12443] input: syz1 as /devices/virtual/input/input181 [ 1043.496657][ T480] usb 2-1: Using ep0 maxpacket: 32 [ 1043.512435][ T480] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 1043.542883][ T480] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1043.558107][ T480] usb 2-1: config 0 has no interface number 0 [ 1043.577041][ T480] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1043.593434][ T480] usb 2-1: config 0 has no interface number 0 [ 1043.603232][ T480] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1043.623029][ T480] usb 2-1: config 0 has no interface number 0 [ 1043.628158][ T5698] usb 5-1: USB disconnect, device number 25 [ 1043.640645][ T480] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1043.661629][ T480] usb 2-1: config 0 has no interface number 0 [ 1043.673008][ T480] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1043.682072][ T480] usb 2-1: config 0 has no interface number 0 [ 1043.691695][ T480] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1043.700202][ T480] usb 2-1: config 0 has no interface number 0 [ 1043.708415][ T480] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1043.716911][ T480] usb 2-1: config 0 has no interface number 0 [ 1043.724149][ T480] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1043.732747][ T480] usb 2-1: config 0 has no interface number 0 [ 1043.742095][ T480] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1043.751614][ T480] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.766409][ T480] usb 2-1: Product: syz [ 1043.770630][ T480] usb 2-1: Manufacturer: syz [ 1043.775317][ T480] usb 2-1: SerialNumber: syz [ 1043.786139][ T480] usb 2-1: config 0 descriptor?? [ 1043.797218][ T480] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz) [ 1043.885749][T16755] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1043.902512][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 1043.902528][ T29] audit: type=1326 audit(1782388787.825:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12452 comm="syz.2.18013" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76619ce59 code=0x7ffc0000 [ 1043.937867][ T29] audit: type=1326 audit(1782388787.835:3403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12452 comm="syz.2.18013" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76619ce59 code=0x7ffc0000 [ 1043.963239][ T29] audit: type=1326 audit(1782388787.835:3404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12452 comm="syz.2.18013" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc76619ce59 code=0x7ffc0000 [ 1043.967686][T12455] tap0: tun_chr_ioctl cmd 1074025680 [ 1043.989835][ T29] audit: type=1326 audit(1782388787.835:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12452 comm="syz.2.18013" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc76619ce59 code=0x0 [ 1044.004157][ T480] etas_es58x 2-1:0.2: could not retrieve the product info string [ 1044.039615][T16755] usb 4-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1044.052187][T16755] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1044.064028][T16755] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1044.076261][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1044.113701][T16755] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1044.135653][T16755] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1044.145480][T16755] usb 4-1: Product: syz [ 1044.157875][T16755] usb 4-1: Manufacturer: syz [ 1044.176104][T16755] usb 4-1: SerialNumber: syz [ 1044.197849][T16755] usb 4-1: config 0 descriptor?? [ 1044.211954][T16755] usb 4-1: selecting invalid altsetting 0 [ 1044.468908][T12445] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1044.497354][T12445] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1044.516682][T12445] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1044.892173][ C1] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 1044.903527][ C1] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 1044.911620][ C1] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG [ 1044.919426][ C1] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 1044.930397][ C1] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 1044.938376][ C1] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG [ 1044.946128][ C1] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 1044.957075][ C1] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 1044.965069][ C1] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG [ 1044.972804][ C1] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 1044.983753][ C1] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 1044.991736][ C1] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG [ 1045.000326][ C1] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 1045.011299][ C1] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 1045.019308][ C1] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG [ 1045.027075][ C1] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 1045.038017][ C1] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 1045.045992][ C1] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG [ 1045.053821][ C1] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 1045.064758][ C1] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 1045.072735][ C1] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG [ 1045.080533][ C1] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 1045.091487][ C1] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 1045.099462][ C1] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG [ 1045.107435][ T5288] etas_es58x 2-1:0.2 can0: bit-timing not yet defined [ 1045.338524][ C1] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 1045.347860][ C1] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 1045.357061][ C1] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 1045.366247][ C1] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 1045.375422][ C1] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 1045.384600][ C1] etas_es58x 2-1:0.2 can0: es58x_write_bulk_callback: error -EPROTO [ 1045.395362][ T5288] etas_es58x 2-1:0.2 can0: es58x_open: Could not open the network device: -EINVAL [ 1045.398191][ T5698] usb 2-1: USB disconnect, device number 40 [ 1045.414055][ T5698] etas_es58x 2-1:0.2: Disconnecting syz syz [ 1046.035918][T16755] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1046.216981][T16755] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 1046.257408][T12444] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1046.257902][T16755] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.278428][T16755] usb 3-1: config 0 has no interfaces? [ 1046.285201][T16755] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.296140][T16755] usb 3-1: config 0 has no interfaces? [ 1046.303990][T16755] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.317609][T16755] usb 3-1: config 0 has no interfaces? [ 1046.335420][T16755] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.347334][T16755] usb 3-1: config 0 has no interfaces? [ 1046.354159][T16755] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.364704][T16755] usb 3-1: config 0 has no interfaces? [ 1046.375207][T16755] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.395683][ T5698] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1046.404021][T16755] usb 3-1: config 0 has no interfaces? [ 1046.420217][T16755] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.444211][T16755] usb 3-1: config 0 has no interfaces? [ 1046.459135][T16755] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.471637][T16755] usb 3-1: config 0 has no interfaces? [ 1046.483413][T16755] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1046.506360][T16755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.524016][T16755] usb 3-1: config 0 descriptor?? [ 1046.556157][ T5698] usb 2-1: Using ep0 maxpacket: 8 [ 1046.563528][ T5698] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 1046.577157][ T5698] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1046.589241][ T5698] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1046.601808][ T5698] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1046.616700][ T5698] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1046.627393][ T5698] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1046.641597][ T5698] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1046.652058][ T5698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.724653][T12551] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18036'. [ 1046.745726][T16754] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1046.848929][T12555] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18037'. [ 1046.860651][T16755] usb 3-1: USB disconnect, device number 108 [ 1046.893453][ T5698] usb 2-1: GET_CAPABILITIES returned 0 [ 1046.905859][ T5698] usbtmc 2-1:16.0: can't read capabilities [ 1046.926285][T16754] usb 5-1: Using ep0 maxpacket: 8 [ 1046.938556][T16754] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1046.963765][T16754] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1046.993642][T16754] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1047.015688][T16754] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1047.029200][T16754] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1047.038754][T16754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.108362][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1047.124603][T12531] usbtmc 2-1:16.0: Unable to send data, error -71 [ 1047.136863][T16760] usb 2-1: USB disconnect, device number 41 [ 1047.245747][ T5698] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1047.261660][T12540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1047.271908][T12540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1047.290125][ T480] usb 4-1: USB disconnect, device number 31 [ 1047.291238][T16754] usb 5-1: usb_control_msg returned -71 [ 1047.314716][T16754] usbtmc 5-1:16.0: can't read capabilities [ 1047.352596][T16754] usb 5-1: USB disconnect, device number 26 [ 1047.408948][ T5698] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1047.441094][ T5698] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.501045][ T5698] usb 1-1: config 0 descriptor?? [ 1047.737946][ T5698] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1047.996444][ T5698] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 1048.019807][ T5698] [drm] Initialized udl on minor 2 [ 1048.140203][ T5698] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 1048.152599][ T5698] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1048.226235][ T480] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1048.366458][T16754] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1048.377303][ T5698] usb 1-1: USB disconnect, device number 32 [ 1048.406529][ T480] usb 3-1: Using ep0 maxpacket: 8 [ 1048.407827][T16754] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1048.423588][ T480] usb 3-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=5b.65 [ 1048.452901][ T480] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.478985][ T480] usb 3-1: Product: syz [ 1048.483337][ T480] usb 3-1: Manufacturer: syz [ 1048.489979][ T480] usb 3-1: SerialNumber: syz [ 1048.499539][ T480] usb 3-1: config 0 descriptor?? [ 1048.517644][ T480] pegasus 3-1:0.0: Missing or invalid endpoints [ 1048.582003][T12613] input: syz1 as /devices/virtual/input/input182 [ 1048.589138][T12613] input: failed to attach handler leds to device input182, error: -6 [ 1048.761665][ T480] usb 3-1: USB disconnect, device number 109 [ 1049.010599][T12625] pim6reg: entered allmulticast mode [ 1049.026987][T12624] pim6reg: left allmulticast mode [ 1049.216747][T12633] loop8: detected capacity change from 0 to 1 [ 1049.253745][T12633] Dev loop8: unable to read RDB block 1 [ 1049.264434][T12633] loop8: unable to read partition table [ 1049.275765][T16755] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1049.277291][T12633] loop8: partition table beyond EOD, truncated [ 1049.311446][T12633] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1049.436252][T16755] usb 2-1: Using ep0 maxpacket: 8 [ 1049.448399][T16755] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1049.463245][ T29] audit: type=1326 audit(1782388793.385:3406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12638 comm="syz.0.18068" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f921c99ce59 code=0x0 [ 1049.490172][T16755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.505516][T16755] usb 2-1: Product: syz [ 1049.510827][T16755] usb 2-1: Manufacturer: syz [ 1049.515491][T16755] usb 2-1: SerialNumber: syz [ 1049.526204][T16755] usb 2-1: config 0 descriptor?? [ 1049.536912][T16755] gspca_main: se401-2.14.0 probing 047d:5003 [ 1049.740845][T12629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1049.759460][T12629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1049.990613][T16755] gspca_se401: ExtraFeatures: 4 [ 1049.997460][T16755] gspca_se401: Frame size: 64x0 bayer [ 1050.003716][T16755] gspca_se401: Frame size: 0x0 1/16th janggu [ 1050.020865][T16755] gspca_se401: Frame size: 0x0 1/16th janggu [ 1050.028609][T16755] gspca_se401: Frame size: 0x0 1/16th janggu [ 1050.037253][T16755] gspca_se401: Frame size: 0x0 1/16th janggu [ 1050.197230][T16755] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input183 [ 1050.217289][T16755] usb 2-1: USB disconnect, device number 42 [ 1050.623435][T12672] program syz.2.18080 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1051.066108][T16755] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1051.225909][T16755] usb 2-1: Using ep0 maxpacket: 32 [ 1051.237069][T16755] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1051.253866][T16755] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1051.264622][T16755] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1051.274858][T16755] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1051.288193][ T5627] Bluetooth: hci4: command 0x0406 tx timeout [ 1051.311060][T16755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.323865][T16755] usb 2-1: Product: syz [ 1051.328154][T16755] usb 2-1: Manufacturer: syz [ 1051.332757][T16755] usb 2-1: SerialNumber: syz [ 1051.340915][T16755] usb 2-1: config 0 descriptor?? [ 1051.384777][T12707] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18097'. [ 1051.761593][T16755] gs_usb 2-1:0.0: Configuring for 154 interfaces [ 1052.162886][T16755] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 1052.250290][T16755] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 1052.266064][T12735] netlink: 'syz.4.18110': attribute type 3 has an invalid length. [ 1052.274203][T12733] netlink: 'syz.3.18109': attribute type 32 has an invalid length. [ 1052.291766][T12735] netlink: 'syz.4.18110': attribute type 3 has an invalid length. [ 1052.299966][T12733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18109'. [ 1052.310368][T12735] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18110'. [ 1052.326495][T16755] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 1052.370213][T16755] usb 2-1: USB disconnect, device number 43 [ 1052.448172][T12733] bond1: option coupled_control: invalid value (28) [ 1052.480845][T12733] bond1 (unregistering): Released all slaves [ 1052.669789][ C0] blk_print_req_error: 131 callbacks suppressed [ 1052.669811][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1052.689683][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1052.698935][ C1] buffer_io_error: 14 callbacks suppressed [ 1052.698950][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1052.721129][ C1] I/O error, dev loop9, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1052.730419][ C1] Buffer I/O error on dev loop9, logical block 1, async page read [ 1052.738310][ C1] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1052.747568][ C1] Buffer I/O error on dev loop9, logical block 2, async page read [ 1052.755410][ C1] I/O error, dev loop9, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1052.764666][ C1] Buffer I/O error on dev loop9, logical block 3, async page read [ 1052.772552][ C1] I/O error, dev loop9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1052.781812][ C1] Buffer I/O error on dev loop9, logical block 4, async page read [ 1052.789694][ C1] I/O error, dev loop9, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1052.798952][ C1] Buffer I/O error on dev loop9, logical block 5, async page read [ 1052.806837][ C1] I/O error, dev loop9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1052.816075][ C1] Buffer I/O error on dev loop9, logical block 6, async page read [ 1052.831608][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1052.832358][ C1] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1052.840858][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1052.849983][ C1] Buffer I/O error on dev loop9, logical block 2, async page read [ 1052.857790][ C0] Buffer I/O error on dev loop9, logical block 1, async page read [ 1053.138956][T12759] netlink: 'syz.1.18122': attribute type 3 has an invalid length. [ 1053.157419][T12759] netlink: 180 bytes leftover after parsing attributes in process `syz.1.18122'. [ 1053.175724][T12759] netlink: 'syz.1.18122': attribute type 3 has an invalid length. [ 1053.183644][T12759] netlink: 180 bytes leftover after parsing attributes in process `syz.1.18122'. [ 1053.195835][ T480] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1053.347245][ T480] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1053.366741][ T480] usb 4-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 1053.392463][ T480] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.414903][ T480] usb 4-1: config 0 descriptor?? [ 1053.835195][T12756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.861270][T12756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1053.892433][ T480] hid_parser_main: 9 callbacks suppressed [ 1053.892455][ T480] sunplus 0003:04FC:05D8.00B6: unknown main item tag 0x0 [ 1053.915473][ T480] sunplus 0003:04FC:05D8.00B6: unknown main item tag 0x4 [ 1053.933742][ T480] sunplus 0003:04FC:05D8.00B6: unknown main item tag 0x0 [ 1053.942940][ T480] sunplus 0003:04FC:05D8.00B6: unknown main item tag 0x0 [ 1053.955369][ T480] sunplus 0003:04FC:05D8.00B6: unknown main item tag 0x0 [ 1053.963076][ T480] sunplus 0003:04FC:05D8.00B6: unknown main item tag 0x2 [ 1053.970686][ T480] sunplus 0003:04FC:05D8.00B6: unknown main item tag 0x0 [ 1053.978212][ T480] sunplus 0003:04FC:05D8.00B6: unknown main item tag 0x0 [ 1054.003027][ T480] sunplus 0003:04FC:05D8.00B6: unknown main item tag 0x0 [ 1054.024837][ T480] sunplus 0003:04FC:05D8.00B6: unknown main item tag 0x0 [ 1054.048328][ T480] sunplus 0003:04FC:05D8.00B6: item fetching failed at offset 40/41 [ 1054.070176][ T480] sunplus 0003:04FC:05D8.00B6: probe with driver sunplus failed with error -22 [ 1054.114117][ T480] usb 4-1: USB disconnect, device number 32 [ 1054.324737][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.333244][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.146882][T16755] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1055.325999][T16755] usb 4-1: Using ep0 maxpacket: 16 [ 1055.338128][T16755] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1055.355837][T16755] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1055.371183][T16755] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1055.393779][T16755] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1055.420392][T16755] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.449508][T16755] usb 4-1: config 0 descriptor?? [ 1055.878572][T12813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1055.896243][T12813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1055.995994][T16755] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.00B7/input/input184 [ 1056.048884][T16755] microsoft 0003:045E:07DA.00B7: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1056.229191][T16755] usb 4-1: USB disconnect, device number 33 [ 1056.350819][T12830] netlink: 'syz.2.18152': attribute type 10 has an invalid length. [ 1056.373560][T12830] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1056.390894][T12830] team0: Port device netdevsim1 added [ 1056.401984][T12840] netlink: 'syz.2.18152': attribute type 10 has an invalid length. [ 1056.449175][T12840] team0: Port device netdevsim1 removed [ 1056.496779][T12840] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1056.527805][T12840] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1056.940846][T12847] dvmrp0: entered allmulticast mode [ 1057.109739][T12866] C: renamed from veth1_to_team (while UP) [ 1057.148040][T12866] netlink: 'syz.4.18167': attribute type 2 has an invalid length. [ 1057.167191][T12866] netlink: 116 bytes leftover after parsing attributes in process `syz.4.18167'. [ 1057.190391][T12866] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1057.443181][T12882] kvm: kvm [12880]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x20000000000 [ 1057.474042][ T81] dvmrp0: left allmulticast mode [ 1057.604494][T12888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18176'. [ 1057.635471][T12888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18176'. [ 1058.265466][T12897] syz.1.18180 (12897): drop_caches: 2 [ 1058.364244][T12897] syz.1.18180 (12897): drop_caches: 2 [ 1059.436170][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1059.737092][T12963] tipc: Started in network mode [ 1059.754506][T12963] tipc: Node identity ac14140f, cluster identity 4711 [ 1059.756208][T16739] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1059.764770][T12963] tipc: New replicast peer: 255.255.255.255 [ 1059.779792][T12963] tipc: Enabled bearer , priority 10 [ 1059.927703][T16739] usb 4-1: too many configurations: 53, using maximum allowed: 8 [ 1059.945399][T16739] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1059.963881][T16739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.977619][T16739] usb 4-1: Product: syz [ 1059.981832][T16739] usb 4-1: Manufacturer: syz [ 1059.992865][T16739] usb 4-1: SerialNumber: syz [ 1060.045033][T12978] could not allocate digest TFM handle _!5(iHP,omxę*71U"~ 2.>~e>/y [ 1060.225717][T16754] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1060.253776][T16739] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1060.268923][T16739] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1060.279677][T16739] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1060.292566][T16739] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1060.311094][T16739] usb 4-1: USB disconnect, device number 34 [ 1060.365739][T16760] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1060.385947][T16754] usb 1-1: Using ep0 maxpacket: 8 [ 1060.393142][T16754] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1060.411313][T16754] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1060.421326][T16754] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1060.431390][T16754] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1060.444636][T16754] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1060.456510][T16754] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.465943][ T480] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1060.548319][T16760] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1060.560775][T16760] usb 2-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 1060.570381][T16760] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.584931][T16760] usb 2-1: config 0 descriptor?? [ 1060.596751][T12982] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1060.627659][ T480] usb 5-1: Using ep0 maxpacket: 32 [ 1060.634761][ T480] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1060.647204][ T480] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1060.660149][ T480] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1060.668074][ T480] usb 5-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 1060.676466][T16754] usb 1-1: GET_CAPABILITIES returned 0 [ 1060.677291][ T480] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.683217][T16754] usbtmc 1-1:16.0: can't read capabilities [ 1060.698099][ T480] usb 5-1: config 0 descriptor?? [ 1060.827456][T13000] netlink: 'syz.3.18226': attribute type 11 has an invalid length. [ 1060.860629][T16739] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1060.912969][ T5639] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 1060.922337][T16754] usb 1-1: USB disconnect, device number 33 [ 1060.990894][T16749] tipc: Node number set to 2886997007 [ 1061.015832][T16739] usb 3-1: Using ep0 maxpacket: 32 [ 1061.047151][T16760] hid_parser_main: 3 callbacks suppressed [ 1061.047174][T16760] asus 0003:0B05:1ABE.00B8: unknown main item tag 0x0 [ 1061.060976][T16739] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1061.078775][T16760] asus 0003:0B05:1ABE.00B8: unknown main item tag 0x0 [ 1061.081211][T16739] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1061.096629][T16760] asus 0003:0B05:1ABE.00B8: unknown main item tag 0x0 [ 1061.096662][T16760] asus 0003:0B05:1ABE.00B8: unknown main item tag 0x0 [ 1061.096687][T16760] asus 0003:0B05:1ABE.00B8: unknown main item tag 0x0 [ 1061.096731][T16760] asus 0003:0B05:1ABE.00B8: unknown main item tag 0x0 [ 1061.096935][T16760] asus 0003:0B05:1ABE.00B8: ignoring exceeding usage max [ 1061.098696][T16760] asus 0003:0B05:1ABE.00B8: unknown main item tag 0x0 [ 1061.125045][T16739] usb 3-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 1061.142394][ T480] elecom 0003:056E:00FB.00B9: unknown main item tag 0x0 [ 1061.157888][T16760] asus 0003:0B05:1ABE.00B8: unknown main item tag 0x0 [ 1061.164733][ T480] elecom 0003:056E:00FB.00B9: unknown main item tag 0x0 [ 1061.201515][T16739] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.201583][ T480] elecom 0003:056E:00FB.00B9: hidraw0: USB HID v1.01 Device [HID 056e:00fb] on usb-dummy_hcd.4-1/input0 [ 1061.221821][T16739] usb 3-1: Product: syz [ 1061.237832][T16760] asus 0003:0B05:1ABE.00B8: hidraw1: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.1-1/input0 [ 1061.242131][T16739] usb 3-1: Manufacturer: syz [ 1061.261382][T16760] usb 2-1: USB disconnect, device number 44 [ 1061.284778][T16739] usb 3-1: SerialNumber: syz [ 1061.407295][T13009] fido_id[13009]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1061.432585][ T480] usb 5-1: USB disconnect, device number 27 [ 1061.921576][T16739] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1062.099005][T13029] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1062.131581][T16739] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1062.282123][T16739] usb 3-1: USB disconnect, device number 110 [ 1062.647183][T16754] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1062.756555][T16760] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 1062.805682][T16754] usb 4-1: Using ep0 maxpacket: 16 [ 1062.827881][T16754] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1062.864788][T16754] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1062.898564][T16754] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.913153][T16754] usb 4-1: Product: syz [ 1062.921844][T16754] usb 4-1: Manufacturer: syz [ 1062.935691][T16754] usb 4-1: SerialNumber: syz [ 1062.940801][T16760] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1062.946729][T16754] usb 4-1: config 0 descriptor?? [ 1062.967397][T16760] usb 5-1: not running at top speed; connect to a high speed hub [ 1062.976106][T16754] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1062.987932][T16760] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4 [ 1063.006348][T16754] usb 4-1: Detected FT232R [ 1063.018151][T16760] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 1063.043920][T16760] usb 5-1: New USB device found, idVendor=0e41, idProduct=4153, bcdDevice= 0.40 [ 1063.069808][T16760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.087159][T16760] usb 5-1: Product: syz [ 1063.096819][T16760] usb 5-1: Manufacturer: syz [ 1063.105633][T16760] usb 5-1: SerialNumber: syz [ 1063.181572][T16754] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1063.369147][T16760] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1063.386805][T16760] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1063.405185][T16760] usb 5-1: unit 69 not found! [ 1063.446466][T16754] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1063.532508][T16760] usb 5-1: USB disconnect, device number 28 [ 1063.650213][T28252] udevd[28252]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1063.687781][T16758] usb 4-1: USB disconnect, device number 35 [ 1063.770756][T16758] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1063.796591][T16758] ftdi_sio 4-1:0.0: device disconnected [ 1063.945329][T13071] loop5: detected capacity change from 0 to 7 [ 1064.024154][T13071] Dev loop5: unable to read RDB block 7 [ 1064.046400][T13071] loop5: unable to read partition table [ 1064.057042][T13071] loop5: partition table beyond EOD, truncated [ 1064.066467][T13071] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1064.071572][ T29] audit: type=1326 audit(1782388807.995:3407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13074 comm="syz.4.18257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938319ce59 code=0x7ffc0000 [ 1064.093617][ C0] blk_print_req_error: 62 callbacks suppressed [ 1064.093637][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 1064.120614][ C0] buffer_io_error: 60 callbacks suppressed [ 1064.120632][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 1064.235462][ T29] audit: type=1326 audit(1782388807.995:3408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13074 comm="syz.4.18257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938319ce59 code=0x7ffc0000 [ 1064.273550][ T29] audit: type=1326 audit(1782388808.045:3409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13074 comm="syz.4.18257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938319ce59 code=0x7ffc0000 [ 1064.308301][ T29] audit: type=1326 audit(1782388808.045:3410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13074 comm="syz.4.18257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938319ce59 code=0x7ffc0000 [ 1064.363639][T13087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18263'. [ 1064.376638][ T29] audit: type=1326 audit(1782388808.065:3411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13074 comm="syz.4.18257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f938319ce59 code=0x7ffc0000 [ 1064.429627][ T29] audit: type=1326 audit(1782388808.065:3412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13074 comm="syz.4.18257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938319ce59 code=0x7ffc0000 [ 1064.485125][ T29] audit: type=1326 audit(1782388808.065:3413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13074 comm="syz.4.18257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938319ce59 code=0x7ffc0000 [ 1064.550889][ T29] audit: type=1326 audit(1782388808.065:3414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13074 comm="syz.4.18257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938319ce59 code=0x7ffc0000 [ 1064.642076][ T29] audit: type=1326 audit(1782388808.065:3415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13074 comm="syz.4.18257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938319ce59 code=0x7ffc0000 [ 1064.693792][ T29] audit: type=1326 audit(1782388808.075:3416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13074 comm="syz.4.18257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f938319ce59 code=0x7ffc0000 [ 1064.953235][T13108] loop3: detected capacity change from 0 to 7 [ 1064.977286][ T5639] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1064.992130][ T5639] Bluetooth: hci0: Injecting HCI hardware error event [ 1065.001137][T13108] Dev loop3: unable to read RDB block 7 [ 1065.003024][ T5639] Bluetooth: hci0: hardware error 0x00 [ 1065.007227][T13108] loop3: AHDI p1 p2 [ 1065.048963][T13108] loop3: partition table partially beyond EOD, truncated [ 1065.065875][T13108] loop3: p1 start 1702000233 is beyond EOD, truncated [ 1065.227330][T13111] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1065.572993][T13116] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.704446][T13116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1065.721304][T13116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1065.846276][T13119] geneve2: entered promiscuous mode [ 1065.991089][ T3382] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1066.003419][ T3382] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.095049][ T3382] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1066.106649][ T3382] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.197532][ T3382] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1066.209082][ T3382] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.299869][ T3382] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1066.310232][ T3382] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.458843][ T3382] bridge_slave_1: left promiscuous mode [ 1066.464892][ T3382] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.485939][ T3382] bridge_slave_0: left allmulticast mode [ 1066.491621][ T3382] bridge_slave_0: left promiscuous mode [ 1066.497990][ T3382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.113476][ T3382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1067.122285][ T5639] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1067.144177][ T3382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1067.200770][ T3382] bond0 (unregistering): Released all slaves [ 1067.408595][ T3382] tipc: Disabling bearer [ 1067.442780][ T3382] tipc: Left network mode [ 1067.529072][T13144] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18288'. [ 1067.562024][ T5627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1067.577077][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1067.593861][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1067.627863][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1067.637811][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1068.304633][ T3382] hsr_slave_0: left promiscuous mode [ 1068.351118][ T3382] hsr_slave_1: left promiscuous mode [ 1068.379607][ T3382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1068.422071][ T3382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1068.439434][ T3382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1068.458890][ T3382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1068.514302][ T3382] virt_wifi0: left allmulticast mode [ 1068.530995][ T3382] virt_wifi0: left promiscuous mode [ 1068.551498][ T3382] veth1_macvtap: left promiscuous mode [ 1068.567156][ T3382] veth0_macvtap: left promiscuous mode [ 1068.572679][T13169] syz.0.18293 (13169): drop_caches: 2 [ 1068.577651][ T3382] veth1_vlan: left promiscuous mode [ 1068.586641][ T3382] veth0_vlan: left promiscuous mode [ 1068.605526][T13169] syz.0.18293 (13169): drop_caches: 2 [ 1069.286213][ T3382] team0 (unregistering): Port device team_slave_1 removed [ 1069.366209][ T3382] team0 (unregistering): Port device team_slave_0 removed [ 1069.726375][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1069.758206][ T5639] Bluetooth: hci0: command tx timeout [ 1069.906664][T16739] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1070.111417][T16739] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1070.134881][T16739] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1070.157255][T16739] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1070.173112][T16739] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1070.186150][T16739] usb 3-1: SerialNumber: syz [ 1070.326432][T16754] usb 1-1: new low-speed USB device number 34 using dummy_hcd [ 1070.417680][T16739] usb 3-1: 0:2 : does not exist [ 1070.491782][T16739] usb 3-1: USB disconnect, device number 111 [ 1070.500468][T16754] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1070.510853][T16755] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1070.523598][T16754] usb 1-1: config 0 has no interface number 0 [ 1070.546272][T16754] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1070.565282][T16754] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1070.582181][T16754] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1070.591333][T13150] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.591500][T13150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.599057][T16754] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.618132][T16754] usb 1-1: config 0 descriptor?? [ 1070.624131][T13227] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1070.648091][T28252] udevd[28252]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1070.671795][T13150] bridge_slave_0: entered allmulticast mode [ 1070.674746][T16754] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1070.690835][T13150] bridge_slave_0: entered promiscuous mode [ 1070.696597][T16755] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1070.706792][T16755] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1070.726522][T16755] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1070.731483][T13150] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.761123][T16755] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1070.765892][T13150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.783291][T16755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1070.786207][T13150] bridge_slave_1: entered allmulticast mode [ 1070.807728][T16755] usb 2-1: Product: syz [ 1070.809826][T13150] bridge_slave_1: entered promiscuous mode [ 1070.820279][T16755] usb 2-1: Manufacturer: syz [ 1070.845166][T16755] usb 2-1: SerialNumber: syz [ 1070.864431][T16754] usb 1-1: USB disconnect, device number 34 [ 1070.871928][T13150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1070.907562][T13150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1070.988846][T13150] team0: Port device team_slave_0 added [ 1071.020413][T13150] team0: Port device team_slave_1 added [ 1071.093182][T16755] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 45 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1071.119712][T13150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1071.129551][T13150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1071.156457][T13150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1071.170283][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1071.180291][T13150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1071.187601][T13150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1071.214880][T13150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1071.280423][T13150] hsr_slave_0: entered promiscuous mode [ 1071.287218][T13150] hsr_slave_1: entered promiscuous mode [ 1071.293478][T16755] usb 2-1: USB disconnect, device number 45 [ 1071.297265][T13150] debugfs: 'hsr0' already exists in 'hsr' [ 1071.307941][T13150] Cannot create hsr debugfs directory [ 1071.327671][T16755] usblp0: removed [ 1071.836013][T16739] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1071.857548][ T5639] Bluetooth: hci0: command tx timeout [ 1071.999468][T16739] usb 5-1: Using ep0 maxpacket: 32 [ 1072.023975][T16739] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 1072.047059][T16739] usb 5-1: config 0 has no interface number 0 [ 1072.068252][T16739] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1072.094839][T16739] usb 5-1: config 0 interface 85 has no altsetting 0 [ 1072.103941][T16739] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1072.122176][T16739] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.152465][T16739] usb 5-1: Product: syz [ 1072.158261][T16739] usb 5-1: Manufacturer: syz [ 1072.167360][T16739] usb 5-1: SerialNumber: syz [ 1072.190305][T16739] usb 5-1: config 0 descriptor?? [ 1072.488020][T16755] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1072.655752][T16755] usb 2-1: Using ep0 maxpacket: 32 [ 1072.880811][T16755] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1072.898386][T16755] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1072.916568][T16755] usb 2-1: can't read configurations, error -71 [ 1072.977139][T16739] appletouch 5-1:0.85: Geyser mode initialized. [ 1073.006419][T16739] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input185 [ 1073.034966][ C0] appletouch 5-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 1073.053296][T13150] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1073.080914][T13150] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1073.098913][T13150] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1073.140887][T13150] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1073.170048][T13150] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1073.241404][T13150] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1073.242120][ T5698] usb 5-1: USB disconnect, device number 29 [ 1073.260432][T13150] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1073.296680][ T5698] appletouch 5-1:0.85: input: appletouch disconnected [ 1073.304542][T13150] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1073.788799][T13150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1073.852775][T13150] 8021q: adding VLAN 0 to HW filter on device team0 [ 1073.887286][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 1073.894530][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1073.916794][ T5639] Bluetooth: hci0: command tx timeout [ 1074.008751][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1074.015975][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1074.203229][T13150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1074.387056][T13150] veth0_vlan: entered promiscuous mode [ 1074.442290][T13150] veth1_vlan: entered promiscuous mode [ 1074.556856][T13150] veth0_macvtap: entered promiscuous mode [ 1074.588151][T13150] veth1_macvtap: entered promiscuous mode [ 1074.649996][T13150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1074.707919][T13150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1074.760909][ T156] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.783970][ T156] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.816301][ T156] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.842104][ T156] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.156391][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1075.184142][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1075.281046][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1075.320897][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1075.361400][T13412] batman_adv: batadv0: Adding interface: gretap1 [ 1075.390432][T13412] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1075.447475][T13412] batman_adv: batadv0: Interface activated: gretap1 [ 1075.892860][T13441] kvm: user requested TSC rate below hardware speed [ 1075.995730][ T5639] Bluetooth: hci0: command tx timeout [ 1076.765795][T16754] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1076.946818][T16754] usb 5-1: Using ep0 maxpacket: 32 [ 1076.968521][T16754] usb 5-1: string descriptor 0 read error: -22 [ 1076.991948][T16754] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1077.018621][T16754] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.051201][T16754] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1077.071385][T16754] usb 5-1: MIDIStreaming interface descriptor not found [ 1077.304964][T16754] usb 5-1: USB disconnect, device number 30 [ 1077.532433][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1077.532449][ T29] audit: type=1326 audit(1782388821.455:3426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13498 comm="syz.1.18395" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f133f59ce59 code=0x0 [ 1078.247482][T13540] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1078.254044][T13540] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1078.263992][T13540] vhci_hcd vhci_hcd.0: Device attached [ 1078.277421][T13540] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 1078.283967][T13540] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1078.292500][T13540] vhci_hcd vhci_hcd.0: Device attached [ 1078.301888][T13540] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7) [ 1078.308423][T13540] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1078.318737][T13540] vhci_hcd vhci_hcd.0: Device attached [ 1078.328839][T13540] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9) [ 1078.335367][T13540] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1078.349425][T13540] vhci_hcd vhci_hcd.0: Device attached [ 1078.360148][T13549] vhci_hcd: connection closed [ 1078.361990][ T76] vhci_hcd vhci_hcd.2: stop threads [ 1078.362152][T13547] vhci_hcd: connection closed [ 1078.373938][T13545] vhci_hcd: connection closed [ 1078.375686][ T76] vhci_hcd vhci_hcd.2: release socket [ 1078.382396][T13541] vhci_hcd: connection closed [ 1078.419728][ T76] vhci_hcd vhci_hcd.2: disconnect device [ 1078.438556][ T76] vhci_hcd vhci_hcd.2: stop threads [ 1078.454078][ T76] vhci_hcd vhci_hcd.2: release socket [ 1078.463973][ T76] vhci_hcd vhci_hcd.2: disconnect device [ 1078.483248][ T76] vhci_hcd vhci_hcd.2: stop threads [ 1078.494746][T13558] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1078.504942][ T76] vhci_hcd vhci_hcd.2: release socket [ 1078.505179][T16754] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 1078.514951][ T76] vhci_hcd vhci_hcd.2: disconnect device [ 1078.525305][ T76] vhci_hcd vhci_hcd.2: stop threads [ 1078.535673][ T76] vhci_hcd vhci_hcd.2: release socket [ 1078.547475][ T76] vhci_hcd vhci_hcd.2: disconnect device [ 1078.965815][T16755] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1079.135925][T16755] usb 2-1: Using ep0 maxpacket: 8 [ 1079.153199][T16755] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.179132][T16755] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1079.212344][T16755] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1079.233740][T16755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.257589][T16755] usb 2-1: Product: syz [ 1079.262931][T16755] usb 2-1: Manufacturer: syz [ 1079.272181][T16755] usb 2-1: SerialNumber: syz [ 1079.288307][T13597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18438'. [ 1079.347049][T13601] sg_write: process 7638 (syz.2.18439) changed security contexts after opening file descriptor, this is not allowed. [ 1079.437425][ T29] audit: type=1326 audit(1782388823.365:3427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13606 comm="syz.2.18442" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76619ce59 code=0x7ffc0000 [ 1079.464851][ T29] audit: type=1326 audit(1782388823.395:3428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13606 comm="syz.2.18442" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76619ce59 code=0x7ffc0000 [ 1079.502373][ T29] audit: type=1326 audit(1782388823.395:3429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13606 comm="syz.2.18442" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76619ce59 code=0x7ffc0000 [ 1079.511492][T16749] usb 2-1: USB disconnect, device number 48 [ 1079.558999][ T29] audit: type=1326 audit(1782388823.395:3430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13606 comm="syz.2.18442" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76619ce59 code=0x7ffc0000 [ 1079.585321][ T29] audit: type=1326 audit(1782388823.415:3431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13606 comm="syz.2.18442" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fc76619ce59 code=0x7ffc0000 [ 1079.614969][ T29] audit: type=1326 audit(1782388823.415:3432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13606 comm="syz.2.18442" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76619ce59 code=0x7ffc0000 [ 1079.640259][ T29] audit: type=1326 audit(1782388823.415:3433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13606 comm="syz.2.18442" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76619ce59 code=0x7ffc0000 [ 1079.669524][ T29] audit: type=1326 audit(1782388823.415:3434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13606 comm="syz.2.18442" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76619ce59 code=0x7ffc0000 [ 1079.700359][ T29] audit: type=1326 audit(1782388823.415:3435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13606 comm="syz.2.18442" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76619ce59 code=0x7ffc0000 [ 1080.230149][T13646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18461'. [ 1080.291974][T13646] netlink: 60 bytes leftover after parsing attributes in process `syz.2.18461'. [ 1080.316876][T13646] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18461'. [ 1080.815788][T16755] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1080.975676][T16755] usb 2-1: Using ep0 maxpacket: 32 [ 1080.987160][T16755] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1081.005790][T16755] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1081.027790][T16755] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1081.044887][T16755] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.062563][T16755] usb 2-1: config 0 descriptor?? [ 1081.104267][T13692] program syz.2.18482 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1081.435939][T16760] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1081.483385][T16755] hid_parser_main: 462 callbacks suppressed [ 1081.483407][T16755] ft260 0003:0403:6030.00BA: unknown main item tag 0x0 [ 1081.499203][T16755] ft260 0003:0403:6030.00BA: unknown main item tag 0x0 [ 1081.516212][T16749] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1081.596310][T16760] usb 5-1: Using ep0 maxpacket: 8 [ 1081.607354][T16760] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1081.617789][T16760] usb 5-1: config 179 has no interface number 0 [ 1081.624119][T16760] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1081.636243][T16760] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1081.647998][T16760] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1081.659820][T16760] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1081.671666][T16760] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1081.685446][T16749] usb 3-1: Using ep0 maxpacket: 32 [ 1081.691132][T16760] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1081.691379][T16755] ft260 0003:0403:6030.00BA: chip code: 0000 0000 [ 1081.701753][T16760] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.717493][T16749] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1081.727063][T16749] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.738588][T13694] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1081.744091][T16749] usb 3-1: config 0 descriptor?? [ 1081.901438][T16755] ft260 0003:0403:6030.00BA: failed to retrieve system status [ 1081.918869][T16755] ft260 0003:0403:6030.00BA: probe with driver ft260 failed with error -71 [ 1081.939183][T16755] usb 2-1: USB disconnect, device number 49 [ 1081.973039][T16749] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1081.988186][T16749] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1082.009121][T16749] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1082.023332][T13694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1082.036470][T13694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1082.038335][T16749] usb 3-1: media controller created [ 1082.077379][T16749] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1082.095779][T16739] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1082.179023][T16749] az6027: usb out operation failed. (-71) [ 1082.188445][T16749] az6027: usb out operation failed. (-71) [ 1082.194291][T16749] stb0899_attach: Driver disabled by Kconfig [ 1082.200758][T16749] az6027: no front-end attached [ 1082.200758][T16749] [ 1082.210442][T16749] az6027: usb out operation failed. (-71) [ 1082.216626][T16749] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1082.229231][T16749] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input186 [ 1082.256585][T16739] usb 1-1: Using ep0 maxpacket: 8 [ 1082.270651][T16755] usb 5-1: USB disconnect, device number 31 [ 1082.270647][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1082.270777][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1082.280653][T16739] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1082.288433][T16749] dvb-usb: schedule remote query interval to 400 msecs. [ 1082.326557][T16749] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1082.348995][T16739] usb 1-1: config 179 has no interface number 0 [ 1082.356099][T16749] usb 3-1: USB disconnect, device number 112 [ 1082.370829][T16739] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1082.386539][T16739] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1082.445344][T16739] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1082.463567][T16749] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1082.502458][T16739] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1082.555192][T16739] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1082.618303][T16739] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1082.637871][T16739] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.657760][T13714] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1082.968717][T16755] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input187 [ 1082.993821][T13728] input: syz1 as /devices/virtual/input/input188 [ 1083.139499][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1083.147850][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1083.158755][T16755] usb 1-1: USB disconnect, device number 35 [ 1083.462249][T13755] random: crng reseeded on system resumption [ 1083.536172][T13759] cifs: Unknown parameter '0' [ 1083.625736][T16760] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1083.665693][T16749] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1083.665789][T16754] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1083.798892][T16760] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1083.807502][T16760] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1083.819446][T16749] usb 5-1: Using ep0 maxpacket: 16 [ 1083.825506][T16760] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.845897][T16760] usb 2-1: config 220 has no interface number 2 [ 1083.853626][T16749] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1083.871370][T16760] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1083.886414][T16749] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1083.893136][T16749] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1083.904886][T16760] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1083.912012][T16749] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.922586][T16760] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1083.932807][T16760] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1083.943456][T16749] usb 5-1: config 0 descriptor?? [ 1083.955499][T16760] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1083.970165][T16760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.988458][T16760] usb 2-1: Product: syz [ 1083.992746][T16760] usb 2-1: Manufacturer: syz [ 1083.998005][T16760] usb 2-1: SerialNumber: syz [ 1084.263171][T16760] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1084.272180][T16760] uvcvideo 2-1:220.0: No valid video chain found. [ 1084.281115][T16760] usb 2-1: selecting invalid altsetting 0 [ 1084.299710][T16760] usb 2-1: selecting invalid altsetting 0 [ 1084.308946][T16760] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1084.344360][T16760] usb 2-1: USB disconnect, device number 50 [ 1084.401048][T16749] mcp2221 0003:04D8:00DD.00BB: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1084.821836][T16755] usb 5-1: USB disconnect, device number 32 [ 1085.089299][T13795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18529'. [ 1085.155684][ T24] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1085.202383][T13799] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18531'. [ 1085.323323][ T24] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1085.360455][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.382117][ T24] usb 2-1: Product: syz [ 1085.395860][ T24] usb 2-1: Manufacturer: syz [ 1085.402121][ T24] usb 2-1: SerialNumber: syz [ 1085.431611][ T24] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1085.552898][T16755] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1085.575774][T13775] syz.0.18521 (13775): drop_caches: 1 [ 1085.594854][T13776] syz.0.18521 (13776): drop_caches: 1 [ 1085.642702][T13812] Attempt to restore checkpoint with obsolete wellknown handles [ 1085.798916][T13821] tap0: tun_chr_ioctl cmd 1074025677 [ 1085.817352][T13821] tap0: linktype set to 778 [ 1086.350202][T13830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1086.371941][T13830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1086.718449][T13830] batman_adv: batadv0: Interface deactivated: wlan0 [ 1086.778037][T13877] input: syz0 as /devices/virtual/input/input189 [ 1087.113934][T13830] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 1087.156973][T13830] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 1087.164210][T13830] ipvlan3: left allmulticast mode [ 1087.169789][T13830] batadv_slave_1: left allmulticast mode [ 1087.194296][ T3382] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0 [ 1087.212590][T16755] usb 2-1: Service connection timeout for: 256 [ 1087.224086][ T3382] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.240495][T16755] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1087.257796][ T3382] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0 [ 1087.277683][ T3382] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.282670][T16755] ath9k_htc: Failed to initialize the device [ 1087.309300][ T3382] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0 [ 1087.335876][T16755] usb 2-1: ath9k_htc: USB layer deinitialized [ 1087.362544][ T3382] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.395163][ T3382] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 1087.424508][ T3382] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.560849][T13900] sctp: [Deprecated]: syz.3.18566 (pid 13900) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1087.560849][T13900] Use struct sctp_sack_info instead [ 1087.651021][T13902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18568'. [ 1087.802014][T13911] netlink: 27 bytes leftover after parsing attributes in process `syz.0.18571'. [ 1088.611654][T13860] usb 2-1: USB disconnect, device number 51 [ 1088.976185][T13953] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1088.991516][T13953] syzkaller1: linktype set to 823 [ 1089.056780][T13959] kvm: kvm [13958]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0xffffffffffffffff [ 1089.180480][T13957] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.188179][T13957] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.434973][T13957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1089.449589][T13957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1089.626648][T13962] geneve2: entered promiscuous mode [ 1089.655767][T13886] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1089.828175][T13886] usb 2-1: config 0 has no interfaces? [ 1089.842544][T13886] usb 2-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 1089.868635][T13886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.899077][T13886] usb 2-1: config 0 descriptor?? [ 1090.126127][T13977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.154627][T13977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.179891][T13886] usb 2-1: USB disconnect, device number 52 [ 1090.226617][T13860] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1090.385680][T13860] usb 4-1: Using ep0 maxpacket: 8 [ 1090.403121][T13860] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1090.416524][T13860] usb 4-1: New USB device found, idVendor=1b96, idProduct=0005, bcdDevice= 0.00 [ 1090.436836][T13860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.460771][T13860] usb 4-1: config 0 descriptor?? [ 1090.625848][T13886] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1090.797528][T13886] usb 2-1: Using ep0 maxpacket: 8 [ 1090.806190][T13886] usb 2-1: config index 0 descriptor too short (expected 72, got 36) [ 1090.814896][T13886] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1090.842425][T13886] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 1.08 [ 1090.862091][T13886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.879771][T13886] usb 2-1: Product: syz [ 1090.884120][T13886] usb 2-1: Manufacturer: syz [ 1090.889756][T13886] usb 2-1: SerialNumber: syz [ 1090.892277][T13860] ntrig 0003:1B96:0005.00BC: unknown main item tag 0x2 [ 1090.916078][T13860] ntrig 0003:1B96:0005.00BC: unknown main item tag 0x6 [ 1090.929617][T13860] ntrig 0003:1B96:0005.00BC: unknown main item tag 0x0 [ 1090.946789][T13860] ntrig 0003:1B96:0005.00BC: unknown main item tag 0x0 [ 1090.955346][T13860] ntrig 0003:1B96:0005.00BC: unknown main item tag 0x0 [ 1090.976315][T13860] ntrig 0003:1B96:0005.00BC: unknown main item tag 0x0 [ 1091.002980][T13860] ntrig 0003:1B96:0005.00BC: hidraw0: USB HID v0.01 Device [HID 1b96:0005] on usb-dummy_hcd.3-1/input0 [ 1091.086267][T13860] ntrig 0003:1B96:0005.00BC: Firmware version: 1.2.7.56.2 (48d3 0aff) [ 1091.230045][T13886] usb 2-1: USB disconnect, device number 53 [ 1091.301815][T14033] kvm: user requested TSC rate below hardware speed [ 1091.353532][T13860] usb 4-1: USB disconnect, device number 36 [ 1091.399378][T14024] fido_id[14024]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1092.014407][T14063] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 1092.357192][T13885] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1092.397456][T13860] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1092.405956][T13861] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1092.506385][T13858] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1092.515713][T13885] usb 5-1: Using ep0 maxpacket: 8 [ 1092.523034][T13885] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1092.532170][T13885] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1092.542624][T13885] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1092.553186][T13885] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1092.564270][T13885] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1092.577986][T13885] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1092.587561][T13885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.588414][T13860] usb 3-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 1092.610234][T13861] usb 2-1: Using ep0 maxpacket: 8 [ 1092.621615][T13860] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1092.634221][T13861] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1092.651381][T13861] usb 2-1: config 140 has an invalid interface number: 182 but max is 1 [ 1092.660209][T13861] usb 2-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config [ 1092.670720][T13860] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1092.685721][T13861] usb 2-1: config 140 has 1 interface, different from the descriptor's value: 2 [ 1092.694854][T13860] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1092.703127][T13858] usb 1-1: Using ep0 maxpacket: 8 [ 1092.715033][T13860] usb 3-1: Product: syz [ 1092.719717][T13861] usb 2-1: config 140 has no interface number 0 [ 1092.726488][T13860] usb 3-1: Manufacturer: syz [ 1092.731332][T13860] usb 3-1: SerialNumber: syz [ 1092.738597][T13861] usb 2-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 1092.747882][T13858] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1092.758540][T13858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.767784][T13860] usb 3-1: config 0 descriptor?? [ 1092.772792][T13861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.781299][T13858] usb 1-1: Product: syz [ 1092.785811][T13861] usb 2-1: Product: syz [ 1092.790102][T13858] usb 1-1: Manufacturer: syz [ 1092.794749][T13861] usb 2-1: Manufacturer: syz [ 1092.795121][T14077] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1092.799752][T13858] usb 1-1: SerialNumber: syz [ 1092.811367][T13861] usb 2-1: SerialNumber: syz [ 1092.823307][T13885] usb 5-1: GET_CAPABILITIES returned 0 [ 1092.832653][T13858] usb 1-1: config 0 descriptor?? [ 1092.838740][T13885] usbtmc 5-1:16.0: can't read capabilities [ 1092.842807][T13860] usb 3-1: selecting invalid altsetting 0 [ 1092.855223][T13858] gspca_main: se401-2.14.0 probing 047d:5003 [ 1093.048613][T13885] usb 5-1: USB disconnect, device number 33 [ 1093.109301][T14101] tipc: Started in network mode [ 1093.114770][T14101] tipc: Node identity ac14140f, cluster identity 4711 [ 1093.122980][T14101] tipc: New replicast peer: 255.255.255.255 [ 1093.124838][T13886] usb 3-1: USB disconnect, device number 113 [ 1093.129754][T14101] tipc: Enabled bearer , priority 10 [ 1093.470381][T13858] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input190 [ 1093.655644][T13861] usb 2-1: reset high-speed USB device number 54 using dummy_hcd [ 1093.729751][T13886] usb 1-1: USB disconnect, device number 36 [ 1093.848804][T13861] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1093.894029][T13861] usb 2-1: device firmware changed [ 1093.899870][T13861] usb 2-1: [ueagle-atm] pre-firmware device, uploading firmware [ 1093.908813][T13858] usb 2-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 1093.918389][T13861] usb 2-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 1093.928637][T13858] usb 2-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 1093.939580][T13861] usb 2-1: USB disconnect, device number 54 [ 1094.008173][T13858] ================================================================== [ 1094.016275][T13858] BUG: KASAN: slab-use-after-free in kernfs_root+0xda/0x230 [ 1094.023677][T13858] Read of size 8 at addr ffff888025a5ed50 by task kworker/0:1/13858 [ 1094.031659][T13858] [ 1094.034075][T13858] CPU: 0 UID: 0 PID: 13858 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1094.034096][T13858] Tainted: [L]=SOFTLOCKUP [ 1094.034100][T13858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1094.034109][T13858] Workqueue: events request_firmware_work_func [ 1094.034205][T13858] Call Trace: [ 1094.034212][T13858] [ 1094.034218][T13858] dump_stack_lvl+0xe8/0x150 [ 1094.034236][T13858] print_address_description+0x55/0x1e0 [ 1094.034264][T13858] ? kernfs_root+0xda/0x230 [ 1094.034277][T13858] print_report+0x58/0x70 [ 1094.034288][T13858] kasan_report+0x117/0x150 [ 1094.034303][T13858] ? kernfs_root+0xda/0x230 [ 1094.034315][T13858] ? kernfs_root+0x1c/0x230 [ 1094.034327][T13858] kernfs_root+0xda/0x230 [ 1094.034339][T13858] kernfs_add_one+0x26e/0x5e0 [ 1094.034353][T13858] kernfs_create_dir_ns+0x1a1/0x230 [ 1094.034368][T13858] sysfs_create_dir_ns+0x12f/0x2a0 [ 1094.034387][T13858] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1094.034405][T13858] ? do_raw_spin_unlock+0xf5/0x210 [ 1094.034423][T13858] kobject_add_internal+0x622/0xcd0 [ 1094.034472][T13858] kobject_add+0x163/0x240 [ 1094.034483][T13858] ? rcu_is_watching+0x15/0xb0 [ 1094.034498][T13858] ? __pfx_kobject_add+0x10/0x10 [ 1094.034509][T13858] ? __kmalloc_cache_noprof+0x150/0x660 [ 1094.034529][T13858] ? kobject_init+0x7f/0x1e0 [ 1094.034541][T13858] get_device_parent+0x316/0x3a0 [ 1094.034581][T13858] device_add+0x2d4/0xb80 [ 1094.034594][T13858] firmware_fallback_sysfs+0x2dd/0xa40 [ 1094.034608][T13858] ? kfree+0x1c5/0x640 [ 1094.034623][T13858] _request_firmware+0x1049/0x1780 [ 1094.034639][T13858] ? __pfx__request_firmware+0x10/0x10 [ 1094.034656][T13858] ? process_scheduled_works+0xa20/0x14e0 [ 1094.034680][T13858] ? process_scheduled_works+0xa20/0x14e0 [ 1094.034696][T13858] request_firmware_work_func+0xac/0x2d0 [ 1094.034708][T13858] ? rcu_is_watching+0x15/0xb0 [ 1094.034722][T13858] ? process_scheduled_works+0xa20/0x14e0 [ 1094.034737][T13858] process_scheduled_works+0xa8e/0x14e0 [ 1094.034766][T13858] ? __pfx_process_scheduled_works+0x10/0x10 [ 1094.034783][T13858] ? assign_work+0x3cf/0x5d0 [ 1094.034798][T13858] worker_thread+0xa47/0xfb0 [ 1094.034820][T13858] kthread+0x388/0x470 [ 1094.034833][T13858] ? __pfx_worker_thread+0x10/0x10 [ 1094.034849][T13858] ? __pfx_kthread+0x10/0x10 [ 1094.034861][T13858] ret_from_fork+0x514/0xb70 [ 1094.034876][T13858] ? __pfx_ret_from_fork+0x10/0x10 [ 1094.034888][T13858] ? __switch_to+0xc89/0x1420 [ 1094.034907][T13858] ? __pfx_kthread+0x10/0x10 [ 1094.034919][T13858] ret_from_fork_asm+0x1a/0x30 [ 1094.034939][T13858] [ 1094.034945][T13858] [ 1094.283681][T13858] Allocated by task 13858: [ 1094.288085][T13858] kasan_save_track+0x3e/0x80 [ 1094.292749][T13858] __kasan_slab_alloc+0x6c/0x80 [ 1094.297583][T13858] kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 1094.303028][T13858] __kernfs_new_node+0xe6/0x980 [ 1094.307858][T13858] kernfs_create_dir_ns+0xfe/0x230 [ 1094.312950][T13858] sysfs_create_dir_ns+0x12f/0x2a0 [ 1094.318048][T13858] kobject_add_internal+0x622/0xcd0 [ 1094.323234][T13858] kobject_add+0x163/0x240 [ 1094.327630][T13858] get_device_parent+0x316/0x3a0 [ 1094.332550][T13858] device_add+0x2d4/0xb80 [ 1094.336861][T13858] firmware_fallback_sysfs+0x2dd/0xa40 [ 1094.342304][T13858] _request_firmware+0x1049/0x1780 [ 1094.347394][T13858] request_firmware_work_func+0xac/0x2d0 [ 1094.353006][T13858] process_scheduled_works+0xa8e/0x14e0 [ 1094.358537][T13858] worker_thread+0xa47/0xfb0 [ 1094.363110][T13858] kthread+0x388/0x470 [ 1094.367160][T13858] ret_from_fork+0x514/0xb70 [ 1094.371731][T13858] ret_from_fork_asm+0x1a/0x30 [ 1094.376478][T13858] [ 1094.378783][T13858] Freed by task 14076: [ 1094.382828][T13858] kasan_save_track+0x3e/0x80 [ 1094.387484][T13858] kasan_save_free_info+0x40/0x50 [ 1094.392493][T13858] __kasan_slab_free+0x5c/0x80 [ 1094.397236][T13858] kmem_cache_free+0x182/0x650 [ 1094.401980][T13858] rcu_core+0x78b/0x10a0 [ 1094.406203][T13858] handle_softirqs+0x225/0x840 [ 1094.410962][T13858] __irq_exit_rcu+0xca/0x220 [ 1094.415550][T13858] irq_exit_rcu+0x9/0x30 [ 1094.419791][T13858] sysvec_apic_timer_interrupt+0x57/0xc0 [ 1094.425420][T13858] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1094.431386][T13858] [ 1094.433694][T13858] Last potentially related work creation: [ 1094.439564][T13858] kasan_save_stack+0x3e/0x60 [ 1094.444223][T13858] kasan_record_aux_stack+0xbd/0xd0 [ 1094.449407][T13858] call_rcu+0xee/0x8b0 [ 1094.453457][T13858] kernfs_put+0x622/0x820 [ 1094.457767][T13858] __kernfs_remove+0x69a/0x8e0 [ 1094.462512][T13858] kernfs_remove+0x4c/0x80 [ 1094.466909][T13858] __kobject_del+0xe0/0x310 [ 1094.471398][T13858] kobject_del+0x45/0x60 [ 1094.475621][T13858] device_del+0x772/0x8f0 [ 1094.479933][T13858] usb_disconnect+0x630/0x9a0 [ 1094.484679][T13858] hub_event+0x1bbb/0x4d30 [ 1094.489080][T13858] process_scheduled_works+0xa8e/0x14e0 [ 1094.494613][T13858] worker_thread+0xa47/0xfb0 [ 1094.499187][T13858] kthread+0x388/0x470 [ 1094.503237][T13858] ret_from_fork+0x514/0xb70 [ 1094.507809][T13858] ret_from_fork_asm+0x1a/0x30 [ 1094.512559][T13858] [ 1094.514864][T13858] The buggy address belongs to the object at ffff888025a5ed20 [ 1094.514864][T13858] which belongs to the cache kernfs_node_cache of size 176 [ 1094.529428][T13858] The buggy address is located 48 bytes inside of [ 1094.529428][T13858] freed 176-byte region [ffff888025a5ed20, ffff888025a5edd0) [ 1094.543118][T13858] [ 1094.545428][T13858] The buggy address belongs to the physical page: [ 1094.551901][T13858] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888025a5e1e0 pfn:0x25a5e [ 1094.561948][T13858] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1094.570021][T13858] page_type: f5(slab) [ 1094.573987][T13858] raw: 00fff00000000200 ffff88801c2d78c0 ffffea0000d7ee90 ffffea000160a690 [ 1094.582554][T13858] raw: ffff888025a5e1e0 0000000800110010 00000000f5000000 0000000000000000 [ 1094.591114][T13858] page dumped because: kasan: bad access detected [ 1094.597520][T13858] page_owner tracks the page as allocated [ 1094.603212][T13858] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 16758, tgid 16758 (kworker/0:11), ts 721263418507, free_ts 721037269109 [ 1094.624288][T13858] post_alloc_hook+0x1f9/0x250 [ 1094.629044][T13858] get_page_from_freelist+0x21fa/0x2270 [ 1094.634573][T13858] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1094.640359][T13858] allocate_slab+0x79/0x5e0 [ 1094.644845][T13858] refill_objects+0x2d5/0x350 [ 1094.649503][T13858] __pcs_replace_empty_main+0x2bf/0x6b0 [ 1094.655030][T13858] kmem_cache_alloc_noprof+0x382/0x5f0 [ 1094.660472][T13858] __kernfs_new_node+0xe6/0x980 [ 1094.665304][T13858] kernfs_create_dir_ns+0xfe/0x230 [ 1094.670398][T13858] sysfs_create_dir_ns+0x12f/0x2a0 [ 1094.675494][T13858] kobject_add_internal+0x622/0xcd0 [ 1094.680674][T13858] kobject_add+0x163/0x240 [ 1094.685070][T13858] device_add+0x3fa/0xb80 [ 1094.689391][T13858] usb_hub_create_port_device+0x3ce/0xc40 [ 1094.695182][T13858] hub_probe+0x26bc/0x3c00 [ 1094.699586][T13858] usb_probe_interface+0x653/0xc60 [ 1094.704736][T13858] page last free pid 28252 tgid 28252 stack trace: [ 1094.711215][T13858] __free_frozen_pages+0xc1e/0xd10 [ 1094.716315][T13858] tlb_remove_table_rcu+0x85/0x100 [ 1094.721442][T13858] rcu_core+0x78b/0x10a0 [ 1094.725669][T13858] handle_softirqs+0x225/0x840 [ 1094.730417][T13858] __irq_exit_rcu+0xca/0x220 [ 1094.734988][T13858] irq_exit_rcu+0x9/0x30 [ 1094.739212][T13858] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1094.744829][T13858] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1094.750791][T13858] [ 1094.753095][T13858] Memory state around the buggy address: [ 1094.758702][T13858] ffff888025a5ec00: fc fc fc fc fc fc fa fb fb fb fb fb fb fb fb fb [ 1094.766742][T13858] ffff888025a5ec80: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1094.774854][T13858] >ffff888025a5ed00: fc fc fc fc fa fb fb fb fb fb fb fb fb fb fb fb [ 1094.782895][T13858] ^ [ 1094.789547][T13858] ffff888025a5ed80: fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc [ 1094.797590][T13858] ffff888025a5ee00: fc fc fa fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1094.805631][T13858] ================================================================== [ 1094.834919][T13860] tipc: Node number set to 2886997007 [ 1094.887991][T13858] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1094.895222][T13858] CPU: 0 UID: 0 PID: 13858 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1094.906279][T13858] Tainted: [L]=SOFTLOCKUP [ 1094.910585][T13858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1094.920628][T13858] Workqueue: events request_firmware_work_func [ 1094.926776][T13858] Call Trace: [ 1094.930040][T13858] [ 1094.932957][T13858] vpanic+0x56c/0xa60 [ 1094.936931][T13858] ? __pfx_vpanic+0x10/0x10 [ 1094.941416][T13858] ? __pfx___schedule+0x10/0x10 [ 1094.946255][T13858] panic+0xc5/0xd0 [ 1094.949961][T13858] ? __pfx_panic+0x10/0x10 [ 1094.954360][T13858] ? preempt_schedule_thunk+0x16/0x40 [ 1094.959729][T13858] ? kernfs_root+0xda/0x230 [ 1094.964212][T13858] check_panic_on_warn+0x89/0xb0 [ 1094.969134][T13858] ? kernfs_root+0xda/0x230 [ 1094.973620][T13858] end_report+0x73/0x170 [ 1094.977846][T13858] ? kernfs_root+0xda/0x230 [ 1094.982331][T13858] kasan_report+0x128/0x150 [ 1094.986819][T13858] ? kernfs_root+0xda/0x230 [ 1094.991304][T13858] ? kernfs_root+0x1c/0x230 [ 1094.995790][T13858] kernfs_root+0xda/0x230 [ 1095.000103][T13858] kernfs_add_one+0x26e/0x5e0 [ 1095.004767][T13858] kernfs_create_dir_ns+0x1a1/0x230 [ 1095.009949][T13858] sysfs_create_dir_ns+0x12f/0x2a0 [ 1095.015048][T13858] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1095.020673][T13858] ? do_raw_spin_unlock+0xf5/0x210 [ 1095.025774][T13858] kobject_add_internal+0x622/0xcd0 [ 1095.030967][T13858] kobject_add+0x163/0x240 [ 1095.035370][T13858] ? rcu_is_watching+0x15/0xb0 [ 1095.040124][T13858] ? __pfx_kobject_add+0x10/0x10 [ 1095.045047][T13858] ? __kmalloc_cache_noprof+0x150/0x660 [ 1095.050586][T13858] ? kobject_init+0x7f/0x1e0 [ 1095.055160][T13858] get_device_parent+0x316/0x3a0 [ 1095.060085][T13858] device_add+0x2d4/0xb80 [ 1095.064402][T13858] firmware_fallback_sysfs+0x2dd/0xa40 [ 1095.069844][T13858] ? kfree+0x1c5/0x640 [ 1095.073899][T13858] _request_firmware+0x1049/0x1780 [ 1095.078997][T13858] ? __pfx__request_firmware+0x10/0x10 [ 1095.084444][T13858] ? process_scheduled_works+0xa20/0x14e0 [ 1095.090150][T13858] ? process_scheduled_works+0xa20/0x14e0 [ 1095.095856][T13858] request_firmware_work_func+0xac/0x2d0 [ 1095.101474][T13858] ? rcu_is_watching+0x15/0xb0 [ 1095.106222][T13858] ? process_scheduled_works+0xa20/0x14e0 [ 1095.111926][T13858] process_scheduled_works+0xa8e/0x14e0 [ 1095.117465][T13858] ? __pfx_process_scheduled_works+0x10/0x10 [ 1095.123432][T13858] ? assign_work+0x3cf/0x5d0 [ 1095.128010][T13858] worker_thread+0xa47/0xfb0 [ 1095.132595][T13858] kthread+0x388/0x470 [ 1095.136647][T13858] ? __pfx_worker_thread+0x10/0x10 [ 1095.141742][T13858] ? __pfx_kthread+0x10/0x10 [ 1095.146312][T13858] ret_from_fork+0x514/0xb70 [ 1095.150884][T13858] ? __pfx_ret_from_fork+0x10/0x10 [ 1095.155978][T13858] ? __switch_to+0xc89/0x1420 [ 1095.160642][T13858] ? __pfx_kthread+0x10/0x10 [ 1095.165217][T13858] ret_from_fork_asm+0x1a/0x30 [ 1095.169973][T13858] [ 1095.173254][T13858] Kernel Offset: disabled [ 1095.177561][T13858] Rebooting in 86400 seconds..